last executing test programs: 4m59.205268451s ago: executing program 2 (id=1461): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0x8, 0xa747, 0xdead, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000440)={0xfff, 0x1, 0x1, 0x2, 0x7, 0xffffffffffffffff}) capset$auto(&(0x7f0000000480)={0xc}, &(0x7f0000000780)={0x40, 0xd21, 0x1}) r2 = inotify_init1$auto(0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rxrpc/calls\x00', 0x40380, 0x0) socket(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/phonet\x00', 0x42000, 0x0) bpf$auto(0xe, &(0x7f00000001c0)=@query={@target_ifindex, 0xff, 0x1b18, 0x6, 0xdef0, @count=0x3, 0x0, 0x1, 0xffffffff80000001, 0xffffffff, 0xffffffffffffffff}, 0x9) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000340)="7fb9d5") read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000002c0)=""/15, 0xf) bpf$auto(0x1, &(0x7f0000000100)=@link_detach={r3}, 0x6f4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) write$auto(r4, 0x0, 0x100) close_range$auto(0x2, 0x8, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r2, 0x81, &(0x7f0000000300)='\x00', &(0x7f0000000340)="0611d54bf5c5b29b6e202278ba7c80fb35a49d413464a5ac04ebb539a044d8faca2b7eb913a6d31ca53b024960e4653148f977ebbfded7d68dc0daaef0cfe035c94a67019ac3c70e18280c880043e03d54101f9cdb35fb188223647f8d4b72717616c6fe1de48ab017826ee84e3df222695e8df145fee0f7c27cd73cff4985ab27dad1212ca3dd", 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb80"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) 4m57.433200728s ago: executing program 2 (id=1456): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000003800)=""/168, 0xa8) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/suspend_stats/success\x00', 0x200, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r2, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) (async) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/025/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000001040)={0x91, 0xa, 0x400, 0x1, 0x9, 0x0, &(0x7f0000000180)="6efd46d5f3ffd3a325cd3b0562ca52de6475fcf77203a18657c1f529d995769de7703f8d038e98f3cf27dd4e0bafa7cd347f3cf86e44ebdbee0983a176ad34c8f5e5beffa3b3cc2fc572595566cf3481f4b6067b1a1f4a8c35552f240f1d2a60ddf7ce98acc324cdcc1204baa6ad25bab1cef6fb1371e3cd3e6ba58bd5b760063e0b2e9c8a738192cba27cd9f9a1f966557c6e4d887ffa4d3545b278302431aba40617cd15224f23070a76c7a8cef2e8d64c024e06de69cf30dff4fc3ce50d8bc9a14baaa5e12bcf7126aa00"/216}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000000c00)) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/platform/vhci_hcd.10/usb30/30-0:1.0/usb30-port5/over_current_count\x00', 0x4001, 0x0) (async) mmap$auto(0x0, 0xdb33, 0xe2, 0xeb1, 0x405, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) (async, rerun: 64) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) (rerun: 64) read$auto(0x3, 0x0, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x400000, 0x0) (async, rerun: 32) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0xdf6f, 0x0}) (async) setresuid$auto(0x8, 0x8, 0x0) 4m54.572845819s ago: executing program 2 (id=1463): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x320c02, 0x0) mmap$auto(0x100000004, 0x2, 0xfffffffffffffffe, 0x13, 0xfffffffffffffffa, 0x41) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0x8000000000000000) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x86073, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) lsm_list_modules$auto(&(0x7f00000000c0)=0xfff, &(0x7f0000000200)=0x1, 0x8) bpf$auto(0xd, 0x0, 0x6f5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff09, 0x0) madvise$auto(0x412, 0x3, 0x796) 4m54.239745578s ago: executing program 2 (id=1466): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) unshare$auto(0x8000000) semtimedop$auto(0x7, &(0x7f0000000200)={0x3, 0x6, 0x1000}, 0x3, 0x0) unshare$auto(0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0) r3 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) listen$auto(r3, 0x5) recvmmsg$auto(r1, &(0x7f0000000500)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0xd1}, 0x10a, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0) mmap$auto(0xfffffffbfffffffc, 0x8, 0xdf5, 0x7fffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0) mmap$auto(0x0, 0x40009, 0xe1, 0x1de, 0x7, 0x27fff) setfsgid$auto(0xee00) 4m48.783596522s ago: executing program 2 (id=1473): tkill$auto(0x1, 0x7) r0 = socket(0x8, 0x1, 0x9) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000000c0), r0) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000280)=0x6) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/icmp6\x00', 0x0, 0x0) r3 = socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0) r4 = gettid() rt_tgsigqueueinfo$auto(0x0, r4, 0x1e, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffa, @_sigsys={0x0, 0x2, 0x7}}}) setsockopt$auto(r3, 0x28, 0x3, 0x0, 0x200000) pread64$auto(r2, 0x0, 0xd, 0x80000000000b) 4m45.573622885s ago: executing program 2 (id=1481): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0x8, 0xa747, 0xdead, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000440)={0xfff, 0x1, 0x1, 0x2, 0x7, 0xffffffffffffffff}) capset$auto(&(0x7f0000000480)={0xc}, &(0x7f0000000780)={0x40, 0xd21, 0x1}) r2 = inotify_init1$auto(0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rxrpc/calls\x00', 0x40380, 0x0) socket(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/phonet\x00', 0x42000, 0x0) bpf$auto(0xe, &(0x7f00000001c0)=@query={@target_ifindex, 0xff, 0x1b18, 0x6, 0xdef0, @count=0x3, 0x0, 0x1, 0xffffffff80000001, 0xffffffff, 0xffffffffffffffff}, 0x9) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000340)="7fb9d5") read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000002c0)=""/15, 0xf) bpf$auto(0x1, &(0x7f0000000100)=@link_detach={r3}, 0x6f4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) write$auto(r4, 0x0, 0x100) close_range$auto(0x2, 0x8, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r2, 0x81, &(0x7f0000000300)='\x00', &(0x7f0000000340)="0611d54bf5c5b29b6e202278ba7c80fb35a49d413464a5ac04ebb539a044d8faca2b7eb913a6d31ca53b024960e4653148f977ebbfded7d68dc0daaef0cfe035c94a67019ac3c70e18280c880043e03d54101f9cdb35fb188223647f8d4b72717616c6fe1de48ab017826ee84e3df222695e8df145fee0f7c27cd73cff4985ab27dad1212ca3dd", 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb80"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) 4m44.661184636s ago: executing program 32 (id=1481): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0x8, 0xa747, 0xdead, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000440)={0xfff, 0x1, 0x1, 0x2, 0x7, 0xffffffffffffffff}) capset$auto(&(0x7f0000000480)={0xc}, &(0x7f0000000780)={0x40, 0xd21, 0x1}) r2 = inotify_init1$auto(0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rxrpc/calls\x00', 0x40380, 0x0) socket(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/phonet\x00', 0x42000, 0x0) bpf$auto(0xe, &(0x7f00000001c0)=@query={@target_ifindex, 0xff, 0x1b18, 0x6, 0xdef0, @count=0x3, 0x0, 0x1, 0xffffffff80000001, 0xffffffff, 0xffffffffffffffff}, 0x9) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000340)="7fb9d5") read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000002c0)=""/15, 0xf) bpf$auto(0x1, &(0x7f0000000100)=@link_detach={r3}, 0x6f4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) write$auto(r4, 0x0, 0x100) close_range$auto(0x2, 0x8, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r2, 0x81, &(0x7f0000000300)='\x00', &(0x7f0000000340)="0611d54bf5c5b29b6e202278ba7c80fb35a49d413464a5ac04ebb539a044d8faca2b7eb913a6d31ca53b024960e4653148f977ebbfded7d68dc0daaef0cfe035c94a67019ac3c70e18280c880043e03d54101f9cdb35fb188223647f8d4b72717616c6fe1de48ab017826ee84e3df222695e8df145fee0f7c27cd73cff4985ab27dad1212ca3dd", 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb80"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) 11.384442284s ago: executing program 4 (id=2148): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0x8, 0xa747, 0xdead, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000440)={0xfff, 0x1, 0x1, 0x2, 0x7, 0xffffffffffffffff}) capset$auto(&(0x7f0000000480)={0xc}, &(0x7f0000000780)={0x40, 0xd21, 0x1}) r2 = inotify_init1$auto(0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x400c004) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rxrpc/calls\x00', 0x40380, 0x0) socket(0x1d, 0x2, 0x7) pread64$auto(r5, 0x0, 0x10001, 0x830) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/phonet\x00', 0x42000, 0x0) bpf$auto(0xe, &(0x7f00000001c0)=@query={@target_ifindex, 0xff, 0x1b18, 0x6, 0xdef0, @count=0x3, 0x0, 0x1, 0xffffffff80000001, 0xffffffff, 0xffffffffffffffff}, 0x9) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCSTI2(r6, 0x5412, &(0x7f0000000340)="7fb9d5") read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000002c0)=""/15, 0xf) bpf$auto(0x1, &(0x7f0000000100)=@link_detach={r3}, 0x6f4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) write$auto(r4, 0x0, 0x100) close_range$auto(0x2, 0x8, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r2, 0x81, &(0x7f0000000300)='\x00', &(0x7f0000000340)="0611d54bf5c5b29b6e202278ba7c80fb35a49d413464a5ac04ebb539a044d8faca2b7eb913a6d31ca53b024960e4653148f977ebbfded7d68dc0daaef0cfe035c94a67019ac3c70e18280c880043e03d54101f9cdb35fb188223647f8d4b72717616c6fe1de48ab017826ee84e3df222695e8df145fee0f7c27cd73cff4985ab27dad1212ca3dd", 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb80"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) 10.106852514s ago: executing program 4 (id=2151): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x8f6, 0x4, 0x8000, 0x1948b, 0xffffffffffffffff, 0x15f4da09, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x1, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) capget$auto(0x0, 0xfffffffffffffffe) timerfd_gettime$auto(r0, &(0x7f0000000040)={{0x3, 0x100000001}, {0xc, 0xd695}}) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001780)='/dev/sda\x00', 0x22200, 0x0) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x87) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x6, "00800000ffafff00"}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x8003, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5]}, 0x1fc, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 9.850971836s ago: executing program 1 (id=2152): r0 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r0], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0x8, 0xa747, 0xdead, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000440)={0xfff, 0x1, 0x1, 0x2, 0x7, 0xffffffffffffffff}) capset$auto(&(0x7f0000000480)={0xc}, &(0x7f0000000780)={0x40, 0xd21, 0x1}) r2 = inotify_init1$auto(0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/rxrpc/calls\x00', 0x40380, 0x0) socket(0x1d, 0x2, 0x7) pread64$auto(r5, 0x0, 0x10001, 0x830) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/phonet\x00', 0x42000, 0x0) bpf$auto(0xe, &(0x7f00000001c0)=@query={@target_ifindex, 0xff, 0x1b18, 0x6, 0xdef0, @count=0x3, 0x0, 0x1, 0xffffffff80000001, 0xffffffff, 0xffffffffffffffff}, 0x9) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCSTI2(r6, 0x5412, &(0x7f0000000340)="7fb9d5") bpf$auto(0x1, &(0x7f0000000100)=@link_detach={r3}, 0x6f4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) write$auto(r4, 0x0, 0x100) close_range$auto(0x2, 0x8, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r2, 0x81, &(0x7f0000000300)='\x00', &(0x7f0000000340)="0611d54bf5c5b29b6e202278ba7c80fb35a49d413464a5ac04ebb539a044d8faca2b7eb913a6d31ca53b024960e4653148f977ebbfded7d68dc0daaef0cfe035c94a67019ac3c70e18280c880043e03d54101f9cdb35fb188223647f8d4b72717616c6fe1de48ab017826ee84e3df222695e8df145fee0f7c27cd73cff4985ab27dad1212ca3dd", 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb80"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) 8.968402472s ago: executing program 0 (id=2153): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) socket(0x22, 0x2, 0x24) r0 = socket(0x1e, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) shmctl$auto(0x0, 0xd, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/3/smp_affinity_list\x00', 0x8f3b7a51b8162d21, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) 8.611323564s ago: executing program 3 (id=2154): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x8f6, 0x4, 0x8000, 0x1948b, 0xffffffffffffffff, 0x15f4da09, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x1, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) capget$auto(0x0, 0xfffffffffffffffe) timerfd_gettime$auto(r0, &(0x7f0000000040)={{0x3, 0x100000001}, {0xc, 0xd695}}) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001780)='/dev/sda\x00', 0x22200, 0x0) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x87) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x6, "00800000ffafff00"}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x8003, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5]}, 0x1fc, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 8.193090817s ago: executing program 1 (id=2155): socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x1, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) select$auto(0xf, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da06, 0x3, 0x4, 0x3, 0x208000001b, 0xfffffffffffffffd, 0x6d40, 0x9, 0x2, 0x6]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00', @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=0x0}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x8, 0x7fff) 7.562335977s ago: executing program 0 (id=2156): mmap$auto(0x0, 0xe3a, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) ioctl$auto(0x1, 0x5760, 0x100000101) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) 7.30019275s ago: executing program 4 (id=2157): shmat$auto(0x0, &(0x7f0000000000)='\x9a\x1e2\x8e\xe3\xb95\x98F\xf8Q\x01\x00\x93^', 0xeff) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r1 = setfsuid$auto(0xee00) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x68442, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x1, 0x4, 0x4618ecd2, 0x3, 0x1000000042ff, 0x6, 0x60, 0x9, 0x10003]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) setfsuid$auto(r1) 6.316953978s ago: executing program 0 (id=2158): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="55583ff7b5fda5e53f472d"], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x408400, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x8000, 0x0) ioctl$auto_FBIOGET_VSCREENINFO(r2, 0x4600, &(0x7f0000000180)) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0xc, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) close_range$auto(0x2, 0x8, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000001400)=@bpf_attr_3={0x9, 0x3980, 0x9, 0xfffffffffffffffc, 0x9a2d, 0xba0, 0x5, 0x7, 0xffffffff, "931bcb8d96de85c087a1d2590dc12815", 0x0, 0xdf7f, 0xffffffffffffffff, 0xf8, 0x10001, 0xd9, 0x198f, 0x1, 0x486f, 0x6, @attach_btf_obj_fd, 0x0, 0x238ce248, 0xab9, 0x2, 0xfffffff8}, 0x204) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/irq/25/wakeup\x00', 0xa1a42, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000002c0)=""/240, 0xf0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon28\x00', 0x404400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) 6.275459834s ago: executing program 3 (id=2159): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6d) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x2, 0x400007, 0xe895, 0x16, r0, 0x401) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) mmap$auto(0x0, 0x5, 0x3, 0xeb1, 0xffffffffffffffff, 0x2) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) write$auto(r2, 0x0, 0xffffffffffff7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="a6d483660008c29560bf379e3569ad01b65d375a1dc1b2c2401fe4ef431cf9666f99"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) r5 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) write$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffffff, &(0x7f00000001c0)="0501000000", 0x5) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(r5, 0x8, &(0x7f0000000000)='/sys/kernel/tracing/uprobe_events\x00', 0x0, 0x40) setsockopt$auto(0xffffffffffffffff, 0x107, 0x5, 0x0, 0xce24) connect$auto(r5, 0x0, 0x58) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sda\x00', 0x14b602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) bpf$auto(0x0, 0x0, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) 6.253883017s ago: executing program 1 (id=2160): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB="14390000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb4, r2, 0x1) mmap$auto(0x3, 0x400000020009, 0xe1, 0x11, r0, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x3a) socket(0xa, 0x1, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r4, 0xc038563c, r3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r5, 0x2, 0x9) ioctl$auto(r5, 0x40104d00, r5) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) prctl$auto(0x20, 0x0, 0x0, 0x6, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/cgroup.procs\x00', 0x149081, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x24040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) 6.048635783s ago: executing program 0 (id=2161): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="04001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/uevent\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000005c0)=""/4096, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compaction_proactiveness\x00', 0x2800, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon32\x00', 0x0, 0x0) sysfs$auto(0x2, 0x11, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) sysfs$auto(0x100, 0x1ff, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x24600, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="210000e9ffffffffffffff"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r3, 0x4010744d, &(0x7f00000001c0)={&(0x7f00000000c0)='\x8e\x04\x8f~\xa7 \xcf\x1fg7\n\xd8\xbd\xd3&\xa7\xa6_\xaa\xe2;\xb5\x82\x9dA\x8f|\xf3\xd7\xc6X\xdf\xdaC\x9aoqM2\x10\xb1\xd1\xbd\xca0\x9f\xe7\x00\x00\x00\x00\x00\x00\x00\x00T\r\xbfZO\x7f\xbd\x91\xf2\xbd\xc6.