last executing test programs: 18m33.532835189s ago: executing program 0 (id=638): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() (async) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x152) (async) rseq$auto(0x0, 0x7ffd, 0xfffffff4, 0xa) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x100000000000000, 0x2, 0x4000000000df, 0x40df, 0x401, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioprio_set$auto(0x2, 0x800000000, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) (async) write$auto(0xffffffffffffffff, 0x0, 0x0) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) bpf$auto(0x0, 0x0, 0xa3) (async) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x2, 0x6, 0xcbd5d) (async) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) ioctl$auto(r0, 0xc0404d1a, r0) socket(0x12, 0x4, 0x440a) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) (async) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)) (async) socket(0x25, 0x5, 0x0) (async) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x200dc0, 0x0) (async) io_setup$auto(0x10000, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0) (async) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@link_create={@prog_fd=r3, @target_fd=r3, 0x7fff, 0x40000, @kprobe_multi={0x6, 0x80000001, 0xb70, 0x733, 0x4}}, 0x92) syncfs$auto(r2) 18m33.140775721s ago: executing program 0 (id=641): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000000c0), 0x18000, 0x0) mmap$auto(0x0, 0x40000a, 0x1000df, 0x9b72, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/max_vfs\x00', 0x48002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty54\x00', 0x20a00, 0x0) socketpair$auto(0x9, 0x2, 0xb, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x80047456, 0x10000000000402) 18m31.469159195s ago: executing program 0 (id=648): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x12000, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x7, 0x3, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000001, 0x5, 0x5, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x6, 0x7, 0x0, 0x14, 0x401, 0xfffffffffffffffb) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r2, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(r2, 0x4, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) r4 = io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(r5, 0xc1205531, r4) sysfs$auto(0x5, 0x100000074e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0xf0ffffffffffff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semget$auto(0x0, 0x13c, 0x1ff) 18m29.614957186s ago: executing program 0 (id=655): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x8, 0x0) (async) futex$auto(0x0, 0x10d, 0x2, 0x0, 0x0, 0x8) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x3a, 0x1, 0x0, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) mmap$auto(0x0, 0x400008, 0x1000df, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) socket(0x2, 0xa, 0xe57a) (async) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) write$auto(0x3, 0x0, 0x7fffffff) (async) write$auto(0x1, 0x0, 0x80000000) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) (async) r2 = socket(0x2b, 0x1, 0x1) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) (async) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, 0x0, 0x20000001) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) munmap$auto(0x8000, 0xffffffff) getrandom$auto(0x0, 0x6000000, 0x3) 18m28.994104505s ago: executing program 0 (id=659): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) unshare$auto(0x9) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x4) r2 = socket(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0xa000, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) bpf$auto(0x0, 0x0, 0x10) rt_sigsuspend$auto(0x0, 0x4) ioctl$auto_FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000240)="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") ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x2000000, 0x28000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x2000c031) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x2, 0x0) r5 = socket(0x2a, 0x2, 0x0) bind$auto(r5, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x6b) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x20301, 0x0) ioctl$auto_UI_END_FF_UPLOAD(r6, 0x406855c9, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4830) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bdi/7:14/read_ahead_kb\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 18m28.05215663s ago: executing program 0 (id=663): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a263b83d8073856, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbhid/parameters/kbpoll\x00', 0x60000, 0x0) (async) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r0) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) close_range$auto(0x2, 0x8000, 0x0) (async) r2 = socket(0xa, 0x2, 0x88) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r6, 0x7005, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) read$auto(0x3, 0x0, 0x80) futex_waitv$auto(&(0x7f00000001c0)={0x9617, 0xfffffffffffff3df, 0x7}, 0x3, 0x5, &(0x7f0000000280)={0x80, 0x2}, 0x58cd) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0x91) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) (async) r8 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) lseek$auto(r8, 0x7ff, 0x1) read$auto(r7, 0x0, 0x20) (async) write$auto(0x3, 0x0, 0x81) 18m12.893681385s ago: executing program 32 (id=663): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a263b83d8073856, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbhid/parameters/kbpoll\x00', 0x60000, 0x0) (async) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r0) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) (async) close_range$auto(0x2, 0x8000, 0x0) (async) r2 = socket(0xa, 0x2, 0x88) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r6, 0x7005, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) read$auto(0x3, 0x0, 0x80) futex_waitv$auto(&(0x7f00000001c0)={0x9617, 0xfffffffffffff3df, 0x7}, 0x3, 0x5, &(0x7f0000000280)={0x80, 0x2}, 0x58cd) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0x91) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) (async) r8 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) lseek$auto(r8, 0x7ff, 0x1) read$auto(r7, 0x0, 0x20) (async) write$auto(0x3, 0x0, 0x81) 12m3.693731353s ago: executing program 1 (id=1786): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_active_count\x00', 0x9000, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x8b35, 0x91) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) iopl$auto(0x3) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(0x4, 0x6, 0x6, 0xfffffffffffffffc, 0x0) iopl$auto(0x7) umask$auto(0x7) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1c, 0x0, 0x0) pread64$auto(r0, 0x0, 0x10001, 0x3) 12m2.432839431s ago: executing program 1 (id=1789): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) write$auto(0x4, 0x0, 0x100082) ioctl$auto(0xffffffffffffffff, 0x5408, 0xffffffffffffffff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub2/info\x00', 0x248041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000140)='./file0\x00', 0x40, 0xa2) read$auto_proc_single_file_operations_base(0xffffffffffffffff, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r0, 0x40, 0x3, 0x2) write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0xd, 0x400006, 0xfffffffffffffffe, 0x9b71, r2, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) fanotify_init$auto(0x200, 0x2010000000000) openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='v'], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0xea}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40040c4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x8001, 0x0) 11m59.327402321s ago: executing program 1 (id=1793): mmap$auto(0x0, 0x200006, 0x2, 0xc077, 0xffffffffffffffff, 0x300000000000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x1, 0x5, 0x9652) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffff5fdffe00, &(0x7f0000000400)=';') openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x840, 0xc) socket(0x1d, 0x2, 0x6) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x4, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) io_uring_setup$auto(0x85, 0x0) socket(0x1d, 0x2, 0x7) socketpair$auto(0x4004, 0x7, 0x4, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0xc0384707, 0x0) getsockopt$auto(r0, 0x84, 0xb, 0x0, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) 11m55.921546998s ago: executing program 1 (id=1799): madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$auto_UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={r0, 0x867c, 0x0, 0x200000008000}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/pid_for_children\x00') write$auto(0x3, 0x0, 0x7fffffff) 11m53.154806668s ago: executing program 1 (id=1806): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001a80)={'wg2\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram8/trace/pid\x00', 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) read$auto(r8, 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dvmrp0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r11) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r11, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x003\x00', @ANYRES16=r12, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000100000010000a800c000180080001000100000008000800", @ANYRES32=r13, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) r17 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r15, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r16, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r18, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b0042006d6163736563000014002d00fc01000000000000000000000000000108000100", @ANYRES32], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) r19 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r20, @ANYBLOB="0100cda4429629bd7100f9db5f250200000000", @ANYRESOCT=r19], 0x24}, 0x1, 0x0, 0x0, 0x2c0080c0}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x214, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_MODULE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_MODULE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_MODULE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffff1af}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_MODULE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff8}]}, @ETHTOOL_A_MODULE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_MODULE_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3f00}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x240c4100}, 0x800) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="050725bd7000fbdbdf25093e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) 11m52.447458891s ago: executing program 1 (id=1808): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/pci/drivers/amd5536udc-pci/remove_id\x00', 0x18b941, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xd6\x84\xef\xf5\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xed\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\x05\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd?\x13\xe2\xad\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH', 0x8) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) (async) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x29, 0x30, 0x0, 0x56b) (async) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) (async) r5 = socket(0x10, 0x2, 0x6) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_COORDINATOR={0x8, 0x1e, 0x0, 0x1, [@nested={0x4, 0x122}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) (async) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x5}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) setresuid$auto(0x2, 0x7, 0x8080) (async, rerun: 64) ioctl$auto(0x3, 0x400454ca, 0x38) (rerun: 64) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), r4) (async) mknod$auto(&(0x7f00000002c0)='./file0\x00', 0x1, 0x6) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r7, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x100) 11m36.530001656s ago: executing program 33 (id=1808): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/bus/pci/drivers/amd5536udc-pci/remove_id\x00', 0x18b941, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xd6\x84\xef\xf5\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xed\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\x05\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd?\x13\xe2\xad\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH', 0x8) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) (async) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x29, 0x30, 0x0, 0x56b) (async) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) (async) r5 = socket(0x10, 0x2, 0x6) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_COORDINATOR={0x8, 0x1e, 0x0, 0x1, [@nested={0x4, 0x122}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) (async) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x5}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) setresuid$auto(0x2, 0x7, 0x8080) (async, rerun: 64) ioctl$auto(0x3, 0x400454ca, 0x38) (rerun: 64) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000001c0), r4) (async) mknod$auto(&(0x7f00000002c0)='./file0\x00', 0x1, 0x6) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r7, 0x200, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x100) 11m27.322900062s ago: executing program 4 (id=1877): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') symlink$auto(&(0x7f0000001500)='./file0/file0\x00', &(0x7f0000001540)='./file0\x00') clone$auto(0xb74b, 0xfffffffe, &(0x7f00000003c0)=0x99, 0x0, 0xc) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) 11m26.919473605s ago: executing program 4 (id=1878): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) (async) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) (async) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) recvmmsg$auto(0x3, 0x0, 0x6, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) shmat$auto(0x59, &(0x7f0000000580)='(\x04', 0xfffffffd) (async) shmat$auto(0x59, &(0x7f0000000580)='(\x04', 0xfffffffd) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) (async) epoll_create$auto(0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) (async) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="200028bd7000fff2df277d03a5270500"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0) 11m25.676888661s ago: executing program 4 (id=1881): mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, 0x0) r1 = set_tid_address$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10, r0, 0x0) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x2, 0x20009, 0x4000000000df, 0x11, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x100) r3 = getsockopt$auto(r2, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) getsockopt$auto_SO_ERROR(r2, 0x6, 0x4, 0x0, 0x0) r4 = getsockopt$auto(r2, 0x9, 0x1, 0x0, &(0x7f0000000040)=0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000140)="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") ioctl$auto_SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)) write$auto(0x3, 0x0, 0xfffffdef) write$auto_snd_pcm_oss_f_reg_pcm_oss(r5, &(0x7f0000000080)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SYNC(r5, 0x5001, 0xfffffffffffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000002c0), r4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r6) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r6, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x3, &(0x7f00000003c0)=@task_fd_query={0x5, 0xffffffffffffffff, 0x802, 0x3, 0x0, 0x5, 0xffffffffffffffff, 0x800000000000001}, 0x6d4) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/112, 0x70) syz_open_procfs$namespace(r1, &(0x7f0000000080)) readv$auto(0x3, 0x0, 0x1) socket(0x28, 0x1, 0x0) socket(0x11, 0x3, 0x9) 11m24.49576673s ago: executing program 4 (id=1884): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket(0x23, 0x2, 0xd1ae) mmap$auto(0x900000000000, 0x400008, 0xdf, 0x9b7a, r1, 0x7ffe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x121103, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mknod$auto(&(0x7f0000000080)='./file0\x00', 0x101, 0x80000001) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0x129102, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@l2={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0x9) write$auto(r1, &(0x7f0000000100)='q\x8c', 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x4) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40100, 0x0) pread64$auto(r3, 0x0, 0x10001, 0x830) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfffffdef) 11m22.755652963s ago: executing program 4 (id=1886): statmount$auto(0x0, &(0x7f0000000480)={0x1008, 0x1, 0x401bf, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000], "2f35b0d3d1b47d3c81c283a4e5e3f9059fddc3c5d0e569f2de97"}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1100"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) getdents64$auto(r1, 0x0, 0x18) getdents64$auto(r1, 0x0, 0x18) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0x2b, 0x1, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/manager\x00', 0x40802, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) pread64$auto(0xffffffffffffffff, 0x0, 0x81bb, 0xdfe) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto(0x3, 0x0, 0x100082) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) write$auto(r2, &(0x7f0000000040)='nbd\x00', 0x4) setsockopt$auto(0x3, 0x0, 0x23, 0x0, 0x28) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) mmap$auto(0x1000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x20, 0x3, 0x4, 0x0, 0x2, 0x8000004, 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r3, 0x0, 0x0) 11m22.053237625s ago: executing program 4 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0xa80, 0x0) preadv$auto(r1, &(0x7f0000000340)={0x0, 0x600000000000}, 0x1, 0x8d5, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00'}) (async) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x40000) mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x111644, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) socket(0x6, 0x80805, 0x80000) (async) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) close_range$auto(r2, r2, 0x4) mmap$auto(0x0, 0x3ff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) keyctl$auto_KEYCTL_CLEAR(0x7, 0x7, 0x9, 0x2, 0x4662) (async) socket(0x2, 0x3, 0xa) r4 = getsockopt$auto(0x3, 0x1ffe, 0x20, &(0x7f0000000000)='\x00', 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0) (async) mmap$auto(0xfffffffffffffffc, 0x4020009, 0x7, 0x10000000eb1, 0xffffffffffffffff, 0x48000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) ioctl$auto_BTRFS_IOC_DEFRAG(r4, 0x50009402, &(0x7f00000003c0)={@inferred=r5, "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"}) (async) read$auto(r6, 0x0, 0x20) (async) write$auto(0x3, 0x0, 0x81) (async) socket(0x2, 0x80002, 0x73) socket(0x15, 0x1, 0x84) 11m6.652488075s ago: executing program 34 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0xa80, 0x0) preadv$auto(r1, &(0x7f0000000340)={0x0, 0x600000000000}, 0x1, 0x8d5, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00'}) (async) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x40000) mmap$auto(0x0, 0x99, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x111644, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) socket(0x6, 0x80805, 0x80000) (async) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) close_range$auto(r2, r2, 0x4) mmap$auto(0x0, 0x3ff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) keyctl$auto_KEYCTL_CLEAR(0x7, 0x7, 0x9, 0x2, 0x4662) (async) socket(0x2, 0x3, 0xa) r4 = getsockopt$auto(0x3, 0x1ffe, 0x20, &(0x7f0000000000)='\x00', 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x501, 0x0) (async) mmap$auto(0xfffffffffffffffc, 0x4020009, 0x7, 0x10000000eb1, 0xffffffffffffffff, 0x48000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) (async) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) ioctl$auto_BTRFS_IOC_DEFRAG(r4, 0x50009402, &(0x7f00000003c0)={@inferred=r5, "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"}) (async) read$auto(r6, 0x0, 0x20) (async) write$auto(0x3, 0x0, 0x81) (async) socket(0x2, 0x80002, 0x73) socket(0x15, 0x1, 0x84) 7m4.699147844s ago: executing program 3 (id=2509): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x2, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r1, 0x0, 0x100000001, 0x100) io_uring_register$auto(r0, 0x3, &(0x7f00000000c0), 0x10) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = getpid() sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a00000008", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r4) 7m4.266399367s ago: executing program 3 (id=2511): socketpair$auto(0x4, 0xffffffe2, 0x8, &(0x7f0000000040)=0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x80, 0x1000000015f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x20000000007, 0xa623, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) getpid() mlockall$auto(0x5) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/010/001\x00', 0xa901, 0x0) ioctl$auto(r1, 0x80045503, 0xffffffffffffffff) fchownat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) 7m2.890281384s ago: executing program 3 (id=2512): unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x6) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x521440, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/dummy0/stable_secret\x00', 0x100, 0x0) (async) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4bd029f0845c6b5196ced8ef9b1a53b4011ed14a904f19072629f7cc6ed922acba72edc667e917861d1e7dc8a72ee61bc9cca5caba2a46a9b0656a4da3fcde38b") (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) (async) mq_open$auto(&(0x7f0000000200)='\\*)A\x00', 0x83, 0x9, 0x0) (async) setresgid$auto(0x9, 0xffffffffffffffff, 0xffffffffffffffff) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async, rerun: 32) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="6f011b9f", @ANYRES16=r3, @ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x40050c4}, 0x820) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xb, 0xb5, 0x10, 0x4, 0x53000000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x4f4, 0x6}, 0x10) (async) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) (async) get_robust_list$auto(0x1, 0x0, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r5, 0x802c550a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000005"]) read$auto_mISDN_fops_timerdev(r4, &(0x7f0000001a00)=""/4097, 0x1001) (async) ioctl$auto_IMADDTIMER(r4, 0x80044940, 0x0) (async) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x90) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) 6m59.906369261s ago: executing program 3 (id=2520): openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x700, 0x0) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x80404, 0xffffffffffffffff, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xffdffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x7, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) r2 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb7, 0xfffffffffffffffb, 0x1000) r4 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x12000, 0x0) setreuid$auto(0x0, 0x0) sendmsg$auto_NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000001780)=ANY=[@ANYRESDEC=r4, @ANYRES16=0x0, @ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0000010da2a5d589efb374bf915f343e2d9734c5cfa05a39dcfb3602f8b5ae91a2dccdfc088dfccb648f309b3cd0bbaf8bf24e0a09edc801607af147ab7f9a0cda3a6ab6c68d0e56d6d1401348895f1b74b130f20c602543cd286aa8f2175d1d24566372f8f6f4440a3d53ccc658989f206b030ab59d407be72cdac04097d0c12f6eb72d1910f61b0c8e34235d0e92b5f75a13c81d85e0197c4fa20000000500d6000000"], 0x1334}, 0x1, 0x0, 0x0, 0x4048001}, 0x20040801) socket(0x3, 0x5, 0x5) r5 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES16=0x0, @ANYRES8=r5], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40890) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3f249a66", @ANYRESHEX=r6, @ANYBLOB="010029bd700001dcdf2503000000040006000c000180080010000400"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r5, 