last executing test programs: 2m34.071027466s ago: executing program 32 (id=3533): openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/current_tracer\x00', 0x40482, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfdef) r0 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x181441, 0x0) write$auto_bm_register_operations_binfmt_misc(r0, &(0x7f0000000380)="1fc8349b985f1e6c6020bf56bea2fa2a0de63c769504ed19f4409a1b80bdc029ab624875b8fc5bdbc2cd4d92b19d5e4eb29426d8261a797424ae0644ca9a45cd44bb137c2ec4b0f811a3d89a26af86ae23ed0df22f", 0x55) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getuid() r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x5e9c, 0x400000000000, 0x7, 0x6, 0xee00, 0xffffffffffffffff, 0x0, 0x6, 0x2, 0xfe3, 0x1, 0x800, 0x7e, 0x800, 0x5, 0x101, 0xb288}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff0000e76558290a447b111aab78ab3e21fc5731bd743aaaa9818fa90827000079dd3c67e56f40fc9de24adddbe2c81a8a146e6dc760552a2fce6cea205f00208f"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40810) 2m32.115497263s ago: executing program 2 (id=3607): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$auto_SNDCTL_SEQ_GETTIME(r0, 0x80045113, &(0x7f0000000040)="1875bfe78e42cb0b5d3c4873d9a392d1f882919f3d8e5e37e6e6f75a4c236c7bf86dd96665cb62a8f70b63a85324c8ec") r1 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_GET(0x9, 0x2, 0xffffffffffffffff, 0xa904, 0x9) ioctl$auto_XFS_IOC_FSBULKSTAT_SINGLE(r1, 0xc0205866, &(0x7f0000000200)={&(0x7f0000000080)=0x9937, 0xe1, &(0x7f00000000c0)="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", &(0x7f00000001c0)=0x4}) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, 0x0) rt_sigqueueinfo$auto(0x0, 0x3ff, &(0x7f00000003c0)={@siginfo_0_0={0x6, 0xb, 0x9, @_sigsys={&(0x7f0000000300)="a46f50e02b4c3501df0877b6619c9be8ed13debd9f74d3fc20e75dc51a924a5d669a5cd2eaa17e7862a53305909a9e83e1796876936d2194ec2cdf3c2d2f0dd19da875114cff3e068d8d537651c3c5a75aad061516c39ee21f1e04a6624d7697be0cd0892dc7dbda49a0bf21019fcbcd5d4f0ccd8b08b3ca5df0598fa9b6ddd7d9edab005975bebfb23a470f32812f16c4f0f60119633732954289e54bed4d22546a40317280a7fde44ae05c1dfd0428d9f59fe149c0885316e878aa31df96", 0x3, 0x2}}}) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/netdevsim/netdevsim7/health/break_health\x00', 0x121481, 0x0) mmap$auto(0x0, 0x3, 0x1000df, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffefff) 2m32.04418133s ago: executing program 2 (id=3608): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') socket(0xa, 0x1, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x1000005, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) madvise$auto(0x16, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x204}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF2_AGE={0x8, 0x4, 0x9}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_AGE={0x8, 0x4, 0x973}]}, 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0xffffffffffff, 0xfffffffffffefffd, 0x17) 2m31.002036554s ago: executing program 2 (id=3612): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0xc200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x1, 0x806, 0xffffffff, 0x2}, 0x8000, 0x5, 0x8000006) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x1, 0x0, 0x9, 0x0, 0x4000000000005, 0x42}, 0x800}, 0x4, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x1ac}}, 0x4c041) setsockopt$auto(r0, 0x6, 0x8, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) 2m30.779535396s ago: executing program 2 (id=3613): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x40) write$auto(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x600400, 0x0) setsockopt$auto_SO_ATTACH_FILTER(r1, 0x6, 0x1a, &(0x7f00000000c0)='$*@\x00', 0x100) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, 0x0, 0x21, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004084}, 0x8004004) 2m30.582386294s ago: executing program 2 (id=3614): socket(0xa, 0x1, 0x100) r0 = io_uring_setup$auto(0x1, 0x0) pwrite64$auto(r0, &(0x7f00000001c0)='./cgroup/me5X/\xe2\xb1\xe6\x86\x14scure\x00\x99\x1f\xad\x0eN\xfa(\x9f\x01\xd1\xdcN\xb1\xcf~M\xe2\xf1ra\xa71\x18\x87\xf5\\\x86\x91\xd3\x13\xd5\xc2\x97\xc6\x92<\xcf$\xbfU\x00\x00\x00\x00\xd8\xb0\xad\fR\xc0\xa2<\xcf\xa8\xb6\xd9\x87\x9bk\xe1\x04\xf5\x1f\xebx&bU$\bu\xa1)\xf1\x18\xd0\xc5\xdf\x06\x9f\xf0\x01\x00\x00\x00\x00\x06\x00\x01OSU\x9dM\xee\xcc\xaf8\'\x94 \x06GdAoL\x9c\xe1\xb4\xa1%\x15\xb1\x97\xd8\xbb9Ny\f\xee', 0xc13, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0x20) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x8008800) r2 = socket(0x2, 0x801, 0x106) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2324f35cf549403, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x13, 0x0, 0x4) mmap$auto(0x0, 0x400007, 0xdd, 0x9b72, 0x2, 0x8000) arch_prctl$auto_ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x3) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/mem\x00', 0x40, 0x0) mmap$auto(0x3, 0x3, 0x8, 0x4000000000011, r2, 0x20007ffb) mmap$auto(0x100, 0x7, 0x2, 0x40eb2, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_ctl$auto(r3, 0x5, r4, &(0x7f0000000040)={0x5, 0x6}) mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0x2401) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', 0x0, 0x44020, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c0102, 0x0) 2m30.246496242s ago: executing program 2 (id=3616): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) write$auto(0x4, 0x0, 0x100082) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa4120, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m15.179980202s ago: executing program 33 (id=3616): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) write$auto(0x4, 0x0, 0x100082) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa4120, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m29.412872179s ago: executing program 4 (id=3958): madvise$auto(0x0, 0xffffffffffff0006, 0x55) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x5420, 0x38) ioctl$auto(0x3, 0x402c542b, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) acct$auto(&(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_\xf6\r\x00\x00default_nu_gp/lu_gp_id\x1f\xd7\xba(-\xc4*e\xff\xad\xbae\xd9.\xff\x19\x9fx\xa4f\xb7U9\xae7\xf6n\x17f\xe9nt\a\x1aD\xdeo\vT\x8b\xb2D1\xd1\xf7#\xe2\xb5\'U}W\xbb\xa6\x9d\xaeD\xb2\xa8t\xff\xa3\xa5\x93p\xb3\xee~\xd3\xaca\"\x956#\xf6\xc2\x92p\x83\x8fT\xaa\xeby\x89\a\x81\x97A\x98&\x86\x11$\xf94\xb4\xaf\xc9\x81Qb\x14F.E\xde\xd6\x10\x8b\xa7\vve|\xe9\xa3d\x13\xd8J\xfc\xeap\xba\xe7VMk\xe9\x9c\xdf\xbf\xc2\xa05\x9f\xdcI\xa2/\xc1W\xf9\xfc\x86n\x8e\x9a:\x92\xb4d\x8d\t\x859\n\x8f\xab\xed\xfd\x81\xad\xc1\xc2\x0f_Ic') r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/phram/parameters/phram\x00', 0x4a481, 0x0) write$auto(r1, 0x0, 0x81) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) prctl$auto(0x5, 0x2000000001, 0x0, 0x1, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, 0x8) mmap$auto(0x0, 0xd3, 0xffffffffffffffff, 0x40eb2, 0x401, 0x300000000000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x6, 0x2}, 0x8000, 0x0, 0x6) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)="c20c6d955eba76314e") socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) 1m28.910594519s ago: executing program 4 (id=3960): writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) readv$auto(0x6, &(0x7f00000000c0)={0x0, 0x1}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 1m28.719877595s ago: executing program 4 (id=3961): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x103080, 0x0) r1 = socket(0x2, 0x801, 0x106) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) write$auto(r2, &(0x7f0000000040)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r3, &(0x7f0000000340)='/proc/Nes\x00'/22, 0x100000001, 0x100) close_range$auto(r0, r1, 0x1eca) 1m28.671569207s ago: executing program 4 (id=3962): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b71", 0x25) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x71, 0x0, 0x0) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x0, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c06, 