\xa2*\xdb\xd7\f\xebM\xba\x15P\as\x82\x17\xa3\xf5\xf6\xcd\x19P&\x88*\xf9\xdd\xc3t[`\xf3h\xc0\"\xd2\xa5\x81\xd6l\xc2k|\rX]XP\xfe\xc9\xe3\xea\xa4P\x95!3\xce\x9f\x9f<\x1eI\xfd\x80\x1c\xf9~\x06\x1b{K\x04\x85\xfa\x14\xbf\t\xc0\xced?j\xb2\xf1~T\xb2i\n\x15\x0e\xf7G9\'}^B=\xfc\x11\xfa\x0f\x0fd4^`\xc2\xb0\xaf\\\x1duPu\x02\xce:`c\xb0\xd0\xde\x13\xb4\xe0\xfcn\x98%\x1d\xff(\xa3\x10d\x89', 0x8, 0x80}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(r1, 0x0, 0x7e) 5.751405423s ago: executing program 4 (id=2162): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setreuid$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb4, 0x401, 0x40000008000) io_uring_setup$auto(0x6, 0x0) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x80000001}, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) fchown$auto(0xffffffffffffffff, 0x0, 0x0) flock$auto(r1, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r2, 0x2) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r2) r3 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r3, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) sysfs$auto(0x1000006, 0x1, 0x80000000) r4 = fcntl$auto(0x3, 0x4, 0xa553) mknod$auto(0x0, 0x1001, 0x4) fcntl$auto(0x3, 0x4, 0xa553) socket(0x1e, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r5, 0xffffffffffffffff, 0x9) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES16=r6], 0x18}, 0x1, 0x0, 0x0, 0x4080000}, 0x40805) getresgid$auto(&(0x7f0000000000), &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x84a0) mmap$auto(0xffffffffffffffff, 0x20009, 0xdf, 0xebd, 0x40000000000a5, 0x8000) 4.869735296s ago: executing program 3 (id=2163): prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/7, 0x7) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x70) socket(0x2, 0x1, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video60\x00', 0x9a240, 0x0) ioctl$auto(r3, 0x5646, r3) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000280)=""/40, 0x28) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r2, 0x0, r2, 0x0, 0x2, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x2af, 0x1, 0x948b, 0x3, 0x95f4da2d, 0x8000, 0x6, 0x62, 0x7, 0x7, 0x7, 0xa, 0x4, 0x5]}, 0x0) pselect6$auto(0xed0, &(0x7f0000000340)={[0xfffffffffffffffe, 0x367a, 0x0, 0x7, 0x0, 0x6, 0x6, 0xffffffffffff7fff, 0x1, 0x0, 0x4, 0x0, 0x4, 0xb, 0xfffffffffffff1c5, 0x100000000]}, &(0x7f0000000440)={[0x100, 0x6e1, 0x0, 0x739, 0x205, 0x6b7, 0x7, 0x0, 0x6701, 0x6, 0x5, 0x7d, 0x5ca2, 0x4, 0xfffffffffffffffe, 0xf]}, &(0x7f00000004c0)={[0x8000000000000000, 0x2, 0x200, 0x100, 0x2, 0xffffffff, 0xf, 0xb, 0x2, 0x1000, 0x0, 0x7, 0x81, 0x7, 0x9ab, 0x6]}, &(0x7f00000001c0)={0x0, 0x8}, &(0x7f0000000540)="040e07f306e790a5b91bfe033d5ee76428364e4ec74c4632892e319cc3d4e08c6044f1d67afc355f149cb4556a0e02ca838c622b15267834cf018d0b1e1473a4378bc59d19dbe111339696ad6d4cea511170b8acf554d6183e4c38c1f1289eb598f43fb89305fd0b8a670f15568e991e0e42b0020615ba7f69c3aef40744adbb0f46d94b5acef324112a641830d0636bf1ab0582f62dd6fed442ae047caacd7f450d78230ac8d78061a438982c54d0c7da37ef8051311f047a7ae822b7a27a8288efa499a34436dfc58580b8c48643c420af1082c7c0a618c58e38268f79008e3cfe71e67ea8e71dd5") write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r5, 0x0, r4, 0x0, 0x768, 0x9) close_range$auto(0x2, 0x8, 0x0) select$auto(0x70000000, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x200000000006, 0x1, 0x3, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x803, 0x5e, 0x6e, 0x7, 0x8006d3e, 0x7fff, 0x6, 0x20000006]}, 0x0) ioctl$auto(0xffffffffffffffff, 0x5457, 0xd8) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r6, 0xc0686611, 0x0) 4.055599674s ago: executing program 4 (id=2164): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) unshare$auto(0x8000000) semtimedop$auto(0x7, &(0x7f0000000200)={0x3, 0x6, 0x1000}, 0x3, 0x0) unshare$auto(0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, 0x0, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) listen$auto(r4, 0x5) recvmmsg$auto(r1, &(0x7f0000000500)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0xd1}, 0x10a, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0) mmap$auto(0xfffffffbfffffffc, 0x8, 0xdf5, 0x7fffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0) mmap$auto(0x0, 0x40009, 0xe1, 0x1de, 0x7, 0x27fff) setfsgid$auto(0xee00) 4.009991604s ago: executing program 0 (id=2165): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x8f6, 0x4, 0x8000, 0x1948b, 0xffffffffffffffff, 0x15f4da09, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x1, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) capget$auto(0x0, 0xfffffffffffffffe) timerfd_gettime$auto(r0, &(0x7f0000000040)={{0x3, 0x100000001}, {0xc, 0xd695}}) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001780)='/dev/sda\x00', 0x22200, 0x0) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x87) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x6, "00800000ffafff00"}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x8003, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5]}, 0x1fc, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.759714081s ago: executing program 1 (id=2166): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snd/pcmC1D1p\x00', 0x1, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x4, 0x4000000000db, 0x40eb2, 0x402, 0x300000000000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x20000, 0x0) ioctl$auto(r2, 0x40045108, 0x0) r3 = socket(0x10, 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRES16=0x0, @ANYBLOB='\rV'], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='^'], 0x1ac}, 0x1, 0x0, 0x0, 0xc000}, 0xc814) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_eff\x00', 0x80080, 0x0) read$auto(r4, 0x0, 0x805644) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40146f2c, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) msgctl$auto_IPC_STAT(0x1, 0x2, &(0x7f0000000380)={{0x2, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x4, 0xb38}, &(0x7f0000000300)=0x7, &(0x7f0000000340)=0x9, 0x100000000, 0xb9a, 0x8, 0xd9d1, 0x1ff, 0x7, 0x3, 0x6, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) r8 = getpgid(0x0) sendmsg$auto_NL80211_CMD_GET_SCAN(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000003a40)=ANY=[@ANYBLOB="af0acfd6b1e2c6e68d7af5adb617ca450cec7116e37e136498def25503ced644a1fc2cbb5e17f2a3fc153f0004c4e3911ee4d7515e38008ecf17dbd25ae6fb214b63fbf963", @ANYRES16=r6, @ANYBLOB="00022cbd7000fcdbdf25200000002232b98008007300", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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"], 0x3500}, 0x1, 0x0, 0x0, 0x810}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r9 = socket(0x2, 0x5, 0x0) semctl$auto(0x7, 0x2, 0x13, 0x1) r10 = socket(0xa, 0x801, 0x84) getsockopt$auto(r10, 0x84, 0x10, 0x0, 0x0) setsockopt$auto(r9, 0x0, 0x2e, 0x0, 0x108) 3.634828965s ago: executing program 3 (id=2167): mmap$auto(0x0, 0xe3a, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) ioctl$auto(0x1, 0x5760, 0x100000101) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) 2.286118852s ago: executing program 3 (id=2168): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x8f6, 0x4, 0x8000, 0x1948b, 0xffffffffffffffff, 0x15f4da09, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x1, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) capget$auto(0x0, 0xfffffffffffffffe) timerfd_gettime$auto(r0, &(0x7f0000000040)={{0x3, 0x100000001}, {0xc, 0xd695}}) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x2}) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001780)='/dev/sda\x00', 0x22200, 0x0) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x3, 0x87) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x6, "00800000ffafff00"}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x8003, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5]}, 0x1fc, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.074901027s ago: executing program 1 (id=2169): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop1/queue/scheduler\x00', 0xa001, 0x0) socket(0x22, 0x2, 0x24) r0 = socket(0x1e, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) shmctl$auto(0x0, 0xd, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/3/smp_affinity_list\x00', 0x8f3b7a51b8162d21, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) 1.263022166s ago: executing program 0 (id=2170): shmat$auto(0x0, &(0x7f0000000000)='\x9a\x1e2\x8e\xe3\xb95\x98F\xf8Q\x01\x00\x93^', 0xeff) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r1 = setfsuid$auto(0xee00) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x68442, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x1, 0x4, 0x4618ecd2, 0x3, 0x1000000042ff, 0x6, 0x60, 0x9, 0x10003]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) setfsuid$auto(r1) 736.277374ms ago: executing program 1 (id=2171): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x2, 0x400007, 0xe895, 0x16, r0, 0x401) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="000326bd7000ffdbdf2588000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000c080) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b71, 0x2, 0x80000000008000) setsockopt$auto(0xffffffffffffffff, 0xff, 0x1, 0x0, 0xce24) connect$auto(0x3, 0x0, 0x55) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd4\x00', 0x2800, 0x0) ioctl$auto_TIOCGDEV2(r5, 0x5429, 0x0) getresgid$auto(&(0x7f0000000080)=0x4, 0x0, 0x0) bpf$auto(0x0, 0x0, 0x0) read$auto(r1, 0x0, 0x0) ioctl$auto_BLKRRPART(r4, 0x125f, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) 130.912806ms ago: executing program 3 (id=2172): syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x4000000000e3, 0xeb0, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyr4\x00', 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/conf/default/forwarding\x00', 0x2102, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r2 = memfd_create$auto(0x0, 0x4) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0xcd4e, 0x0, 0xffff, &(0x7f00000002c0)="344a556200756e669914443c5983f58ef2cef3fb522be99c31c4b81b1378f54ddb1fc3e79cc9dcf9f4179e", 0x7, 0x8}, 0x1}, 0xf78d, 0x5) unshare$auto(0x40000080) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) ioctl$auto(0x3, 0x8010aebc, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_setup$auto(0xd364, &(0x7f0000000240)={0x400, 0x10002, 0x7f, 0x7, 0x6, 0x5, r3, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x4, 0x7, 0x5, 0x80000000}, {0x5000007, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) read$auto_proc_fault_inject_operations_base(r4, 0x0, 0x0) sendfile$auto(r0, r1, 0x0, 0x1) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000840)="13") ioctl$auto_TIOCSTI2(r5, 0x5412, 0x0) 0s ago: executing program 4 (id=2173): r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x18) open_by_handle_at$auto(r0, &(0x7f0000000140)={0x8, 0x2, "0100000000000000"}, 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) setresuid$auto(0x60, 0x1000, 0x8000) ioctl$auto(0xc8, 0x54e3, 0x5c8d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/scheduler\x00', 0x62, 0x0) write$auto(r2, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) r3 = epoll_create$auto(0x2) epoll_pwait2$auto(r3, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) r4 = epoll_create$auto(0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000240)="ff1c77e3e0c75de3e4b5b406551a5767a5356c9bd9de5c773f2e75e6819101f051269dc09510f21d26b8a47ea44ff3011466be44ee87e992ae7b381f46f7e8880f1e4e52a3aa37892fbbcee374327f019f5d1866ce7ce150a42b0a07517071aa68e5997c2bc1062a9b033ba7bfba2572aaa306a2725c16886e383a0973673e3ea024667ff4d2d10e01fd145039fbc221dcd97c590000000000000000005b0d5646bec3cc3e72e128b447ddfe9f9109d94bbbeeb889959201af3ee76e59ecacbc6cd4db93f60abb9223cbd86cb4ea79e84ec9c9bc05390d61c270dd5ea2a3334fd5db6942929d02c50bc254ecb9989258c9e074a6917a36f0") ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x48e, 0x0, 0x9}]}) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/neigh/hsr_slave_0/mcast_resolicit\x00', 0x82002, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r5, r6, 0x0, 0x1) rt_sigtimedwait$auto(&(0x7f0000000000)={0x8}, &(0x7f0000000080)={@_si_pad}, &(0x7f0000000100)={0x6, 0xb}, 0x8) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000004c0)="2a8c3e92b07a9e7ef128a31b112ed33d47e22642fbecfd2f6a3abcfa52d155ce65e4353d7451ae83f23e8e80e49a96fedd4f8a459f63a92d6972482b86ae2972c3e98a34374730a715628c630c1eba65778ba3d89530d38d8e788afa3b35bee79bd749fa37b738aaddd615d415f2c4e51fa604f0", 0x74) close_range$auto(r2, r2, 0x3) kernel console output (not intermixed with test programs): [T13065] ? security_file_alloc+0x34/0x2b0 [ 623.698248][T13065] security_file_alloc+0x34/0x2b0 [ 623.698279][T13065] init_file+0x93/0x4c0 [ 623.698314][T13065] alloc_empty_file+0x73/0x1e0 [ 623.698350][T13065] path_openat+0xda/0x2cb0 [ 623.698377][T13065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.698412][T13065] ? __pfx_path_openat+0x10/0x10 [ 623.698442][T13065] ? __lock_acquire+0xb97/0x1ce0 [ 623.698477][T13065] do_filp_open+0x20b/0x470 [ 623.698505][T13065] ? __pfx_do_filp_open+0x10/0x10 [ 623.698554][T13065] ? _raw_spin_unlock+0x28/0x50 [ 623.698588][T13065] ? alloc_fd+0x471/0x7d0 [ 623.698621][T13065] do_sys_openat2+0x11b/0x1d0 [ 623.698658][T13065] ? __pfx_do_sys_openat2+0x10/0x10 [ 623.698706][T13065] __x64_sys_open+0x153/0x1e0 [ 623.698744][T13065] ? __pfx___x64_sys_open+0x10/0x10 [ 623.698787][T13065] ? rcu_is_watching+0x12/0xc0 [ 623.698818][T13065] do_syscall_64+0xcd/0x490 [ 623.698864][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.698888][T13065] RIP: 0033:0x7fecc3f8eb69 [ 623.698908][T13065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.698933][T13065] RSP: 002b:00007fecc4e33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 623.698955][T13065] RAX: ffffffffffffffda RBX: 00007fecc41b5fa0 RCX: 00007fecc3f8eb69 [ 623.698971][T13065] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 623.698986][T13065] RBP: 00007fecc4011df1 R08: 0000000000000000 R09: 0000000000000000 [ 623.699000][T13065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 623.699021][T13065] R13: 0000000000000000 R14: 00007fecc41b5fa0 R15: 00007ffe75e49af8 [ 623.699050][T13065] [ 624.008111][T12938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 624.140709][T12938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 624.148196][T12938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 624.175781][T12938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 624.361605][T12938] hsr_slave_0: entered promiscuous mode [ 624.390209][T12938] hsr_slave_1: entered promiscuous mode [ 624.396847][T12938] debugfs: 'hsr0' already exists in 'hsr' [ 624.455122][T12938] Cannot create hsr debugfs directory [ 624.792436][T13091] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1509'. [ 624.804093][ T37] bridge_slave_1: left allmulticast mode [ 624.829946][ T37] bridge_slave_1: left promiscuous mode [ 624.864665][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.932478][ T37] bridge_slave_0: left allmulticast mode [ 624.969142][ T37] bridge_slave_0: left promiscuous mode [ 625.004652][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.656904][T13106] Unable to find swap-space signature [ 626.552773][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 626.576789][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.601129][ T37] bond0 (unregistering): Released all slaves [ 626.781477][ T37] .SR: left promiscuous mode [ 627.293513][T13120] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1513'. [ 627.734536][T13129] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1515'. [ 628.151075][ T37] hsr_slave_0: left promiscuous mode [ 628.185027][ T37] hsr_slave_1: left promiscuous mode [ 628.213895][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.261891][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.339988][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 628.390371][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 628.524381][ T37] veth1_macvtap: left promiscuous mode [ 628.600817][ T37] veth1_vlan: left promiscuous mode [ 628.606416][ T37] veth0_vlan: left promiscuous mode [ 628.713463][T13144] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1517'. [ 629.613665][T13166] ALSA: mixer_oss: invalid OSS volume '0' [ 629.638623][T13166] ALSA: mixer_oss: invalid OSS volume '' [ 630.562472][ T37] team0 (unregistering): Port device team_slave_0 removed [ 632.403612][T12938] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 632.544051][T12938] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 632.603783][T12938] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 632.703037][T12938] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 633.152238][T13208] FAULT_INJECTION: forcing a failure. [ 633.152238][T13208] name failslab, interval 1, probability 0, space 0, times 0 [ 633.238265][T13208] CPU: 0 UID: 0 PID: 13208 Comm: syz.3.1527 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 633.238307][T13208] Tainted: [U]=USER [ 633.238315][T13208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 633.238329][T13208] Call Trace: [ 633.238336][T13208] [ 633.238345][T13208] dump_stack_lvl+0x16c/0x1f0 [ 633.238390][T13208] should_fail_ex+0x512/0x640 [ 633.238415][T13208] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 633.238450][T13208] should_failslab+0xc2/0x120 [ 633.238483][T13208] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 633.238511][T13208] ? __schedule+0x11a3/0x5de0 [ 633.238543][T13208] ? sock_alloc_inode+0x25/0x1c0 [ 633.238574][T13208] ? __pfx_sock_alloc_inode+0x10/0x10 [ 633.238597][T13208] sock_alloc_inode+0x25/0x1c0 [ 633.238621][T13208] alloc_inode+0x61/0x240 [ 633.238657][T13208] sock_alloc+0x40/0x280 [ 633.238680][T13208] __sock_create+0xc1/0x8d0 [ 633.238714][T13208] __sys_socket+0x14d/0x260 [ 633.238741][T13208] ? handle_softirqs+0x5be/0x8e0 [ 633.238770][T13208] ? __pfx___sys_socket+0x10/0x10 [ 633.238799][T13208] ? xfd_validate_state+0x61/0x180 [ 633.238846][T13208] __x64_sys_socket+0x72/0xb0 [ 633.238873][T13208] ? lockdep_hardirqs_on+0x7c/0x110 [ 633.238910][T13208] do_syscall_64+0xcd/0x490 [ 633.238950][T13208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.238974][T13208] RIP: 0033:0x7fda2658eb69 [ 633.238992][T13208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 633.239015][T13208] RSP: 002b:00007fda27444038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 633.239037][T13208] RAX: ffffffffffffffda RBX: 00007fda267b5fa0 RCX: 00007fda2658eb69 [ 633.239053][T13208] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 633.239067][T13208] RBP: 00007fda26611df1 R08: 0000000000000000 R09: 0000000000000000 [ 633.239081][T13208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.239095][T13208] R13: 0000000000000000 R14: 00007fda267b5fa0 R15: 00007ffdde72ebc8 [ 633.239124][T13208] [ 634.206472][T12938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.368222][T12938] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.430329][ T7066] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.437557][ T7066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.553370][ T7066] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.560851][ T7066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.599070][T13208] socket: no more sockets [ 634.947543][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.956917][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.123592][T12938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 637.874998][T12938] veth0_vlan: entered promiscuous mode [ 637.973097][T12938] veth1_vlan: entered promiscuous mode [ 638.144511][T12938] veth0_macvtap: entered promiscuous mode [ 638.221684][T12938] veth1_macvtap: entered promiscuous mode [ 638.326219][T12938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.396165][T12938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.490768][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.574563][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.624688][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.741346][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.106395][ T30] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.164410][ T30] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.580251][ T7066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.643934][ T7066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.675843][T13300] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 640.600902][T13308] tipc: Started in network mode [ 640.606272][T13308] tipc: Node identity ee00, cluster identity 4711 [ 640.677492][T13308] tipc: Node number set to 60928 [ 640.741588][T13308] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 640.969801][T13312] Process accounting resumed [ 641.275796][T13323] ALSA: mixer_oss: invalid OSS volume '0' [ 641.391024][T13323] ALSA: mixer_oss: invalid OSS volume '' [ 641.971161][T13328] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1540'. [ 642.358735][T13330] ovs_: entered promiscuous mode [ 643.717541][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1544'. [ 645.017720][T13379] ALSA: mixer_oss: invalid OSS volume '0' [ 645.044619][T13378] FAULT_INJECTION: forcing a failure. [ 645.044619][T13378] name failslab, interval 1, probability 0, space 0, times 0 [ 645.081474][T13379] ALSA: mixer_oss: invalid OSS volume '' [ 645.155268][T13378] CPU: 0 UID: 0 PID: 13378 Comm: syz.4.1548 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 645.155309][T13378] Tainted: [U]=USER [ 645.155317][T13378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 645.155331][T13378] Call Trace: [ 645.155339][T13378] [ 645.155349][T13378] dump_stack_lvl+0x16c/0x1f0 [ 645.155391][T13378] should_fail_ex+0x512/0x640 [ 645.155415][T13378] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 645.155446][T13378] should_failslab+0xc2/0x120 [ 645.155479][T13378] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 645.155509][T13378] ? seq_open+0x55/0x170 [ 645.155548][T13378] seq_open+0x55/0x170 [ 645.155582][T13378] proc_seq_open+0x9f/0x100 [ 645.155616][T13378] ? __pfx_proc_seq_open+0x10/0x10 [ 645.155649][T13378] proc_reg_open+0x2ab/0x5f0 [ 645.155682][T13378] do_dentry_open+0x982/0x1530 [ 645.155712][T13378] ? __pfx_proc_reg_open+0x10/0x10 [ 645.155748][T13378] vfs_open+0x82/0x3f0 [ 645.155786][T13378] path_openat+0x1de4/0x2cb0 [ 645.155834][T13378] ? __pfx_path_openat+0x10/0x10 [ 645.155870][T13378] do_filp_open+0x20b/0x470 [ 645.155900][T13378] ? __pfx_do_filp_open+0x10/0x10 [ 645.155950][T13378] ? alloc_fd+0x471/0x7d0 [ 645.155985][T13378] do_sys_openat2+0x11b/0x1d0 [ 645.156021][T13378] ? __pfx_do_sys_openat2+0x10/0x10 [ 645.156069][T13378] __x64_sys_openat+0x174/0x210 [ 645.156115][T13378] ? __pfx___x64_sys_openat+0x10/0x10 [ 645.156166][T13378] do_syscall_64+0xcd/0x490 [ 645.156207][T13378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.156232][T13378] RIP: 0033:0x7feb6358eb69 [ 645.156250][T13378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.156274][T13378] RSP: 002b:00007feb6446e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 645.156297][T13378] RAX: ffffffffffffffda RBX: 00007feb637b5fa0 RCX: 00007feb6358eb69 [ 645.156312][T13378] RDX: 000000000018b800 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 645.156327][T13378] RBP: 00007feb63611df1 R08: 0000000000000000 R09: 0000000000000000 [ 645.156342][T13378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.156355][T13378] R13: 0000000000000000 R14: 00007feb637b5fa0 R15: 00007ffec41d05f8 [ 645.156385][T13378] [ 645.384960][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.739391][ T31] audit: type=1804 audit(6049276462.821:12): pid=13378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1548" name="/newroot/2/file0" dev="tmpfs" ino=28 res=1 errno=0 [ 645.847331][ T31] audit: type=1800 audit(6049276462.821:13): pid=13378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1548" name="file0" dev="tmpfs" ino=28 res=0 errno=0 [ 645.868064][ C0] vkms_vblank_simulate: vblank timer overrun [ 646.329587][T13392] netlink: zone id is out of range [ 646.346378][T13392] netlink: zone id is out of range [ 646.364639][T13392] netlink: zone id is out of range [ 646.471393][T13392] netlink: zone id is out of range [ 646.560301][T13392] netlink: zone id is out of range [ 646.581740][T13392] netlink: zone id is out of range [ 646.587015][T13392] netlink: zone id is out of range [ 646.609533][T13392] netlink: zone id is out of range [ 646.809377][T13392] netlink: zone id is out of range [ 646.809393][T13392] netlink: zone id is out of range [ 648.330003][T13425] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 649.536185][T13368] ima: policy update failed [ 649.578352][ T31] audit: type=1802 audit(6049276467.001:14): pid=13368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1545" res=0 errno=0 [ 649.786056][T13445] random: crng reseeded on system resumption [ 650.769820][T13463] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1557'. [ 652.621537][T13497] random: crng reseeded on system resumption [ 656.587787][T13551] ALSA: mixer_oss: invalid OSS volume '0' [ 656.769068][T13551] ALSA: mixer_oss: invalid OSS volume '' [ 658.490033][T13579] nbd: must specify at least one socket [ 659.517087][T13579] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1574'. [ 659.634796][T13596] binder: 13594:13596 ioctl 400c620e 0 returned -22 [ 661.779849][T13615] ALSA: mixer_oss: invalid OSS volume '0' [ 662.518563][T13615] ALSA: mixer_oss: invalid OSS volume '' [ 665.222982][T13654] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1584'. [ 666.128498][T13669] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1586'. [ 666.342921][T13669] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1586'. [ 668.008636][T13684] svc: failed to register nfsdv3 RPC service (errno 111). [ 668.084040][T13684] svc: failed to register nfsaclv3 RPC service (errno 111). [ 668.232767][T13641] ima: policy update failed [ 668.304743][ T31] audit: type=1802 audit(6049276485.731:15): pid=13641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1583" res=0 errno=0 [ 670.440151][T13727] random: crng reseeded on system resumption [ 670.458409][T13723] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 670.515245][ T21] sched: DL replenish lagged too much [ 671.382393][T13725] Process accounting paused [ 672.199236][T13750] FAULT_INJECTION: forcing a failure. [ 672.199236][T13750] name fail_futex, interval 1, probability 0, space 0, times 0 [ 672.360804][T13750] CPU: 0 UID: 0 PID: 13750 Comm: syz.1.1598 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 672.360860][T13750] Tainted: [U]=USER [ 672.360871][T13750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 672.360892][T13750] Call Trace: [ 672.360903][T13750] [ 672.360915][T13750] dump_stack_lvl+0x16c/0x1f0 [ 672.360973][T13750] should_fail_ex+0x512/0x640 [ 672.361014][T13750] get_futex_key+0x1d0/0x1560 [ 672.361061][T13750] ? __pfx_get_futex_key+0x10/0x10 [ 672.361099][T13750] ? futex_private_hash_put+0x176/0x300 [ 672.361153][T13750] futex_wake+0xea/0x530 [ 672.361200][T13750] ? futex_wait+0x120/0x380 [ 672.361253][T13750] ? __pfx_futex_wake+0x10/0x10 [ 672.361310][T13750] ? fd_install+0x225/0x750 [ 672.361341][T13750] ? putname+0x154/0x1a0 [ 672.361394][T13750] do_futex+0x1e3/0x350 [ 672.361438][T13750] ? __pfx_do_futex+0x10/0x10 [ 672.361479][T13750] ? __fget_files+0x204/0x3c0 [ 672.361538][T13750] __x64_sys_futex+0x1e0/0x4c0 [ 672.361589][T13750] ? __pfx___x64_sys_futex+0x10/0x10 [ 672.361631][T13750] ? ksys_mmap_pgoff+0x85/0x5c0 [ 672.361695][T13750] do_syscall_64+0xcd/0x490 [ 672.361752][T13750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.361787][T13750] RIP: 0033:0x7fecc3f8eb69 [ 672.361813][T13750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.361846][T13750] RSP: 002b:00007fecc4e330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 672.361877][T13750] RAX: ffffffffffffffda RBX: 00007fecc41b5fa8 RCX: 00007fecc3f8eb69 [ 672.361900][T13750] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fecc41b5fac [ 672.361921][T13750] RBP: 00007fecc41b5fa0 R08: 00007fecc4e34000 R09: 0000000000000000 [ 672.361943][T13750] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fecc41b5fac [ 672.361965][T13750] R13: 0000000000000000 R14: 00007ffe75e49a10 R15: 00007ffe75e49af8 [ 672.362007][T13750] [ 673.107434][T13761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1600'. [ 673.222803][T13761] veth0_macvtap: left promiscuous mode [ 673.772310][T13777] ima: policy update failed [ 673.778520][ T31] audit: type=1802 audit(6049276491.201:16): pid=13777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1603" res=0 errno=0 [ 674.696415][T13797] FAULT_INJECTION: forcing a failure. [ 674.696415][T13797] name failslab, interval 1, probability 0, space 0, times 0 [ 674.757186][T13797] CPU: 1 UID: 0 PID: 13797 Comm: syz.3.1606 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 674.757259][T13797] Tainted: [U]=USER [ 674.757271][T13797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 674.757292][T13797] Call Trace: [ 674.757303][T13797] [ 674.757316][T13797] dump_stack_lvl+0x16c/0x1f0 [ 674.757384][T13797] should_fail_ex+0x512/0x640 [ 674.757418][T13797] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 674.757467][T13797] should_failslab+0xc2/0x120 [ 674.757513][T13797] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 674.757555][T13797] ? getname_flags.part.0+0x4c/0x550 [ 674.757614][T13797] getname_flags.part.0+0x4c/0x550 [ 674.757673][T13797] getname_flags+0x93/0xf0 [ 674.757709][T13797] do_sys_openat2+0xb8/0x1d0 [ 674.757761][T13797] ? __pfx_do_sys_openat2+0x10/0x10 [ 674.757842][T13797] __x64_sys_open+0x153/0x1e0 [ 674.757898][T13797] ? __pfx___x64_sys_open+0x10/0x10 [ 674.757961][T13797] ? rcu_is_watching+0x12/0xc0 [ 674.758000][T13797] do_syscall_64+0xcd/0x490 [ 674.758057][T13797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.758092][T13797] RIP: 0033:0x7fda2658eb69 [ 674.758119][T13797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.758152][T13797] RSP: 002b:00007fda27444038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 674.758185][T13797] RAX: ffffffffffffffda RBX: 00007fda267b5fa0 RCX: 00007fda2658eb69 [ 674.758216][T13797] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 674.758238][T13797] RBP: 00007fda26611df1 R08: 0000000000000000 R09: 0000000000000000 [ 674.758260][T13797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.758281][T13797] R13: 0000000000000000 R14: 00007fda267b5fa0 R15: 00007ffdde72ebc8 [ 674.758325][T13797] [ 675.895403][T13817] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1609'. [ 675.953308][T13817] veth1_macvtap: left promiscuous mode [ 676.029016][T13817] macsec0: entered promiscuous mode [ 676.051575][T13817] macsec0: entered allmulticast mode [ 677.374631][T13840] FAULT_INJECTION: forcing a failure. [ 677.374631][T13840] name fail_futex, interval 1, probability 0, space 0, times 0 [ 677.408209][T13840] CPU: 0 UID: 0 PID: 13840 Comm: syz.3.1613 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 677.408272][T13840] Tainted: [U]=USER [ 677.408283][T13840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.408305][T13840] Call Trace: [ 677.408315][T13840] [ 677.408328][T13840] dump_stack_lvl+0x16c/0x1f0 [ 677.408393][T13840] should_fail_ex+0x512/0x640 [ 677.408435][T13840] get_futex_key+0x1d0/0x1560 [ 677.408485][T13840] ? __pfx_get_futex_key+0x10/0x10 [ 677.408523][T13840] ? futex_private_hash_put+0x176/0x300 [ 677.408576][T13840] futex_wake+0xea/0x530 [ 677.408623][T13840] ? futex_wait+0x120/0x380 [ 677.408677][T13840] ? __pfx_futex_wake+0x10/0x10 [ 677.408733][T13840] ? fd_install+0x225/0x750 [ 677.408766][T13840] ? putname+0x154/0x1a0 [ 677.408829][T13840] do_futex+0x1e3/0x350 [ 677.408871][T13840] ? __pfx_do_futex+0x10/0x10 [ 677.408909][T13840] ? __fget_files+0x204/0x3c0 [ 677.408954][T13840] __x64_sys_futex+0x1e0/0x4c0 [ 677.409002][T13840] ? __pfx___x64_sys_futex+0x10/0x10 [ 677.409041][T13840] ? ksys_mmap_pgoff+0x85/0x5c0 [ 677.409104][T13840] do_syscall_64+0xcd/0x490 [ 677.409171][T13840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.409208][T13840] RIP: 0033:0x7fda2658eb69 [ 677.409237][T13840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.409274][T13840] RSP: 002b:00007fda274440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 677.409308][T13840] RAX: ffffffffffffffda RBX: 00007fda267b5fa8 RCX: 00007fda2658eb69 [ 677.409331][T13840] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fda267b5fac [ 677.409351][T13840] RBP: 00007fda267b5fa0 R08: 00007fda27445000 R09: 0000000000000000 [ 677.409371][T13840] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fda267b5fac [ 677.409392][T13840] R13: 0000000000000000 R14: 00007ffdde72eae0 R15: 00007ffdde72ebc8 [ 677.409441][T13840] [ 678.102981][T13849] FAULT_INJECTION: forcing a failure. [ 678.102981][T13849] name failslab, interval 1, probability 0, space 0, times 0 [ 678.119389][T13850] __vm_enough_memory: pid: 13850, comm: syz.0.1611, bytes: 4398046511104 not enough memory for the allocation [ 678.153799][T13849] CPU: 0 UID: 0 PID: 13849 Comm: syz.1.1612 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 678.153855][T13849] Tainted: [U]=USER [ 678.153864][T13849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 678.153881][T13849] Call Trace: [ 678.153890][T13849] [ 678.153902][T13849] dump_stack_lvl+0x16c/0x1f0 [ 678.153973][T13849] should_fail_ex+0x512/0x640 [ 678.154005][T13849] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 678.154047][T13849] should_failslab+0xc2/0x120 [ 678.154089][T13849] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 678.154129][T13849] ? __alloc_skb+0x2b2/0x380 [ 678.154172][T13849] ? __pfx_idr_get_next_ul+0x10/0x10 [ 678.154221][T13849] __alloc_skb+0x2b2/0x380 [ 678.154263][T13849] ? __pfx___alloc_skb+0x10/0x10 [ 678.154313][T13849] ? idr_get_next+0xec/0x150 [ 678.154355][T13849] ? __pfx_idr_get_next+0x10/0x10 [ 678.154403][T13849] ctrl_build_family_msg+0x36/0xa0 [ 678.154442][T13849] ctrl_getfamily+0x354/0x540 [ 678.154476][T13849] ? __pfx_ctrl_getfamily+0x10/0x10 [ 678.154511][T13849] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 678.154548][T13849] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 678.154596][T13849] genl_family_rcv_msg_doit+0x209/0x2f0 [ 678.154636][T13849] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 678.154672][T13849] ? genl_get_cmd+0x194/0x580 [ 678.154716][T13849] ? __radix_tree_lookup+0x21f/0x2c0 [ 678.154767][T13849] genl_rcv_msg+0x55c/0x800 [ 678.154808][T13849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 678.154844][T13849] ? __pfx_ctrl_getfamily+0x10/0x10 [ 678.154896][T13849] netlink_rcv_skb+0x158/0x420 [ 678.154957][T13849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 678.154994][T13849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 678.155064][T13849] ? netlink_deliver_tap+0x1ae/0xd30 [ 678.155119][T13849] genl_rcv+0x28/0x40 [ 678.155148][T13849] netlink_unicast+0x5a7/0x870 [ 678.155203][T13849] ? __pfx_netlink_unicast+0x10/0x10 [ 678.155255][T13849] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 678.155320][T13849] netlink_sendmsg+0x8d1/0xdd0 [ 678.155378][T13849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.155444][T13849] __sys_sendto+0x4a3/0x520 [ 678.155491][T13849] ? __pfx___sys_sendto+0x10/0x10 [ 678.155550][T13849] ? find_held_lock+0x2b/0x80 [ 678.155615][T13849] __x64_sys_sendto+0xe0/0x1c0 [ 678.155659][T13849] ? do_syscall_64+0x91/0x490 [ 678.155709][T13849] ? lockdep_hardirqs_on+0x7c/0x110 [ 678.155757][T13849] do_syscall_64+0xcd/0x490 [ 678.155810][T13849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.155844][T13849] RIP: 0033:0x7fecc3f909fc [ 678.155870][T13849] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 678.155902][T13849] RSP: 002b:00007fecc4e10ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 678.155939][T13849] RAX: ffffffffffffffda RBX: 00007fecc4e10fc0 RCX: 00007fecc3f909fc [ 678.155961][T13849] RDX: 0000000000000020 RSI: 00007fecc4e11010 RDI: 0000000000000006 [ 678.155980][T13849] RBP: 0000000000000000 R08: 00007fecc4e10f14 R09: 000000000000000c [ 678.155999][T13849] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 678.156018][T13849] R13: 00007fecc4e10f68 R14: 00007fecc4e11010 R15: 0000000000000000 [ 678.156060][T13849] [ 678.319696][T13850] __vm_enough_memory: pid: 13850, comm: syz.0.1611, bytes: 4398046511104 not enough memory for the allocation [ 678.562791][T13850] __vm_enough_memory: pid: 13850, comm: syz.0.1611, bytes: 4398046511104 not enough memory for the allocation [ 678.649178][T13850] __vm_enough_memory: pid: 13850, comm: syz.0.1611, bytes: 4398046511104 not enough memory for the allocation [ 678.672325][T13850] __vm_enough_memory: pid: 13850, comm: syz.0.1611, bytes: 4398046511104 not enough memory for the allocation [ 678.708372][T13850] __vm_enough_memory: pid: 13850, comm: syz.0.1611, bytes: 4398046511104 not enough memory for the allocation [ 678.737868][T13850] __vm_enough_memory: pid: 13850, comm: syz.0.1611, bytes: 4398046511104 not enough memory for the allocation [ 678.753687][T13850] __vm_enough_memory: pid: 13850, comm: syz.0.1611, bytes: 4398046511104 not enough memory for the allocation [ 679.105726][T13871] random: crng reseeded on system resumption [ 679.611242][T13879] FAULT_INJECTION: forcing a failure. [ 679.611242][T13879] name failslab, interval 1, probability 0, space 0, times 0 [ 679.684438][T13879] CPU: 0 UID: 0 PID: 13879 Comm: syz.1.1617 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 679.684495][T13879] Tainted: [U]=USER [ 679.684506][T13879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 679.684526][T13879] Call Trace: [ 679.684537][T13879] [ 679.684550][T13879] dump_stack_lvl+0x16c/0x1f0 [ 679.684610][T13879] should_fail_ex+0x512/0x640 [ 679.684646][T13879] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 679.684694][T13879] should_failslab+0xc2/0x120 [ 679.684738][T13879] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 679.684780][T13879] ? getname_flags.part.0+0x4c/0x550 [ 679.684928][T13879] getname_flags.part.0+0x4c/0x550 [ 679.684986][T13879] getname_flags+0x93/0xf0 [ 679.685026][T13879] do_sys_openat2+0xb8/0x1d0 [ 679.685078][T13879] ? __pfx_do_sys_openat2+0x10/0x10 [ 679.685144][T13879] __x64_sys_open+0x153/0x1e0 [ 679.685196][T13879] ? __pfx___x64_sys_open+0x10/0x10 [ 679.685256][T13879] ? rcu_is_watching+0x12/0xc0 [ 679.685295][T13879] do_syscall_64+0xcd/0x490 [ 679.685352][T13879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.685387][T13879] RIP: 0033:0x7fecc3f8eb69 [ 679.685412][T13879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 679.685447][T13879] RSP: 002b:00007fecc4e33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 679.685488][T13879] RAX: ffffffffffffffda RBX: 00007fecc41b5fa0 RCX: 00007fecc3f8eb69 [ 679.685514][T13879] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 679.685533][T13879] RBP: 00007fecc4011df1 R08: 0000000000000000 R09: 0000000000000000 [ 679.685552][T13879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.685570][T13879] R13: 0000000000000000 R14: 00007fecc41b5fa0 R15: 00007ffe75e49af8 [ 679.685609][T13879] [ 680.277827][T13886] overlayfs: "check_copy_up" module option is obsolete [ 681.446930][T13905] vhci_hcd: invalid port number 16 [ 681.470289][T13905] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 682.008071][T13899] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1620'. [ 682.572138][T13907] zswap: compressor 000 not available [ 684.399585][T13956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1627'. [ 684.521246][T13956] veth0_macvtap: left promiscuous mode [ 684.771220][T13948] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1626'. [ 686.470024][T13983] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1631'. [ 688.969596][T14013] ALSA: mixer_oss: invalid OSS volume '0' [ 688.975407][T14013] ALSA: mixer_oss: invalid OSS volume '' [ 691.217215][T14044] FAULT_INJECTION: forcing a failure. [ 691.217215][T14044] name failslab, interval 1, probability 0, space 0, times 0 [ 691.266255][T14044] CPU: 1 UID: 0 PID: 14044 Comm: syz.1.1637 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 691.266300][T14044] Tainted: [U]=USER [ 691.266308][T14044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 691.266323][T14044] Call Trace: [ 691.266331][T14044] [ 691.266341][T14044] dump_stack_lvl+0x16c/0x1f0 [ 691.266386][T14044] should_fail_ex+0x512/0x640 [ 691.266411][T14044] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 691.266446][T14044] should_failslab+0xc2/0x120 [ 691.266479][T14044] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 691.266508][T14044] ? security_file_alloc+0x34/0x2b0 [ 691.266543][T14044] security_file_alloc+0x34/0x2b0 [ 691.266571][T14044] init_file+0x93/0x4c0 [ 691.266606][T14044] alloc_empty_file+0x73/0x1e0 [ 691.266650][T14044] path_openat+0xda/0x2cb0 [ 691.266678][T14044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.266714][T14044] ? __pfx_path_openat+0x10/0x10 [ 691.266744][T14044] ? __lock_acquire+0xb97/0x1ce0 [ 691.266780][T14044] do_filp_open+0x20b/0x470 [ 691.266808][T14044] ? __pfx_do_filp_open+0x10/0x10 [ 691.266857][T14044] ? _raw_spin_unlock+0x28/0x50 [ 691.266889][T14044] ? alloc_fd+0x471/0x7d0 [ 691.266923][T14044] do_sys_openat2+0x11b/0x1d0 [ 691.266960][T14044] ? __pfx_do_sys_openat2+0x10/0x10 [ 691.267008][T14044] __x64_sys_open+0x153/0x1e0 [ 691.267045][T14044] ? __pfx___x64_sys_open+0x10/0x10 [ 691.267088][T14044] ? rcu_is_watching+0x12/0xc0 [ 691.267115][T14044] do_syscall_64+0xcd/0x490 [ 691.267160][T14044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.267185][T14044] RIP: 0033:0x7fecc3f8eb69 [ 691.267203][T14044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.267228][T14044] RSP: 002b:00007fecc4e33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 691.267251][T14044] RAX: ffffffffffffffda RBX: 00007fecc41b5fa0 RCX: 00007fecc3f8eb69 [ 691.267267][T14044] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 691.267291][T14044] RBP: 00007fecc4011df1 R08: 0000000000000000 R09: 0000000000000000 [ 691.267306][T14044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.267321][T14044] R13: 0000000000000000 R14: 00007fecc41b5fa0 R15: 00007ffe75e49af8 [ 691.267351][T14044] [ 693.632316][T14074] ALSA: mixer_oss: invalid OSS volume '0' [ 693.681436][T14074] ALSA: mixer_oss: invalid OSS volume '' [ 694.137309][T14089] nbd: must specify a size in bytes for the device [ 695.093542][T14090] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1644'. [ 696.387472][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.394182][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.981896][T14107] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1646'. [ 697.161408][T14125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1655'. [ 697.449192][T14125] veth0_macvtap: left promiscuous mode [ 698.203825][T14139] FAULT_INJECTION: forcing a failure. [ 698.203825][T14139] name fail_futex, interval 1, probability 0, space 0, times 0 [ 698.275786][T14139] CPU: 1 UID: 0 PID: 14139 Comm: syz.0.1649 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 698.275848][T14139] Tainted: [U]=USER [ 698.275859][T14139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 698.275881][T14139] Call Trace: [ 698.275892][T14139] [ 698.275906][T14139] dump_stack_lvl+0x16c/0x1f0 [ 698.275972][T14139] should_fail_ex+0x512/0x640 [ 698.276006][T14139] ? unwind_get_return_address+0x59/0xa0 [ 698.276061][T14139] get_futex_key+0x1d0/0x1560 [ 698.276109][T14139] ? __pfx_get_futex_key+0x10/0x10 [ 698.276156][T14139] ? stack_trace_save+0x8e/0xc0 [ 698.276194][T14139] ? __pfx_stack_trace_save+0x10/0x10 [ 698.276231][T14139] ? stack_depot_save_flags+0x28/0xa40 [ 698.276272][T14139] futex_wait_setup+0x9d/0x550 [ 698.276336][T14139] __futex_wait+0x194/0x2f0 [ 698.276389][T14139] ? __pfx___futex_wait+0x10/0x10 [ 698.276445][T14139] ? __pfx_futex_wake_mark+0x10/0x10 [ 698.276502][T14139] ? futex_private_hash_put+0x176/0x300 [ 698.276547][T14139] ? futex_private_hash_put+0x18a/0x300 [ 698.276591][T14139] futex_wait+0xe8/0x380 [ 698.276642][T14139] ? __pfx_futex_wait+0x10/0x10 [ 698.276701][T14139] ? kmem_cache_free+0x2d1/0x4d0 [ 698.276738][T14139] ? fd_install+0x225/0x750 [ 698.276771][T14139] ? putname+0x154/0x1a0 [ 698.276827][T14139] do_futex+0x229/0x350 [ 698.276872][T14139] ? __pfx_do_futex+0x10/0x10 [ 698.276926][T14139] __x64_sys_futex+0x1e0/0x4c0 [ 698.276974][T14139] ? __x64_sys_openat+0x174/0x210 [ 698.277038][T14139] ? __pfx___x64_sys_futex+0x10/0x10 [ 698.277103][T14139] do_syscall_64+0xcd/0x490 [ 698.277162][T14139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.277199][T14139] RIP: 0033:0x7f1bd378eb69 [ 698.277226][T14139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.277260][T14139] RSP: 002b:00007f1bd45a40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 698.277295][T14139] RAX: ffffffffffffffda RBX: 00007f1bd39b5fa8 RCX: 00007f1bd378eb69 [ 698.277319][T14139] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1bd39b5fa8 [ 698.277340][T14139] RBP: 00007f1bd39b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 698.277361][T14139] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1bd39b5fac [ 698.277382][T14139] R13: 0000000000000000 R14: 00007ffc0946a3d0 R15: 00007ffc0946a4b8 [ 698.277426][T14139] [ 698.812324][T14144] nbd: must specify at least one socket [ 699.545788][T14155] ALSA: mixer_oss: invalid OSS volume '0' [ 699.552099][T14155] ALSA: mixer_oss: invalid OSS volume '' [ 701.244359][T14159] ALSA: mixer_oss: invalid OSS volume '0' [ 701.418573][T14159] ALSA: mixer_oss: invalid OSS volume '' [ 702.255126][T14163] Process accounting resumed [ 702.487282][T14171] nbd: must specify at least one socket [ 703.784547][T14187] netlink: 302 bytes leftover after parsing attributes in process `syz.3.1660'. [ 703.916841][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1660'. [ 704.030151][T14191] device-mapper: ioctl: Invalid ioctl structure: name , dev 7f00010002 [ 704.246655][T14195] nbd: must specify a size in bytes for the device [ 704.389001][T14171] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1657'. [ 704.995717][T14193] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 705.023035][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 705.069083][T14193] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 705.130354][T14193] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 705.130439][T14193] page_type: f5(slab) [ 705.130463][T14193] raw: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 705.130488][T14193] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 705.130513][T14193] head: 00fff00000000040 ffff88801b842140 0000000000000000 dead000000000001 [ 705.130537][T14193] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 705.130562][T14193] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 705.130586][T14193] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 705.130602][T14193] page dumped because: unmovable page [ 705.130628][T14193] page_owner tracks the page as allocated [ 705.130638][T14193] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10177, tgid 10177 (udevd), ts 528697448387, free_ts 527810692535 [ 705.130693][T14193] post_alloc_hook+0x1c0/0x230 [ 705.130724][T14193] get_page_from_freelist+0x132b/0x38e0 [ 705.130753][T14193] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 705.130783][T14193] alloc_pages_mpol+0x1fb/0x550 [ 705.130817][T14193] new_slab+0x247/0x330 [ 705.130838][T14193] ___slab_alloc+0xcf2/0x1740 [ 705.130861][T14193] __slab_alloc.constprop.0+0x56/0xb0 [ 705.130884][T14193] __kmalloc_noprof+0x2f2/0x510 [ 705.130910][T14193] tomoyo_realpath_from_path+0xc2/0x6e0 [ 705.130942][T14193] tomoyo_path_perm+0x274/0x460 [ 705.130964][T14193] security_inode_getattr+0x116/0x290 [ 705.130989][T14193] vfs_statx+0x121/0x3f0 [ 705.131022][T14193] vfs_fstatat+0x7b/0xf0 [ 705.131054][T14193] __do_sys_newfstatat+0x97/0x120 [ 705.131090][T14193] do_syscall_64+0xcd/0x490 [ 705.131130][T14193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.131166][T14193] page last free pid 11815 tgid 11813 stack trace: [ 705.131187][T14193] __free_frozen_pages+0x7d5/0x10f0 [ 705.131216][T14193] __put_partials+0x165/0x1c0 [ 705.131238][T14193] qlist_free_all+0x4d/0x120 [ 705.131263][T14193] kasan_quarantine_reduce+0x195/0x1e0 [ 705.131290][T14193] __kasan_slab_alloc+0x69/0x90 [ 705.131318][T14193] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 705.131341][T14193] sched_core_share_pid+0x3c1/0x9d0 [ 705.131367][T14193] __do_sys_prctl+0x317/0x20e0 [ 705.131405][T14193] do_syscall_64+0xcd/0x490 [ 705.131443][T14193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.689945][T14197] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1662'. [ 708.225583][T14231] ALSA: mixer_oss: invalid OSS volume '0' [ 708.301514][T14231] ALSA: mixer_oss: invalid OSS volume '' [ 708.960855][T14248] netlink: 5005 bytes leftover after parsing attributes in process `syz.1.1670'. [ 709.050599][T14248] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1670'. [ 710.721135][T14254] ALSA: mixer_oss: invalid OSS volume '0' [ 710.786163][T14254] ALSA: mixer_oss: invalid OSS volume '' [ 714.472681][T14284] kexec: Could not allocate control_code_buffer [ 714.678068][T14313] usb usb36: usbfs: process 14313 (syz.3.1680) did not claim interface 0 before use [ 714.708264][T14313] device-mapper: ioctl: Unable to rename non-existent device,  to [ 716.261636][T14309] ALSA: mixer_oss: invalid OSS volume '0' [ 716.267467][T14309] ALSA: mixer_oss: invalid OSS volume '' [ 716.573144][T14330] Process accounting resumed [ 717.845292][T14338] ALSA: mixer_oss: invalid OSS volume '0' [ 717.852069][T14338] ALSA: mixer_oss: invalid OSS volume '' [ 718.027049][T14351] ALSA: mixer_oss: invalid OSS volume '0' [ 718.061254][T14351] ALSA: mixer_oss: invalid OSS volume '' [ 718.618464][T14360] usb usb24: usbfs: process 14360 (syz.3.1687) did not claim interface 0 before use [ 720.175066][T14382] nbd: must specify at least one socket [ 720.577352][T14369] kexec: Could not allocate control_code_buffer [ 721.397539][T14387] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1692'. [ 721.436690][T14400] nbd: nbd7 already in use [ 721.765065][T14404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1698'. [ 722.217558][T14401] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1697'. [ 723.508900][T14419] can: request_module (can-proto-0) failed. [ 724.002360][T14417] ALSA: mixer_oss: invalid OSS volume '0' [ 724.038871][T14417] ALSA: mixer_oss: invalid OSS volume '' [ 726.260276][T14439] svc: failed to register nfsdv3 RPC service (errno 111). [ 726.272459][T14439] svc: failed to register nfsaclv3 RPC service (errno 111). [ 726.290080][T14442] ALSA: mixer_oss: invalid OSS volume '0' [ 726.539737][T14442] ALSA: mixer_oss: invalid OSS volume '' [ 729.479371][T14481] ALSA: mixer_oss: invalid OSS volume '0' [ 729.485290][T14481] ALSA: mixer_oss: invalid OSS volume '' [ 730.115449][T14485] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1714'. [ 730.222125][T14483] ALSA: mixer_oss: invalid OSS volume '0' [ 730.285326][T14483] ALSA: mixer_oss: invalid OSS volume '' [ 730.964655][T14497] FAULT_INJECTION: forcing a failure. [ 730.964655][T14497] name failslab, interval 1, probability 0, space 0, times 0 [ 731.013916][T14497] CPU: 0 UID: 0 PID: 14497 Comm: syz.4.1716 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 731.013978][T14497] Tainted: [U]=USER [ 731.013990][T14497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 731.014011][T14497] Call Trace: [ 731.014023][T14497] [ 731.014036][T14497] dump_stack_lvl+0x16c/0x1f0 [ 731.014103][T14497] should_fail_ex+0x512/0x640 [ 731.014137][T14497] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 731.014183][T14497] should_failslab+0xc2/0x120 [ 731.014242][T14497] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 731.014285][T14497] ? __kernfs_new_node+0xd2/0x8e0 [ 731.014332][T14497] __kernfs_new_node+0xd2/0x8e0 [ 731.014379][T14497] ? __pfx___kernfs_new_node+0x10/0x10 [ 731.014431][T14497] ? find_held_lock+0x2b/0x80 [ 731.014467][T14497] ? kernfs_root+0xee/0x2a0 [ 731.014517][T14497] kernfs_new_node+0x13c/0x1e0 [ 731.014571][T14497] __kernfs_create_file+0x53/0x350 [ 731.014610][T14497] sysfs_add_file_mode_ns+0x207/0x3c0 [ 731.014659][T14497] sysfs_merge_group+0x1aa/0x340 [ 731.014705][T14497] ? __pfx_sysfs_merge_group+0x10/0x10 [ 731.014758][T14497] ? __pfx_dev_add_physical_location+0x10/0x10 [ 731.014801][T14497] ? bus_to_subsys+0x131/0x160 [ 731.014852][T14497] dpm_sysfs_add+0x237/0x280 [ 731.014892][T14497] device_add+0x9a6/0x1aa0 [ 731.014935][T14497] ? __pfx_device_add+0x10/0x10 [ 731.014973][T14497] ? lockdep_init_map_type+0x5c/0x280 [ 731.015020][T14497] ? __init_waitqueue_head+0xca/0x150 [ 731.015086][T14497] netdev_register_kobject+0x1a9/0x3d0 [ 731.015128][T14497] register_netdevice+0x13dc/0x2270 [ 731.015169][T14497] ? __pfx_register_netdevice+0x10/0x10 [ 731.015221][T14497] ? __pfx_loopback_net_init+0x10/0x10 [ 731.015272][T14497] register_netdev+0x34/0x50 [ 731.015308][T14497] loopback_net_init+0x7a/0x170 [ 731.015356][T14497] ? __pfx_loopback_net_init+0x10/0x10 [ 731.015400][T14497] ops_init+0x1df/0x5f0 [ 731.015434][T14497] setup_net+0x10f/0x380 [ 731.015459][T14497] ? lockdep_init_map_type+0x5c/0x280 [ 731.015503][T14497] ? __pfx_setup_net+0x10/0x10 [ 731.015530][T14497] ? debug_mutex_init+0x37/0x70 [ 731.015561][T14497] copy_net_ns+0x2a6/0x5f0 [ 731.015594][T14497] create_new_namespaces+0x3ea/0xa90 [ 731.015634][T14497] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 731.015670][T14497] ksys_unshare+0x45b/0xa40 [ 731.015710][T14497] ? __pfx_ksys_unshare+0x10/0x10 [ 731.015749][T14497] ? xfd_validate_state+0x61/0x180 [ 731.015803][T14497] __x64_sys_unshare+0x31/0x40 [ 731.015840][T14497] do_syscall_64+0xcd/0x490 [ 731.015889][T14497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.015919][T14497] RIP: 0033:0x7feb6358eb69 [ 731.015941][T14497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.015971][T14497] RSP: 002b:00007feb6446e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 731.015999][T14497] RAX: ffffffffffffffda RBX: 00007feb637b5fa0 RCX: 00007feb6358eb69 [ 731.016019][T14497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 731.016037][T14497] RBP: 00007feb63611df1 R08: 0000000000000000 R09: 0000000000000000 [ 731.016056][T14497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 731.016074][T14497] R13: 0000000000000000 R14: 00007feb637b5fa0 R15: 00007ffec41d05f8 [ 731.016112][T14497] [ 731.362399][T14499] svc: failed to register nfsdv3 RPC service (errno 111). [ 731.371993][T14499] svc: failed to register nfsaclv3 RPC service (errno 111). [ 731.888603][T14508] random: crng reseeded on system resumption                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             [ 776.875505][T15164] sd 0:0:1:0: PR command failed: 1026 [ 776.916684][T15164] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 776.924366][T15164] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 777.319818][T15164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1855'. [ 777.381879][T15185] delete_channel: no stack [ 777.764481][T15191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1860'. [ 777.851210][T15191] FAULT_INJECTION: forcing a failure. [ 777.851210][T15191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 777.865559][T15191] CPU: 0 UID: 0 PID: 15191 Comm: syz.3.1860 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 777.865629][T15191] Tainted: [U]=USER [ 777.865638][T15191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 777.865667][T15191] Call Trace: [ 777.865684][T15191] [ 777.865697][T15191] dump_stack_lvl+0x16c/0x1f0 [ 777.865776][T15191] should_fail_ex+0x512/0x640 [ 777.865813][T15191] _copy_from_user+0x2e/0xd0 [ 777.865850][T15191] copy_msghdr_from_user+0x98/0x160 [ 777.865906][T15191] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 777.865959][T15191] ? kfree+0x24f/0x4d0 [ 777.866000][T15191] ? __pfx__kstrtoull+0x10/0x10 [ 777.866056][T15191] ___sys_sendmsg+0xfe/0x1d0 [ 777.866116][T15191] ? __pfx____sys_sendmsg+0x10/0x10 [ 777.866201][T15191] ? __pfx___might_resched+0x10/0x10 [ 777.866244][T15191] __sys_sendmmsg+0x200/0x420 [ 777.866297][T15191] ? __pfx___sys_sendmmsg+0x10/0x10 [ 777.866359][T15191] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 777.866427][T15191] ? fput+0x9b/0xd0 [ 777.866477][T15191] ? ksys_write+0x1ac/0x250 [ 777.866513][T15191] ? __pfx_ksys_write+0x10/0x10 [ 777.866557][T15191] __x64_sys_sendmmsg+0x9c/0x100 [ 777.866606][T15191] ? lockdep_hardirqs_on+0x7c/0x110 [ 777.866653][T15191] do_syscall_64+0xcd/0x490 [ 777.866705][T15191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.866737][T15191] RIP: 0033:0x7fda2658eb69 [ 777.866764][T15191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.866796][T15191] RSP: 002b:00007fda27423038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 777.866827][T15191] RAX: ffffffffffffffda RBX: 00007fda267b6080 RCX: 00007fda2658eb69 [ 777.866848][T15191] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000002 [ 777.866878][T15191] RBP: 00007fda27423090 R08: 0000000000000000 R09: 0000000000000000 [ 777.866897][T15191] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 777.866916][T15191] R13: 0000000000000000 R14: 00007fda267b6080 R15: 00007ffdde72ebc8 [ 777.866957][T15191] [ 778.104180][T15182] Process accounting resumed [ 779.261900][T15215] ALSA: mixer_oss: invalid OSS volume '0' [ 779.279128][T15216] vhci_hcd: invalid port number 16 [ 779.285397][T15216] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 779.418867][T15215] ALSA: mixer_oss: invalid OSS volume '' [ 779.700168][T15221] FAULT_INJECTION: forcing a failure. [ 779.700168][T15221] name failslab, interval 1, probability 0, space 0, times 0 [ 779.880813][T15221] CPU: 1 UID: 0 PID: 15221 Comm: syz.0.1866 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 779.880867][T15221] Tainted: [U]=USER [ 779.880878][T15221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 779.880896][T15221] Call Trace: [ 779.880908][T15221] [ 779.880921][T15221] dump_stack_lvl+0x16c/0x1f0 [ 779.880976][T15221] should_fail_ex+0x512/0x640 [ 779.881008][T15221] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 779.881047][T15221] should_failslab+0xc2/0x120 [ 779.881087][T15221] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 779.881118][T15221] ? d_instantiate+0x77/0x90 [ 779.881153][T15221] ? alloc_empty_file+0x55/0x1e0 [ 779.881199][T15221] alloc_empty_file+0x55/0x1e0 [ 779.881240][T15221] alloc_file_pseudo+0x13a/0x230 [ 779.881283][T15221] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 779.881335][T15221] ioctx_alloc+0x5ab/0x2120 [ 779.881413][T15221] ? find_held_lock+0x2b/0x80 [ 779.881444][T15221] ? __pfx_ioctx_alloc+0x10/0x10 [ 779.881475][T15221] ? __might_fault+0x13b/0x190 [ 779.881521][T15221] __x64_sys_io_setup+0xc9/0x210 [ 779.881559][T15221] do_syscall_64+0xcd/0x490 [ 779.881607][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.881647][T15221] RIP: 0033:0x7f1bd378eb69 [ 779.881671][T15221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.881703][T15221] RSP: 002b:00007f1bd45a4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 779.881733][T15221] RAX: ffffffffffffffda RBX: 00007f1bd39b5fa0 RCX: 00007f1bd378eb69 [ 779.881754][T15221] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 779.881772][T15221] RBP: 00007f1bd3811df1 R08: 0000000000000000 R09: 0000000000000000 [ 779.881791][T15221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.881814][T15221] R13: 0000000000000000 R14: 00007f1bd39b5fa0 R15: 00007ffc0946a4b8 [ 779.881850][T15221] [ 780.567766][T15237] delete_channel: no stack [ 780.855930][T15241] delete_channel: no stack [ 782.127683][T15261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1876'. [ 782.150754][T15261] veth0_macvtap: entered promiscuous mode [ 782.162357][T15262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1875'. [ 782.171836][T15261] FAULT_INJECTION: forcing a failure. [ 782.171836][T15261] name failslab, interval 1, probability 0, space 0, times 0 [ 782.194050][T15261] CPU: 0 UID: 0 PID: 15261 Comm: syz.1.1876 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 782.194104][T15261] Tainted: [U]=USER [ 782.194114][T15261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 782.194133][T15261] Call Trace: [ 782.194142][T15261] [ 782.194154][T15261] dump_stack_lvl+0x16c/0x1f0 [ 782.194212][T15261] should_fail_ex+0x512/0x640 [ 782.194256][T15261] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 782.194295][T15261] should_failslab+0xc2/0x120 [ 782.194338][T15261] __kmalloc_cache_noprof+0x6a/0x3e0 [ 782.194371][T15261] ? netdevice_event+0x365/0x9d0 [ 782.194408][T15261] netdevice_event+0x365/0x9d0 [ 782.194440][T15261] ? __pfx_netdevice_event+0x10/0x10 [ 782.194468][T15261] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 782.194504][T15261] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 782.194539][T15261] ? __pfx_add_default_gids+0x10/0x10 [ 782.194567][T15261] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 782.194601][T15261] ? __pfx_add_netdev_ips+0x10/0x10 [ 782.194632][T15261] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 782.194667][T15261] ? wext_netdev_notifier_call+0xe/0x20 [ 782.194711][T15261] ? cfg802154_netdev_notifier_call+0x391/0xa00 [ 782.194764][T15261] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 782.194826][T15261] notifier_call_chain+0xb9/0x410 [ 782.194868][T15261] ? __pfx_netdevice_event+0x10/0x10 [ 782.194907][T15261] call_netdevice_notifiers_info+0xbe/0x140 [ 782.194948][T15261] __dev_notify_flags+0x12c/0x2e0 [ 782.194999][T15261] ? __pfx___dev_notify_flags+0x10/0x10 [ 782.195053][T15261] ? __pfx___dev_change_flags+0x10/0x10 [ 782.195102][T15261] ? validate_linkmsg+0x57c/0xb60 [ 782.195153][T15261] ? __pfx___schedule+0x10/0x10 [ 782.195205][T15261] netif_change_flags+0x108/0x160 [ 782.195268][T15261] do_setlink.constprop.0+0xb53/0x4380 [ 782.195333][T15261] ? __pfx_do_setlink.constprop.0+0x10/0x10 [ 782.195398][T15261] ? __lock_acquire+0xb97/0x1ce0 [ 782.195455][T15261] ? __mutex_trylock_common+0xe9/0x250 [ 782.195502][T15261] ? __pfx___mutex_trylock_common+0x10/0x10 [ 782.195549][T15261] ? __pfx___might_resched+0x10/0x10 [ 782.195584][T15261] ? rcu_is_watching+0x12/0xc0 [ 782.195616][T15261] ? trace_contention_end+0xdd/0x130 [ 782.195661][T15261] ? __mutex_lock+0x1c4/0x10b0 [ 782.195712][T15261] ? __pfx_aa_get_newest_label+0x10/0x10 [ 782.195765][T15261] ? rcu_is_watching+0x12/0xc0 [ 782.195801][T15261] ? __pfx___mutex_lock+0x10/0x10 [ 782.195879][T15261] rtnl_newlink+0x1446/0x2000 [ 782.195922][T15261] ? __pfx_rtnl_newlink+0x10/0x10 [ 782.195960][T15261] ? kmem_cache_free+0x2d1/0x4d0 [ 782.195996][T15261] ? kfree_skbmem+0x1a4/0x1f0 [ 782.196048][T15261] ? __lock_acquire+0x62e/0x1ce0 [ 782.196094][T15261] ? rcu_is_watching+0x12/0xc0 [ 782.196125][T15261] ? trace_cap_capable+0x18d/0x200 [ 782.196184][T15261] ? find_held_lock+0x2b/0x80 [ 782.196219][T15261] ? __pfx_rtnl_newlink+0x10/0x10 [ 782.196248][T15261] ? __pfx_rtnl_newlink+0x10/0x10 [ 782.196275][T15261] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 782.196307][T15261] ? __pfx_rtnl_newlink+0x10/0x10 [ 782.196338][T15261] rtnetlink_rcv_msg+0x95b/0xe90 [ 782.196374][T15261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 782.196416][T15261] ? ref_tracker_free+0x37c/0x830 [ 782.196455][T15261] netlink_rcv_skb+0x158/0x420 [ 782.196509][T15261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 782.196543][T15261] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 782.196610][T15261] ? netlink_deliver_tap+0x1ae/0xd30 [ 782.196667][T15261] netlink_unicast+0x5a7/0x870 [ 782.196723][T15261] ? __pfx_netlink_unicast+0x10/0x10 [ 782.196775][T15261] ? __lock_acquire+0xb97/0x1ce0 [ 782.196826][T15261] netlink_sendmsg+0x8d1/0xdd0 [ 782.196885][T15261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 782.196956][T15261] ____sys_sendmsg+0xa95/0xc70 [ 782.196994][T15261] ? copy_msghdr_from_user+0x10a/0x160 [ 782.197045][T15261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 782.197087][T15261] ? kfree+0x24f/0x4d0 [ 782.197113][T15261] ? __pfx__kstrtoull+0x10/0x10 [ 782.197169][T15261] ___sys_sendmsg+0x134/0x1d0 [ 782.197229][T15261] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.197320][T15261] ? __pfx___might_resched+0x10/0x10 [ 782.197361][T15261] __sys_sendmmsg+0x200/0x420 [ 782.197419][T15261] ? __pfx___sys_sendmmsg+0x10/0x10 [ 782.197483][T15261] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 782.197552][T15261] ? fput+0x9b/0xd0 [ 782.197600][T15261] ? ksys_write+0x1ac/0x250 [ 782.197635][T15261] ? __pfx_ksys_write+0x10/0x10 [ 782.197679][T15261] __x64_sys_sendmmsg+0x9c/0x100 [ 782.197727][T15261] ? lockdep_hardirqs_on+0x7c/0x110 [ 782.197774][T15261] do_syscall_64+0xcd/0x490 [ 782.197828][T15261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.197862][T15261] RIP: 0033:0x7fecc3f8eb69 [ 782.197885][T15261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.197917][T15261] RSP: 002b:00007fecc4e12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 782.197948][T15261] RAX: ffffffffffffffda RBX: 00007fecc41b6080 RCX: 00007fecc3f8eb69 [ 782.197968][T15261] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000002 [ 782.197988][T15261] RBP: 00007fecc4e12090 R08: 0000000000000000 R09: 0000000000000000 [ 782.198009][T15261] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 782.198026][T15261] R13: 0000000000000000 R14: 00007fecc41b6080 R15: 00007ffe75e49af8 [ 782.198061][T15261] [ 782.767498][T15262] veth0_macvtap: left promiscuous mode [ 782.787142][T15266] nbd: nbd7 already in use [ 783.257498][T15275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1879'. [ 783.267831][T15275] veth0_macvtap: left promiscuous mode [ 784.132901][T15294] delete_channel: no stack [ 786.274088][T15329] nbd: nbd7 already in use [ 787.791313][T15330] ALSA: mixer_oss: invalid OSS volume '0' [ 787.797621][T15330] ALSA: mixer_oss: invalid OSS volume '' [ 787.990033][T15358] FAULT_INJECTION: forcing a failure. [ 787.990033][T15358] name failslab, interval 1, probability 0, space 0, times 0 [ 788.013654][T15358] CPU: 1 UID: 0 PID: 15358 Comm: syz.0.1895 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 788.013711][T15358] Tainted: [U]=USER [ 788.013723][T15358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 788.013743][T15358] Call Trace: [ 788.013754][T15358] [ 788.013767][T15358] dump_stack_lvl+0x16c/0x1f0 [ 788.013829][T15358] should_fail_ex+0x512/0x640 [ 788.013864][T15358] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 788.013922][T15358] should_failslab+0xc2/0x120 [ 788.013970][T15358] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 788.014019][T15358] ? getname_flags.part.0+0x4c/0x550 [ 788.014081][T15358] getname_flags.part.0+0x4c/0x550 [ 788.014139][T15358] getname_flags+0x93/0xf0 [ 788.014176][T15358] do_sys_openat2+0xb8/0x1d0 [ 788.014228][T15358] ? __pfx_do_sys_openat2+0x10/0x10 [ 788.014295][T15358] __x64_sys_open+0x153/0x1e0 [ 788.014346][T15358] ? __pfx___x64_sys_open+0x10/0x10 [ 788.014409][T15358] ? rcu_is_watching+0x12/0xc0 [ 788.014448][T15358] do_syscall_64+0xcd/0x490 [ 788.014506][T15358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.014540][T15358] RIP: 0033:0x7f1bd378eb69 [ 788.014567][T15358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.014600][T15358] RSP: 002b:00007f1bd4583038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 788.014632][T15358] RAX: ffffffffffffffda RBX: 00007f1bd39b6080 RCX: 00007f1bd378eb69 [ 788.014655][T15358] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 788.014702][T15358] RBP: 00007f1bd3811df1 R08: 0000000000000000 R09: 0000000000000000 [ 788.014722][T15358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.014743][T15358] R13: 0000000000000000 R14: 00007f1bd39b6080 R15: 00007ffc0946a4b8 [ 788.014787][T15358] [ 788.627568][T15369] delete_channel: no stack [ 789.016910][T15374] ALSA: mixer_oss: invalid OSS volume '0' [ 789.305593][T15374] ALSA: mixer_oss: invalid OSS volume '' [ 789.615462][T15382] nbd: nbd7 already in use [ 790.418879][T15387] ALSA: mixer_oss: invalid OSS volume '0' [ 790.437874][T15387] ALSA: mixer_oss: invalid OSS volume '' [ 791.481469][T15404] Setting dangerous option i915.mitigations - tainting kernel [ 792.046525][T15403] zswap: compressor not available [ 792.139138][T15407] ALSA: mixer_oss: invalid OSS volume '0' [ 792.144971][T15407] ALSA: mixer_oss: invalid OSS volume '' [ 792.322709][T15418] FAULT_INJECTION: forcing a failure. [ 792.322709][T15418] name failslab, interval 1, probability 0, space 0, times 0 [ 792.414836][T15418] CPU: 1 UID: 0 PID: 15418 Comm: syz.3.1908 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 792.414894][T15418] Tainted: [U]=USER [ 792.414904][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.414925][T15418] Call Trace: [ 792.414936][T15418] [ 792.414950][T15418] dump_stack_lvl+0x16c/0x1f0 [ 792.415013][T15418] should_fail_ex+0x512/0x640 [ 792.415047][T15418] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 792.415090][T15418] should_failslab+0xc2/0x120 [ 792.415139][T15418] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 792.415179][T15418] ? getname_flags.part.0+0x4c/0x550 [ 792.415238][T15418] getname_flags.part.0+0x4c/0x550 [ 792.415296][T15418] getname_flags+0x93/0xf0 [ 792.415333][T15418] do_sys_openat2+0xb8/0x1d0 [ 792.415384][T15418] ? __pfx_do_sys_openat2+0x10/0x10 [ 792.415457][T15418] __x64_sys_open+0x153/0x1e0 [ 792.415511][T15418] ? __pfx___x64_sys_open+0x10/0x10 [ 792.415574][T15418] ? rcu_is_watching+0x12/0xc0 [ 792.415615][T15418] do_syscall_64+0xcd/0x490 [ 792.415673][T15418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.415708][T15418] RIP: 0033:0x7fda2658eb69 [ 792.415736][T15418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.415771][T15418] RSP: 002b:00007fda27423038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 792.415805][T15418] RAX: ffffffffffffffda RBX: 00007fda267b6080 RCX: 00007fda2658eb69 [ 792.415829][T15418] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 792.415852][T15418] RBP: 00007fda26611df1 R08: 0000000000000000 R09: 0000000000000000 [ 792.415874][T15418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.415893][T15418] R13: 0000000000000000 R14: 00007fda267b6080 R15: 00007ffdde72ebc8 [ 792.415936][T15418] [ 793.499837][T15438] delete_channel: no stack [ 794.309748][T15441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1913'. [ 794.731997][T15450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1914'. [ 794.755029][T15451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1915'. [ 794.891221][T15450] veth0_macvtap: left promiscuous mode [ 796.341572][ T31] audit: type=1800 audit(4294967308.544:18): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1915" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 797.114019][T15485] sd 0:0:1:0: PR command failed: 1026 [ 797.119952][T15485] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 797.127178][T15485] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 797.386997][T15485] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1920'. [ 797.410401][T15485] veth0_macvtap: entered promiscuous mode [ 797.662337][T15491] sd 0:0:1:0: PR command failed: 1026 [ 797.668048][T15491] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 797.675792][T15491] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 797.749589][T15494] sd 0:0:1:0: PR command failed: 1026 [ 797.774603][T15494] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 797.865607][T15494] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 798.090651][T15491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1921'. [ 798.169660][T15491] veth0_macvtap: entered promiscuous mode [ 798.589171][T15494] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1922'. [ 798.601403][T15494] veth0_macvtap: entered promiscuous mode [ 798.665425][T15510] FAULT_INJECTION: forcing a failure. [ 798.665425][T15510] name failslab, interval 1, probability 0, space 0, times 0 [ 798.678592][T15510] CPU: 0 UID: 0 PID: 15510 Comm: syz.1.1925 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 798.678651][T15510] Tainted: [U]=USER [ 798.678662][T15510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 798.678683][T15510] Call Trace: [ 798.678694][T15510] [ 798.678708][T15510] dump_stack_lvl+0x16c/0x1f0 [ 798.678768][T15510] should_fail_ex+0x512/0x640 [ 798.678804][T15510] ? __kmalloc_noprof+0xbf/0x510 [ 798.678856][T15510] ? lsm_blob_alloc+0x68/0x90 [ 798.678903][T15510] should_failslab+0xc2/0x120 [ 798.678951][T15510] __kmalloc_noprof+0xd2/0x510 [ 798.679000][T15510] lsm_blob_alloc+0x68/0x90 [ 798.679055][T15510] security_prepare_creds+0x30/0x270 [ 798.679104][T15510] prepare_creds+0x56f/0x7d0 [ 798.679157][T15510] copy_creds+0xa7/0xa50 [ 798.679214][T15510] copy_process+0xff6/0x7690 [ 798.679257][T15510] ? __pfx___futex_wait+0x10/0x10 [ 798.679325][T15510] ? __pfx_copy_process+0x10/0x10 [ 798.679367][T15510] ? futex_private_hash_put+0x176/0x300 [ 798.679413][T15510] ? futex_private_hash_put+0x18a/0x300 [ 798.679460][T15510] kernel_clone+0xfc/0x930 [ 798.679507][T15510] ? __pfx_kernel_clone+0x10/0x10 [ 798.679576][T15510] __do_sys_clone+0xce/0x120 [ 798.679660][T15510] ? __pfx___do_sys_clone+0x10/0x10 [ 798.679725][T15510] ? xfd_validate_state+0x61/0x180 [ 798.679772][T15510] ? __pfx_ksys_write+0x10/0x10 [ 798.679825][T15510] do_syscall_64+0xcd/0x490 [ 798.679882][T15510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.679916][T15510] RIP: 0033:0x7fecc3f8eb69 [ 798.679953][T15510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.679990][T15510] RSP: 002b:00007fecc4e33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 798.680032][T15510] RAX: ffffffffffffffda RBX: 00007fecc41b5fa0 RCX: 00007fecc3f8eb69 [ 798.680056][T15510] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000020003b46 [ 798.680077][T15510] RBP: 00007fecc4011df1 R08: 0000000010000002 R09: 0000000000000000 [ 798.680099][T15510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.680121][T15510] R13: 0000000000000000 R14: 00007fecc41b5fa0 R15: 00007ffe75e49af8 [ 798.680165][T15510] [ 799.041551][T15510] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1925'. [ 799.487018][T15522] delete_channel: no stack [ 799.959381][T15527] warning: `syz.3.1930' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 800.025657][T15527] sp0: Synchronizing with TNC [ 801.740546][T15542] ptp ptp0: delete virtual clock ptp3 [ 801.883707][T15542] ptp ptp0: delete virtual clock ptp2 [ 801.952698][T15542] ptp ptp0: delete virtual clock ptp1 [ 801.978925][T15545] sd 0:0:1:0: PR command failed: 1026 [ 801.995944][T15545] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 802.010943][T15545] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 802.089870][T15561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1936'. [ 802.126914][T15561] veth0_macvtap: left promiscuous mode [ 802.133327][T15542] ptp ptp0: only physical clock in use now [ 802.389467][T15545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1933'. [ 803.234671][T15577] delete_channel: no stack [ 804.702940][T15590] ALSA: mixer_oss: invalid OSS volume '0' [ 804.881102][T15590] ALSA: mixer_oss: invalid OSS volume '' [ 805.129168][T15593] ALSA: mixer_oss: invalid OSS volume '0' [ 805.288612][T15593] ALSA: mixer_oss: invalid OSS volume '' [ 807.717881][T15623] sd 0:0:1:0: PR command failed: 1026 [ 807.717925][T15623] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 807.717967][T15623] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 807.891746][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1947'. [ 808.646284][T15635] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1952'. [ 808.749613][T15629] nbd: nbd7 already in use [ 809.337800][T15644] sd 0:0:1:0: PR command failed: 1026 [ 809.344037][T15644] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 809.351542][T15644] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 809.481628][T15643] ALSA: mixer_oss: invalid OSS volume '0' [ 809.505270][T15649] FAULT_INJECTION: forcing a failure. [ 809.505270][T15649] name failslab, interval 1, probability 0, space 0, times 0 [ 809.518220][T15643] ALSA: mixer_oss: invalid OSS volume '' [ 809.538845][T15649] CPU: 1 UID: 0 PID: 15649 Comm: syz.1.1956 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 809.538904][T15649] Tainted: [U]=USER [ 809.538917][T15649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 809.538938][T15649] Call Trace: [ 809.538950][T15649] [ 809.538962][T15649] dump_stack_lvl+0x16c/0x1f0 [ 809.539025][T15649] should_fail_ex+0x512/0x640 [ 809.539060][T15649] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 809.539111][T15649] should_failslab+0xc2/0x120 [ 809.539156][T15649] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 809.539197][T15649] ? getname_flags.part.0+0x4c/0x550 [ 809.539258][T15649] getname_flags.part.0+0x4c/0x550 [ 809.539315][T15649] getname_flags+0x93/0xf0 [ 809.539352][T15649] do_sys_openat2+0xb8/0x1d0 [ 809.539403][T15649] ? __pfx_do_sys_openat2+0x10/0x10 [ 809.539472][T15649] __x64_sys_open+0x153/0x1e0 [ 809.539526][T15649] ? __pfx___x64_sys_open+0x10/0x10 [ 809.539589][T15649] ? rcu_is_watching+0x12/0xc0 [ 809.539640][T15649] do_syscall_64+0xcd/0x490 [ 809.539700][T15649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.539744][T15649] RIP: 0033:0x7fecc3f8eb69 [ 809.539772][T15649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.539809][T15649] RSP: 002b:00007fecc4e12038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 809.539842][T15649] RAX: ffffffffffffffda RBX: 00007fecc41b6080 RCX: 00007fecc3f8eb69 [ 809.539864][T15649] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 809.539885][T15649] RBP: 00007fecc4011df1 R08: 0000000000000000 R09: 0000000000000000 [ 809.539907][T15649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.539928][T15649] R13: 0000000000000000 R14: 00007fecc41b6080 R15: 00007ffe75e49af8 [ 809.539972][T15649] [ 810.124118][T15642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1955'. [ 810.565846][T15664] delete_channel: no stack [ 811.622891][T15629] Process accounting paused [ 811.732062][T15676] nbd: nbd7 already in use [ 812.011767][T15674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1962'. [ 812.255086][T15689] delete_channel: no stack [ 812.263732][T15677] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1963'. [ 812.383768][T15686] sd 0:0:1:0: PR command failed: 1026 [ 812.405963][T15686] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 812.474469][T15686] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 812.646686][T15688] sd 0:0:1:0: PR command failed: 1026 [ 812.652169][T15688] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 812.671361][T15688] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 812.799378][T15691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1966'. [ 812.823099][T15688] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1967'. [ 813.191976][T15698] delete_channel: no stack [ 813.397319][T15706] FAULT_INJECTION: forcing a failure. [ 813.397319][T15706] name failslab, interval 1, probability 0, space 0, times 0 [ 813.431729][T15706] CPU: 1 UID: 0 PID: 15706 Comm: syz.3.1970 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 813.431771][T15706] Tainted: [U]=USER [ 813.431778][T15706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 813.431792][T15706] Call Trace: [ 813.431799][T15706] [ 813.431808][T15706] dump_stack_lvl+0x16c/0x1f0 [ 813.431865][T15706] should_fail_ex+0x512/0x640 [ 813.431899][T15706] ? fs_reclaim_acquire+0xae/0x150 [ 813.431953][T15706] ? tomoyo_encode2+0x100/0x3e0 [ 813.431990][T15706] should_failslab+0xc2/0x120 [ 813.432032][T15706] __kmalloc_noprof+0xd2/0x510 [ 813.432070][T15706] ? d_absolute_path+0x136/0x1a0 [ 813.432118][T15706] tomoyo_encode2+0x100/0x3e0 [ 813.432150][T15706] tomoyo_encode+0x29/0x50 [ 813.432177][T15706] tomoyo_realpath_from_path+0x18f/0x6e0 [ 813.432215][T15706] tomoyo_path_number_perm+0x245/0x580 [ 813.432246][T15706] ? tomoyo_path_number_perm+0x237/0x580 [ 813.432272][T15706] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 813.432297][T15706] ? find_held_lock+0x2b/0x80 [ 813.432346][T15706] ? find_held_lock+0x2b/0x80 [ 813.432367][T15706] ? hook_file_ioctl_common+0x145/0x410 [ 813.432412][T15706] ? __fget_files+0x20e/0x3c0 [ 813.432444][T15706] security_file_ioctl+0x9b/0x240 [ 813.432471][T15706] __x64_sys_ioctl+0xb7/0x210 [ 813.432510][T15706] do_syscall_64+0xcd/0x490 [ 813.432549][T15706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.432574][T15706] RIP: 0033:0x7fda2658eb69 [ 813.432593][T15706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.432616][T15706] RSP: 002b:00007fda27402038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 813.432638][T15706] RAX: ffffffffffffffda RBX: 00007fda267b6160 RCX: 00007fda2658eb69 [ 813.432653][T15706] RDX: 0000000000000000 RSI: 0000000040045108 RDI: 0000000000000004 [ 813.432666][T15706] RBP: 00007fda27402090 R08: 0000000000000000 R09: 0000000000000000 [ 813.432680][T15706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.432694][T15706] R13: 0000000000000000 R14: 00007fda267b6160 R15: 00007ffdde72ebc8 [ 813.432723][T15706] [ 813.432909][T15706] ERROR: Out of memory at tomoyo_realpath_from_path. [ 814.102382][T15718] FAULT_INJECTION: forcing a failure. [ 814.102382][T15718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.172947][T15718] CPU: 0 UID: 0 PID: 15718 Comm: syz.1.1976 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 814.173004][T15718] Tainted: [U]=USER [ 814.173016][T15718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 814.173035][T15718] Call Trace: [ 814.173045][T15718] [ 814.173057][T15718] dump_stack_lvl+0x16c/0x1f0 [ 814.173114][T15718] should_fail_ex+0x512/0x640 [ 814.173161][T15718] strncpy_from_user+0x3b/0x2e0 [ 814.173218][T15718] getname_flags.part.0+0x8f/0x550 [ 814.173274][T15718] getname_flags+0x93/0xf0 [ 814.173309][T15718] do_sys_openat2+0xb8/0x1d0 [ 814.173360][T15718] ? __pfx_do_sys_openat2+0x10/0x10 [ 814.173419][T15718] ? rcu_is_watching+0x12/0xc0 [ 814.173458][T15718] __x64_sys_open+0x153/0x1e0 [ 814.173509][T15718] ? __pfx___x64_sys_open+0x10/0x10 [ 814.173568][T15718] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 814.173630][T15718] do_syscall_64+0xcd/0x490 [ 814.173722][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.173756][T15718] RIP: 0033:0x7fecc3f8eb69 [ 814.173782][T15718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.173816][T15718] RSP: 002b:00007fecc4e33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 814.173848][T15718] RAX: ffffffffffffffda RBX: 00007fecc41b5fa0 RCX: 00007fecc3f8eb69 [ 814.173872][T15718] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 814.173894][T15718] RBP: 00007fecc4011df1 R08: 0000000000000000 R09: 0000000000000000 [ 814.173916][T15718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.173937][T15718] R13: 0000000000000000 R14: 00007fecc41b5fa0 R15: 00007ffe75e49af8 [ 814.173981][T15718] [ 814.476997][T15722] FAULT_INJECTION: forcing a failure. [ 814.476997][T15722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 814.493077][T15722] CPU: 0 UID: 0 PID: 15722 Comm: syz.3.1975 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 814.493135][T15722] Tainted: [U]=USER [ 814.493145][T15722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 814.493165][T15722] Call Trace: [ 814.493175][T15722] [ 814.493187][T15722] dump_stack_lvl+0x16c/0x1f0 [ 814.493243][T15722] should_fail_ex+0x512/0x640 [ 814.493282][T15722] _copy_from_user+0x2e/0xd0 [ 814.493332][T15722] kstrtouint_from_user+0xd6/0x1d0 [ 814.493383][T15722] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 814.493427][T15722] ? __lock_acquire+0xb97/0x1ce0 [ 814.493491][T15722] proc_fail_nth_write+0x83/0x220 [ 814.493528][T15722] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 814.493573][T15722] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 814.493606][T15722] vfs_write+0x29d/0x1150 [ 814.493650][T15722] ? __pfx___mutex_lock+0x10/0x10 [ 814.493701][T15722] ? __pfx_vfs_write+0x10/0x10 [ 814.493750][T15722] ? __fget_files+0x20e/0x3c0 [ 814.493782][T15722] ? static_key_count+0x20/0x70 [ 814.493825][T15722] ksys_write+0x12a/0x250 [ 814.493862][T15722] ? __pfx_ksys_write+0x10/0x10 [ 814.493910][T15722] do_syscall_64+0xcd/0x490 [ 814.493962][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.493994][T15722] RIP: 0033:0x7fda2658d61f [ 814.494019][T15722] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 814.494051][T15722] RSP: 002b:00007fda273e1030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 814.494080][T15722] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fda2658d61f [ 814.494101][T15722] RDX: 0000000000000001 RSI: 00007fda273e10a0 RDI: 0000000000000007 [ 814.494121][T15722] RBP: 00007fda273e1090 R08: 0000000000000000 R09: 0000000000000000 [ 814.494141][T15722] R10: 000000004000000d R11: 0000000000000293 R12: 0000000000000001 [ 814.494161][T15722] R13: 0000000000000000 R14: 00007fda267b6240 R15: 00007ffdde72ebc8 [ 814.494205][T15722] [ 814.829486][T15724] ALSA: mixer_oss: invalid OSS volume '0' [ 814.836114][T15724] ALSA: mixer_oss: invalid OSS volume '' [ 815.369439][T15733] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1979'. [ 815.395364][T15733] bridge0: entered promiscuous mode [ 815.442785][T15734] sd 0:0:1:0: PR command failed: 1026 [ 815.480442][T15734] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 815.488085][T15734] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 815.672637][T15744] binder: 15743:15744 unknown command 3 [ 815.714398][T15744] binder: 15743:15744 ioctl c0306201 0 returned -22 [ 815.922142][T15731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1977'. [ 815.936796][T15731] veth0_macvtap: entered promiscuous mode [ 816.023226][T15736] could not allocate digest TFM handle  [ 818.943807][T15774] FAULT_INJECTION: forcing a failure. [ 818.943807][T15774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.957327][T15774] CPU: 1 UID: 0 PID: 15774 Comm: syz.3.1987 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 818.957369][T15774] Tainted: [U]=USER [ 818.957377][T15774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 818.957392][T15774] Call Trace: [ 818.957402][T15774] [ 818.957411][T15774] dump_stack_lvl+0x16c/0x1f0 [ 818.957454][T15774] should_fail_ex+0x512/0x640 [ 818.957482][T15774] strncpy_from_user+0x3b/0x2e0 [ 818.957526][T15774] getname_flags.part.0+0x8f/0x550 [ 818.957569][T15774] getname_flags+0x93/0xf0 [ 818.957595][T15774] do_sys_openat2+0xb8/0x1d0 [ 818.957632][T15774] ? __pfx_do_sys_openat2+0x10/0x10 [ 818.957680][T15774] __x64_sys_open+0x153/0x1e0 [ 818.957734][T15774] ? __pfx___x64_sys_open+0x10/0x10 [ 818.957780][T15774] ? rcu_is_watching+0x12/0xc0 [ 818.957809][T15774] do_syscall_64+0xcd/0x490 [ 818.957850][T15774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.957874][T15774] RIP: 0033:0x7fda2658eb69 [ 818.957893][T15774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.957919][T15774] RSP: 002b:00007fda27444038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 818.957942][T15774] RAX: ffffffffffffffda RBX: 00007fda267b5fa0 RCX: 00007fda2658eb69 [ 818.957959][T15774] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 818.957975][T15774] RBP: 00007fda26611df1 R08: 0000000000000000 R09: 0000000000000000 [ 818.957990][T15774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.958004][T15774] R13: 0000000000000000 R14: 00007fda267b5fa0 R15: 00007ffdde72ebc8 [ 818.958035][T15774] [ 819.249368][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.273147][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.436336][T15782] ALSA: mixer_oss: invalid OSS volume '0' [ 819.452339][T15783] ALSA: mixer_oss: invalid OSS volume '0' [ 819.464945][T15782] ALSA: mixer_oss: invalid OSS volume '' [ 819.475778][T15783] ALSA: mixer_oss: invalid OSS volume '' [ 820.347822][T15795] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 821.132570][T15809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1994'. [ 821.199615][T15809] veth0_macvtap: left promiscuous mode [ 821.735511][T15817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1996'. [ 821.806414][T15817] veth0_macvtap: left promiscuous mode [ 822.869146][T15838] delete_channel: no stack [ 823.860477][T15847] delete_channel: no stack [ 824.156773][T15849] nbd: nbd7 already in use [ 824.938785][T15863] FAULT_INJECTION: forcing a failure. [ 824.938785][T15863] name failslab, interval 1, probability 0, space 0, times 0 [ 824.986208][T15863] CPU: 1 UID: 0 PID: 15863 Comm: syz.1.2005 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 824.986251][T15863] Tainted: [U]=USER [ 824.986260][T15863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 824.986274][T15863] Call Trace: [ 824.986283][T15863] [ 824.986293][T15863] dump_stack_lvl+0x16c/0x1f0 [ 824.986338][T15863] should_fail_ex+0x512/0x640 [ 824.986364][T15863] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 