0x4d13, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r8 = eventfd$auto(0x80) readv$auto(r8, &(0x7f0000000380)={0x0, 0x8}, 0x4) write$auto(r8, &(0x7f0000000400)='\'\x00', 0x8) r9 = socket(0xa, 0x5, 0x84) sendto$auto(r9, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe00"}, 0x1c) 6m58.350235067s ago: executing program 3 (id=2523): tkill$auto(0x1, 0x7) (async) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) sendto$auto(0xffffffffffffffff, &(0x7f0000000200)="b15d67b2ace3710a599b1c7c64266d17d98b2140156699a24759d383d280da2813ae2494b24cec379fc72b3774dbe6b43fd792a9b9731e7afeb14fa4d71e536bf04d85d81d4339bffd35484ecfa30a0a44482c5149ad74b0b78262141bb3e2cce10e222c415ee5a98f2a678a62865fe00b7e4416cead2b37e6043da20fee7f6a4ed6e13aef54ceea44cbb68a48c6b38aa61ebce26e1663550da67928864251139ffa774da844c5aee33f01194f073223d70c2b991313d3a4bee920e678120af023633980376dfaf942352c78426c88a54b615c9288", 0x6, 0x37, 0x0, 0x4) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) pread64$auto(r1, 0x0, 0x663, 0x6) (async) sysfs$auto(0x6, 0xc7, 0x8) (async) bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_prog_fd, 0x7, @old_prog_fd=0x13b}, 0xa3) (async) bpf$auto(0x2, 0x0, 0xc) bpf$auto(0x1, 0x0, 0xc) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) (async) ioctl$auto(0x3, 0x80885659, 0x38) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) ioperm$auto(0x3, 0xf, 0x14d) (async) r2 = socket(0x10, 0x2, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000088}, 0x20000000) socket(0x18, 0x3, 0x2) (async) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0x7fff, @any, 0x7fff, 0x2}, 0x6a) (async) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) (async) read$auto(r0, &(0x7f0000000000)='\x04\x00', 0x2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x0, 0x180) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x42, 0x0) 6m57.59730821s ago: executing program 3 (id=2525): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/gro_flush_timeout\x00', 0x88282, 0x0) epoll_create$auto(0x4) pipe$auto(&(0x7f0000000000)=r0) epoll_ctl$auto(0x5, 0x1, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r2, &(0x7f0000000040)='/proc/scsi/sg/d\x83q\xf7F\x88W\x01\x04u{P[h\x9c\xfe\x86\xa4`\'\x88N\xdc\v\r', 0x100000001, 0x100) 6m56.096812199s ago: executing program 35 (id=2525): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/gro_flush_timeout\x00', 0x88282, 0x0) epoll_create$auto(0x4) pipe$auto(&(0x7f0000000000)=r0) epoll_ctl$auto(0x5, 0x1, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r2, &(0x7f0000000040)='/proc/scsi/sg/d\x83q\xf7F\x88W\x01\x04u{P[h\x9c\xfe\x86\xa4`\'\x88N\xdc\v\r', 0x100000001, 0x100) 3m56.620372283s ago: executing program 6 (id=2918): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$auto(0x400000, 0x7fffffff, 0x4000000000df, 0xeb1, r0, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5f0027617c680b39b053272335"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r1) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x1c, r2, 0x301, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [@generic="304bff0d"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x2000, 0xb}, 0x7}, 0x3, 0x0) 3m55.959606304s ago: executing program 6 (id=2920): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r1, 0x0, 0x8010) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) socket(0x2, 0x1, 0x106) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x12f040, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) bind$auto(r3, &(0x7f0000000100)=@can={0x1d, r4}, 0x80000001) socket(0x28, 0x1, 0x0) lgetxattr$auto(0x0, 0x0, 0x0, 0x100) ioperm$auto(0x6, 0x8001, 0x7) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1, 0x7, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x2, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 3m54.454608026s ago: executing program 6 (id=2927): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x100000000004, 0x7ff) ptrace$auto(0x40000008, r0, 0x1, 0x4f) move_pages$auto(r0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8000000000000000) getsockopt$auto_SO_SNDTIMEO_OLD(0xffffffffffffffff, 0x3ff, 0x15, 0x0, 0x0) socket(0xf, 0x6, 0x2) r1 = socket(0x2b, 0x80000, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/trace_pipe\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES8], 0x14}, 0x1, 0x0, 0x0, 0x8c00}, 0x24080001) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x4000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x1, 0x4000000000de, 0x12, 0x401, 0xfffffffeffffffff) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000480)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6\xb5\xe2\x9b\xb0\xe4=\xf67\xe8\x14\xb2,\x9evv\x1d\xd3\xe6\x1c\x858\x97j\xa1n\x1c\x96sK*#>\xab\xfd\xaa!\x9b\x99`\xe1\xb0?\xed\xec\t\x04:7\n9\xa4\xff\x02!\xc4.\xa1', 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x161980, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x200, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x10000000002}, 0x10) bpf$auto(0x2, 0x0, 0xb) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto_event_trigger_fops_trace(r4, &(0x7f0000000340), 0x0) r5 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) writev$auto(r5, &(0x7f0000000300)={0x0, 0x8}, 0x4) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 3m52.563761075s ago: executing program 6 (id=2930): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x40, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) fremovexattr$auto(r1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r2, 0x1) 3m51.144286409s ago: executing program 6 (id=2934): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x7, 0x3, 0x8fd6, 0x948b, 0x1, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000001, 0x5, 0x5, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x200, 0x5, 0x200, 0x1f, 0x2, 0x8000) write$auto_ucma_fops_ucma(r1, 0x0, 0xfffffffffffffff2) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) 3m48.53756149s ago: executing program 6 (id=2941): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) r1 = prctl$auto_PR_SCHED_CORE_GET(0x7fffffff, 0x0, 0xffffffffffffffff, 0x5a, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) bpf$auto(0x40, &(0x7f00000000c0)=@bpf_attr_0={0x0, 0x5, 0x4, 0x4, 0x800, 0xffffffffffffffff, 0x13, "f0f59673e700", 0x0, r2, 0xfffff588, 0x8, 0x2, 0x100000000000200}, 0x7f) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r2, 0x1, &(0x7f00000000c0)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) socket(0x1f, 0x800, 0xffffff01) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(r0, 0x11, 0x2688, 0x5, 0x0, 0x7) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x14, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) 3m33.014528086s ago: executing program 36 (id=2941): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) r1 = prctl$auto_PR_SCHED_CORE_GET(0x7fffffff, 0x0, 0xffffffffffffffff, 0x5a, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg0\x00', 0x141000, 0x0) bpf$auto(0x40, &(0x7f00000000c0)=@bpf_attr_0={0x0, 0x5, 0x4, 0x4, 0x800, 0xffffffffffffffff, 0x13, "f0f59673e700", 0x0, r2, 0xfffff588, 0x8, 0x2, 0x100000000000200}, 0x7f) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r2, 0x1, &(0x7f00000000c0)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) socket(0x1f, 0x800, 0xffffff01) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) move_pages$auto(0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x0, 0x1, 0x3, 0x0, 0x2) io_uring_enter$auto(r0, 0x11, 0x2688, 0x5, 0x0, 0x7) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x14, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) 2m11.116871677s ago: executing program 5 (id=3137): msync$auto(0x1ffff000, 0x80100000000005, 0x3) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x14be02, 0x0) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) (async) mmap$auto(0x3f, 0x810004, 0x100000000000ffb, 0x8000000008011, r0, 0x8000) 2m10.817263505s ago: executing program 5 (id=3139): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x400, 0x9, 0xfdffffffffffffff, 0x9b72, 0xffffffffffffffff, 0x8000000000008000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0xa, 0x2, 0xd3) syz_clone(0x85082711, 0x0, 0xffffffffffffffb5, 0x0, 0x0, 0x0) madvise$auto(0x80000000, 0xfbffffffffff0005, 0x17) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r1, 0x0) socket(0x28, 0x800, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x1, 0x84) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r2) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_open_procfs$namespace(0x0, 0x0) unshare$auto(0x40000080) sendmsg$auto_TIPC_NL_MEDIA_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010729bd7000fddbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioprio_set$auto(0x3, 0x0, 0x4b34) syz_clone3(&(0x7f0000000300)={0x12a004000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) (fail_nth: 2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) 2m7.666088856s ago: executing program 5 (id=3143): mremap$auto(0x8000000003, 0xda1, 0x3fd6, 0xb, 0xfffffffffffffffd) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) pipe2$auto(0x0, 0x80) r0 = ioctl$auto_TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000100)=0x2f) close_range$auto(r0, 0xfffffffffffff000, 0x2002) timerfd_create$auto(0x9, 0x0) socket(0xa, 0x1, 0x0) setsockopt$auto(0x1, 0x1, 0x12, &(0x7f0000000040)='\x00\x89e\xad\x97\xc5\xe8\x91g\xc1\xceE\xea=\x0f\xf4\xba4\x05>y/21\xfd\'\xc7\x1c\xaeV`\xc7^\x05\"H\xb8\x12\x99\x1fF\xdc\xc4\x02FV\x04D&9?\xa8d\xc97B\x9f)\xc6\xbb\x15_\xfd\xa5\xaf\xf8\xb8\x8a\x186\xa9\x0eY;\x9a\xe32T\xddn\xa6zK\xef\xf7\x04\x81\xb4\xb7;\x12\x1ch$\xbd\xd1x\x15\xa8\x9c\xba\x83\xa7\xbdwf8\xc03z|\xcd\xbc\xa1+8\xcet\x960\a\x80\x88!\x9e\x96\xcd\xb5oB\xc1L\xb2\xb1\xe6\xf9\x92\xd4\xcd\v0|G\xb7\xc3+\xb5\xa9\xb4\x05>ry\xa1\xf1)#\xc0\x8d(', 0xbb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, 0x21ea, 0x7ff, 0x3, 0x0, 0x80000001, r1}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) open(0x0, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000000)=""/96, 0x60) bpf$auto(0x7fff, &(0x7f0000000140)=@batch={0x1, 0x100000001, 0x9, 0x3, 0x8, r0, 0x4, 0x7fffffffffffffff}, 0xffffff01) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) 2m6.124840314s ago: executing program 5 (id=3147): mmap$auto(0x0, 0x4020009, 0x7, 0xeb1, 0x401, 0x8000) (async) capget$auto(0x0, 0x0) (async) mmap$auto(0x7ff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xa) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) connect$auto(0x4, 0x0, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) keyctl$auto(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0xfffffffd, 0x25ba, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0xb, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5, 0x8, 0x15f4da0a, 0x3, 0x20d08, 0xc, 0x8, 0x2000000005, 0x8000000000006d3e, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0xfffffffffffffffd, 0x2020009, 0xede, 0xeb1, 0xfffffffffffffffa, 0x3) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f0000000040)={0x8, 0x6, 0xf, 0x3, 0xf6, 0xffffffffffffffff}) (async) madvise$auto(0x0, 0xfff7ffffffff0005, 0x19) (async) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) ioprio_set$auto(0x3, 0x0, 0x4b34) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0xe0) (async) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r1, 0x80104592, 0x0) 2m5.62688408s ago: executing program 5 (id=3149): ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x3, 0xffffffffffffffff, 0x9, "5fb16b601770dd0d5003e1f568032a90"}) mmap$auto(0x6, 0x6, 0x5, 0x15, r0, 0x8000) r1 = socket(0x2, 0x3, 0x6) semctl$auto(0x3, 0x2, 0x13, 0x9) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f00000031c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x100, 0x0) r2 = bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x3, &(0x7f00000001c0)=@query={@target_fd=r2, 0x1, 0x86e6, 0x101, 0x63, @count=0x4, 0x0, 0x6, 0x2, 0x10004, 0xb716}, 0xc) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r3, 0x9210641f, 0xd) r4 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pread64$auto(r4, 0x0, 0x8e1c, 0xe00) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/printk_devkmsg\x00', 0x202, 0x0) read$auto(r5, &(0x7f0000000040)='/proc/sys/kernel/printk_devkmsg\x00', 0x9) sendfile$auto(r5, r5, 0x0, 0x7fffe000) mq_notify$auto(r3, &(0x7f0000000140)={@sival_int=0xa19, @inferred=r1, 0xc5027c7, @_sigev_thread={&(0x7f0000000040)=&(0x7f0000000000)=0xff, &(0x7f0000000080)="43394cfe8ec6d59b59622a072b4703282f0f47c696f2a663cae17bb589f94ac02a5e58f016b4b0c66b238e62f1e6d0f630a1d0a7b014a18a32b65b1827d112feca9ccb95d1c6127532347deb0b11797f5f95ebf8e26dd3403d733d5014ae7ef516fc1d76f72b03579eb22d3b4e4477e551574c4c34a2843c88c2e08b129d8e0ad1"}}) open(0x0, 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) 2m5.54334935s ago: executing program 5 (id=3150): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r0, 0xf72, 0x0) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f00000001c0)={@sival_ptr=&(0x7f0000000140)="7f11395fc8814bcb88a2d018ec028991578c4a60170e67f8be311f1b2ec40cbc3866966a1564db373cbb8e401af4afac3223ee9e22dc9e0213ee177b2831f5238e14407af97fee6d2246d8d0d3fb8af0b6ff8d754839fb7cadbe5e906ca2596a31988076e70c18842236", @raw=0x3, 0x401, @_tid=r0}, &(0x7f0000000300)) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c00160067"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x4c810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, &(0x7f0000000040), 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x800000) 1m50.393241597s ago: executing program 37 (id=3150): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r0, 0xf72, 0x0) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f00000001c0)={@sival_ptr=&(0x7f0000000140)="7f11395fc8814bcb88a2d018ec028991578c4a60170e67f8be311f1b2ec40cbc3866966a1564db373cbb8e401af4afac3223ee9e22dc9e0213ee177b2831f5238e14407af97fee6d2246d8d0d3fb8af0b6ff8d754839fb7cadbe5e906ca2596a31988076e70c18842236", @raw=0x3, 0x401, @_tid=r0}, &(0x7f0000000300)) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000306b87000fedbdf250300000004000800040003800c00160067"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x4c810) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r1, 0x12, &(0x7f0000000040), 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x800000) 13.047619867s ago: executing program 7 (id=3347): sendmsg$auto_TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x4c848) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, 0x0, 0x2, 0x0) pipe$auto(0x0) futimesat$auto(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x8941, 0x4) 12.664917559s ago: executing program 8 (id=3348): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/spi/drivers_autoprobe\x00', 0xca481, 0x0) write$auto(r0, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) setsockopt$auto(0x3, 0x81, 0x1, 0x0, 0x83) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) r1 = open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x4) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, &(0x7f0000000040)=0xce) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) setsockopt$auto_SO_RXQ_OVFL(r2, 0x1, 0x28, 0x0, 0x7) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) poll$auto(&(0x7f0000000040)={r3, 0x1000, 0x1c9}, 0x2, 0x7) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x12d280, 0x0) clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r4 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r4, 0x29, 0xd1, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x454, 0x9) syz_clone3(&(0x7f0000000300)={0x12a004080, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) 11.69553781s ago: executing program 9 (id=3349): fchownat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) ioctl$auto(0x3, 0x80004508, 0x10000000000402) write$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) write$auto(0x3, 0x0, 0x100082) r1 = socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ad00, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r2 = open(&(0x7f0000000480)='./file0\x00', 0x74102, 0x1ad) r3 = epoll_create$auto(0x6) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000840)={0x9, 0x5, 0x3cbe, 0x5af4, {0x6, 0x7fffffffffffffff, 0x7, 0x100000001, 0xfffffffffffffffa, 0x1, 0x8, 0x0, 0x1000, 0x1, 0x7, 0x1, 0x2, 0x7, 0x1}}) r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000cc0), r3) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r2, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44d0c5c992000000", @ANYRES16=r4, @ANYBLOB="020026bd7000fcdbdf250200000008001500100000000c00188008003400e00000010400148008000500e50c000008000f00020000000800090008000000"], 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x801) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x404}, @THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x9}, @THERMAL_GENL_ATTR_TZ_TRIP_ID={0x8, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4040080) r5 = socket(0x2a, 0x2, 0x1) sendto$auto(r5, 0x0, 0xffff, 0x10000, &(0x7f0000000480)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x6) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xffd8) adjtimex$auto(&(0x7f00000004c0)={0x3, 0x0, 0x8101, 0x0, 0xd0, 0x5, 0x6, 0x0, 0x1, 0x3691, 0x0, {0x100000000, 0x10000}, 0x7ffffffffffffff9, 0x40000000000006, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x4bbd, 0xffffffffffff628e, 0x800000a747, 0xdeae, 0x804}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 10.982539314s ago: executing program 8 (id=3350): socket(0xa, 0x801, 0x84) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 32) r0 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/buffer_subbuf_size_kb\x00', 0x400000, 0x0) mmap$auto(0xff, 0x7, 0xdf, 0x12, r0, 0x8000) write$auto(0xca, &(0x7f00000000c0)='\x04>\x00\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\xf9y\xc7p\xf1w\xbe\xde\xe8\xc3\x01#\xcc\tF\xb6\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1\xd5\x1e\x8f\t\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x85\x00\x00\x00\xe2E\x00\x00-a\xb6n\xbc\xb4=\xf8\xce\x01\x1f]\x85|\xce\xd7\xff\xff\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\x00\x80\x00\x00\xe9e\xe5\x80\x1c\x02\"\xa7&8U\xfd\xdc\x15\xae\xfa5\xb8}\x0e\xb4:\x91\xbb5\xd3{\xb2\xd0\xc0\x93=\xf8E\xceO\x1e\xd5\x8f\xdf\xaa\x1c\xfd\xb0h\xd8\xbc\xecA\xa6\xde\xd1=\xfd)d\x8f\vk\x1c+\xf7, \xf8]\xb3\xe9B\x02\f\'\xcf0\x06', 0x1ff) (async) setrlimit$auto(0x2, 0x0) (async) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/o2hb/live_regions\x00', 0x420103, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0xc) 10.3903043s ago: executing program 8 (id=3351): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x400, 0x9, 0xfdffffffffffffff, 0x9b72, 0xffffffffffffffff, 0x8000000000008000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0xa, 0x2, 0xd3) syz_clone(0x85082711, 0x0, 0xffffffffffffffb5, 0x0, 0x0, 0x0) madvise$auto(0x80000000, 0xfbffffffffff0005, 0x17) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r1, 0x0) socket(0x28, 0x800, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x1, 0x84) socket(0x23, 0x80805, 0xfffffffc) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r2) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_open_procfs$namespace(0x0, 0x0) unshare$auto(0x40000080) sendmsg$auto_TIPC_NL_MEDIA_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioprio_set$auto(0x3, 0x0, 0x4b34) syz_clone3(&(0x7f0000000300)={0x12a004000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) 9.981711575s ago: executing program 7 (id=3353): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) madvise$auto(0x1, 0x33, 0xa) mmap$auto(0x2, 0x7, 0x200, 0x9b7e, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x2020009, 0x875, 0xeb1, r0, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/15/per_cpu_count\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) uname$auto(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r6, @ANYRESOCT, @ANYRES32=r5, @ANYBLOB="08000700020000000800090001000000", @ANYBLOB="9b", @ANYRESHEX=r1, @ANYRES64=r1], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/snd_aloop.0/sound/card1/id\x00', 0x48a22, 0x0) write$auto(r7, 0x0, 0x3) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000001240), 0x80, 0x0) poll$auto(&(0x7f00000000c0)={r4, 0x1}, 0x8000, 0x2) r8 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r8, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) r9 = waitid$auto_P_PIDFD(0x3, r0, &(0x7f00000002c0)={@siginfo_0_0={0x4, 0xe, 0x1ff, @_sigsys={&(0x7f0000000180)="0cba8e269358f7e1dd6a4ce3d1b6e2202ce00c8d34b2b5657cf123720570712bfa4206e8a70effe8c7b369cf83e264e9b9b7203a9346b6112b7b80962213a9b187393be8ec35152641213eb2b5fc8e3da987636e391c5f44a7b9ce37b4bf18c07b77da01b4eb", 0x5, 0x9}}}, 0x2, &(0x7f0000000340)={{0x7, 0x401}, {0x0, 0x3}, 0x9, 0xe, 0x2, 0x7, 0x6, 0x1, 0x4, 0xd81, 0x6, 0x9, 0x7fffffff, 0x2, 0x1, 0x9}) syz_clone3(&(0x7f0000000080)={0x1ab062800, 0x0, 0x0, 0x0, {0x80035}, 0x0, 0x0, 0x0, &(0x7f0000000040)=[r9], 0x1}, 0x58) 9.276781258s ago: executing program 9 (id=3355): sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ubifs/chk_index\x00', 0x40400, 0x0) read$auto_dfs_global_fops_debug(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/available_events\x00', 0x400100, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x6a) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x800) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r4 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x103001, 0x0) ioctl$auto_I2C_RDWR(r4, 0x707, 0x0) 8.653707504s ago: executing program 7 (id=3357): mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x100) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)="3d820710b3d5780dd40084a0df1cb08150a6060c313d55f2ab4d90b74fb8c63b5a03e0150027fb207ff278235e9930865c3daca7c0eba98d0da44d590cfb39b85cbc8f566ca3722e42bdccecd5f40c9172eb542a57348cc3b9f5b43c39d3ec1047ef08ddf4c9886fd19a70a68f2f2654783f5586c15a883ce6811a90a22ce427eb5e6ce1f19a3ba5a57e", 0x7}, 0x2, &(0x7f0000000400)="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", 0x7, 0xa505}, 0x800}, 0x7, 0xc) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x9, 0x7, 0x10, 0x1, 0x9488, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x4]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto(r1, 0xffff, r0) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r2, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_getsetattr$auto(0x3, &(0x7f00000000c0)={0x0, 0xe, 0x5, 0xce}, 0x0) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/block/nbd4/queue/discard_granularity\x00', 0x80, 0x0) 7.442670693s ago: executing program 8 (id=3359): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(0x0, 0x7ffd, 0xfffffff4, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x1e1401, 0xe5) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) tkill$auto(0x0, 0x7) write$auto(0x3, 0x0, 0x100082) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x4, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x100000000006) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r1 = socket(0x5, 0x2, 0x73) getsockname$auto(r1, 0x0, &(0x7f0000000280)=0xaea) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) rseq$auto(0x0, 0x100004, 0x0, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xffffffffffffffff, 0x4, 0xc, 0x4b1, r0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/rose5/netdev_group\x00', 0x406600, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) 6.672874063s ago: executing program 9 (id=3362): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) cachestat$auto(0xffffffffffffffff, 0x0, 0x0, 0x7) unshare$auto(0x40000080) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), r0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) statx$auto(0x2, 0x0, 0x1000, 0xbdfa, 0x0) ioctl$auto(0x3, 0x40a0ae49, r4) r5 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @dev={0xac, 0x14, 0x14, 0x20}}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) r6 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r6, 0x29, 0x40, &(0x7f0000000400)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\xff\x1b\x01\x1e\xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i_\vBj\x0eQ\xce\x16\'C\x8c\x01\x80\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x00\x00\x00\x00\xe4\xa5\xfe\xb5h\xae\xec%\xf9\x94>\xd6,\xf3\x98\'\xb0\t~~\xb4\x98\xbb3=A\x9c\x17\xaa\xce\fh-M\xdb-\x15VX\xfe\xca+\xb5\x95\xb3JL\x0fl\xe84\xbd\xa3nO\x9f\xfa\xb1\x06$\b$i3\x83\xd7\x06\xd6\x1e\xdbB\x9bb\x1cXC\x8c\x8b\xd9\xff\xf2Bf\x99!Z\x13\xff\xca\xf3e\x015\x9b\x86\xd6$\x1a\r3\x91\xb7\x942\xeb\xadVA\xfc\x1f\xbf1\xb7T\xc1\xbf\xc0\xc2\xfc\xe8w\xd33\xb2,&\xd5z\xe6\x93\xb9\aE\x825\x94U\xbbNeb\xd2\xa9\x0f\xed\x8b\xea\xfa\x8a\x04.