0xfffffffffffffffd) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0x84000, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000002d1690917d9d6e94ec572d5de17abd3801948df57a435845637b86f210c005142cfdc595142a9668a41ffb2af8926e333571f1df39ca1f741e1bf1efdc7b968912ea5ccf921cecc96a5bad4a117932cd0e84214576efcf66b0032c9d7cbcf79f2fbe7de462f708f371bceef5626aba3e9fcd305f5adcae6375f1780f972108cf", @ANYRES16=r5, @ANYBLOB="210026bd7000fedbdf25010000001400020077673100000000000000000000000000060006004e200000"], 0x30}, 0x1, 0x0, 0x0, 0x20004084}, 0x8004004) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x19, 0xffffffffffffffff, 0x0) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000100)=@query={@target_fd=r3, 0x7, 0x2, 0x7fff, 0xf1, @prog_cnt=0x7, 0x0, 0xff, 0xf9, 0x1}, 0x3) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r6, &(0x7f00000010c0)=""/4082, 0xff2) io_uring_setup$auto(0x1fe, 0x0) mmap$auto(0x0, 0xffffffff00000000, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x3, 0x6) 1m28.578451133s ago: executing program 4 (id=3963): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x6) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, 0x0, 0x4d) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) 1m27.688452347s ago: executing program 4 (id=3967): mmap$auto(0x0, 0x10, 0x4000000000df, 0xeb1, 0x401, 0x7) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfbfff000) socket(0x23, 0x800, 0x8) mmap$auto(0x200000000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8003) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff8, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x80007, 0x3034, 0xc, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b6}, {0x4000, 0xfc, 0x9, 0x0, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) socket(0xa, 0x1, 0x84) socket(0xa, 0x2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/softnet_stat\x00', 0x40102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000680)={0x0, 0x40200}, 0x3) mmap$auto(0x0, 0x40009, 0x3, 0x38, 0xffffffffffffffff, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) read$auto(r1, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000001c0)=""/204, 0xcc) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r3 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/record-tgid\x00', 0x121082, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, r3, 0x0) 1m12.257591643s ago: executing program 34 (id=3967): mmap$auto(0x0, 0x10, 0x4000000000df, 0xeb1, 0x401, 0x7) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfbfff000) socket(0x23, 0x800, 0x8) mmap$auto(0x200000000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8003) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff8, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x80007, 0x3034, 0xc, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b6}, {0x4000, 0xfc, 0x9, 0x0, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) socket(0xa, 0x1, 0x84) socket(0xa, 0x2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/softnet_stat\x00', 0x40102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000680)={0x0, 0x40200}, 0x3) mmap$auto(0x0, 0x40009, 0x3, 0x38, 0xffffffffffffffff, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) read$auto(r1, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000001c0)=""/204, 0xcc) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r3 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/record-tgid\x00', 0x121082, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, r3, 0x0) 1m6.254892579s ago: executing program 3 (id=4066): add_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000040)='/proc/driver/nvram\x00', &(0x7f0000000080)='^*\x00', &(0x7f00000000c0)="c04c837ecb9d7e8a693e04c8ff8a5c2f97aca9e75a2bedfda5631f3ac1fdec43b9835dd107330a26e1324e3b4647d6b4e98caab2d94c99aa82415d53825e7e85135d0d02ab923405a0f1ecc28a8b48fed81bdbc7edce2a9ab97f6bc544c81d83c3e93f11a1b86ae76e6fae36009ab4f6c5ce8bbc5248c5b768302e14fb28bcc304ab997c516285ffee", 0x9, 0xfffffffffffffff8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24004805}, 0x8000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0xfc, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82040, 0x0) ioperm$auto(0x7, 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5) unshare$auto(0x40000080) mmap$auto(0x7, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/driver/nvram\x00', 0x48000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0p/sub3/status\x00', 0x325603, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000400)=""/232, 0xe8) 1m5.259331701s ago: executing program 3 (id=4070): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x2, 0xaa06, 0xdf, 0xeb1, 0xffffffffffffffff, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000440)={"e863192c8ee2c138c20ae365128c2bc22cf83f1a7155aed629c4952dc7dff02a", 0x80, 0x7, 0x5, 0x8, 0x7, 0xffffffffffffffff}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptysd\x00', 0x101802, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000000580)="7fd0a917413f68", 0x7) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) shmctl$auto_SHM_STAT_ANY(0x4080, 0xf, &(0x7f0000000600)={{0x100000, 0xee00, 0xee01, 0x48db, 0x6, 0x8d30, 0x9}, 0x7, 0xffffffffffffffff, 0x2, 0x4d6e, @inferred, @inferred=0xffffffffffffffff, 0x7, 0x0, &(0x7f00000004c0), 0x0}) close_range$auto(0x2, 0x8, 0x0) r2 = ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)=';') syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), r2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) prctl$auto(0x1000000003b, 0x4, 0x0, 0x9, 0x7) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) pipe2$auto(&(0x7f0000000040)=r4, 0xffffffff) mmap$auto(0x0, 0x4020009, 0x8, 0xeb1, 0xffffffffffffffff, 0x552) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x21, 0x1, 0x2) setsockopt$auto(0x3, 0x111, 0x1, 0xffffffffffffffff, 0x0) setresuid$auto(0x2, 0x7, 0x8080) ioprio_get$auto(0x3, 0x2) 1m4.154778329s ago: executing program 3 (id=4075): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f00000007c0)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1ez\xf82j\xed\xff\xe2\xac\x1a \xed\x87\x12\xa9\x02\xd4\xf6\xd0\x1f)\xc58\xcbW5\xe7b\x0e\xc1]3\x87\xc9\xce\xa1\xf2lp<\x92\xb6\xb6\xa9~i\xe0O\xe0\xfdt\x1aw\x17\n<>\x1d\xee\xbb\"\x13\xd9\xdfD\xac\xd2\x0e\x98\xb7Rx\x18\x01\xfa\xf1+i\x8a\xc9/hI\x17\xe8e\xcd)\x87\x05\xcb%\xbf\x1a\xb6^\x81\xb7.\xeb\xbc#\x04\xc5\x1d\xd2\xeai\x99W\xa3|tQ\xf8\xf6\xcd\xc6\xadi\x8d\x8f\xc2g\x82\x830\x16\x10U<\xf4&H\x7f\x90\xd4\xfa\x0f\xc3v\xc2\x13\xc63\xa6\xff\xd6?\x932x\xae$k,\x7f\xacX\xaeL\xf9{\xde\xdf\xd2\xfe\x14\xa3\x18\xbc\x19K\xe8Mz?M\x11X\x04\xa9n\xe1\x9fDy\xed\xd7q\x15\xb4\x9b\xc6\x00\x10b\xd25&\xbe\x94\x9c\x8a\xbb&B\xa7\xff;\"\x99\xda\x15\xd4U\xea\\\xf4\xb5\x99\x90f\x83\xad\xe7\a\x85\xf26\x1dI*\xf1\xc2\xed\x03\x98\xb1\xd1[\x13') r0 = socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) unshare$auto(0x40000080) clock_settime$auto(0x26f, &(0x7f0000000000)={0x100000004, 0x8}) adjtimex$auto(0x0) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0xe, 0xffff, 0xebd, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x5, 0x84) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, 0x0) adjtimex$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) read$auto(r2, 0x0, 0x3) read$auto(r2, 0x0, 0x800) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4800, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS1\x00', 0x141281, 0x0) ioctl$auto_TIOCSTI2(r3, 0x5412, &(0x7f0000000840)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto(r0, 0x89f2, 0x24) r4 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x2, 0x3, 0xffffffffffffffff, 0x36, 0x7ffa) mmap$auto(0x10, 0xa, 0x800, 0x18, r4, 0xfffffffffffffff7) bind$auto(r4, &(0x7f0000000240)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8000) prctl$auto(0x3e, 0x0, 0x0, 0x0, 0x2000000000010) 1m2.684269513s ago: executing program 3 (id=4080): syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x523b21c2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/43:288/max_bytes\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x441) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fstat$auto(r4, &(0x7f00000001c0)={0x5, 0x3, 0x9, 0x5, 0xffffffffffffffff, 0xee00, 0x0, 0x1212, 0x7, 0x5, 0x4, 0x8001, 0xfffffffffffffff7, 0x4, 0x7, 0x2, 0x3}) r6 = clone3$auto(&(0x7f0000000340)={0xffffffffffff8001, 0xd85, 0xcc, 0x9a2e, 0x1, 0xfffffffffffffff1, 0x2, 0xf, 0x9, 0x7, 0x6}, 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'macvtap0\x00', 