824.986406][T15863] should_failslab+0xc2/0x120 [ 824.986440][T15863] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 824.986470][T15863] ? getname_flags.part.0+0x4c/0x550 [ 824.986515][T15863] getname_flags.part.0+0x4c/0x550 [ 824.986558][T15863] getname_flags+0x93/0xf0 [ 824.986584][T15863] do_sys_openat2+0xb8/0x1d0 [ 824.986622][T15863] ? __pfx_do_sys_openat2+0x10/0x10 [ 824.986669][T15863] __x64_sys_open+0x153/0x1e0 [ 824.986707][T15863] ? __pfx___x64_sys_open+0x10/0x10 [ 824.986750][T15863] ? rcu_is_watching+0x12/0xc0 [ 824.986777][T15863] do_syscall_64+0xcd/0x490 [ 824.986817][T15863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.986842][T15863] RIP: 0033:0x7fecc3f8eb69 [ 824.986861][T15863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.986884][T15863] RSP: 002b:00007fecc4e33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 824.986906][T15863] RAX: ffffffffffffffda RBX: 00007fecc41b5fa0 RCX: 00007fecc3f8eb69 [ 824.986921][T15863] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 824.986936][T15863] RBP: 00007fecc4011df1 R08: 0000000000000000 R09: 0000000000000000 [ 824.986950][T15863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.986964][T15863] R13: 0000000000000000 R14: 00007fecc41b5fa0 R15: 00007ffe75e49af8 [ 824.986995][T15863] [ 825.175091][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.344344][T15861] sd 0:0:1:0: PR command failed: 1026 [ 825.350842][T15861] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 825.357644][T15861] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 825.686542][T15861] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2004'. [ 826.200921][T15875] FAULT_INJECTION: forcing a failure. [ 826.200921][T15875] name failslab, interval 1, probability 0, space 0, times 0 [ 826.237385][T15875] CPU: 1 UID: 0 PID: 15875 Comm: syz.4.2008 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 826.237443][T15875] Tainted: [U]=USER [ 826.237454][T15875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 826.237472][T15875] Call Trace: [ 826.237483][T15875] [ 826.237495][T15875] dump_stack_lvl+0x16c/0x1f0 [ 826.237557][T15875] should_fail_ex+0x512/0x640 [ 826.237591][T15875] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 826.237635][T15875] should_failslab+0xc2/0x120 [ 826.237678][T15875] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 826.237718][T15875] ? security_file_alloc+0x34/0x2b0 [ 826.237763][T15875] security_file_alloc+0x34/0x2b0 [ 826.237803][T15875] init_file+0x93/0x4c0 [ 826.237851][T15875] alloc_empty_file+0x73/0x1e0 [ 826.237898][T15875] alloc_file_clone+0x5f/0x110 [ 826.237948][T15875] do_shmat+0x733/0x1330 [ 826.237998][T15875] ? __pfx_do_shmat+0x10/0x10 [ 826.238051][T15875] __x64_sys_shmat+0xd7/0x170 [ 826.238092][T15875] ? __pfx_ksys_write+0x10/0x10 [ 826.238130][T15875] ? __pfx___x64_sys_shmat+0x10/0x10 [ 826.238180][T15875] ? rcu_is_watching+0x12/0xc0 [ 826.238214][T15875] ? do_syscall_64+0x91/0x490 [ 826.238268][T15875] do_syscall_64+0xcd/0x490 [ 826.238322][T15875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.238357][T15875] RIP: 0033:0x7feb6358eb69 [ 826.238390][T15875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.238423][T15875] RSP: 002b:00007feb6446e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 826.238455][T15875] RAX: ffffffffffffffda RBX: 00007feb637b5fa0 RCX: 00007feb6358eb69 [ 826.238476][T15875] RDX: 0000000000000fff RSI: 0000200000000000 RDI: 0000000000000000 [ 826.238496][T15875] RBP: 00007feb6446e090 R08: 0000000000000000 R09: 0000000000000000 [ 826.238515][T15875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.238534][T15875] R13: 0000000000000001 R14: 00007feb637b5fa0 R15: 00007ffec41d05f8 [ 826.238576][T15875] [ 826.458323][T15877] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2007'. [ 826.492413][T15877] veth0_macvtap: left promiscuous mode [ 826.501672][T15878] delete_channel: no stack [ 828.009397][T15887] ALSA: mixer_oss: invalid OSS volume '0' [ 828.015223][T15887] ALSA: mixer_oss: invalid OSS volume '' [ 829.014479][T15906] delete_channel: no stack [ 829.111838][T15905] [U]  [ 829.115077][T15905] [U] [ 829.117838][T15905] [U] [ 829.120641][T15905] [U] [ 829.201328][T15905] [U] [ 829.204153][T15905] [U] [ 829.206912][T15905] [U] [ 829.209675][T15905] [U] [ 829.226140][T15905] [U] [ 829.228984][T15905] [U] [ 829.231763][T15905] [U] [ 829.234541][T15905] [U] [ 829.273506][T15905] [U] [ 829.276305][T15905] [U] [ 829.279125][T15905] [U] [ 829.281969][T15905] [U] [ 829.294049][T15905] [U] [ 829.296868][T15905] [U] [ 829.299604][T15905] [U] [ 829.302321][T15905] [U] [ 829.367501][T15905] [U] [ 829.370297][T15905] [U] [ 829.373057][T15905] [U] [ 829.375804][T15905] [U] [ 829.386326][T15905] [U] [ 829.389123][T15905] [U] [ 829.391885][T15905] [U] [ 829.394731][T15905] [U] [ 829.431724][T15905] [U] [ 829.434521][T15905] [U] [ 829.437241][T15905] [U] [ 829.440078][T15905] [U] [ 829.471958][T15905] [U] [ 829.474740][T15905] [U] [ 829.477456][T15905] [U] [ 829.480176][T15905] [U] [ 829.499432][T15905] [U] [ 829.502281][T15905] [U] [ 829.505050][T15905] [U] [ 829.507902][T15905] [U] [ 829.530555][T15905] [U] [ 829.533334][T15905] [U] [ 829.536053][T15905] [U] [ 829.538786][T15905] [U] [ 829.572509][T15905] [U] [ 829.575346][T15905] [U] [ 829.578098][T15905] [U] [ 829.580864][T15905] [U] [ 829.618511][T15905] [U] [ 829.933088][ T5912] smpboot: CPU 1 is now offline [ 830.440679][T15925] FAULT_INJECTION: forcing a failure. [ 830.440679][T15925] name failslab, interval 1, probability 0, space 0, times 0 [ 830.468399][T15926] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2018'. [ 830.507035][T15925] CPU: 0 UID: 0 PID: 15925 Comm: syz.3.2019 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 830.507085][T15925] Tainted: [U]=USER [ 830.507093][T15925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 830.507107][T15925] Call Trace: [ 830.507115][T15925] [ 830.507124][T15925] dump_stack_lvl+0x16c/0x1f0 [ 830.507168][T15925] should_fail_ex+0x512/0x640 [ 830.507197][T15925] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 830.507231][T15925] should_failslab+0xc2/0x120 [ 830.507264][T15925] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 830.507293][T15925] ? alloc_empty_file+0x55/0x1e0 [ 830.507334][T15925] alloc_empty_file+0x55/0x1e0 [ 830.507370][T15925] path_openat+0xda/0x2cb0 [ 830.507396][T15925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.507431][T15925] ? __pfx_path_openat+0x10/0x10 [ 830.507460][T15925] ? __lock_acquire+0xb97/0x1ce0 [ 830.507495][T15925] do_filp_open+0x20b/0x470 [ 830.507523][T15925] ? __pfx_do_filp_open+0x10/0x10 [ 830.507571][T15925] ? _raw_spin_unlock+0x28/0x50 [ 830.507603][T15925] ? alloc_fd+0x471/0x7d0 [ 830.507635][T15925] do_sys_openat2+0x11b/0x1d0 [ 830.507672][T15925] ? __pfx_do_sys_openat2+0x10/0x10 [ 830.507720][T15925] __x64_sys_open+0x153/0x1e0 [ 830.507757][T15925] ? __pfx___x64_sys_open+0x10/0x10 [ 830.507806][T15925] ? rcu_is_watching+0x12/0xc0 [ 830.507834][T15925] do_syscall_64+0xcd/0x490 [ 830.507875][T15925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.507899][T15925] RIP: 0033:0x7fda2658eb69 [ 830.507917][T15925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.507940][T15925] RSP: 002b:00007fda27444038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 830.507963][T15925] RAX: ffffffffffffffda RBX: 00007fda267b5fa0 RCX: 00007fda2658eb69 [ 830.507979][T15925] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 830.507993][T15925] RBP: 00007fda26611df1 R08: 0000000000000000 R09: 0000000000000000 [ 830.508008][T15925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.508021][T15925] R13: 0000000000000000 R14: 00007fda267b5fa0 R15: 00007ffdde72ebc8 [ 830.508053][T15925] [ 830.729647][ C0] vkms_vblank_simulate: vblank timer overrun [ 830.911106][T15931] nbd: nbd7 already in use [ 831.008049][T15937] ALSA: mixer_oss: invalid OSS volume '0' [ 831.013979][T15937] ALSA: mixer_oss: invalid OSS volume '' [ 831.799932][T15935] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2020'. [ 831.891525][T15947] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2022'. [ 831.963336][T15949] delete_channel: no stack [ 832.288038][T15957] net_ratelimit: 77 callbacks suppressed [ 832.288062][T15957] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 833.462348][T15977] delete_channel: no stack [ 835.242616][T15985] ALSA: mixer_oss: invalid OSS volume '0' [ 835.296421][T15985] ALSA: mixer_oss: invalid OSS volume '' [ 835.524485][T15992] delete_channel: no stack [ 836.416021][T15986] sd 0:0:1:0: PR command failed: 1026 [ 836.438555][T15997] FAULT_INJECTION: forcing a failure. [ 836.438555][T15997] name failslab, interval 1, probability 0, space 0, times 0 [ 836.473130][T15986] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 836.509425][T15986] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 836.517944][T15997] CPU: 0 UID: 0 PID: 15997 Comm: syz.4.2034 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 836.517986][T15997] Tainted: [U]=USER [ 836.517994][T15997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 836.518010][T15997] Call Trace: [ 836.518018][T15997] [ 836.518027][T15997] dump_stack_lvl+0x16c/0x1f0 [ 836.518072][T15997] should_fail_ex+0x512/0x640 [ 836.518098][T15997] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 836.518131][T15997] should_failslab+0xc2/0x120 [ 836.518179][T15997] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 836.518208][T15997] ? getname_flags.part.0+0x4c/0x550 [ 836.518252][T15997] getname_flags.part.0+0x4c/0x550 [ 836.518294][T15997] getname_flags+0x93/0xf0 [ 836.518320][T15997] do_sys_openat2+0xb8/0x1d0 [ 836.518358][T15997] ? __pfx_do_sys_openat2+0x10/0x10 [ 836.518406][T15997] __x64_sys_open+0x153/0x1e0 [ 836.518443][T15997] ? __pfx___x64_sys_open+0x10/0x10 [ 836.518486][T15997] ? rcu_is_watching+0x12/0xc0 [ 836.518514][T15997] do_syscall_64+0xcd/0x490 [ 836.518554][T15997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.518579][T15997] RIP: 0033:0x7feb6358eb69 [ 836.518597][T15997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.518624][T15997] RSP: 002b:00007feb6446e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 836.518647][T15997] RAX: ffffffffffffffda RBX: 00007feb637b5fa0 RCX: 00007feb6358eb69 [ 836.518662][T15997] RDX: 0000000000000110 RSI: 0000000000161342 RDI: 0000200000000000 [ 836.518677][T15997] RBP: 00007feb63611df1 R08: 0000000000000000 R09: 0000000000000000 [ 836.518691][T15997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.518704][T15997] R13: 0000000000000000 R14: 00007feb637b5fa0 R15: 00007ffec41d05f8 [ 836.518734][T15997] [ 836.846297][T15988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2032'. [ 836.855621][T15988] veth0_macvtap: entered promiscuous mode [ 837.071018][T16003] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 838.207562][T16009] sd 0:0:1:0: PR command failed: 1026 [ 838.265165][T16009] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 838.375517][T16009] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 839.403769][T16009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2036'. [ 839.422495][T16011] random: crng reseeded on system resumption [ 839.650074][T16009] veth0_macvtap: entered promiscuous mode [ 839.751365][T16023] sd 0:0:1:0: PR command failed: 1026 [ 839.793301][T16023] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 839.868283][T16023] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 840.388430][T16021] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2038'. [ 841.229826][T16039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2041'. [ 841.418156][T16039] veth0_macvtap: left promiscuous mode [ 842.348224][T16056] delete_channel: no stack [ 842.427251][T16020] Process accounting resumed [ 843.083449][T16067] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2046'. [ 843.216430][T16067] veth0_macvtap: left promiscuous mode [ 844.682377][T16083] sd 0:0:1:0: PR command failed: 1026 [ 844.755804][T16083] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 844.816174][T16083] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 844.895428][T16095] delete_channel: no stack [ 845.565882][T16083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2047'. [ 845.880186][T16083] veth0_macvtap: entered promiscuous mode [ 846.596459][ T5868] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 846.835320][T16114] delete_channel: no stack [ 847.943830][T16130] delete_channel: no stack [ 849.866873][T16149] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 850.246352][T16150] ALSA: mixer_oss: invalid OSS volume '0' [ 850.303034][T16150] ALSA: mixer_oss: invalid OSS volume '' [ 850.357940][T16145] ALSA: mixer_oss: invalid OSS volume '0' [ 850.439465][T16145] ALSA: mixer_oss: invalid OSS volume '' [ 851.262290][T16169] delete_channel: no stack [ 851.714726][T16175] delete_channel: no stack [ 852.327857][T16179] nbd: nbd7 already in use [ 852.775275][T16186] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2068'. [ 853.897749][ T5868] Bluetooth: hci3: unexpected event 0x3e length: 728 > 260 [ 853.897783][ T5868] Bluetooth: hci3: unexpected subevent 0x03 length: 727 > 9 [ 854.181279][T16195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2072'. [ 854.203794][T16216] delete_channel: no stack [ 854.224532][T16195] bridge_slave_1: left allmulticast mode [ 854.271018][T16195] bridge_slave_1: left promiscuous mode [ 854.334647][T16195] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.491827][T16195] bridge_slave_0: left allmulticast mode [ 854.534157][T16218] random: crng reseeded on system resumption [ 854.557787][T16195] bridge_slave_0: left promiscuous mode [ 854.652361][T16195] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.930935][T16233] nbd: nbd7 already in use [ 858.634290][T16254] nbd: nbd7 already in use [ 859.460340][T16255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2084'. [ 859.612664][T16257] ALSA: mixer_oss: invalid OSS volume '0' [ 859.778130][T16257] ALSA: mixer_oss: invalid OSS volume '' [ 859.898207][T16255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.118546][T16255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.288455][T16255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.392001][T16260] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2093'. [ 860.429313][T16271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2088'. [ 860.454716][T16255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 860.771675][T16271] veth0_macvtap: left promiscuous mode [ 861.166397][T16283] delete_channel: no stack [ 861.963164][T16286] ALSA: mixer_oss: invalid OSS volume '0' [ 862.064382][T16286] ALSA: mixer_oss: invalid OSS volume '' [ 862.755580][T16295] nbd: nbd7 already in use [ 864.437345][T16315] ALSA: mixer_oss: invalid OSS volume '0' [ 864.469134][T16315] ALSA: mixer_oss: invalid OSS volume '' [ 866.252910][T16341] ALSA: mixer_oss: invalid OSS volume '0' [ 866.258722][T16341] ALSA: mixer_oss: invalid OSS volume '' [ 866.954845][T16345] ALSA: mixer_oss: invalid OSS volume '0' [ 867.134918][T16345] ALSA: mixer_oss: invalid OSS volume '' [ 867.250237][T16346] ALSA: mixer_oss: invalid OSS volume '0' [ 867.256051][T16346] ALSA: mixer_oss: invalid OSS volume '' [ 868.611054][T16369] delete_channel: no stack [ 868.760504][T16370] delete_channel: no stack [ 869.000111][T16374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2110'. [ 869.070962][T16374] Unable to find swap-space signature [ 870.877587][T16399] vivid-009: ================= START STATUS ================= [ 871.043508][T16399] vivid-009: Enable Output Cropping: true grabbed [ 871.240831][T16399] vivid-009: Enable Output Composing: true grabbed [ 871.357611][T16399] vivid-009: Enable Output Scaler: true grabbed [ 871.363952][T16399] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 872.088199][T16399] vivid-009: Transmit Mode: HDMI grabbed [ 872.219582][T16399] vivid-009: Hotplug Present: 0x00000000 [ 872.323519][T16399] vivid-009: RxSense Present: 0x00000000 [ 872.776359][T16399] vivid-009: EDID Present: 0x00000000 [ 873.520028][T16399] vivid-009: ================== END STATUS ================== [ 873.793853][T16393] Process accounting paused [ 874.253981][T16424] nbd: nbd7 already in use [ 875.199516][T16432] sd 0:0:1:0: PR command failed: 1026 [ 875.256422][T16432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 875.326883][T16432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 875.336219][T16437] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 876.852679][T16439] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2119'. [ 876.892024][T16446] ALSA: mixer_oss: invalid OSS volume '0' [ 876.912641][T16446] ALSA: mixer_oss: invalid OSS volume '' [ 876.982538][T16439] veth0_macvtap: entered promiscuous mode [ 877.582796][T16453] sd 0:0:1:0: PR command failed: 1026 [ 877.593327][T16461] delete_channel: no stack [ 877.702736][T16453] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 877.805577][T16453] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 878.694489][T16453] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2125'. [ 878.840307][T16453] veth0_macvtap: entered promiscuous mode [ 878.849454][T16475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2130'. [ 878.981766][T16475] veth0_macvtap: left promiscuous mode [ 880.657386][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.665760][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 881.424660][T16501] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2135'. [ 881.443215][T16499] FAULT_INJECTION: forcing a failure. [ 881.443215][T16499] name failslab, interval 1, probability 0, space 0, times 0 [ 881.977770][T16504] ALSA: mixer_oss: invalid OSS volume '0' [ 882.082145][T16504] ALSA: mixer_oss: invalid OSS volume '' [ 882.140787][T16499] CPU: 0 UID: 0 PID: 16499 Comm: syz.1.2134 Tainted: G U 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 882.140832][T16499] Tainted: [U]=USER [ 882.140840][T16499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 882.140860][T16499] Call Trace: [ 882.140869][T16499] [ 882.140880][T16499] dump_stack_lvl+0x16c/0x1f0 [ 882.140927][T16499] should_fail_ex+0x512/0x640 [ 882.140951][T16499] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 882.140985][T16499] should_failslab+0xc2/0x120 [ 882.141019][T16499] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 882.141048][T16499] ? lockdep_init_map_type+0x5c/0x280 [ 882.141083][T16499] ? posix_lock_inode+0x342/0x2280 [ 882.141122][T16499] ? __init_waitqueue_head+0xca/0x150 [ 882.141165][T16499] posix_lock_inode+0x342/0x2280 [ 882.141203][T16499] ? __pfx_aa_file_perm+0x10/0x10 [ 882.141244][T16499] ? __pfx_posix_lock_inode+0x10/0x10 [ 882.141291][T16499] vfs_lock_file+0xfb/0x150 [ 882.141330][T16499] fcntl_setlk+0x3ff/0xe20 [ 882.141357][T16499] ? __pfx_fcntl_setlk+0x10/0x10 [ 882.141385][T16499] ? __might_fault+0xe3/0x190 [ 882.141414][T16499] ? __might_fault+0xe3/0x190 [ 882.141439][T16499] ? __might_fault+0x13b/0x190 [ 882.141478][T16499] do_fcntl+0xbce/0x15a0 [ 882.141515][T16499] ? __pfx_do_fcntl+0x10/0x10 [ 882.141560][T16499] ? tomoyo_file_fcntl+0x6c/0xc0 [ 882.141599][T16499] __x64_sys_fcntl+0x163/0x200 [ 882.141637][T16499] do_syscall_64+0xcd/0x490 [ 882.141679][T16499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.141704][T16499] RIP: 0033:0x7fecc3f8eb69 [ 882.141724][T16499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.141748][T16499] RSP: 002b:00007fecc4e33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 882.141772][T16499] RAX: ffffffffffffffda RBX: 00007fecc41b5fa0 RCX: 00007fecc3f8eb69 [ 882.141788][T16499] RDX: 0000000000000002 RSI: 0000000000000026 RDI: 0000000000000003 [ 882.141802][T16499] RBP: 00007fecc4011df1 R08: 0000000000000000 R09: 0000000000000000 [ 882.141816][T16499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.141830][T16499] R13: 0000000000000000 R14: 00007fecc41b5fa0 R15: 00007ffe75e49af8 [ 882.141869][T16499] [ 882.462136][T16512] delete_channel: no stack [ 882.504306][T16514] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to 0. Contact your vendor for updates. [ 882.542188][T16515] delete_channel: no stack [ 883.348435][T16520] ALSA: mixer_oss: invalid OSS volume '0' [ 883.355308][T16520] ALSA: mixer_oss: invalid OSS volume '' [ 883.517466][T16526] delete_channel: no stack [ 883.715024][T16529] ALSA: mixer_oss: invalid OSS volume '0' [ 883.788431][T16529] ALSA: mixer_oss: invalid OSS volume '' [ 884.200358][T16534] sd 0:0:1:0: PR command failed: 1026 [ 884.286951][T16534] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 884.391953][T16534] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 884.712499][T16534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2143'. [ 884.812528][T16534] veth0_macvtap: entered promiscuous mode [ 887.190333][T16559] ALSA: mixer_oss: invalid OSS volume '0' [ 887.217895][T16559] ALSA: mixer_oss: invalid OSS volume '' [ 887.511611][T16569] delete_channel: no stack [ 888.183671][T16567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.574747][T16575] sd 0:0:1:0: PR command failed: 1026 [ 888.836175][T16575] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 888.992548][T16577] ALSA: mixer_oss: invalid OSS volume '0' [ 889.024516][T16575] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 889.048268][T16577] ALSA: mixer_oss: invalid OSS volume '' [ 889.156821][T16581] delete_channel: no stack [ 889.768415][T16575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2151'. [ 889.921923][T16587] sd 0:0:1:0: PR command failed: 1026 [ 889.927406][T16587] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 889.949973][T16590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2155'. [ 890.084278][T16587] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 890.118415][T16590] veth0_macvtap: left promiscuous mode [ 890.719065][T16594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2154'. [ 891.846582][T16616] __vm_enough_memory: pid: 16616, comm: syz.1.2160, bytes: 4398046511104 not enough memory for the allocation [ 891.988670][T16618] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2161'. [ 895.010851][T16644] sd 0:0:1:0: PR command failed: 1026 [ 895.137131][T16644] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 895.144103][T16644] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 895.755048][T16645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2165'. [ 895.826996][T16645] veth0_macvtap: entered promiscuous mode [ 896.075764][T16663] delete_channel: no stack [ 896.179354][T16660] sd 0:0:1:0: PR command failed: 1026 [ 896.250390][T16660] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 896.326669][T16660] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 896.928894][T16660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2168'. [ 898.311845][T16685] [ 898.314225][T16685] ====================================================== [ 898.321268][T16685] WARNING: possible circular locking dependency detected [ 898.328346][T16685] 6.16.0-syzkaller-11322-g352af6a011d5 #0 Tainted: G U I [ 898.336963][T16685] ------------------------------------------------------ [ 898.344076][T16685] syz.4.2173/16685 is trying to acquire lock: [ 898.350148][T16685] ffff8881437671d8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x103/0x400 [ 898.359576][T16685] [ 898.359576][T16685] but task is already holding lock: [ 898.366954][T16685] ffff888143766c98 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 898.378256][T16685] [ 898.378256][T16685] which lock already depends on the new lock. [ 898.378256][T16685] [ 898.388676][T16685] [ 898.388676][T16685] the existing dependency chain (in reverse order) is: [ 898.397965][T16685] [ 898.397965][T16685] -> #3 (&q->q_usage_counter(io)#57){++++}-{0:0}: [ 898.406729][T16685] blk_alloc_queue+0x619/0x760 [ 898.412241][T16685] blk_mq_alloc_queue+0x172/0x280 [ 898.417847][T16685] __blk_mq_alloc_disk+0x29/0x120 [ 898.423420][T16685] nbd_dev_add+0x492/0xbb0 [ 898.428406][T16685] nbd_init+0x181/0x320 [ 898.433110][T16685] do_one_initcall+0x120/0x6e0 [ 898.438429][T16685] kernel_init_freeable+0x5c2/0x900 [ 898.444193][T16685] kernel_init+0x1c/0x2b0 [ 898.449066][T16685] ret_from_fork+0x5d4/0x6f0 [ 898.454290][T16685] ret_from_fork_asm+0x1a/0x30 [ 898.459702][T16685] [ 898.459702][T16685] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 898.467047][T16685] fs_reclaim_acquire+0x102/0x150 [ 898.472727][T16685] prepare_alloc_pages+0x162/0x610 [ 898.478417][T16685] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 898.484983][T16685] __alloc_pages_noprof+0xb/0x1b0 [ 898.490564][T16685] pcpu_populate_chunk+0x110/0xb00 [ 898.496337][T16685] pcpu_alloc_noprof+0x86a/0x1470 [ 898.501955][T16685] bpf_map_alloc_percpu+0x9a/0x4b0 [ 898.507670][T16685] htab_map_alloc+0x10ca/0x1570 [ 898.513099][T16685] map_create+0x58f/0x1f80 [ 898.518100][T16685] __sys_bpf+0x44d2/0x4de0 [ 898.523091][T16685] __x64_sys_bpf+0x78/0xc0 [ 898.528083][T16685] do_syscall_64+0xcd/0x490 [ 898.533167][T16685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.539696][T16685] [ 898.539696][T16685] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 898.547452][T16685] __mutex_lock+0x193/0x10b0 [ 898.552604][T16685] pcpu_alloc_noprof+0xb4c/0x1470 [ 898.558171][T16685] sbitmap_init_node+0x2fd/0x770 [ 898.563774][T16685] sbitmap_queue_init_node+0x41/0x560 [ 898.569838][T16685] blk_mq_init_tags+0x12d/0x2b0 [ 898.575267][T16685] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 898.581522][T16685] blk_mq_init_sched+0x30c/0x610 [ 898.587029][T16685] elevator_switch+0x1e1/0x7f0 [ 898.592438][T16685] elevator_change+0x2ac/0x400 [ 898.597762][T16685] elevator_set_default+0x2c4/0x360 [ 898.603595][T16685] blk_register_queue+0x393/0x4f0 [ 898.609178][T16685] __add_disk+0x74a/0xf00 [ 898.614039][T16685] add_disk_fwnode+0x13f/0x5d0 [ 898.619418][T16685] nbd_dev_add+0x783/0xbb0 [ 898.624476][T16685] nbd_init+0x181/0x320 [ 898.629269][T16685] do_one_initcall+0x120/0x6e0 [ 898.634586][T16685] kernel_init_freeable+0x5c2/0x900 [ 898.640360][T16685] kernel_init+0x1c/0x2b0 [ 898.645245][T16685] ret_from_fork+0x5d4/0x6f0 [ 898.650764][T16685] ret_from_fork_asm+0x1a/0x30 [ 898.656244][T16685] [ 898.656244][T16685] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 898.664354][T16685] __lock_acquire+0x12a6/0x1ce0 [ 898.669760][T16685] lock_acquire+0x179/0x350 [ 898.674798][T16685] __mutex_lock+0x193/0x10b0 [ 898.679945][T16685] elevator_change+0x103/0x400 [ 898.685266][T16685] elv_iosched_store+0x2eb/0x3a0 [ 898.690753][T16685] queue_attr_store+0x26b/0x310 [ 898.696145][T16685] sysfs_kf_write+0xef/0x150 [ 898.701297][T16685] kernfs_fop_write_iter+0x351/0x510 [ 898.707137][T16685] vfs_write+0x6c7/0x1150 [ 898.712017][T16685] ksys_write+0x12a/0x250 [ 898.716885][T16685] do_syscall_64+0xcd/0x490 [ 898.721956][T16685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.728415][T16685] [ 898.728415][T16685] other info that might help us debug this: [ 898.728415][T16685] [ 898.738759][T16685] Chain exists of: [ 898.738759][T16685] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#57 [ 898.738759][T16685] [ 898.752708][T16685] Possible unsafe locking scenario: [ 898.752708][T16685] [ 898.760160][T16685] CPU0 CPU1 [ 898.765616][T16685] ---- ---- [ 898.771064][T16685] lock(&q->q_usage_counter(io)#57); [ 898.776550][T16685] lock(fs_reclaim); [ 898.783159][T16685] lock(&q->q_usage_counter(io)#57); [ 898.791103][T16685] lock(&q->elevator_lock); [ 898.795756][T16685] [ 898.795756][T16685] *** DEADLOCK *** [ 898.795756][T16685] [ 898.804121][T16685] 7 locks held by syz.4.2173/16685: [ 898.809520][T16685] #0: ffff88802e67e478 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 898.818740][T16685] #1: ffff88805d0e6428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 898.827781][T16685] #2: ffff88805bde2888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 898.837581][T16685] #3: ffff8880264b85a8 (kn->active#204){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 898.847856][T16685] #4: ffff88802642b988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: elv_iosched_store+0x337/0x3a0 [ 898.858535][T16685] #5: ffff888143766c98 (&q->q_usage_counter(io)#57){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 898.870431][T16685] #6: ffff888143766cd0 (&q->q_usage_counter(queue)#9){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 898.882328][T16685] [ 898.882328][T16685] stack backtrace: [ 898.888253][T16685] CPU: 0 UID: 0 PID: 16685 Comm: syz.4.2173 Tainted: G U I 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(full) [ 898.888324][T16685] Tainted: [U]=USER, [I]=FIRMWARE_WORKAROUND [ 898.888334][T16685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 898.888350][T16685] Call Trace: [ 898.888361][T16685] [ 898.888370][T16685] dump_stack_lvl+0x116/0x1f0 [ 898.888413][T16685] print_circular_bug+0x275/0x350 [ 898.888446][T16685] check_noncircular+0x14c/0x170 [ 898.888479][T16685] __lock_acquire+0x12a6/0x1ce0 [ 898.888516][T16685] lock_acquire+0x179/0x350 [ 898.888545][T16685] ? elevator_change+0x103/0x400 [ 898.888576][T16685] ? __pfx___might_resched+0x10/0x10 [ 898.888603][T16685] ? elevator_change+0x103/0x400 [ 898.888630][T16685] __mutex_lock+0x193/0x10b0 [ 898.888668][T16685] ? elevator_change+0x103/0x400 [ 898.888696][T16685] ? enable_work+0x245/0x340 [ 898.888716][T16685] ? __pfx_xa_find_after+0x10/0x10 [ 898.888741][T16685] ? __pfx___mutex_lock+0x10/0x10 [ 898.888778][T16685] ? blk_mq_cancel_work_sync+0xd8/0x110 [ 898.888799][T16685] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 898.888839][T16685] ? elevator_change+0x103/0x400 [ 898.888865][T16685] elevator_change+0x103/0x400 [ 898.888893][T16685] elv_iosched_store+0x2eb/0x3a0 [ 898.888923][T16685] ? __pfx_elv_iosched_store+0x10/0x10 [ 898.888956][T16685] ? __mutex_trylock_common+0xe9/0x250 [ 898.888988][T16685] ? __pfx_elv_iosched_store+0x10/0x10 [ 898.889017][T16685] queue_attr_store+0x26b/0x310 [ 898.889042][T16685] ? __pfx_queue_attr_store+0x10/0x10 [ 898.889071][T16685] ? find_held_lock+0x2b/0x80 [ 898.889092][T16685] ? sysfs_file_kobj+0xe4/0x290 [ 898.889118][T16685] ? __pfx_queue_attr_store+0x10/0x10 [ 898.889140][T16685] sysfs_kf_write+0xef/0x150 [ 898.889164][T16685] kernfs_fop_write_iter+0x351/0x510 [ 898.889184][T16685] ? __pfx_sysfs_kf_write+0x10/0x10 [ 898.889208][T16685] vfs_write+0x6c7/0x1150 [ 898.889234][T16685] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 898.889273][T16685] ? __pfx___mutex_lock+0x10/0x10 [ 898.889313][T16685] ? __pfx_vfs_write+0x10/0x10 [ 898.889347][T16685] ksys_write+0x12a/0x250 [ 898.889373][T16685] ? __pfx_ksys_write+0x10/0x10 [ 898.889404][T16685] do_syscall_64+0xcd/0x490 [ 898.889443][T16685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.889468][T16685] RIP: 0033:0x7feb6358eb69 [ 898.889487][T16685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 898.889511][T16685] RSP: 002b:00007feb6444d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 898.889533][T16685] RAX: ffffffffffffffda RBX: 00007feb637b6080 RCX: 00007feb6358eb69 [ 898.889549][T16685] RDX: 00000000001098c7 RSI: 00002000000002c0 RDI: 0000000000000006 [ 898.889564][T16685] RBP: 00007feb63611df1 R08: 0000000000000000 R09: 0000000000000000 [ 898.889578][T16685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.889591][T16685] R13: 0000000000000000 R14: 00007feb637b6080 R15: 00007ffec41d05f8 [ 898.889613][T16685] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 900.787167][ T7063] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.976149][ T7063] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.074856][ T7063] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.129972][ T7063] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 901.586143][ T7063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.615057][ T7063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.653409][ T7063] bond0 (unregistering): Released all slaves [ 901.723885][ T7063] ovs_: left promiscuous mode [ 901.793128][ T7063] .SR: left promiscuous mode [ 901.813622][ T7063] .RRo\&p: left promiscuous mode [ 901.844990][ T7063] ovs_: left promiscuous mode [ 902.086547][ T7063] hsr_slave_0: left promiscuous mode [ 902.101246][ T7063] hsr_slave_1: left promiscuous mode [ 902.125723][ T7063] veth1_macvtap: left promiscuous mode [ 902.131368][ T7063] veth1_vlan: left promiscuous mode [ 902.153915][ T7063] veth0_vlan: left promiscuous mode [ 902.362273][ T7063] team0 (unregistering): Port device team_slave_1 removed [ 902.400451][ T7063] team0 (unregistering): Port device team_slave_0 removed [ 902.725211][ T7063] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.795460][ T7063] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.857832][ T7063] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.907965][ T7063] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.026857][ T7063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.086247][ T7063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.147333][ T7063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.209348][ T7063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.324523][ T7063] bridge_slave_1: left allmulticast mode [ 903.330239][ T7063] bridge_slave_1: left promiscuous mode [ 903.362143][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.376515][ T7063] bridge_slave_0: left allmulticast mode [ 903.391708][ T7063] bridge_slave_0: left promiscuous mode [ 903.397458][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.423102][ T7063] bridge_slave_1: left allmulticast mode [ 903.428850][ T7063] bridge_slave_1: left promiscuous mode [ 903.455575][ T7063] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.472413][ T7063] bridge_slave_0: left allmulticast mode [ 903.478109][ T7063] bridge_slave_0: left promiscuous mode [ 903.501878][ T7063] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.660338][ T7063] erspan0 (unregistering): left allmulticast mode [ 903.716095][ T7063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.751842][ T7063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.772034][ T7063] bond0 (unregistering): Released all slaves [ 903.887254][ T7063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.912756][ T7063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.934273][ T7063] bond0 (unregistering): Released all slaves [ 904.004073][ T7063] .SR: left promiscuous mode [ 904.042289][ T7063] tipc: Left network mode [ 904.320786][ T7063] hsr_slave_0: left promiscuous mode [ 904.332772][ T7063] hsr_slave_1: left promiscuous mode [ 904.351868][ T7063] hsr_slave_0: left promiscuous mode [ 904.375916][ T7063] hsr_slave_1: left promiscuous mode [ 904.391442][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.398887][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.429968][ T7063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.444629][ T7063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.484434][ T7063] veth1_macvtap: left promiscuous mode [ 904.489996][ T7063] veth0_macvtap: left promiscuous mode [ 904.511164][ T7063] veth1_vlan: left promiscuous mode [ 904.516508][ T7063] veth0_vlan: left promiscuous mode [ 904.532471][ T7063] veth1_macvtap: left promiscuous mode [ 904.538033][ T7063] veth0_macvtap: left promiscuous mode [ 904.560613][ T7063] veth1_vlan: left promiscuous mode [ 904.566000][ T7063] veth0_vlan: left promiscuous mode [ 904.886511][ T7063] team0 (unregistering): Port device team_slave_1 removed [ 904.919681][ T7063] team0 (unregistering): Port device team_slave_0 removed [ 905.166043][ T7063] team0 (unregistering): Port device team_slave_1 removed [ 905.197266][ T7063] team0 (unregistering): Port device team_slave_0 removed