\xffMIw\x0f\xd6\xae^\xd2\xf1j\xcb\r\xa4\x1d0d\xca\x81\x9c\x80GL\x0e\xe6\x19\x8au\x1a7\xc5|\xf6\x1e\xe00\xc6\"\x83\x1c\xa2\x9e\a\x1c\xea\xa3\x9c\xe1BF\x05b\xf6\xdcf\x04\xd9B\xb9\x98\x9cq\xbd\xfb\xb5~\xf2\x8d\x9f`\xec\xd0\xafY\xcf\x84', 0x8001) r7 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/oneway_spam_detection\x00', 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4000844}, 0x84) tee$auto(r4, r7, 0x7, 0xb9) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 6.534077128s ago: executing program 7 (id=3363): openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) (async) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x66a0, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) mmap$auto(0x0, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x7fff) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) r2 = gettid() kill$auto(r2, 0x11) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) (async) madvise$auto(0x0, 0x200007, 0x19) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x408, 0x3, 0x20000000eb1, 0x401, 0x4000008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x105c0, 0x0) (async) getdents64$auto(0xffffffffffffffff, 0x0, 0x7ff) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000080), r3) 5.725438851s ago: executing program 2 (id=3365): mmap$auto(0x4, 0x7ff, 0x8, 0xeb1, 0x401, 0x200) (async) sysfs$auto(0x2, 0xd, 0x0) r0 = fsopen$auto(0x0, 0x1) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$auto(0x0, 0x1, 0x1000, 0x18, 0x2, 0x8002) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80800, 0x0) (async) r1 = fspick$auto(0xffffffffffffffff, 0x0, 0x3) (async) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/swradio6\x00', 0x40040, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/194, 0xc2) (async) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0xb, 0x6, 0x6c0, 0x3, 0x3, 0x1ffe000, 0x5, 0x2, 0x9, 0x4, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) (async) ioctl$auto_TCFLSH2(r1, 0x540b, &(0x7f0000000140)="181ecff6d65ff321d095a776216661fdba3cee5a776c2dfc4a45e730a9df0a45e9f3eae21340ffbd639751250ebb9c6b6c1ec022596c8542ba41316d9b143dea2cf13c3b3fcd2e2c947ad5394f56c581488fd092a87664f7842bcc00c51950b69ca2d9ead673cd822bc905e80ee4a85182ed8bc817a674bc4e44e9321c924b") socket(0x2b, 0x1, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8e00, 0x0) ioctl$auto(r3, 0x400454ca, 0x38) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) (async) msgctl$auto_IPC_STAT(0x8, 0x2, &(0x7f00000002c0)={{0x9, 0xffffffffffffffff, 0xee00, 0x8208, 0x3, 0xf, 0x4}, 0x0, &(0x7f0000000280)=0x8, 0x0, 0xaa2c, 0x5, 0x7, 0x2367, 0x48, 0xfff9, 0x769e, @inferred, @raw=0x8}) (async) ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, &(0x7f0000000340)={"fb6634a865b09c1d10a8a298fc3cdf9d158bbd3324909d741a7fea6a7bb598a0", 0x5185, 0x106, 0x2, 0x5e, 0x8, 0xffffffffffffffff}) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000001e80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000010}, 0x9bee8f6cd2536a87) close_range$auto(r4, 0x8, 0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) (async) utime$auto(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$auto(0x0, 0x0, 0x0, 0x8, 0x0) (async) io_uring_setup$auto(0x401, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={r5, 0xfffc, 0x8}, 0x4, &(0x7f0000000100)={0x7fffffffffffffff, 0x8}, 0x0, 0x8) (async) fsconfig$auto(r0, 0x3, &(0x7f0000000000)='Q**\x00', &(0x7f0000000040)="2b24c0bfbf", 0x0) 5.076863301s ago: executing program 2 (id=3366): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r0, 0x40096101, 0x0) 4.826110467s ago: executing program 8 (id=3367): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(r0, 0x0, 0x80000000) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) (async) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x0, 0xf663, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(r0, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x480480, 0x0) mmap$auto(0x0, 0xfffffffffffffffc, 0xe1, 0x14, 0x2, 0x8000) madvise$auto(0xfffffffffffffffc, 0x100000401, 0x7) (async) madvise$auto(0xfffffffffffffffc, 0x100000401, 0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x80000, 0x6) (async) socket(0x3, 0x80000, 0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xff}, 0x1) socketpair$auto(0xa3d, 0x2165, 0x8000000000000000, 0x0) (async) socketpair$auto(0xa3d, 0x2165, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x8000000000000, 0x20009, 0x4000000000e2, 0xeb4, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) (async) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f40) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 4.232838238s ago: executing program 7 (id=3368): mmap$auto(0x0, 0x40000b, 0x2000df, 0x9b72, 0x2, 0x10008000) mmap$auto(0x400, 0x9, 0xfdffffffffffffff, 0x9b72, 0xffffffffffffffff, 0x8000000000008000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0xa, 0x2, 0xd3) syz_clone(0x85082711, 0x0, 0xffffffffffffffb5, 0x0, 0x0, 0x0) madvise$auto(0x80000000, 0xfbffffffffff0005, 0x17) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r1, 0x0) socket(0x28, 0x80000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x1, 0x84) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r2) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffa, 0x8000) syz_open_procfs$namespace(0x0, 0x0) unshare$auto(0x40000080) landlock_restrict_self$auto(r0, 0x499d) sendmsg$auto_TIPC_NL_MEDIA_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r3, @ANYRES16=0x0, @ANYBLOB="010729bd7000fddbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioprio_set$auto(0x3, 0x0, 0x4b34) syz_clone3(&(0x7f0000000300)={0x12a004000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) 4.184759439s ago: executing program 9 (id=3369): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) r2 = socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x2, 0x807, 0xeb1, r2, 0x9) io_uring_setup$auto(0x6, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xffff) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183841, 0x0) write$auto(r3, &(0x7f0000000500)='0t\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f[\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\xbdS*\xebu\x83\xb8\x14I\xbd\xca\xf34\x14\xf7x\x83LB\xce\xd1\xd26\xc3\x18\xdc\n\x8f\xcd\a\xbc\xb2\\\xea\xd9\x93W\x94\xd2\x96\xe2\xcf\xb5A-\x15\xc1\xf2l\x1c\xb6E\xfe\xbal`>\tb@\xfcGW\ft)#\xe3%X\f#\xfck\xbc\x06\xb4\xaa\x99I\'OW\x8d\xdd \x13\xb8?q\x03\x04\xedA\xc2NJ<\xc3K\x80\xe8\xdcM\xce\xb7\x82h\xe0\xbc\xfbioggZ\xdb\xa5iB\xdd3\xcd\x02-\x88&\x87\xc6_6D\xc0\xcd\x11\xcb\xe25u\xf3\x1d\\\xec2\x95\x9b=\x1f\xc3\xdb\xc6\xc2\xd1\xb9\xb9\xec\x83S\x9dy\x99\xf9+z\xabby\x03\xc3~\x93x\xae\xed\xb8\\\x91\xe7l\x04|\xb2\xd9[M\x02 \xe1\x13\x04\x8a\xe7\xd2\b\x9cbJn\x16;\x92\xb0\xa6\xd7\x99sP\xcch\xbc\xeb\xa4\xb1uU\x19{\xe3\xd5\x03\xb8\x93\x8a\xd9\x8b\xd7z$', 0x1) open(0x0, 0x22240, 0x155) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, r0, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) ustat$auto(0x3, &(0x7f0000000000)={0x1936, 0x8000, "a100", "1147cd8913e5"}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x3, 0xe2, 0xeb1, 0x405, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x4) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) write$auto(0x3, 0x0, 0x800) 3.715851744s ago: executing program 2 (id=3370): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x12bb00, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ioctl$auto_SG_IO2(r0, 0x2285, &(0x7f0000000140)="f24412cb61478c28b96bf431e31aa694528a65667025eadb4387e5b13334d8a11a237c175ce48fc43373ad22f851a952b072073d1e94c2cba3291a4cd392650b98f20bbc65c06e4c8e6d6d2fbfb86b1016007576cad50dbb800ac8f2c23cd988b58f4b46eb37250d51") bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=@bpf_attr_0={0x2, 0x2, 0x80, 0x8b, 0x1, 0xffffffffffffffff, 0x2, "f702e76f2e8329c129b5a816675a194f", 0x0, 0xffffffffffffffff, 0x9, 0x2, 0xfffffffd, 0x2}, 0x2) ioctl$auto_FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, 0x1ff) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r2 = socket(0xa, 0x1, 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r3, 0x1, 0x8, 0x0, 0x269) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r3) syz_genetlink_get_family_id$auto_seg6(0x0, r3) getsockopt$auto(r2, 0x84, 0x8, 0x0, &(0x7f0000000000)=0x9b) 3.648229758s ago: executing program 9 (id=3371): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@llc={0x1a, 0x301, 0x5, 0x6, 0x3, 0xfb, @remote}, 0x54) (async) socket(0x10, 0x2, 0x0) (async, rerun: 64) mmap$auto(0x8000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) (rerun: 64) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x400053, 0x9) (async, rerun: 32) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x6f4ccf2bee9fe3e6, 0x0) read$auto_null_fops_mem(r1, &(0x7f0000000100)=""/98, 0x62) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x56b583, 0x0) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) (async, rerun: 64) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x56b) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp6\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) (async) mmap$auto(0x0, 0x8, 0x3, 0x10, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) 2.556987532s ago: executing program 2 (id=3372): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) (async) madvise$auto(0x2, 0x200007, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) (async) socket(0x2a, 0x2, 0x1) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x27111}, 0x8) (async) msgsnd$auto(0x8, &(0x7f0000000000)={0x4, 0xb}, 0x0, 0x1) (async) ioctl$auto(0xffffffffffffffff, 0x9, 0xffffffffffffffff) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) gettid() (async) close_range$auto(0x2, 0xa, 0x0) 1.912898184s ago: executing program 9 (id=3373): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x400, 0x9, 0xfdffffffffffffff, 0x9b72, 0xffffffffffffffff, 0x8000000000008000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0xa, 0x2, 0xd3) syz_clone(0x85082711, 0x0, 0xffffffffffffffb5, 0x0, 0x0, 0x0) madvise$auto(0x80000000, 0xfbffffffffff0005, 0x17) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setns(r1, 0x0) socket(0x28, 0x800, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mmap$auto(0x0, 0x9bc, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x1, 0x84) socket(0x23, 0x80805, 0x0) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000000), r2) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_open_procfs$namespace(0x0, 0x0) unshare$auto(0x40000080) sendmsg$auto_TIPC_NL_MEDIA_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010729bd7000fddbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioprio_set$auto(0x3, 0x0, 0x4b34) syz_clone3(&(0x7f0000000300)={0x12a004000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0xc000}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) 1.780558104s ago: executing program 7 (id=3374): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (fail_nth: 10) 705.208276ms ago: executing program 2 (id=3375): sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x24008804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7350, 0x36, 0x67f, 0x8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0xa0, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x3, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="d1123e49caf7000079fcb0343f11002db08d014e9767c11a0edaebe776c41b0c99f73df6aedb81ff0746c14eb07396c40f7c9eb4ec48f9d6292604619f6cee4380fd9f2b6ca174229024ecf6cb"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) madvise$auto(0x200, 0x9, 0x4) mmap$auto(0xc, 0x8, 0x7, 0x13, 0xffffffffffffffff, 0x5) keyctl$auto(0x1d, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r0 = socket(0x10, 0x2, 0x0) getcwd$auto(&(0x7f0000000040)='HSR\x00', 0x5) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video14\x00', 0x1a1983, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getdents$auto(r1, 0x0, 0x400018) ioctl$auto(0x3, 0xc0485619, 0x38) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400006, 0xdf, 0x10011, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r2 = socket(0xf, 0xa, 0xfffffffd) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon17\x00', 0x602500, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r4, 0x9204, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) 448.804126ms ago: executing program 8 (id=3376): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = dup$auto(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000240)={0x2, 0x0, "8ce3cca0932057312ef9be259b7b7df7", "105aaa3396c04f8e8226a55c96cf852e", "66694af9c3153abc8239a69871113bdaa57957457fe3a0bd42f82d3e51e57ccf", "4512fe968be92c9d520d940b596a7f5e9d09fa185c12279ef1a9b2f0004f996dc7441572cbcc953158468a268fca3dc3301df9bb8a305835aaaf7245ceaf20204a4dfd49f04134d3b42c833ad64443fa", "2fbe7cb67fd0ec8cefe4056804e237f7", "714bafcde5d7583fd6f5ac502aa34906bbfbb000414eaec2e5c7b9e8298da083d79481d9618df102be1c36f2972a442652a171f3b53f7089a34d06309c53187594ff460fa62439e747aeadf02d3ca06d", "e641306c7dd6770ec567df06f891d0d94610b3b4f2fc9dd61f677af25f935ff76e2ac2cbedc7a81e8daaff7ec75eb3ba9d47f9a8e35f41f4fc23c60eed6055e8bfb2680ed198fb3c49a68fef3f9b8eab8e302ffc21dc49ad37e3a0ffecf705260f35ad30af9502f7d56790bac28ee74e6945ad86b358afcc7a82f6f2826af00d"}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f00000001c0)="06067400bd1373ade283e29ef03b962ce2532b902d293cb9ffbe57505c7425ffcc92c9a9d8602b56a825a02f8e7d905e4856d3295886aba91b45", 0x3a) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop12/queue/nr_requests\x00', 0x80302, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8002008000) write$auto(0x3, 0x0, 0x3f00) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) read$auto(0x3, 0x0, 0xf34) read$auto(r1, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0x5) write$auto(0x3, 0x0, 0xffd8) 0s ago: executing program 2 (id=3377): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio18\x00', 0x80000, 0x0) ioctl$auto(0x3, 0x541b, 0x38) r0 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x789c, 0x10000000, 0x1, @_sigfault={&(0x7f0000000040)="b0006406c21f5e4ca46884a21857e37f218906fda875b40e94bca36351148da92f88f8d75e9aa3d93e33490cb5eed1508ff22b4972c55737434c5e2b962e679d070480ba24c0a5231771afb7e430d0cf4c909cfdb373e8357133e15a114cb19df071ae7d51db1b4b74ee936c8a84ea2436489214c8ecbbfc2040", @_trapno=0xe}}}, 0x6, &(0x7f0000000140)={{0x9, 0x100000000}, {0x5, 0x7}, 0x1, 0x4, 0x6, 0x10001, 0x6f, 0x5, 0x40, 0xffffffffffffff11, 0x9, 0x1, 0x0, 0x6, 0xc05, 0x6}) prctl$auto(0x3, 0xcf3, r0, 0x4, 0x99) kernel console output (not intermixed with test programs): all Trace: [ 1105.605125][T20395] [ 1105.605135][T20395] dump_stack_lvl+0x16c/0x1f0 [ 1105.605178][T20395] should_fail_ex+0x512/0x640 [ 1105.605214][T20395] ? fs_reclaim_acquire+0xae/0x150 [ 1105.605255][T20395] ? tomoyo_encode2+0x100/0x3e0 [ 1105.605289][T20395] should_failslab+0xc2/0x120 [ 1105.605321][T20395] __kmalloc_noprof+0xd2/0x510 [ 1105.605347][T20395] ? d_absolute_path+0x136/0x1a0 [ 1105.605382][T20395] tomoyo_encode2+0x100/0x3e0 [ 1105.605422][T20395] tomoyo_encode+0x29/0x50 [ 1105.605455][T20395] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1105.605501][T20395] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1105.605534][T20395] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1105.605596][T20395] ? find_held_lock+0x2b/0x80 [ 1105.605629][T20395] tomoyo_file_open+0x6b/0x90 [ 1105.605654][T20395] security_file_open+0x84/0x1e0 [ 1105.605689][T20395] do_dentry_open+0x596/0x1c10 [ 1105.605724][T20395] vfs_open+0x82/0x3f0 [ 1105.605761][T20395] path_openat+0x1e5e/0x2d40 [ 1105.605796][T20395] ? __pfx_path_openat+0x10/0x10 [ 1105.605823][T20395] ? __lock_acquire+0xaa4/0x1ba0 [ 1105.605858][T20395] do_filp_open+0x20b/0x470 [ 1105.605883][T20395] ? __pfx_do_filp_open+0x10/0x10 [ 1105.605928][T20395] ? _raw_spin_unlock+0x28/0x50 [ 1105.605959][T20395] ? alloc_fd+0x471/0x7d0 [ 1105.605989][T20395] do_sys_openat2+0x11b/0x1d0 [ 1105.606023][T20395] ? __pfx_do_sys_openat2+0x10/0x10 [ 1105.606079][T20395] __x64_sys_open+0x153/0x1e0 [ 1105.606115][T20395] ? __pfx___x64_sys_open+0x10/0x10 [ 1105.606157][T20395] ? rcu_is_watching+0x12/0xc0 [ 1105.606184][T20395] do_syscall_64+0xcd/0x230 [ 1105.606224][T20395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.606250][T20395] RIP: 0033:0x7f37ef78e969 [ 1105.606270][T20395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1105.606294][T20395] RSP: 002b:00007f37f05b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1105.606318][T20395] RAX: ffffffffffffffda RBX: 00007f37ef9b5fa0 RCX: 00007f37ef78e969 [ 1105.606335][T20395] RDX: e1d2b27bdc14aab4 RSI: 0000000000004242 RDI: 0000200000000000 [ 1105.606353][T20395] RBP: 00007f37ef810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1105.606368][T20395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1105.606384][T20395] R13: 0000000000000000 R14: 00007f37ef9b5fa0 R15: 00007ffc5c0b7fc8 [ 1105.606416][T20395] [ 1105.606441][T20395] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1106.673342][T20404] netlink: 'syz.2.2751': attribute type 11 has an invalid length. [ 1106.704518][T20404] netlink: 'syz.2.2751': attribute type 11 has an invalid length. [ 1106.735430][T20404] netlink: 'syz.2.2751': attribute type 11 has an invalid length. [ 1108.558495][T20428] FAULT_INJECTION: forcing a failure. [ 1108.558495][T20428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1108.777444][T20428] CPU: 1 UID: 0 PID: 20428 Comm: syz.6.2757 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1108.777486][T20428] Tainted: [U]=USER [ 1108.777495][T20428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1108.777510][T20428] Call Trace: [ 1108.777517][T20428] [ 1108.777527][T20428] dump_stack_lvl+0x16c/0x1f0 [ 1108.777567][T20428] should_fail_ex+0x512/0x640 [ 1108.777608][T20428] strncpy_from_user+0x3b/0x2e0 [ 1108.777645][T20428] getname_flags.part.0+0x8f/0x550 [ 1108.777683][T20428] getname_flags+0x93/0xf0 [ 1108.777721][T20428] do_sys_openat2+0xb8/0x1d0 [ 1108.777755][T20428] ? __pfx_do_sys_openat2+0x10/0x10 [ 1108.777800][T20428] __x64_sys_openat+0x174/0x210 [ 1108.777841][T20428] ? __pfx___x64_sys_openat+0x10/0x10 [ 1108.777877][T20428] ? rcu_is_watching+0x12/0xc0 [ 1108.777909][T20428] do_syscall_64+0xcd/0x230 [ 1108.777949][T20428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.777974][T20428] RIP: 0033:0x7fb7af38e969 [ 1108.777993][T20428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.778017][T20428] RSP: 002b:00007fb7b0246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1108.778039][T20428] RAX: ffffffffffffffda RBX: 00007fb7af5b5fa0 RCX: 00007fb7af38e969 [ 1108.778056][T20428] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1108.778072][T20428] RBP: 00007fb7af410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1108.778086][T20428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.778101][T20428] R13: 0000000000000000 R14: 00007fb7af5b5fa0 R15: 00007ffde0600f78 [ 1108.778130][T20428] [ 1111.961873][T20460] FAULT_INJECTION: forcing a failure. [ 1111.961873][T20460] name failslab, interval 1, probability 0, space 0, times 0 [ 1112.066298][T20460] CPU: 1 UID: 0 PID: 20460 Comm: syz.7.2763 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1112.066340][T20460] Tainted: [U]=USER [ 1112.066348][T20460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1112.066363][T20460] Call Trace: [ 1112.066372][T20460] [ 1112.066381][T20460] dump_stack_lvl+0x16c/0x1f0 [ 1112.066421][T20460] should_fail_ex+0x512/0x640 [ 1112.066457][T20460] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1112.066498][T20460] should_failslab+0xc2/0x120 [ 1112.066529][T20460] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1112.066558][T20460] ? security_file_alloc+0x34/0x2b0 [ 1112.066596][T20460] security_file_alloc+0x34/0x2b0 [ 1112.066630][T20460] init_file+0x93/0x4c0 [ 1112.066660][T20460] alloc_empty_file+0x73/0x1e0 [ 1112.066692][T20460] alloc_file_pseudo+0x13a/0x230 [ 1112.066726][T20460] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1112.066759][T20460] ? alloc_fd+0x471/0x7d0 [ 1112.066785][T20460] sock_alloc_file+0x50/0x210 [ 1112.066819][T20460] __sys_socket+0x1c0/0x260 [ 1112.066856][T20460] ? __pfx___sys_socket+0x10/0x10 [ 1112.066896][T20460] ? syscall_user_dispatch+0x78/0x140 [ 1112.066939][T20460] __x64_sys_socket+0x72/0xb0 [ 1112.066977][T20460] do_syscall_64+0xcd/0x230 [ 1112.067016][T20460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1112.067041][T20460] RIP: 0033:0x7fdb0ab8e969 [ 1112.067060][T20460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1112.067084][T20460] RSP: 002b:00007fdb0bab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1112.067107][T20460] RAX: ffffffffffffffda RBX: 00007fdb0adb5fa0 RCX: 00007fdb0ab8e969 [ 1112.067124][T20460] RDX: 0000000000000073 RSI: 0000000000080002 RDI: 0000000000000002 [ 1112.067139][T20460] RBP: 00007fdb0ac10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1112.067153][T20460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1112.067168][T20460] R13: 0000000000000000 R14: 00007fdb0adb5fa0 R15: 00007ffcdc889dd8 [ 1112.067198][T20460] [ 1112.714263][T20456] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1112.758762][T20456] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1112.789252][T20456] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1112.821733][T20456] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1112.841787][T20456] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1113.122414][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 1113.856012][T20456] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1113.895659][T20456] CPU0 is offline. [ 1114.799961][ T30] audit: type=1800 audit(4294970133.577:34): pid=20482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2769" name="trigger" dev="tracefs" ino=19680823 res=0 errno=0 [ 1114.886041][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 1114.892162][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 1114.900556][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 1115.108416][T20485] netlink: 326 bytes leftover after parsing attributes in process `syz.7.2770'. [ 1115.502931][T20488] netlink: 'syz.7.2771': attribute type 19 has an invalid length. [ 1115.510812][T20488] netlink: 334 bytes leftover after parsing attributes in process `syz.7.2771'. [ 1116.526098][T20501] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2775'. [ 1116.966616][T20483] Bluetooth: hci2: command 0x0c1a tx timeout [ 1118.398699][T20548] netlink: 346 bytes leftover after parsing attributes in process `syz.2.2778'. [ 1118.949831][T20558] program syz.6.2779 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1119.042465][T20483] Bluetooth: hci2: command 0x0c1a tx timeout [ 1120.008250][T20576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2784'. [ 1120.098468][T20580] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2783'. [ 1121.051921][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.058433][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.490310][T20605] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2789'. [ 1123.335023][T20617] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1125.740695][T20638] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1125.785347][T20644] FAULT_INJECTION: forcing a failure. [ 1125.785347][T20644] name failslab, interval 1, probability 0, space 0, times 0 [ 1125.843859][T20638] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1125.894078][T20644] CPU: 1 UID: 0 PID: 20644 Comm: syz.2.2796 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1125.894119][T20644] Tainted: [U]=USER [ 1125.894128][T20644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1125.894143][T20644] Call