0x0}) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r9}, 0x6a) r10 = setfsuid$auto(0xee00) r11 = setfsuid$auto(0xee01) setresuid$auto(r10, r11, r10) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="e4040000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fedbdf2504000000bb00028068e198a1e2e9fc4a67958f06628f8646bf0685fd4cda62f07ca3ff7285dcdfee117635304fd23a14a9f05846db42b5617282d48f37c0ce05a285854cb9260bd77f2ae551e3dacf4000b3800400408008000c007b2f7b000c00950004000000000000000c00c2000900000000000000040007800c00250001000000000000800800d900", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="16000e002f6465762f736e642f6d6964694332443000000008002500", @ANYRES32=r6, @ANYBLOB="040066800400eb800400e8800c00290004000000000000001984ffe979f106531df6369dd0d595ef9a837b0a695d57adc354c9924e3938b37609578a9f383559174c0e27bc6efb1ddc2e1100f80021003513e6d4b20dac2b707800000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="ae010280b6a24402aa2e711b5eee337c5fe8e5f15a9ce66babc1a4ffd42376ed8ee9b5dd31c9cb025ce2eeda08f0dd80f776ab16331d869c95068b272270c56c5c37ba56f677598c29cc5500c4b1785315a1960af2e54bddc27edd7f018ad2fddbe7e2fb38f5d1f5c39329e53cb2add734e287b5d97e09f50741f858e94a0d34441e4d219b1e2981e49b375f9c6b73d2e465def4654a2fb0f62a335ef0d3f7000e800800c000", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='\x00\x00'], 0x4e4}, 0x1, 0x0, 0x0, 0x40800}, 0x20000051) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1c, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m1.572609038s ago: executing program 3 (id=4083): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0xc001) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/snd/pcmC1D0p\x00', 0x101080, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO(r0, 0x5452, &(0x7f0000001e40)={0x2, 0x1, 0x5, 0xc, "e95874bb90baf73338e2278b336f66d9f24da88bcc9fbfeb0b938f002fce8d3d405da0043f932a0a972f0c7afdbf870c91e3c9d8cf8f552b7224bd2f6eb0ae15", "3459595e78d266039a6b8db235ea9e73739e5019b4a4b442c93381b23f3a956f63cb871a8cc775f9ae62723c8882c7ac613aeecb0f8f87a759fb71392f8a369cc8ef7eed27fe7d3ab1fc0b23981b7194", "5f5af60aa7da18adb80fef26e964f184e8764aab7edfb83c36a97c17cb9ffa8d", 0x39, 0x2, 0x13, 0x7, '\x00', "c044ade8bf1a11e296938543ce1bcb5372d12e1815e4e5a4adc8ecafe3c08f5745fa2f5ac5b828c4453517a78700b1841810a3d79d3d2bd84a067270ca188fff"}) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', 0x0, 0x44020, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket(0x2b, 0x1, 0x1) listen$auto(r2, 0x6) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) msgctl$auto_IPC_SET(0x8, 0x1, &(0x7f0000000200)={{0xbff, 0x0, 0xffffffffffffffff, 0x7, 0x400, 0x8, 0x7ff}, &(0x7f00000000c0)=0x2, &(0x7f0000000180)=0x9a, 0x3, 0x8c, 0x3, 0x7fff, 0x3, 0x7, 0x89a6, 0xff, @raw=0x2}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x121102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000c80), 0x440300, 0x0) sendmsg$auto_NL80211_CMD_DEL_MPATH(r2, &(0x7f0000000c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c00)={&(0x7f0000001f80)={0x964, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_PMKID={0xd6, 0x55, "7d2ca2be3cee1b1d849d6b04c99b905d46564d5f51fc1e70a7136c8b0bcfe10a29c4022f79d823be89466200f4cbb1736d689296525f51d6dddd2656afb9c80d3c8f547ceecbaad6b383379ee75654c7f1ada36559d4b8f5f78aa8045088a1ca82eba6736d5c8728ea209274dab4746595877226f579e435dbe442f422590eb3e174826732a90031e309caa094d6918ab6a219955e6318e29a46e87e55f222e73eb898444f1a5a9123fb1c8a192fd14e21b039b5bd76c543dbc412f627a3805c2dc8a45167b7cb8eb75b473bac80fc92e216"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x349, 0x6e, 0x0, 0x1, [@nested={0x1fb, 0x126, 0x0, 0x1, [@typed={0x4, 0x13}, @generic, @generic="4a37fe9449b04ead0ef56c82b6b6e168ac6369652ab4840a99c558bf9125e48a2defe59a1f90dfb0facfd123c3db295cc0f50eeec090df8b08527acea105a0488518a85a096ed75cf6db9adef82179a9be3a7305ac3a0624ed7a736f0cb6f86e308a0f084e27acd313e3f0bdb884deb86a7a280d5e627e646b660169112a126297a509d55db23630eb333bcc997377c6e11f3e5231a8d795218bee97e05cc8e8e30876542a240eb1503586423f258831674f28d98b7ca9a6878fa5747004aaf1e799b7375148d036b75ad7533d798bbc88eee49f1f0fbd50503855e204591bba59dc69c78952c24eea49d3b9bdceba4b3e22f5edfd", @nested={0x4, 0x26}, @generic="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"]}, @typed={0x8, 0x94, 0x0, 0x0, @ipv4=@multicast1}, @generic="8a01ad32cbdba2e37c56c51547d20d80b17fd4ecef13ae8421dc517b1342b7a44c6ad95e50098b86af2e20aeba03b7df16771fc502e9638d6d5eb70c5d208c01b2dc89daf8", @nested={0xf9, 0xd4, 0x0, 0x1, [@generic="bf8a77a32f680cba909630e7e88972115f48b02f030f8951f81f6b49876fb46884bed0733b785b68d2f396f8c70685ece733e44688cef49395e16981df2d1938706ef2a3435e2d177a5d607fbc98190f8f603d7b322163d2e15d0c86713a2541d6308a3ef555c429a0457348dfd9ed878d0279fe13f9ba6afb4d650e2c0efc86708d31d01fe2e7c98be4aae9c4af39358f3dce41e6846811bdc1504b5cab1e212dfb4e9a6468c5599aefc3e65c5ad1cf505b970363b98bc135451cfa9ff23c5ade4238ff7b9c11593d53a9038fd38e956e951ef3fbac64ffbc76be55d52efd1080b63262b0125876cf83e8dd7c", @nested={0x4, 0x74}, @nested={0x4, 0x2a}]}]}, @NL80211_ATTR_CQM={0x297, 0x5e, 0x0, 0x1, [@nested={0x1cc, 0xc1, 0x0, 0x1, [@typed={0x4, 0xff}, @nested={0x4, 0xeb}, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x4, 0x7e}, @typed={0x8, 0x100, 0x0, 0x0, @uid=r4}, @generic="59f4ba378da5e175e3438d127fd3cbc6ecde36b72776a28b1253820af0f78c76b877c0f776babb7de47582b47af27402fb968f6f528994bbceeb190543e7a2f1fd0e3e18dce6a1a736a1c6466ff4e842d36f0573f5cff2289ed5dc0b189bed3163f982e9b75b9884711640444dbd13bb63c22a610a0c1a20e34046462c19294f12825b721866abf10870742f926e1c740fa989eef6927791fb33f3410bc4b2d7833c4d4aeae14707651554bd479c179b44cb2bd932cd", @generic="f7b346615a82385b32d1036e5c0620f918d82f10ada617cf57fc07ab923c6273249487abda690ae49dccb0bbbdedcd27aecd6f2e5bbe4e50a3c55f837229980800fbadb6ef200b13cd4925214174278f142d4de722cdc69e22809fe2766a91ae19d3cae0c0b9502efe9bf80873d34daa34807e598b5bf43b1111afba5c16164eb4c6de4b7e562d8dbcccd58b4d2887f728c95c3d42633e03574c92c2df757435cc105c6463f095a6d22c7c324ba42025af55923d7b4b0089dac905d294d70dd368184ba8697f04ac2a8b18ad7b68c0afe6d6fb1d42755511d5982ccced8fcc06cf0b7c28c0920858a64dddccdb7aa9209c7230dd339c"]}, @generic="6b9c7e3132434dce199c4c574bbc6d56044049ea2788d59e33a31d", @typed={0x1d, 0xe9, 0x0, 0x0, @str='/dev/dvb/adapter0/demux0\x00'}, @nested={0x8a, 0x114, 0x0, 0x1, [@generic="999d2625f74b524521a7373f9a90d3e334641b7d0fa71f56bf4735d2244c1321548f513337af9fc40d48496e931facd07f96d5873100ca42843a81add2749b754044e9d89e475217d61956213bf979778f84faf0b7eb5ed7b97c6579ff1ca4e1b644b7de1b0a21f9bc32be8eda37", @nested={0x4, 0x1d}, @typed={0x14, 0x67, 0x0, 0x0, @ipv6=@private1}]}, @generic]}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_SAR_SPEC={0x12c, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xfdb5}, @NL80211_SAR_ATTR_SPECS={0x54, 0x2, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xa8d}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}]}]}, @NL80211_SAR_ATTR_TYPE={0x8}, @NL80211_SAR_ATTR_TYPE={0x8}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xf}, @NL80211_SAR_ATTR_SPECS={0x5c, 0x2, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xe67c}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1c33}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS={0x40, 0x2, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x101}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4e}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x95d4}]}]}]}, @NL80211_ATTR_BEACON_TAIL={0x151, 0xf, "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"}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xffff9d93}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x964}}, 0x24008840) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x6, 0x1, 0x0, 0x4) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, 0x38) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0x3f1) getdents$auto(r5, 0x0, 0xa2b0) socket(0x2, 0x5, 0x0) 1m1.38589206s ago: executing program 3 (id=4084): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x8a603, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x100e980, 0xdf, 0xe30, 0x401, 0x8000) r1 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/tracing/uprobe_events\x00', 0x80, 0x0) get_robust_list$auto(0x0, &(0x7f0000000200)=&(0x7f00000001c0)={{}, 