Trace: [ 1125.894151][T20644] [ 1125.894161][T20644] dump_stack_lvl+0x16c/0x1f0 [ 1125.894202][T20644] should_fail_ex+0x512/0x640 [ 1125.894237][T20644] ? fs_reclaim_acquire+0xae/0x150 [ 1125.894280][T20644] should_failslab+0xc2/0x120 [ 1125.894311][T20644] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1125.894336][T20644] ? tomoyo_init_log+0x197/0x2140 [ 1125.894375][T20644] tomoyo_init_log+0x197/0x2140 [ 1125.894407][T20644] ? format_decode+0x1ad/0xd40 [ 1125.894438][T20644] ? __pfx_format_decode+0x10/0x10 [ 1125.894476][T20644] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1125.894519][T20644] tomoyo_write_log2+0x2f7/0xc10 [ 1125.894559][T20644] tomoyo_supervisor+0x15e/0x13b0 [ 1125.894588][T20644] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1125.894625][T20644] ? lockdep_hardirqs_on+0x7c/0x110 [ 1125.894664][T20644] ? tomoyo_check_path_acl+0xad/0x210 [ 1125.894695][T20644] ? tomoyo_check_acl+0x1f7/0x410 [ 1125.894726][T20644] tomoyo_path_permission+0x270/0x3b0 [ 1125.894758][T20644] tomoyo_check_open_permission+0x37b/0x3c0 [ 1125.894790][T20644] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1125.894855][T20644] ? find_held_lock+0x2b/0x80 [ 1125.894886][T20644] tomoyo_file_open+0x6b/0x90 [ 1125.894911][T20644] security_file_open+0x84/0x1e0 [ 1125.894946][T20644] do_dentry_open+0x596/0x1c10 [ 1125.894980][T20644] vfs_open+0x82/0x3f0 [ 1125.895022][T20644] path_openat+0x1e5e/0x2d40 [ 1125.895058][T20644] ? __pfx_path_openat+0x10/0x10 [ 1125.895084][T20644] ? __lock_acquire+0xaa4/0x1ba0 [ 1125.895120][T20644] do_filp_open+0x20b/0x470 [ 1125.895145][T20644] ? __pfx_do_filp_open+0x10/0x10 [ 1125.895191][T20644] ? _raw_spin_unlock+0x28/0x50 [ 1125.895221][T20644] ? alloc_fd+0x471/0x7d0 [ 1125.895251][T20644] do_sys_openat2+0x11b/0x1d0 [ 1125.895287][T20644] ? __pfx_do_sys_openat2+0x10/0x10 [ 1125.895333][T20644] __x64_sys_open+0x153/0x1e0 [ 1125.895368][T20644] ? __pfx___x64_sys_open+0x10/0x10 [ 1125.895409][T20644] ? rcu_is_watching+0x12/0xc0 [ 1125.895436][T20644] do_syscall_64+0xcd/0x230 [ 1125.895475][T20644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.895500][T20644] RIP: 0033:0x7fc692f8e969 [ 1125.895519][T20644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.895544][T20644] RSP: 002b:00007fc693e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1125.895567][T20644] RAX: ffffffffffffffda RBX: 00007fc6931b5fa0 RCX: 00007fc692f8e969 [ 1125.895584][T20644] RDX: e1d2b27bdc14aab4 RSI: 0000000000004242 RDI: 0000200000000000 [ 1125.895600][T20644] RBP: 00007fc693010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1125.895616][T20644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.895631][T20644] R13: 0000000000000000 R14: 00007fc6931b5fa0 R15: 00007ffd39c48a08 [ 1125.895661][T20644] [ 1126.612704][T20638] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1126.649515][T20638] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1126.791696][T20638] CPU0 is offline. [ 1127.153355][T20658] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1127.340695][T20659] ubi0: attaching mtd0 [ 1127.409796][T20659] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 1127.812364][T15302] Bluetooth: hci0: command 0x0c1a tx timeout [ 1127.953334][T15302] Bluetooth: hci5: command 0x0c1a tx timeout [ 1128.746716][T20675] FAULT_INJECTION: forcing a failure. [ 1128.746716][T20675] name failslab, interval 1, probability 0, space 0, times 0 [ 1128.802891][T15302] Bluetooth: hci2: command 0x0c1a tx timeout [ 1128.809047][T20483] Bluetooth: hci1: command 0x0c1a tx timeout [ 1128.821359][T20675] CPU: 1 UID: 0 PID: 20675 Comm: syz.7.2804 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1128.821400][T20675] Tainted: [U]=USER [ 1128.821408][T20675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1128.821423][T20675] Call Trace: [ 1128.821431][T20675] [ 1128.821441][T20675] dump_stack_lvl+0x16c/0x1f0 [ 1128.821482][T20675] should_fail_ex+0x512/0x640 [ 1128.821519][T20675] ? fs_reclaim_acquire+0xae/0x150 [ 1128.821561][T20675] should_failslab+0xc2/0x120 [ 1128.821592][T20675] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1128.821622][T20675] ? security_inode_alloc+0x3b/0x2b0 [ 1128.821655][T20675] security_inode_alloc+0x3b/0x2b0 [ 1128.821684][T20675] inode_init_always_gfp+0xce4/0x1030 [ 1128.821713][T20675] alloc_inode+0x86/0x240 [ 1128.821744][T20675] new_inode+0x22/0x1c0 [ 1128.821786][T20675] shmem_get_inode+0x19a/0xfb0 [ 1128.821819][T20675] shmem_mknod+0x1a8/0x450 [ 1128.821846][T20675] ? __pfx_shmem_create+0x10/0x10 [ 1128.821867][T20675] lookup_open.isra.0+0x11d3/0x1580 [ 1128.821911][T20675] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1128.821964][T20675] ? __pfx_down_write+0x10/0x10 [ 1128.821985][T20675] ? mnt_get_write_access+0x20c/0x300 [ 1128.822022][T20675] path_openat+0x905/0x2d40 [ 1128.822058][T20675] ? __pfx_path_openat+0x10/0x10 [ 1128.822084][T20675] ? __lock_acquire+0xaa4/0x1ba0 [ 1128.822121][T20675] do_filp_open+0x20b/0x470 [ 1128.822146][T20675] ? __pfx_do_filp_open+0x10/0x10 [ 1128.822192][T20675] ? _raw_spin_unlock+0x28/0x50 [ 1128.822222][T20675] ? alloc_fd+0x471/0x7d0 [ 1128.822253][T20675] do_sys_openat2+0x11b/0x1d0 [ 1128.822286][T20675] ? __pfx_do_sys_openat2+0x10/0x10 [ 1128.822332][T20675] __x64_sys_open+0x153/0x1e0 [ 1128.822366][T20675] ? __pfx___x64_sys_open+0x10/0x10 [ 1128.822407][T20675] ? rcu_is_watching+0x12/0xc0 [ 1128.822434][T20675] do_syscall_64+0xcd/0x230 [ 1128.822473][T20675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.822498][T20675] RIP: 0033:0x7fdb0ab8e969 [ 1128.822517][T20675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.822542][T20675] RSP: 002b:00007fdb0bab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1128.822565][T20675] RAX: ffffffffffffffda RBX: 00007fdb0adb5fa0 RCX: 00007fdb0ab8e969 [ 1128.822581][T20675] RDX: e1d2b27bdc14aab4 RSI: 0000000000004242 RDI: 0000200000000000 [ 1128.822597][T20675] RBP: 00007fdb0ac10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1128.822612][T20675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.822627][T20675] R13: 0000000000000000 R14: 00007fdb0adb5fa0 R15: 00007ffcdc889dd8 [ 1128.822657][T20675] [ 1129.950745][T20684] FAULT_INJECTION: forcing a failure. [ 1129.950745][T20684] name failslab, interval 1, probability 0, space 0, times 0 [ 1130.053760][T20684] CPU: 1 UID: 0 PID: 20684 Comm: syz.2.2807 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1130.053805][T20684] Tainted: [U]=USER [ 1130.053813][T20684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1130.053828][T20684] Call Trace: [ 1130.053836][T20684] [ 1130.053846][T20684] dump_stack_lvl+0x16c/0x1f0 [ 1130.053886][T20684] should_fail_ex+0x512/0x640 [ 1130.053922][T20684] ? fs_reclaim_acquire+0xae/0x150 [ 1130.053964][T20684] ? tomoyo_encode2+0x100/0x3e0 [ 1130.053998][T20684] should_failslab+0xc2/0x120 [ 1130.054029][T20684] __kmalloc_noprof+0xd2/0x510 [ 1130.054055][T20684] ? d_absolute_path+0x136/0x1a0 [ 1130.054098][T20684] tomoyo_encode2+0x100/0x3e0 [ 1130.054138][T20684] tomoyo_encode+0x29/0x50 [ 1130.054171][T20684] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1130.054217][T20684] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1130.054250][T20684] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1130.054313][T20684] ? find_held_lock+0x2b/0x80 [ 1130.054345][T20684] tomoyo_file_open+0x6b/0x90 [ 1130.054370][T20684] security_file_open+0x84/0x1e0 [ 1130.054405][T20684] do_dentry_open+0x596/0x1c10 [ 1130.054440][T20684] vfs_open+0x82/0x3f0 [ 1130.054482][T20684] path_openat+0x1e5e/0x2d40 [ 1130.054518][T20684] ? __pfx_path_openat+0x10/0x10 [ 1130.054544][T20684] ? __lock_acquire+0xaa4/0x1ba0 [ 1130.054587][T20684] do_filp_open+0x20b/0x470 [ 1130.054612][T20684] ? __pfx_do_filp_open+0x10/0x10 [ 1130.054659][T20684] ? _raw_spin_unlock+0x28/0x50 [ 1130.054690][T20684] ? alloc_fd+0x471/0x7d0 [ 1130.054720][T20684] do_sys_openat2+0x11b/0x1d0 [ 1130.054753][T20684] ? __pfx_do_sys_openat2+0x10/0x10 [ 1130.054799][T20684] __x64_sys_open+0x153/0x1e0 [ 1130.054832][T20684] ? __pfx___x64_sys_open+0x10/0x10 [ 1130.054872][T20684] ? rcu_is_watching+0x12/0xc0 [ 1130.054898][T20684] do_syscall_64+0xcd/0x230 [ 1130.054937][T20684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1130.054962][T20684] RIP: 0033:0x7fc692f8e969 [ 1130.054981][T20684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1130.055004][T20684] RSP: 002b:00007fc693e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1130.055027][T20684] RAX: ffffffffffffffda RBX: 00007fc6931b5fa0 RCX: 00007fc692f8e969 [ 1130.055044][T20684] RDX: e1d2b27bdc14aab4 RSI: 0000000000004242 RDI: 0000200000000000 [ 1130.055059][T20684] RBP: 00007fc693010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1130.055074][T20684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1130.055089][T20684] R13: 0000000000000000 R14: 00007fc6931b5fa0 R15: 00007ffd39c48a08 [ 1130.055152][T20684] [ 1130.060261][T20684] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1130.444110][T20687] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1131.041483][T20693] FAULT_INJECTION: forcing a failure. [ 1131.041483][T20693] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.142413][T20693] CPU: 1 UID: 0 PID: 20693 Comm: syz.7.2809 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1131.142452][T20693] Tainted: [U]=USER [ 1131.142461][T20693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1131.142475][T20693] Call Trace: [ 1131.142483][T20693] [ 1131.142492][T20693] dump_stack_lvl+0x16c/0x1f0 [ 1131.142539][T20693] should_fail_ex+0x512/0x640 [ 1131.142574][T20693] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1131.142601][T20693] should_failslab+0xc2/0x120 [ 1131.142631][T20693] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1131.142656][T20693] ? copy_net_ns+0x135/0x5f0 [ 1131.142693][T20693] copy_net_ns+0x135/0x5f0 [ 1131.142724][T20693] ? copy_cgroup_ns+0xa4/0x6f0 [ 1131.142749][T20693] create_new_namespaces+0x3ea/0xad0 [ 1131.142783][T20693] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1131.142817][T20693] ksys_unshare+0x45b/0xa40 [ 1131.142852][T20693] ? __pfx_ksys_unshare+0x10/0x10 [ 1131.142883][T20693] ? xfd_validate_state+0x5d/0x180 [ 1131.142908][T20693] ? rcu_is_watching+0x12/0xc0 [ 1131.142938][T20693] __x64_sys_unshare+0x31/0x40 [ 1131.142970][T20693] do_syscall_64+0xcd/0x230 [ 1131.143007][T20693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.143035][T20693] RIP: 0033:0x7fdb0ab8e969 [ 1131.143054][T20693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1131.143078][T20693] RSP: 002b:00007fdb0bab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1131.143100][T20693] RAX: ffffffffffffffda RBX: 00007fdb0adb5fa0 RCX: 00007fdb0ab8e969 [ 1131.143116][T20693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1131.143131][T20693] RBP: 00007fdb0ac10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1131.143146][T20693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1131.143160][T20693] R13: 0000000000000000 R14: 00007fdb0adb5fa0 R15: 00007ffcdc889dd8 [ 1131.143189][T20693] [ 1131.930197][T20696] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2810'. [ 1132.094180][T20701] ubi0: attaching mtd0 [ 1132.256545][T20701] ubi0: scanning is finished [ 1132.296358][T20696] HfR: entered promiscuous mode [ 1132.361293][T20701] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 1132.952533][T20701] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1134.730613][T20720] vivid-007: ================= START STATUS ================= [ 1134.879288][T20720] vivid-007: Generate PTS: true [ 1134.974484][T20720] vivid-007: Generate SCR: true [ 1135.014438][T20720] tpg source WxH: 640x360 (Y'CbCr) [ 1135.019677][T20720] tpg field: 1 [ 1135.073726][T20720] tpg crop: (0,0)/640x360 [ 1135.107744][T20720] tpg compose: (0,0)/640x360 [ 1135.132440][T20720] tpg colorspace: 8 [ 1135.147902][T20720] tpg transfer function: 0/0 [ 1135.182455][T20720] tpg Y'CbCr encoding: 0/0 [ 1135.186982][T20720] tpg quantization: 0/0 [ 1135.231017][T20720] tpg RGB range: 0/2 [ 1135.248028][T20720] vivid-007: ================== END STATUS ================== [ 1135.834768][T20727] Invalid ELF header magic: != ELF [ 1136.321432][T20727] zswap: compressor H.9Q>z%;0*l H`Bkcjkwj'S3<85Eh'.Y[+`[2QY$<`TYvZgV4sqJ"b%zKN[O EiF8i|;(Sh@3Kxa>TRS=s~kHQIF{h?B}Lr=Qb k^4)>x*Z not available [ 1136.618047][T20753] kernel read not supported for file /set_event_notrace_pid (pid: 20753 comm: syz.7.2822) [ 1136.716516][ T30] audit: type=1800 audit(4294970155.467:35): pid=20753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2822" name="set_event_notrace_pid" dev="tracefs" ino=1052 res=0 errno=0 [ 1137.211824][T20754] FAULT_INJECTION: forcing a failure. [ 1137.211824][T20754] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.264371][T20754] CPU: 1 UID: 0 PID: 20754 Comm: syz.2.2823 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1137.264414][T20754] Tainted: [U]=USER [ 1137.264422][T20754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1137.264437][T20754] Call Trace: [ 1137.264446][T20754] [ 1137.264455][T20754] dump_stack_lvl+0x16c/0x1f0 [ 1137.264495][T20754] should_fail_ex+0x512/0x640 [ 1137.264531][T20754] ? __kmalloc_noprof+0xbf/0x510 [ 1137.264561][T20754] ? __register_sysctl_table+0xea2/0x1900 [ 1137.264590][T20754] should_failslab+0xc2/0x120 [ 1137.264621][T20754] __kmalloc_noprof+0xd2/0x510 [ 1137.264647][T20754] ? __register_sysctl_table+0xe8e/0x1900 [ 1137.264682][T20754] __register_sysctl_table+0xea2/0x1900 [ 1137.264718][T20754] ? __pfx___register_sysctl_table+0x10/0x10 [ 1137.264746][T20754] ? is_module_address+0x69/0xf0 [ 1137.264779][T20754] ? register_net_sysctl_sz+0x228/0x3e0 [ 1137.264829][T20754] __devinet_sysctl_register+0x1b9/0x360 [ 1137.264867][T20754] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 1137.264899][T20754] ? trace_kmalloc+0x2b/0xd0 [ 1137.264940][T20754] ? devinet_init_net+0xeb/0x910 [ 1137.264974][T20754] ? __asan_memcpy+0x3c/0x60 [ 1137.264999][T20754] devinet_init_net+0x315/0x910 [ 1137.265033][T20754] ? __pfx_devinet_init_net+0x10/0x10 [ 1137.265066][T20754] ops_init+0x1df/0x5f0 [ 1137.265101][T20754] setup_net+0x21e/0x850 [ 1137.265134][T20754] ? __pfx_setup_net+0x10/0x10 [ 1137.265164][T20754] ? lockdep_init_map_type+0x5c/0x280 [ 1137.265198][T20754] ? __pfx_down_read_killable+0x10/0x10 [ 1137.265225][T20754] ? debug_mutex_init+0x37/0x70 [ 1137.265251][T20754] copy_net_ns+0x2a6/0x5f0 [ 1137.265288][T20754] create_new_namespaces+0x3ea/0xad0 [ 1137.265323][T20754] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1137.265354][T20754] ksys_unshare+0x45b/0xa40 [ 1137.265388][T20754] ? __pfx_ksys_unshare+0x10/0x10 [ 1137.265420][T20754] ? xfd_validate_state+0x5d/0x180 [ 1137.265446][T20754] ? rcu_is_watching+0x12/0xc0 [ 1137.265476][T20754] __x64_sys_unshare+0x31/0x40 [ 1137.265508][T20754] do_syscall_64+0xcd/0x230 [ 1137.265547][T20754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.265571][T20754] RIP: 0033:0x7fc692f8e969 [ 1137.265590][T20754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1137.265614][T20754] RSP: 002b:00007fc693e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1137.265637][T20754] RAX: ffffffffffffffda RBX: 00007fc6931b5fa0 RCX: 00007fc692f8e969 [ 1137.265653][T20754] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1137.265668][T20754] RBP: 00007fc693010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1137.265683][T20754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1137.265697][T20754] R13: 0000000000000000 R14: 00007fc6931b5fa0 R15: 00007ffd39c48a08 [ 1137.265728][T20754] [ 1137.553598][ C1] vkms_vblank_simulate: vblank timer overrun [ 1137.566757][T20754] sysctl could not get directory: /net/ipv4/conf -12 [ 1140.950671][T20790] FAULT_INJECTION: forcing a failure. [ 1140.950671][T20790] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.034439][T20790] CPU: 1 UID: 0 PID: 20790 Comm: syz.2.2830 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1141.034482][T20790] Tainted: [U]=USER [ 1141.034491][T20790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1141.034505][T20790] Call Trace: [ 1141.034514][T20790] [ 1141.034523][T20790] dump_stack_lvl+0x16c/0x1f0 [ 1141.034575][T20790] should_fail_ex+0x512/0x640 [ 1141.034611][T20790] ? fs_reclaim_acquire+0xae/0x150 [ 1141.034653][T20790] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1141.034690][T20790] should_failslab+0xc2/0x120 [ 1141.034721][T20790] __kmalloc_noprof+0xd2/0x510 [ 1141.034757][T20790] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1141.034805][T20790] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1141.034838][T20790] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1141.034900][T20790] ? do_raw_spin_lock+0x12c/0x2b0 [ 1141.034946][T20790] tomoyo_file_open+0x6b/0x90 [ 1141.034971][T20790] security_file_open+0x84/0x1e0 [ 1141.035006][T20790] do_dentry_open+0x596/0x1c10 [ 1141.035041][T20790] vfs_open+0x82/0x3f0 [ 1141.035077][T20790] path_openat+0x1e5e/0x2d40 [ 1141.035113][T20790] ? __pfx_path_openat+0x10/0x10 [ 1141.035145][T20790] do_filp_open+0x20b/0x470 [ 1141.035170][T20790] ? __pfx_do_filp_open+0x10/0x10 [ 1141.035217][T20790] ? alloc_fd+0x471/0x7d0 [ 1141.035247][T20790] do_sys_openat2+0x11b/0x1d0 [ 1141.035279][T20790] ? __pfx_do_sys_openat2+0x10/0x10 [ 1141.035325][T20790] __x64_sys_openat+0x174/0x210 [ 1141.035359][T20790] ? __pfx___x64_sys_openat+0x10/0x10 [ 1141.035395][T20790] ? rcu_is_watching+0x12/0xc0 [ 1141.035427][T20790] do_syscall_64+0xcd/0x230 [ 1141.035465][T20790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.035490][T20790] RIP: 0033:0x7fc692f8e969 [ 1141.035508][T20790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1141.035532][T20790] RSP: 002b:00007fc693e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1141.035560][T20790] RAX: ffffffffffffffda RBX: 00007fc6931b5fa0 RCX: 00007fc692f8e969 [ 1141.035576][T20790] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1141.035592][T20790] RBP: 00007fc693010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1141.035607][T20790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1141.035622][T20790] R13: 0000000000000000 R14: 00007fc6931b5fa0 R15: 00007ffd39c48a08 [ 1141.035652][T20790] [ 1141.035986][T20790] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1141.437584][T20793] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2831'. [ 1142.958886][T20814] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 1146.147317][T20838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2840'. [ 1148.674844][T20866] blktrace: Concurrent blktraces are not allowed on loop2 [ 1150.410642][T20900] FAULT_INJECTION: forcing a failure. [ 1150.410642][T20900] name failslab, interval 1, probability 0, space 0, times 0 [ 1150.509677][T20900] CPU: 1 UID: 0 PID: 20900 Comm: syz.2.2850 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1150.509719][T20900] Tainted: [U]=USER [ 1150.509728][T20900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1150.509743][T20900] Call Trace: [ 1150.509751][T20900] [ 1150.509761][T20900] dump_stack_lvl+0x16c/0x1f0 [ 1150.509803][T20900] should_fail_ex+0x512/0x640 [ 1150.509839][T20900] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1150.509871][T20900] should_failslab+0xc2/0x120 [ 1150.509903][T20900] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1150.509930][T20900] ? __pfx___might_resched+0x10/0x10 [ 1150.509958][T20900] ? __anon_vma_prepare+0xae/0x5e0 [ 1150.509989][T20900] __anon_vma_prepare+0xae/0x5e0 [ 1150.510014][T20900] ? __pfx___pte_alloc+0x10/0x10 [ 1150.510051][T20900] __vmf_anon_prepare+0x11c/0x240 [ 1150.510089][T20900] do_pte_missing+0x1194/0x3fb0 [ 1150.510117][T20900] ? _raw_spin_unlock+0x28/0x50 [ 1150.510147][T20900] ? __pmd_alloc+0x3c2/0x870 [ 1150.510186][T20900] __handle_mm_fault+0x103d/0x2a40 [ 1150.510220][T20900] ? __pfx___handle_mm_fault+0x10/0x10 [ 1150.510271][T20900] handle_mm_fault+0x3fe/0xad0 [ 1150.510301][T20900] __get_user_pages+0x771/0x36f0 [ 1150.510348][T20900] ? __pfx_mt_find+0x10/0x10 [ 1150.510370][T20900] ? __pfx___get_user_pages+0x10/0x10 [ 1150.510420][T20900] populate_vma_page_range+0x278/0x3a0 [ 1150.510447][T20900] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1150.510470][T20900] ? __pfx_find_vma_intersection+0x10/0x10 [ 1150.510509][T20900] ? do_mmap+0x69c/0x11b0 [ 1150.510548][T20900] __mm_populate+0x1d8/0x380 [ 1150.510580][T20900] ? __pfx___mm_populate+0x10/0x10 [ 1150.510607][T20900] ? up_write+0x1b2/0x520 [ 1150.510646][T20900] vm_mmap_pgoff+0x362/0x450 [ 1150.510686][T20900] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1150.510729][T20900] ? __x64_sys_futex+0x1e0/0x4c0 [ 1150.510755][T20900] ? __x64_sys_futex+0x1e9/0x4c0 [ 1150.510786][T20900] ksys_mmap_pgoff+0x7d/0x5c0 [ 1150.510821][T20900] ? rcu_is_watching+0x12/0xc0 [ 1150.510847][T20900] __x64_sys_mmap+0x125/0x190 [ 1150.510874][T20900] do_syscall_64+0xcd/0x230 [ 1150.510913][T20900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.510937][T20900] RIP: 0033:0x7fc692f8e969 [ 1150.510956][T20900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1150.510980][T20900] RSP: 002b:00007fc693e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1150.511003][T20900] RAX: ffffffffffffffda RBX: 00007fc6931b5fa0 RCX: 00007fc692f8e969 [ 1150.511019][T20900] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 1150.511034][T20900] RBP: 00007fc693010ab1 R08: 0000000000000007 R09: 0000000000028000 [ 1150.511049][T20900] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1150.511063][T20900] R13: 0000000000000000 R14: 00007fc6931b5fa0 R15: 00007ffd39c48a08 [ 1150.511094][T20900] [ 1151.112700][T20911] Invalid ELF header magic: != ELF [ 1153.062878][T20940] ERROR: Out of memory at tomoyo_memory_ok. [ 1154.247594][T20953] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1154.264807][T20955] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2861'. [ 1154.308195][T20955] netlink: 354 bytes leftover after parsing attributes in process `syz.5.2861'. [ 1154.414313][T20955] FAULT_INJECTION: forcing a failure. [ 1154.414313][T20955] name failslab, interval 1, probability 0, space 0, times 0 [ 1154.441807][T20958] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 1154.533587][T20955] CPU: 1 UID: 0 PID: 20955 Comm: syz.5.2861 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1154.533631][T20955] Tainted: [U]=USER [ 1154.533640][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1154.533656][T20955] Call Trace: [ 1154.533664][T20955] [ 1154.533675][T20955] dump_stack_lvl+0x16c/0x1f0 [ 1154.533720][T20955] should_fail_ex+0x512/0x640 [ 1154.533759][T20955] ? fs_reclaim_acquire+0xae/0x150 [ 1154.533803][T20955] ? tomoyo_init_log+0x1385/0x2140 [ 1154.533839][T20955] should_failslab+0xc2/0x120 [ 1154.533874][T20955] __kmalloc_noprof+0xd2/0x510 [ 1154.533912][T20955] tomoyo_init_log+0x1385/0x2140 [ 1154.533967][T20955] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1154.534014][T20955] tomoyo_write_log2+0x2f7/0xc10 [ 1154.534058][T20955] tomoyo_supervisor+0x15e/0x13b0 [ 1154.534089][T20955] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1154.534130][T20955] ? lockdep_hardirqs_on+0x7c/0x110 [ 1154.534173][T20955] ? tomoyo_check_path_acl+0xad/0x210 [ 1154.534207][T20955] ? tomoyo_check_acl+0x1f7/0x410 [ 1154.534241][T20955] tomoyo_path_permission+0x270/0x3b0 [ 1154.534277][T20955] tomoyo_check_open_permission+0x37b/0x3c0 [ 1154.534313][T20955] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1154.534380][T20955] ? find_held_lock+0x2b/0x80 [ 1154.534421][T20955] tomoyo_file_open+0x6b/0x90 [ 1154.534449][T20955] security_file_open+0x84/0x1e0 [ 1154.534487][T20955] do_dentry_open+0x596/0x1c10 [ 1154.534525][T20955] vfs_open+0x82/0x3f0 [ 1154.534563][T20955] path_openat+0x1e5e/0x2d40 [ 1154.534607][T20955] ? __pfx_path_openat+0x10/0x10 [ 1154.534635][T20955] ? __lock_acquire+0xaa4/0x1ba0 [ 1154.534674][T20955] do_filp_open+0x20b/0x470 [ 1154.534701][T20955] ? __pfx_do_filp_open+0x10/0x10 [ 1154.534751][T20955] ? _raw_spin_unlock+0x28/0x50 [ 1154.534784][T20955] ? alloc_fd+0x471/0x7d0 [ 1154.534817][T20955] do_sys_openat2+0x11b/0x1d0 [ 1154.534853][T20955] ? __pfx_do_sys_openat2+0x10/0x10 [ 1154.534902][T20955] __x64_sys_open+0x153/0x1e0 [ 1154.534938][T20955] ? __pfx___x64_sys_open+0x10/0x10 [ 1154.534982][T20955] ? rcu_is_watching+0x12/0xc0 [ 1154.535010][T20955] do_syscall_64+0xcd/0x230 [ 1154.535052][T20955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.535078][T20955] RIP: 0033:0x7f37ef78e969 [ 1154.535099][T20955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1154.535126][T20955] RSP: 002b:00007f37f05b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1154.535151][T20955] RAX: ffffffffffffffda RBX: 00007f37ef9b5fa0 RCX: 00007f37ef78e969 [ 1154.535169][T20955] RDX: e1d2b27bdc14aab4 RSI: 0000000000004242 RDI: 0000200000000000 [ 1154.535186][T20955] RBP: 00007f37ef810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1154.535202][T20955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1154.535217][T20955] R13: 0000000000000000 R14: 00007f37ef9b5fa0 R15: 00007ffc5c0b7fc8 [ 1154.535250][T20955] [ 1154.941729][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2863'. [ 1154.952510][T20964] binder: 20963:20964 ioctl c00c620f 200000001100 returned -22 [ 1155.289019][T20962] zswap: compressor not available [ 1155.324923][T20959] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 1157.044687][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.096925][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.136452][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.185471][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.253263][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.319745][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.363461][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.415121][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.471245][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.544537][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.586179][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.626804][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.663858][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.706884][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.731842][T21005] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1157.975625][T21019] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1158.190779][T21023] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1158.336066][T21028] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1158.419990][T21029] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2879'. [ 1158.438838][T21031] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2880'. [ 1158.514910][T21029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1158.550066][T21029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1160.063074][T21050] nvme_fcloop: unknown parameter or missing value '7' [ 1160.121720][T21050] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2884'. [ 1160.665432][T21056] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(1307711440.391720218.2661663372), cmd(3) [ 1161.539312][T21050] team0 (unregistering): Port device team_slave_0 removed [ 1161.608612][T21050] team0 (unregistering): Port device team_slave_1 removed [ 1162.138716][T21044] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1162.561751][T21066] Invalid ELF header magic: != ELF [ 1162.660088][T21067] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2887'. [ 1163.924503][T21076] FAULT_INJECTION: forcing a failure. [ 1163.924503][T21076] name failslab, interval 1, probability 0, space 0, times 0 [ 1164.101648][T21076] CPU: 1 UID: 0 PID: 21076 Comm: syz.6.2889 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1164.101691][T21076] Tainted: [U]=USER [ 1164.101699][T21076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1164.101714][T21076] Call Trace: [ 1164.101723][T21076] [ 1164.101733][T21076] dump_stack_lvl+0x16c/0x1f0 [ 1164.101774][T21076] should_fail_ex+0x512/0x640 [ 1164.101809][T21076] ? fs_reclaim_acquire+0xae/0x150 [ 1164.101850][T21076] ? tomoyo_encode2+0x100/0x3e0 [ 1164.101883][T21076] should_failslab+0xc2/0x120 [ 1164.101915][T21076] __kmalloc_noprof+0xd2/0x510 [ 1164.101942][T21076] ? d_absolute_path+0x136/0x1a0 [ 1164.101977][T21076] tomoyo_encode2+0x100/0x3e0 [ 1164.102016][T21076] tomoyo_encode+0x29/0x50 [ 1164.102049][T21076] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1164.102094][T21076] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1164.102127][T21076] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1164.102236][T21076] ? do_raw_spin_lock+0x12c/0x2b0 [ 1164.102287][T21076] tomoyo_file_open+0x6b/0x90 [ 1164.102312][T21076] security_file_open+0x84/0x1e0 [ 1164.102347][T21076] do_dentry_open+0x596/0x1c10 [ 1164.102382][T21076] vfs_open+0x82/0x3f0 [ 1164.102418][T21076] path_openat+0x1e5e/0x2d40 [ 1164.102454][T21076] ? __pfx_path_openat+0x10/0x10 [ 1164.102487][T21076] do_filp_open+0x20b/0x470 [ 1164.102511][T21076] ? __pfx_do_filp_open+0x10/0x10 [ 1164.102557][T21076] ? alloc_fd+0x471/0x7d0 [ 1164.102587][T21076] do_sys_openat2+0x11b/0x1d0 [ 1164.102620][T21076] ? __pfx_do_sys_openat2+0x10/0x10 [ 1164.102665][T21076] __x64_sys_openat+0x174/0x210 [ 1164.102699][T21076] ? __pfx___x64_sys_openat+0x10/0x10 [ 1164.102735][T21076] ? rcu_is_watching+0x12/0xc0 [ 1164.102767][T21076] do_syscall_64+0xcd/0x230 [ 1164.102805][T21076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.102830][T21076] RIP: 0033:0x7fb7af38e969 [ 1164.102850][T21076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1164.102874][T21076] RSP: 002b:00007fb7b0246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1164.102897][T21076] RAX: ffffffffffffffda RBX: 00007fb7af5b5fa0 RCX: 00007fb7af38e969 [ 1164.102913][T21076] RDX: 0000000000000201 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 1164.102929][T21076] RBP: 00007fb7af410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1164.102944][T21076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1164.102958][T21076] R13: 0000000000000000 R14: 00007fb7af5b5fa0 R15: 00007ffde0600f78 [ 1164.102989][T21076] [ 1164.717819][T21079] ICMPv6: process `syz.2.2890' is using deprecated sysctl (syscall) net.ipv6.neigh.veth0_to_bridge.base_reachable_time - use net.ipv6.neigh.veth0_to_bridge.base_reachable_time_ms instead [ 1166.559921][T21076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1167.549916][T21114] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2896'. [ 1167.797577][T21126] sysfs_service_op_show: Client not running :-5: [ 1169.677636][T21148] netlink: 326 bytes leftover after parsing attributes in process `syz.2.2903'. [ 1169.766412][T21148] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1169.835842][T21148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.843833][T21148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.094447][T21158] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2905'. [ 1171.257595][T21173] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 1172.716160][T15302] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1174.050383][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2918'. [ 1174.567241][T21233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2921'. [ 1174.794436][T21233] bond0: (slave bond_slave_1): Releasing backup interface [ 1175.294873][T21247] i2c i2c-0: delete_device: Can't find device in list [ 1175.807281][T21265] vivid-007: ================= START STATUS ================= [ 1175.807314][T21265] vivid-007: Generate PTS: true [ 1175.807351][T21265] vivid-007: Generate SCR: true [ 1175.807376][T21265] tpg source WxH: 640x360 (Y'CbCr) [ 1175.807391][T21265] tpg field: 1 [ 1175.807400][T21265] tpg crop: (0,0)/640x360 [ 1175.807416][T21265] tpg compose: (0,0)/640x360 [ 1175.807432][T21265] tpg colorspace: 8 [ 1175.807442][T21265] tpg transfer function: 0/0 [ 1175.807454][T21265] tpg Y'CbCr encoding: 0/0 [ 1175.807466][T21265] tpg quantization: 0/0 [ 1175.807477][T21265] tpg RGB range: 0/2 [ 1175.807489][T21265] vivid-007: ================== END STATUS ================== [ 1176.757337][T21257] tty tty48: ldisc open failed (-12), clearing slot 47 [ 1178.053677][T21293] FAULT_INJECTION: forcing a failure. [ 1178.053677][T21293] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.160721][T21295] block nbd9: NBD_DISCONNECT [ 1178.203137][T21293] CPU: 1 UID: 0 PID: 21293 Comm: syz.6.2930 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1178.203178][T21293] Tainted: [U]=USER [ 1178.203187][T21293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1178.203202][T21293] Call Trace: [ 1178.203210][T21293] [ 1178.203220][T21293] dump_stack_lvl+0x16c/0x1f0 [ 1178.203259][T21293] should_fail_ex+0x512/0x640 [ 1178.203294][T21293] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1178.203322][T21293] should_failslab+0xc2/0x120 [ 1178.203353][T21293] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1178.203377][T21293] ? lockdep_init_map_type+0x5c/0x280 [ 1178.203410][T21293] ? dummy_hrtimer_create+0x45/0x170 [ 1178.203438][T21293] dummy_hrtimer_create+0x45/0x170 [ 1178.203461][T21293] ? __pfx_dummy_hrtimer_create+0x10/0x10 [ 1178.203483][T21293] dummy_pcm_open+0xd4/0x5b0 [ 1178.203522][T21293] snd_pcm_open_substream+0xa60/0x17f0 [ 1178.203551][T21293] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1178.203586][T21293] snd_pcm_oss_open+0x735/0x1400 [ 1178.203634][T21293] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1178.203671][T21293] ? __lock_acquire+0xaa4/0x1ba0 [ 1178.203709][T21293] ? __pfx_default_wake_function+0x10/0x10 [ 1178.203754][T21293] ? __lock_acquire+0xaa4/0x1ba0 [ 1178.203799][T21293] ? do_raw_spin_lock+0x12c/0x2b0 [ 1178.203840][T21293] ? soundcore_open+0x35a/0x580 [ 1178.203872][T21293] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1178.203910][T21293] soundcore_open+0x409/0x580 [ 1178.203944][T21293] ? __pfx_soundcore_open+0x10/0x10 [ 1178.203975][T21293] chrdev_open+0x231/0x6a0 [ 1178.204001][T21293] ? __pfx_apparmor_file_open+0x10/0x10 [ 1178.204034][T21293] ? __pfx_chrdev_open+0x10/0x10 [ 1178.204064][T21293] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1178.204107][T21293] do_dentry_open+0x741/0x1c10 [ 1178.204134][T21293] ? __pfx_chrdev_open+0x10/0x10 [ 1178.204168][T21293] vfs_open+0x82/0x3f0 [ 1178.204203][T21293] path_openat+0x1e5e/0x2d40 [ 1178.204239][T21293] ? __pfx_path_openat+0x10/0x10 [ 1178.204272][T21293] do_filp_open+0x20b/0x470 [ 1178.204296][T21293] ? __pfx_do_filp_open+0x10/0x10 [ 1178.204343][T21293] ? alloc_fd+0x471/0x7d0 [ 1178.204373][T21293] do_sys_openat2+0x11b/0x1d0 [ 1178.204406][T21293] ? __pfx_do_sys_openat2+0x10/0x10 [ 1178.204451][T21293] __x64_sys_openat+0x174/0x210 [ 1178.204486][T21293] ? __pfx___x64_sys_openat+0x10/0x10 [ 1178.204522][T21293] ? rcu_is_watching+0x12/0xc0 [ 1178.204554][T21293] do_syscall_64+0xcd/0x230 [ 1178.204593][T21293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.204618][T21293] RIP: 0033:0x7fb7af38e969 [ 1178.204637][T21293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.204662][T21293] RSP: 002b:00007fb7b0246038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1178.204685][T21293] RAX: ffffffffffffffda RBX: 00007fb7af5b5fa0 RCX: 00007fb7af38e969 [ 1178.204701][T21293] RDX: 0000000000080000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1178.204717][T21293] RBP: 00007fb7af410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1178.204732][T21293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.204746][T21293] R13: 0000000000000000 R14: 00007fb7af5b5fa0 R15: 00007ffde0600f78 [ 1178.204777][T21293] [ 1179.700973][T21326] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1179.713358][T21325] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2936'. [ 1179.886856][T21324] netlink: 294 bytes leftover after parsing attributes in process `syz.2.2936'. [ 1179.901310][T21327] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1181.594407][T21347] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1182.326648][T21354] program syz.6.2941 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1182.489471][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.495928][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.469027][T21389] netlink: ct family unspecified [ 1184.666331][T21388] can: request_module (can-proto-0) failed. [ 1184.873516][T21391] FAULT_INJECTION: forcing a failure. [ 1184.873516][T21391] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.092482][T21391] CPU: 1 UID: 0 PID: 21391 Comm: syz.2.2947 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1185.092523][T21391] Tainted: [U]=USER [ 1185.092532][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1185.092546][T21391] Call Trace: [ 1185.092555][T21391] [ 1185.092564][T21391] dump_stack_lvl+0x16c/0x1f0 [ 1185.092606][T21391] should_fail_ex+0x512/0x640 [ 1185.092641][T21391] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1185.092669][T21391] should_failslab+0xc2/0x120 [ 1185.092701][T21391] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1185.092725][T21391] ? net_generic+0xea/0x2a0 [ 1185.092752][T21391] ? nexthop_net_init+0x73/0x140 [ 1185.092778][T21391] ? __pfx_nexthop_net_init+0x10/0x10 [ 1185.092802][T21391] nexthop_net_init+0x73/0x140 [ 1185.092824][T21391] ? tcf_net_init+0x55/0x150 [ 1185.092850][T21391] ops_init+0x1df/0x5f0 [ 1185.092884][T21391] setup_net+0x21e/0x850 [ 1185.092918][T21391] ? __pfx_setup_net+0x10/0x10 [ 1185.092947][T21391] ? lockdep_init_map_type+0x5c/0x280 [ 1185.092981][T21391] ? __pfx_down_read_killable+0x10/0x10 [ 1185.093009][T21391] ? debug_mutex_init+0x37/0x70 [ 1185.093035][T21391] copy_net_ns+0x2a6/0x5f0 [ 1185.093074][T21391] create_new_namespaces+0x3ea/0xad0 [ 1185.093118][T21391] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1185.093149][T21391] ksys_unshare+0x45b/0xa40 [ 1185.093184][T21391] ? __pfx_ksys_unshare+0x10/0x10 [ 1185.093216][T21391] ? xfd_validate_state+0x5d/0x180 [ 1185.093241][T21391] ? rcu_is_watching+0x12/0xc0 [ 1185.093270][T21391] __x64_sys_unshare+0x31/0x40 [ 1185.093303][T21391] do_syscall_64+0xcd/0x230 [ 1185.093341][T21391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.093366][T21391] RIP: 0033:0x7fc692f8e969 [ 1185.093385][T21391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1185.093408][T21391] RSP: 002b:00007fc693df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1185.093431][T21391] RAX: ffffffffffffffda RBX: 00007fc6931b6080 RCX: 00007fc692f8e969 [ 1185.093450][T21391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1185.093466][T21391] RBP: 00007fc693010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1185.093481][T21391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1185.093495][T21391] R13: 0000000000000000 R14: 00007fc6931b6080 R15: 00007ffd39c48a08 [ 1185.093526][T21391] [ 1186.295199][T21399] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1189.325816][T21429] Invalid ELF header magic: != ELF [ 1191.727669][T21429] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1191.727669][T21429] The task syz.5.2957 (21429) triggered the difference, watch for misbehavior. [ 1191.903336][T21430] snd_aloop snd_aloop.0: control 16781581:65535:6:i'x?F"i/hlzFK7fC*a*:0 is already present [ 1198.537135][T20483] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1198.548834][T20483] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1198.565195][T20483] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1198.574077][T20483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1198.582208][T20483] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1200.000385][T21483] chnl_net:caif_netlink_parms(): no params data found [ 1200.402952][T21511] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2973'. [ 1200.644446][T20483] Bluetooth: hci3: command tx timeout [ 1200.847842][T21511] bridge_slave_1 (unregistering): left allmulticast mode [ 1200.882631][T21511] bridge_slave_1 (unregistering): left promiscuous mode [ 1200.918849][T21511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.070911][T20483] bt_warn_ratelimited: 23 callbacks suppressed [ 1201.070932][T20483] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 1201.078980][T20483] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 1201.096257][T20483] bt_err_ratelimited: 89 callbacks suppressed [ 1201.096276][T20483] Bluetooth: hci2: adv larger than maximum supported [ 1201.103189][T20483] Bluetooth: hci2: adv larger than maximum supported [ 1201.110411][T20483] Bluetooth: hci2: Unknown advertising packet type: 0x30 [ 1201.124996][T20483] Bluetooth: hci2: Unknown advertising packet type: 0x32 [ 1201.502471][T21483] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.568321][T21483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.605639][T21483] bridge_slave_0: entered allmulticast mode [ 1201.647007][T21483] bridge_slave_0: entered promiscuous mode [ 1201.977099][T21483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.012777][T21483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.039910][T21483] bridge_slave_1: entered allmulticast mode [ 1202.095319][T21483] bridge_slave_1: entered promiscuous mode [ 1202.582049][T21483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1202.722544][T20483] Bluetooth: hci3: command tx timeout [ 1202.816572][T21483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.357585][T21483] team0: Port device team_slave_0 added [ 1203.404458][T21483] team0: Port device team_slave_1 added [ 1203.720043][T21483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1203.766423][T21483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1203.887530][T21483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.971084][T21483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1204.010538][T21483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1204.129642][T21483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.694912][T21483] hsr_slave_0: entered promiscuous mode [ 1204.727948][T21483] hsr_slave_1: entered promiscuous mode [ 1204.763065][T21483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1204.801313][T21483] Cannot create hsr debugfs directory [ 1204.809286][T20483] Bluetooth: hci3: command tx timeout [ 1206.593882][T21552] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1206.879560][T21483] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1206.886747][T20483] Bluetooth: hci3: command tx timeout [ 1207.046890][T21483] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1207.196851][T21483] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1207.479183][T21483] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1207.592424][T20483] Bluetooth: hci0: unexpected subevent 0x03 length: 253 > 9 [ 1208.188145][T21483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.400322][T21483] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.497937][ T6154] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.505254][ T6154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.596190][T21576] FAULT_INJECTION: forcing a failure. [ 1208.596190][T21576] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.624941][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.632529][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.946447][T21483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1208.957230][T21576] CPU: 1 UID: 0 PID: 21576 Comm: syz.2.2985 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1208.957272][T21576] Tainted: [U]=USER [ 1208.957280][T21576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1208.957296][T21576] Call Trace: [ 1208.957304][T21576] [ 1208.957313][T21576] dump_stack_lvl+0x16c/0x1f0 [ 1208.957354][T21576] should_fail_ex+0x512/0x640 [ 1208.957389][T21576] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1208.957422][T21576] should_failslab+0xc2/0x120 [ 1208.957453][T21576] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1208.957482][T21576] ? shmem_alloc_inode+0x25/0x50 [ 1208.957522][T21576] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1208.957557][T21576] shmem_alloc_inode+0x25/0x50 [ 1208.957592][T21576] alloc_inode+0x64/0x240 [ 1208.957624][T21576] new_inode+0x22/0x1c0 [ 1208.957657][T21576] shmem_get_inode+0x19a/0xfb0 [ 1208.957686][T21576] shmem_mknod+0x1a8/0x450 [ 1208.957720][T21576] ? __pfx_shmem_create+0x10/0x10 [ 1208.957740][T21576] lookup_open.isra.0+0x11d3/0x1580 [ 1208.957785][T21576] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1208.957838][T21576] ? __pfx_down_write+0x10/0x10 [ 1208.957859][T21576] ? mnt_get_write_access+0x20c/0x300 [ 1208.957896][T21576] path_openat+0x905/0x2d40 [ 1208.957931][T21576] ? __pfx_path_openat+0x10/0x10 [ 1208.957957][T21576] ? __lock_acquire+0xaa4/0x1ba0 [ 1208.957993][T21576] do_filp_open+0x20b/0x470 [ 1208.958018][T21576] ? __pfx_do_filp_open+0x10/0x10 [ 1208.958064][T21576] ? _raw_spin_unlock+0x28/0x50 [ 1208.958094][T21576] ? alloc_fd+0x471/0x7d0 [ 1208.958125][T21576] do_sys_openat2+0x11b/0x1d0 [ 1208.958158][T21576] ? __pfx_do_sys_openat2+0x10/0x10 [ 1208.958204][T21576] __x64_sys_open+0x153/0x1e0 [ 1208.958237][T21576] ? __pfx___x64_sys_open+0x10/0x10 [ 1208.958278][T21576] ? rcu_is_watching+0x12/0xc0 [ 1208.958304][T21576] do_syscall_64+0xcd/0x230 [ 1208.958343][T21576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.958368][T21576] RIP: 0033:0x7fc692f8e969 [ 1208.958387][T21576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1208.958412][T21576] RSP: 002b:00007fc693e14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1208.958434][T21576] RAX: ffffffffffffffda RBX: 00007fc6931b5fa0 RCX: 00007fc692f8e969 [ 1208.958451][T21576] RDX: e1d2b27bdc14aab4 RSI: 0000000000004242 RDI: 0000200000000000 [ 1208.958467][T21576] RBP: 00007fc693010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1208.958482][T21576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.958497][T21576] R13: 0000000000000000 R14: 00007fc6931b5fa0 R15: 00007ffd39c48a08 [ 1208.958528][T21576] [ 1209.553884][T21593] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1210.622926][T21483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1212.404714][T21483] veth0_vlan: entered promiscuous mode [ 1212.545217][T21483] veth1_vlan: entered promiscuous mode [ 1212.715788][T21483] veth0_macvtap: entered promiscuous mode [ 1212.787074][T21483] veth1_macvtap: entered promiscuous mode [ 1212.898751][T21483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1212.969300][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.025026][T21483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1213.079793][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.130265][T21483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1213.215564][T21483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.282603][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.322331][T21483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1213.370350][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1213.422205][T21483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1213.512801][T21483] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.552514][T21483] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.602005][T21483] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.635290][T21483] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1214.578971][T16163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1214.637311][T16163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.111823][T21505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1215.155645][T21505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1215.698955][T21642] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1217.154025][T21660] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2999'. [ 1217.289973][T21660] gretap0: refused to change device tx_queue_len [ 1217.939062][T21675] input: jJG8m8|;9c%vx{(lPQ J86V as /devices/virtual/input/input41 [ 1218.020154][T21676] sysfs_service_op_show: Client not running :-5: [ 1220.229265][T21713] random: crng reseeded on system resumption [ 1220.841424][T21724] ERROR: Out of memory at tomoyo_memory_ok. [ 1222.958574][T21760] FAULT_INJECTION: forcing a failure. [ 1222.958574][T21760] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.094623][T21760] CPU: 1 UID: 0 PID: 21760 