0x8, &(0x7f0000000180)}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0xffffffffffffffff, r1, 0xfffffffa) socket(0x2, 0x3, 0x100) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, r0, 0xc000) getrandom$auto(0x0, 0x2, 0xff8) mbind$auto(0x6, 0x2091c2, 0x4, 0x0, 0x100000000, 0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x2cc480, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400020009, 0x10000000000df, 0x13, 0x8000000401, 0x7fffffffffffffff) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x4802, 0x0) read$auto_proc_sessionid_operations_base(r3, &(0x7f0000000240)=""/4096, 0x1000) fstat$auto(r2, &(0x7f0000000100)={0x4, 0xcc5d, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x3, 0x7fffffff, 0x10, 0x9, 0x4, 0xb}) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x80000000, 0x3, 0xfffffffffffffffc, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) 56.743399979s ago: executing program 6 (id=4103): write$auto(0xffffffffffffffff, 0x0, 0x7ef) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) ioctl$auto(0x3, 0x4010ae67, r1) ioperm$auto(0x7, 0x5ad2, 0xc) modify_ldt$auto(0x1, 0x0, 0x10) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r2 = socket(0x2, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = syz_clone(0x4200, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, r2, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0x6, 0x1000009, 0x5f, 0x0, 0x203}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x141002, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01032dbd7096abd10cb81f000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) waitid$auto_P_PID(0x1, r5, &(0x7f00000003c0)={@siginfo_0_0={0x7, 0xff, 0x5, @_sigchld={r4, 0x0, 0x5, 0x9, 0x2}}}, 0x1, &(0x7f0000000440)={{0x400, 0xc}, {0x9, 0x7fe0000000000000}, 0x3, 0x9c, 0x2, 0xffffffff, 0x1, 0x0, 0x7, 0x6, 0x9, 0x100, 0x200, 0x6, 0x1, 0xfffffffffffffffc}) 56.600578241s ago: executing program 5 (id=4105): r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$auto_dma_heap_fops_dma_heap(r0, 0x6, &(0x7f0000000240)="91900240d1b845f077df1af120d1c20703fd7db7db8c7ee4d80c47ae9735ebf640000000000000000000000000483ea50b86bdd6415f82aa281143044c08eb4d86219edd5f71e0e7ca5641350e69dfbf6d0d00a2d44c5a74996fcac337210ffc96b164199c183eb80783b93eb8b0712bac0d86a8f9cbc37bc0") openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x800, 0x101) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x8b26, 0x20009, 0x4000000000df, 0x16, 0x401, 0x7ffc) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) syslog$auto(0x4, &(0x7f0000007980)='\n)&*%#.+&%\r\x00', 0x0) r3 = ioctl$auto_TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.weight_device\x00', 0xca401, 0x0) write$auto(r5, 0x0, 0x85) read$auto(r3, 0x0, 0x80) write$auto(0xffffffffffffffff, 0x0, 0x2000000005) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r6, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) readahead$auto(r6, 0x4, 0x4) semctl$auto_GETPID(0xa, 0xc, 0xb, 0xc) mmap$auto(0x7, 0x4, 0x4000000000df, 0x77, r2, 0x300000000000) ioctl$auto(0xffffffffffffffff, 0xc1205531, 0xffffffffffffffff) sysfs$auto(0x0, 0x100000074c, 0x8000000) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) prctl$auto(0x4, 0x5, 0x0, 0x51, 0x7fffffffffffffff) 55.685969309s ago: executing program 5 (id=4107): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0xc) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) getrandom$auto(0x0, 0xe06, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(r1, 0x3, 0x0, 0xc03) setreuid$auto(0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 55.631166417s ago: executing program 5 (id=4108): unshare$auto(0x20000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x400000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x19, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) getuid() (async) setns(0xffffffffffffffff, 0x10000000) unshare$auto(0x2) mount$auto(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2, 0x0) 55.50800822s ago: executing program 5 (id=4109): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000440)={"e863192c8ee2c138c20ae365128c2bc22cf83f1a7155aed629c4952dc7dff02a", 0x80, 0x7, 0x5, 0x8, 0x7, 0xffffffffffffffff}) r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x200, 0x0) read$auto(r0, &(0x7f0000000000)=')\x00', 0x200) 55.506991199s ago: executing program 5 (id=4110): mmap$auto(0x0, 0x10, 0x4000000000df, 0xeb1, 0x401, 0x7) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfbfff000) socket(0x23, 0x800, 0x8) mmap$auto(0x200000000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8003) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff8, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x80007, 0x3034, 0xc, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b6}, {0x4000, 0xfc, 0x9, 0x0, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) socket(0xa, 0x1, 0x84) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/softnet_stat\x00', 0x40102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000680)={0x0, 0x40200}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x0, 0x40009, 0x3, 0x38, 0xffffffffffffffff, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) read$auto(r1, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000001c0)=""/204, 0xcc) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r3 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/record-tgid\x00', 0x121082, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, r3, 0x0) 55.179194408s ago: executing program 5 (id=4112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x150, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff0000e76558290a447b111aab78ab3e21fc5731bd743aaaa9818fa90827000079dd3c67e56f40fc9de24adddbe2c81a8a146e6dc760552a2fce6cea205f00208f"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40810) 55.021330703s ago: executing program 6 (id=4113): close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) ioctl$sock_SIOCGIFINDEX(r0, 0x4604, 0x0) 54.887814309s ago: executing program 6 (id=4116): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e21, @empty}, 0x70) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r1, 0x29, 0x6, 0x0, 0x50) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3f83, 0xfffffffb) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0xc0100, 0x100) mmap$auto(0x0, 0x402000a, 0xdf, 0x10000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x2, 0x3a) socket(0x15, 0x5, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) bind$auto(r3, 0x0, 0x66) clock_settime$auto(0xa, 0x0) connect$auto(0x3, 0x0, 0x54) inotify_init1$auto(0x3000000000000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) close_range$auto(r4, r2, 0x80) 54.591726597s ago: executing program 6 (id=4118): add_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000040)='/proc/driver/nvram\x00', &(0x7f0000000080)='^*\x00', &(0x7f00000000c0)="c04c837ecb9d7e8a693e04c8ff8a5c2f97aca9e75a2bedfda5631f3ac1fdec43b9835dd107330a26e1324e3b4647d6b4e98caab2d94c99aa82415d53825e7e85135d0d02ab923405a0f1ecc28a8b48fed81bdbc7edce2a9ab97f6bc544c81d83c3e93f11a1b86ae76e6fae36009ab4f6c5ce8bbc5248c5b768302e14fb28bcc304ab997c516285ffee", 0x9, 0xfffffffffffffff8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24004805}, 0x8000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0xfc, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82040, 0x0) ioperm$auto(0x7, 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5) unshare$auto(0x40000080) mmap$auto(0x7, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 53.502003426s ago: executing program 6 (id=4121): socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) r0 = open(&(0x7f0000000000)='}[,&*}/../file0\x00', 0x22040, 0x150) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_mcast\x00', 0x404080, 0x0) write$auto(r1, 0x0, 0x7ef) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/type\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/116, 0x74) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) r3 = socket(0xa, 0x5, 0x103) modify_ldt$auto(0x1, 0x0, 0x10) pread64$auto(r0, 0x0, 0x800, 0x400) socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x9, 0x0, 0xfffffffffffffffe, 