Comm: syz.2.3011 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1223.094666][T21760] Tainted: [U]=USER [ 1223.094675][T21760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1223.094690][T21760] Call Trace: [ 1223.094698][T21760] [ 1223.094707][T21760] dump_stack_lvl+0x16c/0x1f0 [ 1223.094748][T21760] should_fail_ex+0x512/0x640 [ 1223.094785][T21760] ? fs_reclaim_acquire+0xae/0x150 [ 1223.094827][T21760] should_failslab+0xc2/0x120 [ 1223.094859][T21760] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1223.094884][T21760] ? tomoyo_write_log2+0x33d/0xc10 [ 1223.094924][T21760] tomoyo_write_log2+0x33d/0xc10 [ 1223.094983][T21760] tomoyo_supervisor+0x15e/0x13b0 [ 1223.095011][T21760] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1223.095048][T21760] ? lockdep_hardirqs_on+0x7c/0x110 [ 1223.095087][T21760] ? tomoyo_check_path_acl+0xad/0x210 [ 1223.095118][T21760] ? tomoyo_check_acl+0x1f7/0x410 [ 1223.095148][T21760] tomoyo_path_permission+0x270/0x3b0 [ 1223.095181][T21760] tomoyo_check_open_permission+0x37b/0x3c0 [ 1223.095213][T21760] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1223.095286][T21760] ? do_raw_spin_lock+0x12c/0x2b0 [ 1223.095333][T21760] tomoyo_file_open+0x6b/0x90 [ 1223.095359][T21760] security_file_open+0x84/0x1e0 [ 1223.095394][T21760] do_dentry_open+0x596/0x1c10 [ 1223.095431][T21760] vfs_open+0x82/0x3f0 [ 1223.095467][T21760] path_openat+0x1e5e/0x2d40 [ 1223.095505][T21760] ? __pfx_path_openat+0x10/0x10 [ 1223.095538][T21760] do_filp_open+0x20b/0x470 [ 1223.095563][T21760] ? __pfx_do_filp_open+0x10/0x10 [ 1223.095611][T21760] ? alloc_fd+0x471/0x7d0 [ 1223.095641][T21760] do_sys_openat2+0x11b/0x1d0 [ 1223.095673][T21760] ? __pfx_do_sys_openat2+0x10/0x10 [ 1223.095719][T21760] __x64_sys_openat+0x174/0x210 [ 1223.095753][T21760] ? __pfx___x64_sys_openat+0x10/0x10 [ 1223.095789][T21760] ? rcu_is_watching+0x12/0xc0 [ 1223.095823][T21760] do_syscall_64+0xcd/0x230 [ 1223.095864][T21760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.095889][T21760] RIP: 0033:0x7fc692f8e969 [ 1223.095909][T21760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1223.095934][T21760] RSP: 002b:00007fc693df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1223.095957][T21760] RAX: ffffffffffffffda RBX: 00007fc6931b6080 RCX: 00007fc692f8e969 [ 1223.095973][T21760] RDX: 0000000000082000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 1223.095989][T21760] RBP: 00007fc693010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1223.096004][T21760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1223.096019][T21760] R13: 0000000000000000 R14: 00007fc6931b6080 R15: 00007ffd39c48a08 [ 1223.096051][T21760] [ 1224.101860][T21772] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3017'. [ 1226.776740][T21804] openvswitch: netlink: Port -2134900732 exceeds max allowable 65535 [ 1227.191799][T21809] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3024'. [ 1228.929370][T20483] Bluetooth: hci1: unexpected event 0x3d length: 726 > 14 [ 1229.068906][T21833] FAULT_INJECTION: forcing a failure. [ 1229.068906][T21833] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.265642][T21833] CPU: 1 UID: 0 PID: 21833 Comm: syz.5.3029 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1229.265682][T21833] Tainted: [U]=USER [ 1229.265690][T21833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1229.265704][T21833] Call Trace: [ 1229.265711][T21833] [ 1229.265720][T21833] dump_stack_lvl+0x16c/0x1f0 [ 1229.265759][T21833] should_fail_ex+0x512/0x640 [ 1229.265793][T21833] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1229.265824][T21833] should_failslab+0xc2/0x120 [ 1229.265853][T21833] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1229.265881][T21833] ? __proc_create+0xc3/0x8c0 [ 1229.265908][T21833] ? __proc_create+0x2ce/0x8c0 [ 1229.265938][T21833] __proc_create+0x2ce/0x8c0 [ 1229.265966][T21833] ? __pfx___proc_create+0x10/0x10 [ 1229.265999][T21833] ? _raw_write_unlock+0x28/0x50 [ 1229.266036][T21833] proc_create_reg+0x7d/0x180 [ 1229.266066][T21833] proc_create_data+0x86/0x110 [ 1229.266105][T21833] ? __pfx_proc_create_data+0x10/0x10 [ 1229.266136][T21833] ? cache_register_net+0x137/0x5e0 [ 1229.266169][T21833] cache_register_net+0x1e0/0x5e0 [ 1229.266197][T21833] nfsd_export_init+0x16e/0x250 [ 1229.266221][T21833] ? __pfx_nfsd_net_init+0x10/0x10 [ 1229.266242][T21833] nfsd_net_init+0x33/0x3d0 [ 1229.266265][T21833] ? __pfx_nfsd_net_init+0x10/0x10 [ 1229.266287][T21833] ops_init+0x1df/0x5f0 [ 1229.266320][T21833] setup_net+0x21e/0x850 [ 1229.266353][T21833] ? __pfx_setup_net+0x10/0x10 [ 1229.266381][T21833] ? lockdep_init_map_type+0x5c/0x280 [ 1229.266415][T21833] ? __pfx_down_read_killable+0x10/0x10 [ 1229.266442][T21833] ? debug_mutex_init+0x37/0x70 [ 1229.266467][T21833] copy_net_ns+0x2a6/0x5f0 [ 1229.266503][T21833] create_new_namespaces+0x3ea/0xad0 [ 1229.266538][T21833] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1229.266568][T21833] ksys_unshare+0x45b/0xa40 [ 1229.266603][T21833] ? __pfx_ksys_unshare+0x10/0x10 [ 1229.266641][T21833] ? xfd_validate_state+0x5d/0x180 [ 1229.266670][T21833] ? rcu_is_watching+0x12/0xc0 [ 1229.266699][T21833] __x64_sys_unshare+0x31/0x40 [ 1229.266730][T21833] do_syscall_64+0xcd/0x230 [ 1229.266767][T21833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.266790][T21833] RIP: 0033:0x7f37ef78e969 [ 1229.266885][T21833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1229.266930][T21833] RSP: 002b:00007f37f05b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1229.266953][T21833] RAX: ffffffffffffffda RBX: 00007f37ef9b5fa0 RCX: 00007f37ef78e969 [ 1229.266970][T21833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1229.266985][T21833] RBP: 00007f37ef810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1229.267000][T21833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.267015][T21833] R13: 0000000000000000 R14: 00007f37ef9b5fa0 R15: 00007ffc5c0b7fc8 [ 1229.267045][T21833] [ 1229.723301][T21844] openvswitch: netlink: Key type 261 is out of range max 32 [ 1229.733986][T21843] openvswitch: netlink: Key type 261 is out of range max 32 [ 1233.357756][T21890] Invalid ELF header magic: != ELF [ 1236.833319][T21937] ptrace attach of "./syz-executor exec"[15300] was attempted by "./syz-executor exec"[21937] [ 1242.572615][T22000] svc: failed to register nfsdv3 RPC service (errno 111). [ 1242.627792][T22000] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1243.845467][T22009] netlink: 'syz.8.3058': attribute type 1 has an invalid length. [ 1243.936623][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.943959][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.773343][T22043] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1250.633120][T22093] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3075'. [ 1255.025277][T22145] input: jJG8m8|;9c%vx{(lPQ J86V as /devices/virtual/input/input42 [ 1255.443671][T22158] random: crng reseeded on system resumption [ 1259.822959][T20529] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.987804][T22228] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1260.160620][T22222] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1260.268921][T22222] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1260.320458][T20529] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.383325][T22222] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1260.541916][T22235] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1260.762791][T22235] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 1261.416806][T20529] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.825309][T20529] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.657584][T20529] bridge_slave_0: left allmulticast mode [ 1262.752687][T20529] bridge_slave_0: left promiscuous mode [ 1262.797346][T20529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.815522][T22254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1262.862746][T22254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1262.952741][T22254] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1263.163150][T22254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1263.257518][T22254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1263.353618][T22254] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1263.572071][T22254] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1263.638112][T22254] CPU0 is offline. [ 1264.242390][T20483] Bluetooth: hci0: command 0x0c1a tx timeout [ 1264.887345][T20483] Bluetooth: hci1: command 0x0c1a tx timeout [ 1265.203879][T20483] Bluetooth: hci2: command 0x0c1a tx timeout [ 1265.290260][T20483] Bluetooth: hci3: command 0x0c1a tx timeout [ 1265.960333][T22308] netlink: 85 bytes leftover after parsing attributes in process `syz.5.3112'. [ 1266.203671][T20529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.227192][T20529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.254751][T20529] bond0 (unregistering): Released all slaves [ 1266.908546][T20529] hsr_slave_0: left promiscuous mode [ 1266.929144][T20529] hsr_slave_1: left promiscuous mode [ 1266.962962][T20483] Bluetooth: hci1: command 0x0c1a tx timeout [ 1266.999890][T20529] veth1_macvtap: left promiscuous mode [ 1267.017093][T20529] veth0_macvtap: left promiscuous mode [ 1267.033302][T20529] veth1_vlan: left promiscuous mode [ 1267.042163][T20529] veth0_vlan: left promiscuous mode [ 1267.366480][T20483] Bluetooth: hci3: command 0x0c1a tx timeout [ 1268.576602][T22315] Console: switching to colour VGA+ 80x25 [ 1268.587018][T20529] team0 (unregistering): Port device team_slave_1 removed [ 1268.753864][T20529] team0 (unregistering): Port device team_slave_0 removed [ 1269.445887][T20483] Bluetooth: hci3: command 0x0c1a tx timeout [ 1271.448130][T22349] FAULT_INJECTION: forcing a failure. [ 1271.448130][T22349] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1271.558160][T22349] CPU: 1 UID: 0 PID: 22349 Comm: syz.5.3118 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1271.558203][T22349] Tainted: [U]=USER [ 1271.558212][T22349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1271.558227][T22349] Call Trace: [ 1271.558235][T22349] [ 1271.558245][T22349] dump_stack_lvl+0x16c/0x1f0 [ 1271.558286][T22349] should_fail_ex+0x512/0x640 [ 1271.558327][T22349] should_fail_alloc_page+0xe7/0x130 [ 1271.558360][T22349] prepare_alloc_pages+0x3c2/0x610 [ 1271.558403][T22349] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 1271.558442][T22349] ? find_held_lock+0x2b/0x80 [ 1271.558468][T22349] ? mm_drop_all_locks+0x395/0x4c0 [ 1271.558502][T22349] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1271.558541][T22349] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1271.558570][T22349] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1271.558623][T22349] ? mm_drop_all_locks+0x395/0x4c0 [ 1271.558652][T22349] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1271.558689][T22349] ? policy_nodemask+0xea/0x4e0 [ 1271.558721][T22349] alloc_pages_mpol+0x1fb/0x550 [ 1271.558753][T22349] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1271.558792][T22349] alloc_pages_noprof+0x131/0x390 [ 1271.558824][T22349] kvm_coalesced_mmio_init+0x1a/0x120 [ 1271.558862][T22349] kvm_dev_ioctl+0xe76/0x1ad0 [ 1271.558896][T22349] ? find_held_lock+0x2b/0x80 [ 1271.558918][T22349] ? hook_file_ioctl_common+0x145/0x410 [ 1271.558948][T22349] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1271.558980][T22349] ? __fget_files+0x20e/0x3c0 [ 1271.559007][T22349] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1271.559038][T22349] __x64_sys_ioctl+0x193/0x200 [ 1271.559075][T22349] do_syscall_64+0xcd/0x230 [ 1271.559113][T22349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.559138][T22349] RIP: 0033:0x7f37ef78e969 [ 1271.559157][T22349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1271.559186][T22349] RSP: 002b:00007f37f0593038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.559209][T22349] RAX: ffffffffffffffda RBX: 00007f37ef9b6080 RCX: 00007f37ef78e969 [ 1271.559225][T22349] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1271.559241][T22349] RBP: 00007f37ef810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1271.559256][T22349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1271.559270][T22349] R13: 0000000000000000 R14: 00007f37ef9b6080 R15: 00007ffc5c0b7fc8 [ 1271.559299][T22349] [ 1272.636102][T22367] FAULT_INJECTION: forcing a failure. [ 1272.636102][T22367] name failslab, interval 1, probability 0, space 0, times 0 [ 1272.795468][T22367] CPU: 1 UID: 0 PID: 22367 Comm: syz.2.3121 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1272.795508][T22367] Tainted: [U]=USER [ 1272.795517][T22367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1272.795531][T22367] Call Trace: [ 1272.795540][T22367] [ 1272.795550][T22367] dump_stack_lvl+0x16c/0x1f0 [ 1272.795590][T22367] should_fail_ex+0x512/0x640 [ 1272.795626][T22367] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1272.795654][T22367] should_failslab+0xc2/0x120 [ 1272.795685][T22367] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1272.795710][T22367] ? ptp_open+0xe3/0x520 [ 1272.795740][T22367] ptp_open+0xe3/0x520 [ 1272.795769][T22367] ? __pfx_ptp_open+0x10/0x10 [ 1272.795804][T22367] ? __pfx_ptp_open+0x10/0x10 [ 1272.795829][T22367] posix_clock_open+0x17b/0x290 [ 1272.795857][T22367] ? __pfx_posix_clock_open+0x10/0x10 [ 1272.795883][T22367] chrdev_open+0x231/0x6a0 [ 1272.795909][T22367] ? __pfx_apparmor_file_open+0x10/0x10 [ 1272.795942][T22367] ? __pfx_chrdev_open+0x10/0x10 [ 1272.795972][T22367] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1272.796016][T22367] do_dentry_open+0x741/0x1c10 [ 1272.796042][T22367] ? __pfx_chrdev_open+0x10/0x10 [ 1272.796075][T22367] vfs_open+0x82/0x3f0 [ 1272.796112][T22367] path_openat+0x1e5e/0x2d40 [ 1272.796147][T22367] ? __pfx_path_openat+0x10/0x10 [ 1272.796180][T22367] do_filp_open+0x20b/0x470 [ 1272.796205][T22367] ? __pfx_do_filp_open+0x10/0x10 [ 1272.796252][T22367] ? alloc_fd+0x471/0x7d0 [ 1272.796300][T22367] do_sys_openat2+0x11b/0x1d0 [ 1272.796342][T22367] ? __pfx_do_sys_openat2+0x10/0x10 [ 1272.796388][T22367] __x64_sys_openat+0x174/0x210 [ 1272.796422][T22367] ? __pfx___x64_sys_openat+0x10/0x10 [ 1272.796458][T22367] ? rcu_is_watching+0x12/0xc0 [ 1272.796491][T22367] do_syscall_64+0xcd/0x230 [ 1272.796531][T22367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.796556][T22367] RIP: 0033:0x7fc692f8e969 [ 1272.796575][T22367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1272.796600][T22367] RSP: 002b:00007fc693df3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1272.796623][T22367] RAX: ffffffffffffffda RBX: 00007fc6931b6080 RCX: 00007fc692f8e969 [ 1272.796639][T22367] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1272.796655][T22367] RBP: 00007fc693010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1272.796671][T22367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.796685][T22367] R13: 0000000000000000 R14: 00007fc6931b6080 R15: 00007ffd39c48a08 [ 1272.796716][T22367] [ 1273.830932][T22384] FAULT_INJECTION: forcing a failure. [ 1273.830932][T22384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.913176][T22384] CPU: 1 UID: 0 PID: 22384 Comm: syz.5.3126 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1273.913216][T22384] Tainted: [U]=USER [ 1273.913231][T22384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1273.913245][T22384] Call Trace: [ 1273.913253][T22384] [ 1273.913262][T22384] dump_stack_lvl+0x16c/0x1f0 [ 1273.913302][T22384] should_fail_ex+0x512/0x640 [ 1273.913341][T22384] _copy_from_user+0x2e/0xd0 [ 1273.913379][T22384] copy_clone_args_from_user+0x150/0x7e0 [ 1273.913411][T22384] ? get_pid_task+0xfc/0x250 [ 1273.913446][T22384] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1273.913490][T22384] __do_sys_clone3+0xbd/0x290 [ 1273.913521][T22384] ? __pfx___do_sys_clone3+0x10/0x10 [ 1273.913567][T22384] ? __fget_files+0x20e/0x3c0 [ 1273.913610][T22384] do_syscall_64+0xcd/0x230 [ 1273.913648][T22384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.913672][T22384] RIP: 0033:0x7f37ef78e969 [ 1273.913690][T22384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.913714][T22384] RSP: 002b:00007f37f05b3f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1273.913737][T22384] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f37ef78e969 [ 1273.913753][T22384] RDX: 00007f37f05b3f20 RSI: 0000000000000058 RDI: 00007f37f05b3f20 [ 1273.913768][T22384] RBP: 00007f37f05b4090 R08: 0000000000000000 R09: 0000000000000058 [ 1273.913783][T22384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.913797][T22384] R13: 0000000000000000 R14: 00007f37ef9b5fa0 R15: 00007ffc5c0b7fc8 [ 1273.913827][T22384] [ 1274.217864][T22402] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1279.224176][T22475] netlink: 206 bytes leftover after parsing attributes in process `syz.7.3133'. [ 1279.580748][T22494] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1280.201847][T22510] FAULT_INJECTION: forcing a failure. [ 1280.201847][T22510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1280.297574][T22510] CPU: 1 UID: 0 PID: 22510 Comm: syz.5.3139 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1280.297615][T22510] Tainted: [U]=USER [ 1280.297623][T22510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1280.297638][T22510] Call Trace: [ 1280.297646][T22510] [ 1280.297655][T22510] dump_stack_lvl+0x16c/0x1f0 [ 1280.297696][T22510] should_fail_ex+0x512/0x640 [ 1280.297735][T22510] _copy_from_user+0x2e/0xd0 [ 1280.297772][T22510] copy_clone_args_from_user+0x488/0x7e0 [ 1280.297813][T22510] ? get_pid_task+0xfc/0x250 [ 1280.297848][T22510] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1280.297893][T22510] __do_sys_clone3+0xbd/0x290 [ 1280.297924][T22510] ? __pfx___do_sys_clone3+0x10/0x10 [ 1280.297969][T22510] ? __fget_files+0x20e/0x3c0 [ 1280.298012][T22510] do_syscall_64+0xcd/0x230 [ 1280.298049][T22510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.298073][T22510] RIP: 0033:0x7f37ef78e969 [ 1280.298091][T22510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1280.298115][T22510] RSP: 002b:00007f37f0571f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1280.298137][T22510] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f37ef78e969 [ 1280.298152][T22510] RDX: 00007f37f0571f20 RSI: 0000000000000058 RDI: 00007f37f0571f20 [ 1280.298167][T22510] RBP: 00007f37f0572090 R08: 0000000000000000 R09: 0000000000000058 [ 1280.298182][T22510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.298196][T22510] R13: 0000000000000000 R14: 00007f37ef9b6160 R15: 00007ffc5c0b7fc8 [ 1280.298226][T22510] [ 1283.901937][T22545] FAULT_INJECTION: forcing a failure. [ 1283.901937][T22545] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.301827][T22545] CPU: 1 UID: 0 PID: 22545 Comm: syz.7.3144 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1284.301868][T22545] Tainted: [U]=USER [ 1284.301876][T22545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1284.301891][T22545] Call Trace: [ 1284.301899][T22545] [ 1284.301909][T22545] dump_stack_lvl+0x16c/0x1f0 [ 1284.301950][T22545] should_fail_ex+0x512/0x640 [ 1284.301985][T22545] ? fs_reclaim_acquire+0xae/0x150 [ 1284.302026][T22545] ? tomoyo_encode2+0x100/0x3e0 [ 1284.302060][T22545] should_failslab+0xc2/0x120 [ 1284.302091][T22545] __kmalloc_noprof+0xd2/0x510 [ 1284.302125][T22545] ? d_absolute_path+0x136/0x1a0 [ 1284.302161][T22545] tomoyo_encode2+0x100/0x3e0 [ 1284.302206][T22545] tomoyo_encode+0x29/0x50 [ 1284.302239][T22545] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1284.302284][T22545] tomoyo_path_number_perm+0x245/0x580 [ 1284.302313][T22545] ? tomoyo_path_number_perm+0x237/0x580 [ 1284.302345][T22545] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1284.302407][T22545] ? find_held_lock+0x2b/0x80 [ 1284.302430][T22545] ? hook_file_ioctl_common+0x145/0x410 [ 1284.302466][T22545] ? __fget_files+0x20e/0x3c0 [ 1284.302493][T22545] security_file_ioctl+0x9b/0x240 [ 1284.302526][T22545] __x64_sys_ioctl+0xb7/0x200 [ 1284.302562][T22545] do_syscall_64+0xcd/0x230 [ 1284.302601][T22545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.302625][T22545] RIP: 0033:0x7fdb0ab8e969 [ 1284.302644][T22545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1284.302669][T22545] RSP: 002b:00007fdb0ba91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1284.302691][T22545] RAX: ffffffffffffffda RBX: 00007fdb0adb6080 RCX: 00007fdb0ab8e969 [ 1284.302708][T22545] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 1284.302723][T22545] RBP: 00007fdb0ac10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1284.302738][T22545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.302752][T22545] R13: 0000000000000000 R14: 00007fdb0adb6080 R15: 00007ffcdc889dd8 [ 1284.302782][T22545] [ 1284.536592][T22565] program syz.2.3148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1284.941207][T22577] netlink: 'syz.5.3150': attribute type 22 has an invalid length. [ 1285.010638][T22577] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3150'. [ 1285.785402][T22591] FAULT_INJECTION: forcing a failure. [ 1285.785402][T22591] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.902154][T22591] CPU: 1 UID: 0 PID: 22591 Comm: syz.2.3151 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1285.902202][T22591] Tainted: [U]=USER [ 1285.902211][T22591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1285.902227][T22591] Call Trace: [ 1285.902235][T22591] [ 1285.902245][T22591] dump_stack_lvl+0x16c/0x1f0 [ 1285.902288][T22591] should_fail_ex+0x512/0x640 [ 1285.902325][T22591] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1285.902358][T22591] should_failslab+0xc2/0x120 [ 1285.902390][T22591] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1285.902419][T22591] ? copy_process+0x4bd/0x91a0 [ 1285.902456][T22591] copy_process+0x4bd/0x91a0 [ 1285.902488][T22591] ? __lock_acquire+0x5ca/0x1ba0 [ 1285.902528][T22591] ? __lock_acquire+0xaa4/0x1ba0 [ 1285.902568][T22591] ? __pfx_copy_process+0x10/0x10 [ 1285.902605][T22591] ? find_held_lock+0x2b/0x80 [ 1285.902627][T22591] ? __might_fault+0xe3/0x190 [ 1285.902655][T22591] ? __might_fault+0xe3/0x190 [ 1285.902681][T22591] ? __might_fault+0x13b/0x190 [ 1285.902718][T22591] ? _copy_from_user+0x59/0xd0 [ 1285.902761][T22591] kernel_clone+0xfc/0x960 [ 1285.902791][T22591] ? get_pid_task+0xfc/0x250 [ 1285.902826][T22591] ? __pfx_kernel_clone+0x10/0x10 [ 1285.902875][T22591] __do_sys_clone3+0x212/0x290 [ 1285.902908][T22591] ? __pfx___do_sys_clone3+0x10/0x10 [ 1285.902966][T22591] ? __fget_files+0x20e/0x3c0 [ 1285.903013][T22591] do_syscall_64+0xcd/0x230 [ 1285.903053][T22591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.903079][T22591] RIP: 0033:0x7fc692f8e969 [ 1285.903104][T22591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1285.903129][T22591] RSP: 002b:00007fc693dd1f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1285.903153][T22591] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fc692f8e969 [ 1285.903170][T22591] RDX: 00007fc693dd1f20 RSI: 0000000000000058 RDI: 00007fc693dd1f20 [ 1285.903186][T22591] RBP: 00007fc693dd2090 R08: 0000000000000000 R09: 0000000000000058 [ 1285.903202][T22591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.903217][T22591] R13: 0000000000000000 R14: 00007fc6931b6160 R15: 00007ffd39c48a08 [ 1285.903249][T22591] [ 1286.210496][T22545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1286.560701][T22598] openvswitch: netlink: Multiple metadata blocks provided [ 1287.065866][T22611] ERROR: Out of memory at tomoyo_memory_ok. [ 1287.188039][T22611] FAULT_INJECTION: forcing a failure. [ 1287.188039][T22611] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.315256][T22611] CPU: 1 UID: 0 PID: 22611 Comm: syz.8.3156 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1287.315302][T22611] Tainted: [U]=USER [ 1287.315311][T22611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1287.315327][T22611] Call Trace: [ 1287.315336][T22611] [ 1287.315347][T22611] dump_stack_lvl+0x16c/0x1f0 [ 1287.315393][T22611] should_fail_ex+0x512/0x640 [ 1287.315432][T22611] ? __kmalloc_noprof+0xbf/0x510 [ 