0x0) select$auto(0x12, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f00000001c0)='3\xc8/Eev/audio1\x00VI\xa3\xaa\xb1\x05\x00\x00\x00\xc0\'\xdbV\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\x89C:\xc3\xcbx*=\x12\xb4q\xeeC\x81\n\\_\x04D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\x01m\xffb\x17\xbb\x7f\xea4*\x9e\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8s\xc2\xb2\xb2\xcc\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\xf1\b\x16M\xdc\\h\x95\x89x\x8f\x81[qEU\xf5;Qm\xfe v\x97I\xaaM\rM\x12\xcc\xea\x9eSr,\x9c\xb7x\rD', 0xffffffffffffff4d) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x8cec, 0x6]}, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x80400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0xffffffffffffbfff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgrcv$auto(0x0, 0x0, 0x9, 0x10001, 0xda4e) r5 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(r5, 0x7b3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) 52.460717442s ago: executing program 6 (id=4126): socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3a, 0xffffffffffffffff, 0x0, 0x8, 0x9) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x183440, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x28, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x800) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xa2040, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) modify_ldt$auto(0x1, 0x0, 0x10) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0x1d, 0x1, 0x10000000948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x3ff, 0x8000001f, 0x7, 0x8000000000000000, 0x9, 0x2, 0x6]}, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) sendfile$auto(r3, r3, 0x0, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) 48.790455371s ago: executing program 0 (id=4135): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0xc) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) getrandom$auto(0x0, 0xe06, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(r1, 0x3, 0x0, 0xc03) setreuid$auto(0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 48.756791559s ago: executing program 0 (id=4136): mmap$auto(0x0, 0x10, 0x4000000000df, 0xeb1, 0x401, 0x7) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfbfff000) socket(0x23, 0x800, 0x8) mmap$auto(0x200000000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8003) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff8, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x80007, 0x3034, 0xc, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b6}, {0x4000, 0xfc, 0x9, 0x0, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) socket(0xa, 0x1, 0x84) socket(0xa, 0x2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/softnet_stat\x00', 0x40102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) readv$auto(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x40200}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x0, 0x40009, 0x3, 0x38, 0xffffffffffffffff, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) read$auto(r0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f00000001c0)=""/204, 0xcc) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r2 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/record-tgid\x00', 0x121082, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) close_range$auto(0x2, r2, 0x0) 48.628609723s ago: executing program 0 (id=4137): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x8000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x0) r2 = socket(0x11, 0x2, 0x0) sendmmsg$auto(r2, 0x0, 0x2, 0x100) madvise$auto(0x80f5, 0x200007, 0x8) 48.44498724s ago: executing program 0 (id=4138): writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4, 0xa, 0x48}) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) readv$auto(0x6, &(0x7f00000000c0)={0x0, 0x1}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 48.345445808s ago: executing program 0 (id=4139): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0017d740", @ANYRES16=r1, @ANYBLOB="010026bd7020fddbdf250100000008000200", @ANYRES32=0x4, @ANYRES16=r0, @ANYRES32, @ANYBLOB="3dd069cfa06ed61591d6cbdf14ac07cc2d1401d046624fdc0f5fb2c172653db88d42e4b6e2a5cae454f471c37f5d22d11f3c1fd298b3a8e1f5ae9c032d3f6119baaa914c29"], 0x34}, 0x1, 0x0, 0x0, 0x2004c855}, 0x4004880) r2 = socket(0xa, 0x1, 0x100) r3 = io_uring_setup$auto(0x1, 0x0) pwrite64$auto(r3, &(0x7f00000001c0)='./cgroup/me5X/\xe2\xb1\xe6\x86\x14scure\x00\x99\x1f\xad\x0eN\xfa(\x9f\x01\xd1\xdcN\xb1\xcf~M\xe2\xf1ra\xa71\x18\x87\xf5\\\x86\x91\xd3\x13\xd5\xc2\x97\xc6\x92<\xcf$\xbfU\x00\x00\x00\x00\xd8\xb0\xad\fR\xc0\xa2<\xcf\xa8\xb6\xd9\x87\x9bk\xe1\x04\xf5\x1f\xebx&bU$\bu\xa1)\xf1\x18\xd0\xc5\xdf\x06\x9f\xf0\x01\x00\x00\x00\x00\x06\x00\x01OSU\x9dM\xee\xcc\xaf8\'\x94 \x06GdAoL\x9c\xe1\xb4\xa1%\x15\xb1\x97\xd8\xbb9Ny\f\xee', 0xc13, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r4, 0x0, 0x5e) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, 0x0, 0x8008800) r5 = socket(0x8, 0x4, 0x106) r6 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r7 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r7, 0x1269, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2324f35cf549403, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r8 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r8, 0x8000001, 0xfffffff6, 0x0, 0x46) mmap$auto(0x0, 0x6, 0xdf, 0x15, 0x2, 0xb) arch_prctl$auto_ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x3) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) mmap$auto(0x3, 0x3, 0x8, 0x4000000000011, r5, 0x20007ffb) mmap$auto(0x100, 0x7, 0x2, 0x40eb2, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_ctl$auto(r6, 0x5, r7, &(0x7f0000000040)={0x5, 0x6}) mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0xc001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) 48.303731359s ago: executing program 0 (id=4140): add_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000040)='/proc/driver/nvram\x00', &(0x7f0000000080)='^*\x00', &(0x7f00000000c0)="c04c837ecb9d7e8a693e04c8ff8a5c2f97aca9e75a2bedfda5631f3ac1fdec43b9835dd107330a26e1324e3b4647d6b4e98caab2d94c99aa82415d53825e7e85135d0d02ab923405a0f1ecc28a8b48fed81bdbc7edce2a9ab97f6bc544c81d83c3e93f11a1b86ae76e6fae36009ab4f6c5ce8bbc5248c5b768302e14fb28bcc304ab997c516285ffee", 0x9, 0xfffffffffffffff8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24004805}, 0x8000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0xfc, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82040, 0x0) ioperm$auto(0x7, 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5) unshare$auto(0x40000080) mmap$auto(0x7, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 45.880138129s ago: executing program 35 (id=4084): mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x8a603, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x100e980, 0xdf, 0xe30, 0x401, 0x8000) r1 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/tracing/uprobe_events\x00', 0x80, 0x0) get_robust_list$auto(0x0, &(0x7f0000000200)=&(0x7f00000001c0)={{}, 0x8, &(0x7f0000000180)}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0xffffffffffffffff, r1, 0xfffffffa) socket(0x2, 0x3, 0x100) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, r0, 0xc000) getrandom$auto(0x0, 0x2, 0xff8) mbind$auto(0x6, 0x2091c2, 0x4, 0x0, 0x100000000, 0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x2cc480, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400020009, 0x10000000000df, 0x13, 0x8000000401, 0x7fffffffffffffff) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x4802, 0x0) read$auto_proc_sessionid_operations_base(r3, &(0x7f0000000240)=""/4096, 0x1000) fstat$auto(r2, &(0x7f0000000100)={0x4, 0xcc5d, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x3, 0x7fffffff, 0x10, 0x9, 0x4, 0xb}) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x80000000, 0x3, 0xfffffffffffffffc, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) 39.867489526s ago: executing program 36 (id=4112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x150, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff0000e76558290a447b111aab78ab3e21fc5731bd743aaaa9818fa90827000079dd3c67e56f40fc9de24adddbe2c81a8a146e6dc760552a2fce6cea205f00208f"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40810) 37.065458154s ago: executing program 37 (id=4126): socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3a, 0xffffffffffffffff, 0x0, 0x8, 0x9) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x183440, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x28, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x800) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xa2040, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) modify_ldt$auto(0x1, 0x0, 0x10) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0x1d, 0x1, 0x10000000948b, 0x3, 0x15f4da0a, 0x20000003, 0x3, 0x3ff, 0x8000001f, 0x7, 0x8000000000000000, 0x9, 0x2, 0x6]}, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) sendfile$auto(r3, r3, 0x0, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) 32.954321926s ago: executing program 38 (id=4140): add_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000040)='/proc/driver/nvram\x00', &(0x7f0000000080)='^*\x00', &(0x7f00000000c0)="c04c837ecb9d7e8a693e04c8ff8a5c2f97aca9e75a2bedfda5631f3ac1fdec43b9835dd107330a26e1324e3b4647d6b4e98caab2d94c99aa82415d53825e7e85135d0d02ab923405a0f1ecc28a8b48fed81bdbc7edce2a9ab97f6bc544c81d83c3e93f11a1b86ae76e6fae36009ab4f6c5ce8bbc5248c5b768302e14fb28bcc304ab997c516285ffee", 0x9, 0xfffffffffffffff8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24004805}, 0x8000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0xfc, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82040, 0x0) ioperm$auto(0x7, 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5) unshare$auto(0x40000080) mmap$auto(0x7, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 15.706388776s ago: executing program 8 (id=4228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdc02, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x11, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x80014) 15.535968031s ago: executing program 8 (id=4230): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0xc) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) getrandom$auto(0x0, 0xe06, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(r1, 0x3, 0x0, 0xc03) setreuid$auto(0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) writev$auto(0x1, 0x0, 0x1) readahead$auto(0xffffffffffffffff, 0x6, 0x2) r3 = socket(0x23, 0x5, 0x0) listen$auto(r3, 0x5ed) unshare$auto(0x40000080) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x6) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) 14.805823378s ago: executing program 8 (id=4233): add_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000040)='/proc/driver/nvram\x00', &(0x7f0000000080)='^*\x00', &(0x7f00000000c0)="c04c837ecb9d7e8a693e04c8ff8a5c2f97aca9e75a2bedfda5631f3ac1fdec43b9835dd107330a26e1324e3b4647d6b4e98caab2d94c99aa82415d53825e7e85135d0d02ab923405a0f1ecc28a8b48fed81bdbc7edce2a9ab97f6bc544c81d83c3e93f11a1b86ae76e6fae36009ab4f6c5ce8bbc5248c5b768302e14fb28bcc304ab997c516285ffee", 0x9, 0xfffffffffffffff8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24004805}, 0x8000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0xfc, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82040, 0x0) ioperm$auto(0x7, 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5) unshare$auto(0x40000080) mmap$auto(0x7, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/driver/nvram\x00', 0x48000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0p/sub3/status\x00', 0x325603, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000400)=""/232, 0xe8) 13.307945466s ago: executing program 8 (id=4242): add_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000040)='/proc/driver/nvram\x00', &(0x7f0000000080)='^*\x00', &(0x7f00000000c0)="c04c837ecb9d7e8a693e04c8ff8a5c2f97aca9e75a2bedfda5631f3ac1fdec43b9835dd107330a26e1324e3b4647d6b4e98caab2d94c99aa82415d53825e7e85135d0d02ab923405a0f1ecc28a8b48fed81bdbc7edce2a9ab97f6bc544c81d83c3e93f11a1b86ae76e6fae36009ab4f6c5ce8bbc5248c5b768302e14fb28bcc304ab997c516285ffee", 0x9, 0xfffffffffffffff8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24004805}, 0x8000) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0xfc, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x82040, 0x0) ioperm$auto(0x7, 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5) unshare$auto(0x40000080) mmap$auto(0x7, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/driver/nvram\x00', 0x48000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card0/pcm0p/sub3/status\x00', 0x325603, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000400)=""/232, 0xe8) 11.992052558s ago: executing program 8 (id=4244): socket(0xa, 0x1, 0x100) r0 = io_uring_setup$auto(0x1, 0x0) pwrite64$auto(r0, &(0x7f00000001c0)='./cgroup/me5X/\xe2\xb1\xe6\x86\x14scure\x00\x99\x1f\xad\x0eN\xfa(\x9f\x01\xd1\xdcN\xb1\xcf~M\xe2\xf1ra\xa71\x18\x87\xf5\\\x86\x91\xd3\x13\xd5\xc2\x97\xc6\x92<\xcf$\xbfU\x00\x00\x00\x00\xd8\xb0\xad\fR\xc0\xa2<\xcf\xa8\xb6\xd9\x87\x9bk\xe1\x04\xf5\x1f\xebx&bU$\bu\xa1)\xf1\x18\xd0\xc5\xdf\x06\x9f\xf0\x01\x00\x00\x00\x00\x06\x00\x01OSU\x9dM\xee\xcc\xaf8\'\x94 \x06GdAoL\x9c\xe1\xb4\xa1%\x15\xb1\x97\xd8\xbb9Ny\f\xee', 0xc13, 0x10) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0x20) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x8008800) r2 = socket(0x2, 0x801, 0x106) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r4, 0x1269, 0x1400) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2324f35cf549403, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x13, 0x0, 0x4) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) arch_prctl$auto_ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x3) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/mem\x00', 0x40, 0x0) mmap$auto(0x3, 0x3, 0x8, 0x4000000000011, r2, 0x20007ffb) mmap$auto(0x100, 0x7, 0x2, 0x40eb2, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_ctl$auto(r3, 0x5, r4, &(0x7f0000000040)={0x5, 0x6}) mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0xc001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', 0x0, 0x44020, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1c0102, 0x0) 11.825104208s ago: executing program 8 (id=4245): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) mmap$auto(0x80, 0x40009, 0xe2, 0x100009b72, 0x7, 0x28400) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r1, 0x8100451b, r1) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1c_\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xee\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000200)={0x2c, 0x6}, 0x0, 0x1001) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r4 = geteuid() sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="e1ff2abd7000fddbdf251b000f0008040300", @ANYRES32=r3, @ANYBLOB="0c0025800800da00", @ANYRES32=r4, @ANYBLOB="0800508004000480"], 0x30}, 0x1, 0x0, 0x0, 0x814}, 0x80) ioprio_get$auto(0x360, r4) sendmsg$auto_NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)={0x2f8, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_ADDRS={0x2dd, 0xa6, 0x0, 0x1, [@generic="bf8826e753eaa942d32fda3b0e69b277b2144e21b5d51c278c0f526a0844abe82f75164db1e1939c48aa5e9e5322bf2bb0be27cee920725f7cedf5ff4be3c97c8cf7853562c7345ded116656b107fce5e913a3b6a4d9ff6b4e76b49aefab805cf36417e8558cc5d52f61a648e4816db669e53481dd8849f8a8b9d2b6667e922168a7541216f273a40b25c87cbeb014cb6fdb6cc43763ae59d1a6e5b50c24b087abbe19f4eac82ddba89441ba26bb08", @generic="c31ff9309b45e1466331f96c95afcdfe59f7", @typed={0x8, 0x78, 0x0, 0x0, @ipv4=@local}, @typed={0x1d, 0x136, 0x0, 0x0, @str='/dev/dvb/adapter0/demux0\x00'}, @nested={0x184, 0x17, 0x0, 0x1, [@typed={0x4, 0x1a}, @generic="db41a0f8e3b93f9f65497580588de148f34ea994ab9964b2c25cbafa033ef2ab9f1893bf052b9c5ae5a0b3eea9ebe7fea78beaceeaf84200f83048d20b8daa41b557e125a14ffe49d0fbbe4497da688b52bd32c88ebca5b613eee18d6acfd429872239470097c61414e283ead0880a58849605b46f", @typed={0x8, 0xac, 0x0, 0x0, @u32=0x5e}, @typed={0x8, 0x106, 0x0, 0x0, @uid=r4}, @generic="a5736fc8017fc7e6048cdaf928591ec1c5eb21a97e83d4637acbb72ce57556974614a23e456263aa41ebfe27aa0fa1cce9508c00f77b0d47ffae6081591a2436febc933cc1fe5f7d9fb2b755cf76085bcb57aac2806318ac98c60b", @generic="645effd05a2c6520a2393147a2c74d6fed4611a8845ee9be9c6558490727d3a0c3ef32c4e6d652ba541ce9b33637fbf57fe7f9b2b76cce30ee9d0a3cfd9732a29d4504af43a8cab65a43b48ae5464c6919ed6bf413d0d01d819c04d9c3928169859868ce1f461ded8f83e2fb220704b5b675d879e0978ce4d62aa54ea965662d48848396361236", @generic="f3cd93b3501c65d793369934a5a0ff028afacca6da"]}, @nested={0x6c, 0x34, 0x0, 0x1, [@nested={0x4, 