1287.315464][T22611] ? devlink_fmsg_put_value+0xaa/0x2d0 [ 1287.315497][T22611] should_failslab+0xc2/0x120 [ 1287.315530][T22611] __kmalloc_noprof+0xd2/0x510 [ 1287.315568][T22611] devlink_fmsg_put_value+0xaa/0x2d0 [ 1287.315606][T22611] devlink_fmsg_u32_put+0xef/0x150 [ 1287.315640][T22611] ? __pfx_devlink_fmsg_u32_put+0x10/0x10 [ 1287.315677][T22611] ? devlink_fmsg_arr_pair_nest_start+0xec/0x130 [ 1287.315715][T22611] nsim_dev_dummy_fmsg_put+0x131/0x1e0 [ 1287.315748][T22611] devlink_health_do_dump+0x243/0x620 [ 1287.315789][T22611] devlink_health_report+0x3c9/0x9c0 [ 1287.315838][T22611] ? __pfx_devlink_health_report+0x10/0x10 [ 1287.315876][T22611] ? _copy_from_user+0x59/0xd0 [ 1287.315922][T22611] nsim_dev_health_break_write+0x166/0x210 [ 1287.315954][T22611] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1287.315997][T22611] full_proxy_write+0x13c/0x200 [ 1287.316032][T22611] vfs_write+0x25c/0x1180 [ 1287.316056][T22611] ? __pfx_full_proxy_write+0x10/0x10 [ 1287.316091][T22611] ? __pfx___mutex_lock+0x10/0x10 [ 1287.316134][T22611] ? __pfx_vfs_write+0x10/0x10 [ 1287.316174][T22611] ? __fget_files+0x20e/0x3c0 [ 1287.316208][T22611] ksys_write+0x12a/0x240 [ 1287.316234][T22611] ? __pfx_ksys_write+0x10/0x10 [ 1287.316258][T22611] ? rcu_is_watching+0x12/0xc0 [ 1287.316293][T22611] do_syscall_64+0xcd/0x230 [ 1287.316336][T22611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.316363][T22611] RIP: 0033:0x7f082ff8e969 [ 1287.316383][T22611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1287.316409][T22611] RSP: 002b:00007f0830ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1287.316434][T22611] RAX: ffffffffffffffda RBX: 00007f08301b5fa0 RCX: 00007f082ff8e969 [ 1287.316451][T22611] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000004 [ 1287.316467][T22611] RBP: 00007f0830010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1287.316484][T22611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1287.316500][T22611] R13: 0000000000000000 R14: 00007f08301b5fa0 R15: 00007ffd3b237588 [ 1287.316534][T22611] [ 1289.913789][T22638] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1291.070414][T22654] netlink: 26 bytes leftover after parsing attributes in process `syz.8.3162'. [ 1292.444682][T22672] FAULT_INJECTION: forcing a failure. [ 1292.444682][T22672] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1292.515483][T22672] CPU: 1 UID: 0 PID: 22672 Comm: syz.2.3166 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1292.515526][T22672] Tainted: [U]=USER [ 1292.515536][T22672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1292.515553][T22672] Call Trace: [ 1292.515564][T22672] [ 1292.515575][T22672] dump_stack_lvl+0x16c/0x1f0 [ 1292.515620][T22672] should_fail_ex+0x512/0x640 [ 1292.515664][T22672] get_futex_key+0x49e/0x1000 [ 1292.515696][T22672] ? __pfx_get_futex_key+0x10/0x10 [ 1292.515725][T22672] ? __lock_acquire+0xaa4/0x1ba0 [ 1292.515767][T22672] futex_wake+0xe7/0x4e0 [ 1292.515804][T22672] ? __pfx_futex_wake+0x10/0x10 [ 1292.515844][T22672] ? lock_acquire+0x179/0x350 [ 1292.515878][T22672] ? find_held_lock+0x2b/0x80 [ 1292.515907][T22672] do_futex+0x1e3/0x350 [ 1292.515936][T22672] ? __pfx_do_futex+0x10/0x10 [ 1292.515965][T22672] ? ktime_get+0x1a7/0x310 [ 1292.516005][T22672] __x64_sys_futex+0x1e0/0x4c0 [ 1292.516040][T22672] ? __pfx___x64_sys_futex+0x10/0x10 [ 1292.516072][T22672] ? rcu_is_watching+0x12/0xc0 [ 1292.516106][T22672] do_syscall_64+0xcd/0x230 [ 1292.516147][T22672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.516174][T22672] RIP: 0033:0x7fc692f8e969 [ 1292.516194][T22672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1292.516219][T22672] RSP: 002b:00007fc693e140e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1292.516243][T22672] RAX: ffffffffffffffda RBX: 00007fc6931b5fa8 RCX: 00007fc692f8e969 [ 1292.516261][T22672] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc6931b5fac [ 1292.516277][T22672] RBP: 00007fc6931b5fa0 R08: 00007fc693e15000 R09: 0000000000000000 [ 1292.516301][T22672] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fc6931b5fac [ 1292.516318][T22672] R13: 0000000000000000 R14: 00007ffd39c48920 R15: 00007ffd39c48a08 [ 1292.516351][T22672] [ 1293.971043][T22694] random: crng reseeded on system resumption [ 1300.904834][T22803] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1301.821133][T15302] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1301.834831][T15302] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1301.848320][T15302] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1301.865167][T15302] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1301.872997][T15302] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1303.578628][T22813] chnl_net:caif_netlink_parms(): no params data found [ 1303.922756][T15302] Bluetooth: hci4: command tx timeout [ 1304.456468][T22813] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.537390][T22813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.618931][T22813] bridge_slave_0: entered allmulticast mode [ 1304.738067][T22813] bridge_slave_0: entered promiscuous mode [ 1304.789673][T22813] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.864685][T22813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.930034][T22813] bridge_slave_1: entered allmulticast mode [ 1304.953540][T22813] bridge_slave_1: entered promiscuous mode [ 1305.344839][T22813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1305.381868][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.392762][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.690433][T22813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1306.004939][T15302] Bluetooth: hci4: command tx timeout [ 1306.131377][T22813] team0: Port device team_slave_0 added [ 1306.243985][T22813] team0: Port device team_slave_1 added [ 1306.721107][T22813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.755737][T22813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.883030][T22813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.959312][T22813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.986963][T22813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1307.076360][T22813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1307.690960][T22879] serio: Serial port ttyS0 [ 1307.793803][T22813] hsr_slave_0: entered promiscuous mode [ 1307.800340][T22813] hsr_slave_1: entered promiscuous mode [ 1307.883894][T22813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1307.933747][T22813] Cannot create hsr debugfs directory [ 1308.085466][T15302] Bluetooth: hci4: command tx timeout [ 1309.604843][T22896] vivid-007: ================= START STATUS ================= [ 1309.638998][T22813] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1309.682592][T22896] vivid-007: Generate PTS: true [ 1309.688144][T22896] vivid-007: Generate SCR: true [ 1309.757368][T22896] tpg source WxH: 640x360 (Y'CbCr) [ 1309.802518][T22896] tpg field: 1 [ 1309.823578][T22896] tpg crop: (0,0)/640x360 [ 1309.827966][T22896] tpg compose: (0,0)/640x360 [ 1309.860159][T22813] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1309.992987][T22896] tpg colorspace: 8 [ 1309.996880][T22896] tpg transfer function: 0/0 [ 1310.001505][T22896] tpg Y'CbCr encoding: 0/0 [ 1310.028440][T22900] Invalid ELF header magic: != ELF [ 1310.162448][T15302] Bluetooth: hci4: command tx timeout [ 1310.172823][T22896] tpg quantization: 0/0 [ 1310.177711][T22896] tpg RGB range: 0/2 [ 1310.181642][T22896] vivid-007: ================== END STATUS ================== [ 1310.295182][T22813] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1310.607829][T22813] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1311.280409][T22813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.477728][T22813] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.562819][T21507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.569977][T21507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.731988][T22925] netlink: 21 bytes leftover after parsing attributes in process `syz.8.3196'. [ 1311.850659][T22900] snd_aloop snd_aloop.0: control 16781581:65535:6:i'x?F"i/hlzFK7fC*a*:0 is already present [ 1311.906496][T21507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.913790][T21507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1312.149937][T22813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1314.117997][T22813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1315.635133][T22957] random: crng reseeded on system resumption [ 1316.114889][T22813] veth0_vlan: entered promiscuous mode [ 1316.258485][T22813] veth1_vlan: entered promiscuous mode [ 1316.705185][T22813] veth0_macvtap: entered promiscuous mode [ 1316.811210][T22813] veth1_macvtap: entered promiscuous mode [ 1317.155240][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.303406][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.402329][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.466298][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.532466][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1317.614960][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1317.694636][T22813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1318.197617][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1318.310324][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.393842][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1318.481366][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.562380][T22813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1318.625110][T22813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1318.713759][T22813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1318.881433][T22813] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.957835][T22813] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.039056][T22813] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.118967][T22813] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.110587][T20529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.207569][T20529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1320.421142][T21501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1320.475350][T21501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1321.786243][T15302] Bluetooth: hci4: unexpected event 0x3e length: 1020 > 260 [ 1321.786277][T15302] Bluetooth: hci4: unexpected subevent 0x01 length: 1019 > 18 [ 1321.866036][T23044] netlink: 186 bytes leftover after parsing attributes in process `syz.9.3181'. [ 1324.465122][T23062] input input46: cannot allocate more than FF_MAX_EFFECTS effects [ 1327.889670][T23127] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1330.593460][T21507] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.709817][T21507] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.003033][T21507] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1332.295559][T21507] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1333.851217][T21507] veth0_to_bridge: left allmulticast mode [ 1333.887741][T21507] veth0_to_bridge: left promiscuous mode [ 1333.938599][T21507] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1334.114860][T21507] bridge_slave_0: left allmulticast mode [ 1334.156810][T21507] bridge_slave_0: left promiscuous mode [ 1334.210887][T21507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.129235][T21507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.157946][T21507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.189134][T21507] bond0 (unregistering): Released all slaves [ 1336.356406][T21507] HfR: left promiscuous mode [ 1337.012939][T23239] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1337.019508][T23239] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1337.124122][T23239] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1337.130625][T23239] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1337.266267][T23239] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1337.273037][T23239] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1337.498769][T23253] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1337.991932][T23251] delete_channel: no stack [ 1338.214131][T21507] hsr_slave_0: left promiscuous mode [ 1338.299827][T21507] hsr_slave_1: left promiscuous mode [ 1338.355562][T21507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1338.425352][T21507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.469962][T23265] random: crng reseeded on system resumption [ 1338.528215][T21507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1338.577538][T21507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.736804][T21507] veth1_vlan: left promiscuous mode [ 1338.781187][T21507] veth0_vlan: left promiscuous mode [ 1341.645517][T21507] team0 (unregistering): Port device team_slave_1 removed [ 1342.015559][T21507] team0 (unregistering): Port device team_slave_0 removed [ 1343.225293][T23307] ptrace attach of "./syz-executor exec"[19023] was attempted by "./syz-executor exec"[23307] [ 1347.331315][T23346] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1348.811453][T23356] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1351.697064][T23396] netlink: 'syz.8.3258': attribute type 3 has an invalid length. [ 1352.413858][T23405] serio: Serial port ttyS0 [ 1357.057432][T23476] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1357.191494][T23477] binder: 23474:23477 ioctl 400c620e 200000000140 returned -22 [ 1358.908717][T23503] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1362.951448][T23564] ERROR: Out of memory at tomoyo_memory_ok. [ 1363.142713][T23564] FAULT_INJECTION: forcing a failure. [ 1363.142713][T23564] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.288898][T23564] CPU: 1 UID: 0 PID: 23564 Comm: syz.9.3282 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1363.288958][T23564] Tainted: [U]=USER [ 1363.288966][T23564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1363.288981][T23564] Call Trace: [ 1363.288989][T23564] [ 1363.288998][T23564] dump_stack_lvl+0x16c/0x1f0 [ 1363.289039][T23564] should_fail_ex+0x512/0x640 [ 1363.289074][T23564] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1363.289109][T23564] should_failslab+0xc2/0x120 [ 1363.289139][T23564] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1363.289181][T23564] ? kstrdup_const+0x63/0x80 [ 1363.289216][T23564] kstrdup+0x53/0x100 [ 1363.289247][T23564] kstrdup_const+0x63/0x80 [ 1363.289278][T23564] kvasprintf_const+0x10f/0x1a0 [ 1363.289304][T23564] kobject_set_name_vargs+0x5a/0x140 [ 1363.289329][T23564] dev_set_name+0xc7/0x100 [ 1363.289366][T23564] ? __pfx_dev_set_name+0x10/0x10 [ 1363.289401][T23564] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1363.289440][T23564] ? sprintf+0xcc/0x100 [ 1363.289472][T23564] ? __pfx_sprintf+0x10/0x10 [ 1363.289509][T23564] add_disk_fwnode+0x35f/0x13a0 [ 1363.289552][T23564] loop_add+0x909/0xb70 [ 1363.289585][T23564] ? do_vfs_ioctl+0x512/0x1990 [ 1363.289619][T23564] ? __pfx_loop_add+0x10/0x10 [ 1363.289650][T23564] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1363.289705][T23564] ? find_held_lock+0x2b/0x80 [ 1363.289733][T23564] loop_control_ioctl+0x13c/0x630 [ 1363.289770][T23564] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1363.289810][T23564] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1363.289848][T23564] __x64_sys_ioctl+0x193/0x200 [ 1363.289885][T23564] do_syscall_64+0xcd/0x230 [ 1363.289924][T23564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.289949][T23564] RIP: 0033:0x7fd28198e969 [ 1363.289968][T23564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.289992][T23564] RSP: 002b:00007fd2827db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1363.290015][T23564] RAX: ffffffffffffffda RBX: 00007fd281bb6080 RCX: 00007fd28198e969 [ 1363.290032][T23564] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000007 [ 1363.290047][T23564] RBP: 00007fd281a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1363.290063][T23564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1363.290078][T23564] R13: 0000000000000000 R14: 00007fd281bb6080 R15: 00007ffde31c59f8 [ 1363.290108][T23564] [ 1363.901311][T23576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3283'. [ 1364.227789][T23576] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.332028][T23576] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.528778][T23576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.637312][T23576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.754134][T23595] netlink: 186 bytes leftover after parsing attributes in process `syz.9.3285'. [ 1366.831847][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.838345][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.821723][T23644] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1369.397973][T23658] ERROR: Out of memory at tomoyo_memory_ok. [ 1369.925013][T23666] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1370.283259][T23673] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1370.318045][T23642] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(4004882004.333352764.898273355), cmd(2) [ 1377.251930][T23770] FAULT_INJECTION: forcing a failure. [ 1377.251930][T23770] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.335195][T23770] CPU: 1 UID: 0 PID: 23770 Comm: syz.9.3307 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1377.335242][T23770] Tainted: [U]=USER [ 1377.335253][T23770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1377.335267][T23770] Call Trace: [ 1377.335276][T23770] [ 1377.335285][T23770] dump_stack_lvl+0x16c/0x1f0 [ 1377.335326][T23770] should_fail_ex+0x512/0x640 [ 1377.335362][T23770] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1377.335394][T23770] should_failslab+0xc2/0x120 [ 1377.335426][T23770] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1377.335455][T23770] ? sk_prot_alloc+0x60/0x2a0 [ 1377.335497][T23770] sk_prot_alloc+0x60/0x2a0 [ 1377.335534][T23770] sk_alloc+0x36/0xc20 [ 1377.335562][T23770] inet6_create+0x381/0x1300 [ 1377.335591][T23770] ? inet6_create+0x7f/0x1300 [ 1377.335621][T23770] __sock_create+0x338/0x8d0 [ 1377.335664][T23770] inet_ctl_sock_create+0x94/0x230 [ 1377.335701][T23770] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 1377.335734][T23770] ? lockdep_init_map_type+0x5c/0x280 [ 1377.335777][T23770] ? do_init_timer+0xc9/0x110 [ 1377.335806][T23770] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 1377.335843][T23770] sctp_ctrlsock_init+0x40/0xf0 [ 1377.335878][T23770] ops_init+0x1df/0x5f0 [ 1377.335912][T23770] setup_net+0x21e/0x850 [ 1377.335946][T23770] ? __pfx_setup_net+0x10/0x10 [ 1377.335979][T23770] ? lockdep_init_map_type+0x5c/0x280 [ 1377.336012][T23770] ? __pfx_down_read_killable+0x10/0x10 [ 1377.336041][T23770] ? debug_mutex_init+0x37/0x70 [ 1377.336067][T23770] copy_net_ns+0x2a6/0x5f0 [ 1377.336104][T23770] create_new_namespaces+0x3ea/0xad0 [ 1377.336139][T23770] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1377.336170][T23770] ksys_unshare+0x45b/0xa40 [ 1377.336204][T23770] ? __pfx_ksys_unshare+0x10/0x10 [ 1377.336236][T23770] ? xfd_validate_state+0x5d/0x180 [ 1377.336261][T23770] ? rcu_is_watching+0x12/0xc0 [ 1377.336291][T23770] __x64_sys_unshare+0x31/0x40 [ 1377.336324][T23770] do_syscall_64+0xcd/0x230 [ 1377.336362][T23770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.336387][T23770] RIP: 0033:0x7fd28198e969 [ 1377.336406][T23770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.336429][T23770] RSP: 002b:00007fd2827ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1377.336452][T23770] RAX: ffffffffffffffda RBX: 00007fd281bb6160 RCX: 00007fd28198e969 [ 1377.336468][T23770] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1377.336483][T23770] RBP: 00007fd281a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1377.336498][T23770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.336512][T23770] R13: 0000000000000000 R14: 00007fd281bb6160 R15: 00007ffde31c59f8 [ 1377.336543][T23770] [ 1378.663635][T23784] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1378.906233][T23784] ubi0: attaching mtd0 [ 1378.910367][T23784] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 1380.320608][T23810] blktrace: Concurrent blktraces are not allowed on loop2 [ 1384.393095][T23872] FAULT_INJECTION: forcing a failure. [ 1384.393095][T23872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1384.470554][T23872] CPU: 1 UID: 0 PID: 23872 Comm: syz.9.3324 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1384.470595][T23872] Tainted: [U]=USER [ 1384.470603][T23872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1384.470618][T23872] Call Trace: [ 1384.470626][T23872] [ 1384.470636][T23872] dump_stack_lvl+0x16c/0x1f0 [ 1384.470677][T23872] should_fail_ex+0x512/0x640 [ 1384.470716][T23872] _copy_from_user+0x2e/0xd0 [ 1384.470754][T23872] input_event_from_user+0xb9/0x290 [ 1384.470792][T23872] ? __pfx_input_event_from_user+0x10/0x10 [ 1384.470826][T23872] ? __pfx___might_resched+0x10/0x10 [ 1384.470853][T23872] ? input_inject_event+0x1a5/0x390 [ 1384.470889][T23872] evdev_write+0x26b/0x440 [ 1384.470924][T23872] ? __pfx_evdev_write+0x10/0x10 [ 1384.470956][T23872] ? bpf_lsm_file_permission+0x9/0x10 [ 1384.470978][T23872] ? security_file_permission+0x71/0x210 [ 1384.471012][T23872] ? rw_verify_area+0xcf/0x680 [ 1384.471057][T23872] vfs_write+0x25c/0x1180 [ 1384.471078][T23872] ? __pfx_evdev_write+0x10/0x10 [ 1384.471114][T23872] ? __pfx_vfs_write+0x10/0x10 [ 1384.471135][T23872] ? find_held_lock+0x2b/0x80 [ 1384.471159][T23872] ? __fget_files+0x204/0x3c0 [ 1384.471185][T23872] ? __fget_files+0x20e/0x3c0 [ 1384.471215][T23872] ksys_write+0x205/0x240 [ 1384.471238][T23872] ? __pfx_ksys_write+0x10/0x10 [ 1384.471260][T23872] ? rcu_is_watching+0x12/0xc0 [ 1384.471290][T23872] do_syscall_64+0xcd/0x230 [ 1384.471328][T23872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.471351][T23872] RIP: 0033:0x7fd28198e969 [ 1384.471369][T23872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.471392][T23872] RSP: 002b:00007fd2827fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1384.471415][T23872] RAX: ffffffffffffffda RBX: 00007fd281bb5fa0 RCX: 00007fd28198e969 [ 1384.471431][T23872] RDX: 0000000000010001 RSI: 0000000000000000 RDI: 0000000000000006 [ 1384.471446][T23872] RBP: 00007fd281a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1384.471460][T23872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.471475][T23872] R13: 0000000000000000 R14: 00007fd281bb5fa0 R15: 00007ffde31c59f8 [ 1384.471506][T23872] [ 1384.937505][T23892] Invalid ELF header magic: != ELF [ 1385.245463][T23891] zswap: compressor H.9Q>z%;0*l H`Bkcjkwj'S3<85Eh'.Y[+`[2QY$<`TYvZgV4sqJ"b%zKN[O EiF8i|;(Sh@3Kxa>TRS=s~kHQIF{h?B}Lr=Qb k^4)>x*Z not available [ 1386.965743][T23928] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 1387.165065][T23933] ERROR: Out of memory at tomoyo_memory_ok. [ 1387.519898][T23940] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3331'. [ 1389.364006][T23965] random: crng reseeded on system resumption [ 1389.799813][T20483] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1395.265124][T24042] netlink: 'syz.7.3344': attribute type 3 has an invalid length. [ 1397.842993][T24071] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3348'. [ 1397.888953][T24065] CIFS: VFS: Invalid SecurityFlags: [ 1398.929529][T24071] team0: Port device team_slave_0 removed [ 1399.601226][T20483] Bluetooth: hci3: unexpected event 0x3e length: 508 > 260 [ 1399.601259][T20483] Bluetooth: hci3: unexpected subevent 0x02 length: 507 > 260 [ 1399.618623][T20483] Bluetooth: hci3: Dropping invalid advertising data [ 1399.629594][T20483] Bluetooth: hci3: unknown advertising packet type: 0xe9 [ 1399.629636][T20483] Bluetooth: hci3: Dropping invalid advertising data [ 1399.645135][T20483] Bluetooth: hci3: Malformed LE Event: 0x02 [ 1400.690503][T24113] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1400.769673][T24113] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1400.930614][T24113] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1401.007256][T24113] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1401.098821][T24113] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1401.331064][T24113] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1401.367991][T24113] CPU0 