0x64}, @typed={0x49, 0x107, 0x0, 0x0, @binary="fc7cb9b0a2741c007dae7a5120df109380b01878e54f35be1bd47d0718b0508a5ecf7be005a583b37aa20fb996381985428c5de03c0bfd5177031b3f16afc08a89fe58e2ce"}, @typed={0x17, 0x7a, 0x0, 0x0, @str='/dev/snd/controlC2\x00'}]}]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2f8}, 0x1, 0x0, 0x0, 0x4008013}, 0x20008010) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty49\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1fe, 0x0) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x4000000403c6f2b, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) rseq$auto(&(0x7f0000000080)={0x9, 0x8, 0x0, 0x7, 0xffffffff, 0x2}, 0x7ffd, 0xfffffff6, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x20b42, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r7, 0x0, 0x3}, 0x91) read$auto_safesetid_gid_file_fops_securityfs(r7, &(0x7f0000000040)=""/7, 0x7) ioctl$auto_SNDCTL_DSP_SPEED(r6, 0xc0045002, 0x0) write$auto(r6, 0x0, 0x7fffffff) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x2, 0x7f}) 4.018747936s ago: executing program 1 (id=4273): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.965996938s ago: executing program 1 (id=4274): mmap$auto(0x0, 0x10, 0x4000000000df, 0xeb1, 0x401, 0x7) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfbfff000) socket(0x23, 0x800, 0x8) mmap$auto(0x200000000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8003) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff8, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x80007, 0x3034, 0xc, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b6}, {0x4000, 0xfc, 0x9, 0x0, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) socket(0xa, 0x1, 0x84) socket(0xa, 0x2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/softnet_stat\x00', 0x40102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) readv$auto(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x40200}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x0, 0x40009, 0x3, 0x38, 0xffffffffffffffff, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) r0 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000001c0)=""/204, 0xcc) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/record-tgid\x00', 0x121082, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, r1, 0x0) 3.952515625s ago: executing program 9 (id=4275): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000480), r0) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x5, 0x0) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb78}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x140000e4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r8, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) r9 = socket(0x2, 0x800, 0x106) setsockopt$auto(r9, 0x6, 0xd, &(0x7f0000000040)='nsKcg>', 0x2) bind$auto(0x3, &(0x7f0000000440)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00', 0x0}) r12 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_SET_MESH(r15, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x24, r12, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140000e4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'xfrm0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1b8, r1, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x676}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffe3d, 0x3, 0xd}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8001}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x7}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x14}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x4}, @ETHTOOL_A_CABLE_TEST_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf92}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket(0x2a, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(0x6, 0x1, 0x4d, 0xfffffffffffffffe, 0x0) 3.844795319s ago: executing program 7 (id=4277): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x1, 0x16, 0xffffffffffffffff, 0x1ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2001, 0x0) write$auto(r1, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) connect$auto(0x3, &(0x7f0000000080)=@hci={0x1f, 0x2}, 0x51) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, &(0x7f00000003c0)="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") syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3, 0x1000df, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mlockall$auto(0x7) mmap$auto(0x2, 0x20009, 0xc, 0xeb1, 0xffffffffffffffff, 0xef) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) r2 = gettid() rt_sigsuspend$auto(&(0x7f0000000000)={0x2}, 0x8) tkill$auto(r2, 0x7) brk$auto(0x7fffffffefff) setpgid$auto(r0, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC0D0c\x00', 0x6f8200, 0x0) mmap$auto(0x0, 0x2020009, 0x20000800004, 0x13, 0xfffffffffffffffa, 0x7ffd) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x7fa97ea6, 0x0, 0x6, 0x0, 0x200, 0x696b}, 0x7}, 0x7, 0x4000022d) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 3.642735933s ago: executing program 9 (id=4278): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, r0, 0x3ff) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000e00)="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", 0xcb6) socket(0x5, 0x3, 0x0) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2060009, 0x8000006, 0xeb2, r2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ubifs/parameters/default_version\x00', 0xa041, 0x0) write$auto(0x3, 0x0, 0xfdef) close_range$auto(r1, 0x8, 0x5) socket(0x2, 0x3, 0xa) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket(0x22, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa083, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) 3.391462359s ago: executing program 1 (id=4279): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/psaux\x00', 0x48202, 0x0) r1 = openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)=@bpf_attr_4={0x8, r0, 0x68, r1}, 0x3) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0xc0b, 0x8, 0x5, 0x1001, 0xffffffffffffffff, 0xf, 0x1000, 0xb, 0x1, 0xced80000000000, 0x9, 0x6, 0x0, 0x1, 0x7fffffff]}, 0x0, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x121141, 0x0) pread64$auto(r2, &(0x7f0000000280)='\x00', 0x8, 0xe) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000080)) vmsplice$auto(r3, &(0x7f0000000100)={&(0x7f0000000000)="44584bf8515ee485167a25a3d5cb12f0278a9b9696b1a501d0d8a996e6ed0d5ccd3bbbc8ac452d8eb803e102044aaf9d00937091b11c0051215671f3852d", 0x7fffffffffffffff}, 0x2, 0x5) 3.216559375s ago: executing program 1 (id=4280): socket(0x2, 0x1, 0x106) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000000)={@siginfo_0_0={0x4, 0xfffffffc, 0xd2, @_sigchld={0x0, 0x0, 0x7, 0x80000001, 0x5}}}, 0x1, &(0x7f0000000080)={{0xb, 0xa5f3}, {0x0, 0x87f}, 0x80000001, 0x7fc, 0x8000, 0xa36, 0x403, 0xfffffffffffffff1, 0x4, 0x6517138a, 0x8, 0x81, 0x2, 0xca3, 0x1, 0x8727}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0x33c, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f00000002c0)={0x8, r1, 0x1, 0x33}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) madvise$auto(0x2, 0x5c61fa2c, 0xf) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf2503000000dd320800140001800800028004001d8008001400ac1e0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x24000044) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) ioctl$auto_BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000001040)={@inferred, 0x2, 0x7de, @btrfs_ioctl_vol_args_v2_3_0={0x3, 0x0}, @devid=0xc}) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) 2.280985767s ago: executing program 7 (id=4281): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) read$auto_sco_debugfs_fops_(r1, 0x0, 0x0) prctl$auto(0x3e, 0x4, 0x0, 0x1, 0xffffffffffffffff) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x18000) close_range$auto(0x2, 0x8, 0x0) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) socket(0x2, 0x801, 0x106) socket(0x28, 0x5, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 2.227608932s ago: executing program 1 (id=4282): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="29012cb27000fbdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x5a88314c8e109829}, 0x14) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYRESOCT=r0], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) rseq$auto(0x0, 