is offline. [ 1401.569751][T24131] FAULT_INJECTION: forcing a failure. [ 1401.569751][T24131] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1401.726869][T24131] CPU: 1 UID: 0 PID: 24131 Comm: syz.9.3355 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1401.726910][T24131] Tainted: [U]=USER [ 1401.726918][T24131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1401.726934][T24131] Call Trace: [ 1401.726943][T24131] [ 1401.726953][T24131] dump_stack_lvl+0x16c/0x1f0 [ 1401.726994][T24131] should_fail_ex+0x512/0x640 [ 1401.727029][T24131] ? __pfx___futex_wait+0x10/0x10 [ 1401.727066][T24131] get_futex_key+0x49e/0x1000 [ 1401.727092][T24131] ? __pfx_futex_wake_mark+0x10/0x10 [ 1401.727125][T24131] ? __pfx_get_futex_key+0x10/0x10 [ 1401.727153][T24131] ? __lock_acquire+0x5ca/0x1ba0 [ 1401.727191][T24131] futex_wake+0xe7/0x4e0 [ 1401.727224][T24131] ? __pfx_futex_wake+0x10/0x10 [ 1401.727261][T24131] ? __fget_files+0x204/0x3c0 [ 1401.727289][T24131] do_futex+0x1e3/0x350 [ 1401.727316][T24131] ? __pfx_do_futex+0x10/0x10 [ 1401.727351][T24131] ? fdget+0x187/0x210 [ 1401.727372][T24131] ? __sys_sendmsg+0x199/0x220 [ 1401.727404][T24131] __x64_sys_futex+0x1e0/0x4c0 [ 1401.727436][T24131] ? __pfx___x64_sys_futex+0x10/0x10 [ 1401.727466][T24131] ? rcu_is_watching+0x12/0xc0 [ 1401.727498][T24131] do_syscall_64+0xcd/0x230 [ 1401.727538][T24131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.727563][T24131] RIP: 0033:0x7fd28198e969 [ 1401.727583][T24131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1401.727608][T24131] RSP: 002b:00007fd2827fc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1401.727633][T24131] RAX: ffffffffffffffda RBX: 00007fd281bb5fa8 RCX: 00007fd28198e969 [ 1401.727649][T24131] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd281bb5fac [ 1401.727665][T24131] RBP: 00007fd281bb5fa0 R08: 00007fd2827fd000 R09: 0000000000000000 [ 1401.727680][T24131] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fd281bb5fac [ 1401.727696][T24131] R13: 0000000000000000 R14: 00007ffde31c5910 R15: 00007ffde31c59f8 [ 1401.727726][T24131] [ 1402.764352][T20483] Bluetooth: hci1: command 0x0c1a tx timeout [ 1402.851237][T20483] Bluetooth: hci2: command 0x0c1a tx timeout [ 1402.922798][T20483] Bluetooth: hci3: command 0x0c1a tx timeout [ 1403.082481][T20483] Bluetooth: hci4: command 0x0c1a tx timeout [ 1403.873639][T24166] FAULT_INJECTION: forcing a failure. [ 1403.873639][T24166] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.942695][ T30] audit: type=1800 audit(4294971445.663:36): pid=24171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3363" name="dbroot" dev="configfs" ino=86468 res=0 errno=0 [ 1403.965622][T24171] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1404.004094][T24166] CPU: 1 UID: 0 PID: 24166 Comm: syz.9.3362 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1404.004135][T24166] Tainted: [U]=USER [ 1404.004143][T24166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1404.004158][T24166] Call Trace: [ 1404.004166][T24166] [ 1404.004176][T24166] dump_stack_lvl+0x16c/0x1f0 [ 1404.004217][T24166] should_fail_ex+0x512/0x640 [ 1404.004253][T24166] ? __kmalloc_noprof+0xbf/0x510 [ 1404.004284][T24166] ? fib_default_rule_add+0x4f/0x420 [ 1404.004313][T24166] should_failslab+0xc2/0x120 [ 1404.004344][T24166] __kmalloc_noprof+0xd2/0x510 [ 1404.004369][T24166] ? lockdep_init_map_type+0x5c/0x280 [ 1404.004410][T24166] fib_default_rule_add+0x4f/0x420 [ 1404.004441][T24166] ? __pfx_ipmr_net_init+0x10/0x10 [ 1404.004470][T24166] ipmr_net_init+0x1ee/0x4e0 [ 1404.004499][T24166] ? __pfx_ipmr_net_init+0x10/0x10 [ 1404.004527][T24166] ops_init+0x1df/0x5f0 [ 1404.004561][T24166] setup_net+0x21e/0x850 [ 1404.004595][T24166] ? __pfx_setup_net+0x10/0x10 [ 1404.004625][T24166] ? lockdep_init_map_type+0x5c/0x280 [ 1404.004658][T24166] ? __pfx_down_read_killable+0x10/0x10 [ 1404.004686][T24166] ? debug_mutex_init+0x37/0x70 [ 1404.004712][T24166] copy_net_ns+0x2a6/0x5f0 [ 1404.004749][T24166] create_new_namespaces+0x3ea/0xad0 [ 1404.004784][T24166] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1404.004815][T24166] ksys_unshare+0x45b/0xa40 [ 1404.004849][T24166] ? __pfx_ksys_unshare+0x10/0x10 [ 1404.004881][T24166] ? xfd_validate_state+0x5d/0x180 [ 1404.004906][T24166] ? rcu_is_watching+0x12/0xc0 [ 1404.004937][T24166] __x64_sys_unshare+0x31/0x40 [ 1404.004969][T24166] do_syscall_64+0xcd/0x230 [ 1404.005008][T24166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.005033][T24166] RIP: 0033:0x7fd28198e969 [ 1404.005052][T24166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1404.005087][T24166] RSP: 002b:00007fd2827fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1404.005110][T24166] RAX: ffffffffffffffda RBX: 00007fd281bb5fa0 RCX: 00007fd28198e969 [ 1404.005128][T24166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1404.005143][T24166] RBP: 00007fd281a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1404.005158][T24166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1404.005172][T24166] R13: 0000000000000000 R14: 00007fd281bb5fa0 R15: 00007ffde31c59f8 [ 1404.005203][T24166] [ 1404.576596][T24172] FAULT_INJECTION: forcing a failure. [ 1404.576596][T24172] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1404.627786][T24172] CPU: 1 UID: 0 PID: 24172 Comm: syz.7.3363 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1404.627830][T24172] Tainted: [U]=USER [ 1404.627839][T24172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1404.627854][T24172] Call Trace: [ 1404.627862][T24172] [ 1404.627872][T24172] dump_stack_lvl+0x16c/0x1f0 [ 1404.627914][T24172] should_fail_ex+0x512/0x640 [ 1404.627956][T24172] get_futex_key+0x49e/0x1000 [ 1404.627986][T24172] ? __pfx_get_futex_key+0x10/0x10 [ 1404.628023][T24172] ? find_held_lock+0x2b/0x80 [ 1404.628050][T24172] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 1404.628092][T24172] futex_wait_setup+0x78/0x290 [ 1404.628152][T24172] __futex_wait+0x266/0x3c0 [ 1404.628186][T24172] ? __pfx___futex_wait+0x10/0x10 [ 1404.628223][T24172] ? __pfx_futex_wake_mark+0x10/0x10 [ 1404.628258][T24172] ? ___pte_offset_map+0x1bc/0x540 [ 1404.628299][T24172] futex_wait+0xe8/0x380 [ 1404.628329][T24172] ? __pfx_futex_wait+0x10/0x10 [ 1404.628368][T24172] ? lock_vma_under_rcu+0x47d/0x970 [ 1404.628404][T24172] ? lock_vma_under_rcu+0x47d/0x970 [ 1404.628445][T24172] do_futex+0x229/0x350 [ 1404.628471][T24172] ? __pfx_do_futex+0x10/0x10 [ 1404.628498][T24172] ? count_memcg_events_mm.constprop.0+0x138/0x340 [ 1404.628538][T24172] __x64_sys_futex+0x1e0/0x4c0 [ 1404.628566][T24172] ? exc_page_fault+0x5c/0xc0 [ 1404.628599][T24172] ? __pfx___x64_sys_futex+0x10/0x10 [ 1404.628638][T24172] do_syscall_64+0xcd/0x230 [ 1404.628675][T24172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.628699][T24172] RIP: 0033:0x7fdb0ab8e969 [ 1404.628717][T24172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1404.628741][T24172] RSP: 002b:00007fdb0ba910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1404.628763][T24172] RAX: ffffffffffffffda RBX: 00007fdb0adb6088 RCX: 00007fdb0ab8e969 [ 1404.628779][T24172] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdb0adb6088 [ 1404.628794][T24172] RBP: 00007fdb0adb6080 R08: 0000000000000000 R09: 0000000000000000 [ 1404.628808][T24172] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdb0adb608c [ 1404.628823][T24172] R13: 0000000000000000 R14: 00007ffcdc889cf0 R15: 00007ffcdc889dd8 [ 1404.628853][T24172] [ 1405.262468][T20483] Bluetooth: hci4: command 0x0c1a tx timeout [ 1405.488503][T24189] QAT: Device 0 not found [ 1407.321501][T20483] Bluetooth: hci4: command 0x0c1a tx timeout [ 1408.766318][T24247] FAULT_INJECTION: forcing a failure. [ 1408.766318][T24247] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.850759][T24247] CPU: 1 UID: 0 PID: 24247 Comm: syz.7.3374 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1408.850800][T24247] Tainted: [U]=USER [ 1408.850808][T24247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1408.850822][T24247] Call Trace: [ 1408.850831][T24247] [ 1408.850840][T24247] dump_stack_lvl+0x16c/0x1f0 [ 1408.850889][T24247] should_fail_ex+0x512/0x640 [ 1408.850924][T24247] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1408.850951][T24247] should_failslab+0xc2/0x120 [ 1408.850981][T24247] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1408.851004][T24247] ? trace_cap_capable+0x18d/0x200 [ 1408.851027][T24247] ? sctp_association_new+0xbb/0x2a00 [ 1408.851058][T24247] sctp_association_new+0xbb/0x2a00 [ 1408.851086][T24247] ? sctp_v4_scope+0x183/0x1a0 [ 1408.851121][T24247] sctp_connect_new_asoc+0x1b6/0x790 [ 1408.851155][T24247] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1408.851185][T24247] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 1408.851214][T24247] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1408.851239][T24247] sctp_sendmsg+0x15f9/0x1ee0 [ 1408.851265][T24247] ? __pfx___up_read+0x10/0x10 [ 1408.851307][T24247] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1408.851336][T24247] ? __pfx___might_resched+0x10/0x10 [ 1408.851375][T24247] ? __pfx_aa_sk_perm+0x10/0x10 [ 1408.851407][T24247] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1408.851435][T24247] inet_sendmsg+0x11c/0x140 [ 1408.851472][T24247] ____sys_sendmsg+0x973/0xc70 [ 1408.851510][T24247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1408.851549][T24247] ? __pfx__kstrtoull+0x10/0x10 [ 1408.851583][T24247] ___sys_sendmsg+0x134/0x1d0 [ 1408.851613][T24247] ? __pfx____sys_sendmsg+0x10/0x10 [ 1408.851655][T24247] ? find_held_lock+0x2b/0x80 [ 1408.851696][T24247] __sys_sendmmsg+0x200/0x420 [ 1408.851728][T24247] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1408.851766][T24247] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1408.851814][T24247] ? fput+0x70/0xf0 [ 1408.851841][T24247] ? ksys_write+0x1b9/0x240 [ 1408.851869][T24247] ? __pfx_ksys_write+0x10/0x10 [ 1408.851890][T24247] ? rcu_is_watching+0x12/0xc0 [ 1408.851917][T24247] __x64_sys_sendmmsg+0x9c/0x100 [ 1408.851945][T24247] ? lockdep_hardirqs_on+0x7c/0x110 [ 1408.851977][T24247] do_syscall_64+0xcd/0x230 [ 1408.852014][T24247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.852038][T24247] RIP: 0033:0x7fdb0ab8e969 [ 1408.852056][T24247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1408.852081][T24247] RSP: 002b:00007fdb0bab2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1408.852103][T24247] RAX: ffffffffffffffda RBX: 00007fdb0adb5fa0 RCX: 00007fdb0ab8e969 [ 1408.852120][T24247] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000003 [ 1408.852134][T24247] RBP: 00007fdb0bab2090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.852149][T24247] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000002 [ 1408.852164][T24247] R13: 0000000000000000 R14: 00007fdb0adb5fa0 R15: 00007ffcdc889dd8 [ 1408.852194][T24247] [ 1410.465457][T24261] [ 1410.467851][T24261] ====================================================== [ 1410.474883][T24261] WARNING: possible circular locking dependency detected [ 1410.482000][T24261] 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 Tainted: G U [ 1410.491086][T24261] ------------------------------------------------------ [ 1410.498410][T24261] syz.8.3376/24261 is trying to acquire lock: [ 1410.505177][T24261] ffff88802596e758 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 1410.515087][T24261] [ 1410.515087][T24261] but task is already holding lock: [ 1410.522466][T24261] ffff88802596e228 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1410.533950][T24261] [ 1410.533950][T24261] which lock already depends on the new lock. [ 1410.533950][T24261] [ 1410.544509][T24261] [ 1410.544509][T24261] the existing dependency chain (in reverse order) is: [ 1410.553552][T24261] [ 1410.553552][T24261] -> #2 (&q->q_usage_counter(io)#29){++++}-{0:0}: [ 1410.562311][T24261] blk_alloc_queue+0x619/0x760 [ 1410.567629][T24261] blk_mq_alloc_queue+0x179/0x290 [ 1410.573414][T24261] __blk_mq_alloc_disk+0x29/0x120 [ 1410.579024][T24261] loop_add+0x496/0xb70 [ 1410.583759][T24261] loop_init+0x164/0x270 [ 1410.588562][T24261] do_one_initcall+0x120/0x6e0 [ 1410.594085][T24261] kernel_init_freeable+0x5c2/0x900 [ 1410.599881][T24261] kernel_init+0x1c/0x2b0 [ 1410.604774][T24261] ret_from_fork+0x48/0x80 [ 1410.610074][T24261] ret_from_fork_asm+0x1a/0x30 [ 1410.615749][T24261] [ 1410.615749][T24261] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1410.623518][T24261] fs_reclaim_acquire+0x102/0x150 [ 1410.629572][T24261] kmem_cache_alloc_noprof+0x53/0x3b0 [ 1410.635607][T24261] __kernfs_new_node+0xd2/0x8a0 [ 1410.641106][T24261] kernfs_new_node+0x13c/0x1e0 [ 1410.647215][T24261] kernfs_create_dir_ns+0x4c/0x1a0 [ 1410.653647][T24261] sysfs_create_dir_ns+0x13a/0x2b0 [ 1410.659543][T24261] kobject_add_internal+0x2c4/0x9b0 [ 1410.665580][T24261] kobject_add+0x16e/0x240 [ 1410.670925][T24261] elv_register_queue+0xd3/0x2a0 [ 1410.676486][T24261] blk_register_queue+0x3c4/0x560 [ 1410.682227][T24261] add_disk_fwnode+0x911/0x13a0 [ 1410.687754][T24261] nbd_dev_add+0x78e/0xbb0 [ 1410.692734][T24261] nbd_init+0x181/0x320 [ 1410.697460][T24261] do_one_initcall+0x120/0x6e0 [ 1410.702837][T24261] kernel_init_freeable+0x5c2/0x900 [ 1410.708817][T24261] kernel_init+0x1c/0x2b0 [ 1410.713919][T24261] ret_from_fork+0x48/0x80 [ 1410.718994][T24261] ret_from_fork_asm+0x1a/0x30 [ 1410.724334][T24261] [ 1410.724334][T24261] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1410.732835][T24261] __lock_acquire+0x1173/0x1ba0 [ 1410.738275][T24261] lock_acquire+0x179/0x350 [ 1410.743432][T24261] __mutex_lock+0x199/0xb90 [ 1410.749482][T24261] queue_requests_store+0x1c7/0x310 [ 1410.755268][T24261] queue_attr_store+0x270/0x310 [ 1410.760910][T24261] sysfs_kf_write+0xef/0x150 [ 1410.766769][T24261] kernfs_fop_write_iter+0x354/0x510 [ 1410.773165][T24261] vfs_write+0x5bd/0x1180 [ 1410.778166][T24261] ksys_write+0x12a/0x240 [ 1410.783050][T24261] do_syscall_64+0xcd/0x230 [ 1410.788910][T24261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.795364][T24261] [ 1410.795364][T24261] other info that might help us debug this: [ 1410.795364][T24261] [ 1410.805624][T24261] Chain exists of: [ 1410.805624][T24261] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#29 [ 1410.805624][T24261] [ 1410.819509][T24261] Possible unsafe locking scenario: [ 1410.819509][T24261] [ 1410.827143][T24261] CPU0 CPU1 [ 1410.832700][T24261] ---- ---- [ 1410.838131][T24261] lock(&q->q_usage_counter(io)#29); [ 1410.843669][T24261] lock(fs_reclaim); [ 1410.850303][T24261] lock(&q->q_usage_counter(io)#29); [ 1410.858597][T24261] lock(&q->elevator_lock); [ 1410.863214][T24261] [ 1410.863214][T24261] *** DEADLOCK *** [ 1410.863214][T24261] [ 1410.871414][T24261] 6 locks held by syz.8.3376/24261: [ 1410.876641][T24261] #0: ffff8880321fcb78 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1410.885837][T24261] #1: ffff888035b04420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 1410.895290][T24261] #2: ffff88823be44088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1410.905189][T24261] #3: ffff8881437721e8 (kn->active#387){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1410.915347][T24261] #4: ffff88802596e228 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1410.927366][T24261] #5: ffff88802596e260 (&q->q_usage_counter(queue)#29){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 1410.939615][T24261] [ 1410.939615][T24261] stack backtrace: [ 1410.945534][T24261] CPU: 1 UID: 0 PID: 24261 Comm: syz.8.3376 Tainted: G U 6.15.0-rc6-syzkaller-00085-gc94d59a126cb #0 PREEMPT(full) [ 1410.945576][T24261] Tainted: [U]=USER [ 1410.945584][T24261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1410.945600][T24261] Call Trace: [ 1410.945611][T24261] [ 1410.945622][T24261] dump_stack_lvl+0x116/0x1f0 [ 1410.945664][T24261] print_circular_bug+0x275/0x350 [ 1410.945699][T24261] check_noncircular+0x14c/0x170 [ 1410.945735][T24261] __lock_acquire+0x1173/0x1ba0 [ 1410.945775][T24261] lock_acquire+0x179/0x350 [ 1410.945807][T24261] ? queue_requests_store+0x1c7/0x310 [ 1410.945853][T24261] ? __pfx___might_resched+0x10/0x10 [ 1410.945882][T24261] ? do_raw_spin_lock+0x12c/0x2b0 [ 1410.945921][T24261] __mutex_lock+0x199/0xb90 [ 1410.945957][T24261] ? queue_requests_store+0x1c7/0x310 [ 1410.945983][T24261] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1410.946016][T24261] ? queue_requests_store+0x1c7/0x310 [ 1410.946040][T24261] ? lockdep_hardirqs_on+0x7c/0x110 [ 1410.946075][T24261] ? __pfx___mutex_lock+0x10/0x10 [ 1410.946115][T24261] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1410.946150][T24261] ? queue_requests_store+0x1c7/0x310 [ 1410.946174][T24261] queue_requests_store+0x1c7/0x310 [ 1410.946199][T24261] ? __pfx_queue_requests_store+0x10/0x10 [ 1410.946225][T24261] ? __mutex_trylock_common+0xe9/0x250 [ 1410.946261][T24261] ? __pfx_queue_requests_store+0x10/0x10 [ 1410.946285][T24261] queue_attr_store+0x270/0x310 [ 1410.946326][T24261] ? __pfx_queue_attr_store+0x10/0x10 [ 1410.946373][T24261] ? find_held_lock+0x2b/0x80 [ 1410.946404][T24261] ? sysfs_file_kobj+0xe4/0x290 [ 1410.946442][T24261] ? __pfx_queue_attr_store+0x10/0x10 [ 1410.946482][T24261] sysfs_kf_write+0xef/0x150 [ 1410.946518][T24261] kernfs_fop_write_iter+0x354/0x510 [ 1410.946550][T24261] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1410.946588][T24261] vfs_write+0x5bd/0x1180 [ 1410.946613][T24261] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1410.946647][T24261] ? __pfx___mutex_lock+0x10/0x10 [ 1410.946684][T24261] ? __pfx_vfs_write+0x10/0x10 [ 1410.946716][T24261] ksys_write+0x12a/0x240 [ 1410.946740][T24261] ? __pfx_ksys_write+0x10/0x10 [ 1410.946763][T24261] ? rcu_is_watching+0x12/0xc0 [ 1410.946789][T24261] do_syscall_64+0xcd/0x230 [ 1410.946826][T24261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.946850][T24261] RIP: 0033:0x7f082ff8e969 [ 1410.946871][T24261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.946895][T24261] RSP: 002b:00007f0830e86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1410.946917][T24261] RAX: ffffffffffffffda RBX: 00007f08301b6160 RCX: 00007f082ff8e969 [ 1410.946934][T24261] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1410.946949][T24261] RBP: 00007f0830010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1410.946964][T24261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1410.946979][T24261] R13: 0000000000000000 R14: 00007f08301b6160 R15: 00007ffd3b237588 [ 1410.947001][T24261] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1412.159508][T21504] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.245773][T21504] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.335697][T21504] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.426495][T21504] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.682220][T21504] bridge_slave_1: left allmulticast mode [ 1412.687918][T21504] bridge_slave_1: left promiscuous mode [ 1412.711954][T21504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.725044][T21504] bridge_slave_0: left allmulticast mode [ 1412.730827][T21504] bridge_slave_0: left promiscuous mode [ 1412.754838][T21504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.927583][T21504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.938105][T21504] bond0 (unregistering): Released all slaves [ 1413.324745][T21504] hsr_slave_0: left promiscuous mode [ 1413.330558][T21504] hsr_slave_1: left promiscuous mode [ 1413.386351][T21504] veth1_vlan: left promiscuous mode [ 1413.406361][T21504] veth0_vlan: left promiscuous mode [ 1413.793301][T21504] team0 (unregistering): Port device team_slave_1 removed [ 1413.861050][T21504] team0 (unregistering): Port device team_slave_0 removed [ 1414.408408][T21504] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.526024][T21504] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.587176][T21504] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.667089][T21504] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.805152][T21504] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.879260][T21504] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1414.956000][T21504] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.086399][T21504] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1415.295610][T21504] bridge_slave_1: left allmulticast mode [ 1415.321092][T21504] bridge_slave_1: left promiscuous mode [ 1415.329335][T21504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.353453][T21504] bridge_slave_0: left allmulticast mode [ 1415.359168][T21504] bridge_slave_0: left promiscuous mode [ 1415.373837][T21504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.384233][T21504] bridge_slave_1: left allmulticast mode [ 1415.390188][T21504] bridge_slave_1: left promiscuous mode [ 1415.396486][T21504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.407605][T21504] bridge_slave_0: left allmulticast mode [ 1415.416193][T21504] bridge_slave_0: left promiscuous mode [ 1415.423715][T21504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.626325][T21504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.640191][T21504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.650783][T21504] bond0 (unregistering): Released all slaves [ 1415.821745][T21504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1415.832671][T21504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1415.842772][T21504] bond0 (unregistering): Released all slaves [ 1416.138986][T21504] hsr_slave_0: left promiscuous mode [ 1416.155042][T21504] hsr_slave_1: left promiscuous mode [ 1416.173359][T21504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1416.180871][T21504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.212942][T21504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.221006][T21504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.258090][T21504] hsr_slave_0: left promiscuous mode [ 1416.282795][T21504] hsr_slave_1: left promiscuous mode [ 1416.302241][T21504] veth1_macvtap: left promiscuous mode [ 1416.307801][T21504] veth0_macvtap: left promiscuous mode [ 1416.328987][T21504] veth1_vlan: left promiscuous mode [ 1416.344010][T21504] veth0_vlan: left promiscuous mode [ 1416.362732][T21504] veth1_macvtap: left promiscuous mode [ 1416.368280][T21504] veth0_macvtap: left promiscuous mode [ 1416.385696][T21504] veth1_vlan: left promiscuous mode [ 1416.390989][T21504] veth0_vlan: left promiscuous mode [ 1416.693968][T21504] team0 (unregistering): Port device team_slave_1 removed [ 1416.723830][T21504] team0 (unregistering): Port device team_slave_0 removed [ 1417.394886][T21504] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.476316][T21504] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.539180][T21504] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.588423][T21504] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1417.734882][T21504] bridge_slave_1: left allmulticast mode [ 1417.740574][T21504] bridge_slave_1: left promiscuous mode [ 1417.761539][T21504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.770011][T21504] bridge_slave_0: left allmulticast mode [ 1417.791709][T21504] bridge_slave_0: left promiscuous mode [ 1417.797446][T21504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.956723][T21504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1417.968478][T21504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1417.980045][T21504] bond0 (unregistering): Released all slaves [ 1418.234092][T21504] hsr_slave_0: left promiscuous mode [ 1418.251557][T21504] hsr_slave_1: left promiscuous mode [ 1418.262029][T21504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1418.269448][T21504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1418.297778][T21504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1418.314252][T21504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1418.344666][T21504] veth1_vlan: left promiscuous mode [ 1418.350023][T21504] veth0_vlan: left promiscuous mode [ 1418.612366][T21504] team0 (unregistering): Port device team_slave_1 removed