0x8000, 0x5, 0x8000006) setsockopt$auto(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x7fffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0xc000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x11, 0x0) setreuid$auto(0x7, 0x806) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:5/min_bytes\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) bind$auto(0x3, 0x0, 0xf) r3 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r3, 0x8, 0x0) prlimit64$auto(r3, 0xa3d, 0x0, 0x0) 2.187193013s ago: executing program 9 (id=4283): readahead$auto(0xffffffffffffffff, 0x4, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1000, 0x400005, 0x5, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28c3c3, 0x0) mmap$auto(0x0, 0x4994, 0xdf, 0x9b75, 0x2, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x10, 0x3, 0x6) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) r1 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_clock\x00', 0x28000, 0x0) write$auto_trace_clock_fops_trace(r1, &(0x7f0000000140)="81bc3f64bbc20cdfae499d92690dc5b751ace74caff7ca076c7d70c4a53a8f068d6adeda71a4adacfc5bae3e2c2c3acbd286a11ed7f68568b2aa30bb14d07bf2902bca60133b7ebdd9ea9e5a8bb8a8900fd54cc464208b1a5912275676cd44e8798d1320ecd1ebb86d2cbee23ac6ab1ed024f3665d0bf703a0f37e1cc995ad18bc559ab3bcc644f31239612121a420d423e3ac647a046919", 0x98) mmap$auto(0x0, 0x2020009, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) getresuid$auto(&(0x7f0000000200), &(0x7f0000000240)=0xb74d, &(0x7f0000000280)=0x3) write$auto(0x3, 0x0, 0x4fffffdf2) ioctl$auto(0x3, 0x402c542b, 0x38) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 1.678783977s ago: executing program 9 (id=4284): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) (async) r0 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_NOFCS(r0, 0x5, 0x2b, 0x0, &(0x7f0000000080)=0x7ff) (async) connect$auto(0xffffffffffffffff, 0x0, 0x7) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) write$auto(0x3, 0x0, 0x100082) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x2, 0x1, 0x106) (async) r1 = socket(0xf, 0x3, 0x2) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async) bind$auto(r1, 0x0, 0x2) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) move_pages$auto(0x0, 0x5, 0xfffffffffffffffe, &(0x7f0000003380)=0x4c0, 0x0, 0x2) (async) read$auto(0x3, 0x0, 0xf34) (async) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) write$auto(0x3, 0x0, 0xffd8) 1.363172801s ago: executing program 7 (id=4285): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, 0x0, 0x7ffffffff000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) ioctl$auto_FIFREEZE(0xffffffffffffffff, 0xc0045878, 0xfa) waitid$auto(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) ioctl$auto_RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) ppoll$auto(0x0, 0x100, 0x0, 0x0, 0x8) socket(0xa, 0x5, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyt2\x00', 0x600000, 0x0) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x4a000, 0x0) ioctl$auto_BLKRASET(r1, 0x1262, 0x0) socket(0x2, 0x1, 0x0) r2 = socketpair$auto(0x4200017, 0x5, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) fsmount$auto(r2, 0x2, 0x3) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) r3 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) msgctl$auto_MSG_STAT(0x8000, 0xb, 0x0) read$auto_l2cap_debugfs_fops_(r3, &(0x7f0000000240)=""/177, 0xb1) 759.767094ms ago: executing program 9 (id=4286): mmap$auto(0x0, 0x10, 0x4000000000df, 0xeb1, 0x401, 0x7) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfbfff000) socket(0x23, 0x800, 0x8) mmap$auto(0x200000000, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8003) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x405, 0x8, 0x10001, 0x6fb3, 0x8a, 0xfffffff8, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x2, 0x80007, 0x3034, 0xc, 0xf, 0x5, 0x5, 0xfffffff9, 0xf08a2b6}, {0x4000, 0xfc, 0x9, 0x0, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) socket(0xa, 0x1, 0x84) socket(0xa, 0x2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/softnet_stat\x00', 0x40102, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000680)={0x0, 0x40200}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x0, 0x40009, 0x3, 0x38, 0xffffffffffffffff, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) read$auto(r1, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000001c0)=""/204, 0xcc) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r3 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/record-tgid\x00', 0x121082, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, r3, 0x0) 758.193067ms ago: executing program 1 (id=4294): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) (async) ioctl$auto_RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xe, 0x85, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000040)='\x89\xcf\xc3b\xd0\xfb\r\\9\xc8\xb4\x95\xdbO\xb4\xeb\xf1W\x89\xf0\xdf\xd8\x8d%v\xd1\xcc4D\x7f\xe7\x9b\xd1{\xcf]l6\x10\xef\xa1\x95@l.v\xd0\xa4\x03\x00\x05\x00\x00\x00\x00\x00*w \xa1\x14`}*r\x1e\xb1\x88r\x19\x86\xcc\x00Zh\xf4\x98\xca\xad+\xb9\xf0\xfc\xa2rm\xb5\x15\xc8\xaf\x86\xb1\xa2F\'\x93\x9c\xe0\x04\xa4\xad>\xc8\x9c\xd8\xd9G\xe9K\x89\x15\x8e\xfct\x11\xa3a\xc8\x90[\x81x\xde\xb0\x1f\x80O\n\xbe\x80\xfb\xbdXO6\xf9\xd8bH\xc9f^\x94\xda]\xb7dW\x88\xd8\xa6d\xad\x92\xb7*i\a\x00\xf2\x93 \x1b\xca\x01\xc5\x00'/178, &(0x7f0000000000)=&(0x7f00000001c0)=' ') getsockopt$auto(r0, 0x1, 0x1a, 0x0, 0x0) (async) getsockopt$auto(r0, 0x1, 0x1a, 0x0, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) (async) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) (async) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) r1 = socket(0x2c, 0x3, 0x0) setsockopt$auto(0x4, 0x6, 0x480, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x9, 0x8, 0xc, 0x66b, 0x4, 0x7ff}, 0x6f4) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) fcntl$auto_F_GETOWN_EX(r1, 0x10, 0x1) mlockall$auto(0x7) (async) mlockall$auto(0x7) write$auto(0x3, 0x0, 0x7fffffff) (async) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r2, 0x0, 0x39b8) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) (async) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r3, 0x227b, 0x0) (async) ioctl$auto_SG_SET_FORCE_PACK_ID(r3, 0x227b, 0x0) read$auto(r3, 0x0, 0x57) 440.644447ms ago: executing program 7 (id=4287): request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000000)='!&$$\x00', &(0x7f0000000040)='^\x00', &(0x7f0000000080)='/dev/ppp\x00', 0xfffffffffffffff8) unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0x100000000, 0x8, 0x0, 0x1c) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop12/hctx0/tags\x00', 0x8080, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r3, &(0x7f0000000080)=""/229, 0xe5) sched_get_priority_min$auto(0x40) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x5, 0x54f, 0xa, 0x400, 0x1087181, 0x8a0d, 0x7, 0x7, 0x7ff, 0x89, 0x23, 0x4, 0x200003fffffe, 0x384, 0xffffffeffffffffa, 0x0, 0x4000000, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x67aa4df3, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0xb, 0x3) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) readv$auto(0x3, 0x0, 0x100000007) mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) socket(0x11, 0x80003, 0x300) 304.423372ms ago: executing program 9 (id=4288): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/ram1/queue/zone_write_granularity\x00', 0x8a340, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183941, 0x0) read$auto_l2cap_debugfs_fops_(r2, &(0x7f0000000240)=""/177, 0xb1) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0x6, &(0x7f00000000c0)={{0x407fff, 0x30d}, {0x7, 0x100000000}}, 0x0) rt_sigaction$auto(0xe, &(0x7f0000000580)={&(0x7f00000004c0)=0x0, 0x100000001, 0x0, {0x7}}, 0x0, 0x8) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x680, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) pread64$auto(r0, 0x0, 0x8, 0x8) getcwd$auto(&(0x7f0000000040)=']+]\x17\x00', 0x6) 126.195905ms ago: executing program 7 (id=4289): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300200000000) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) connect$auto(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x55) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x62, &(0x7f0000001d80)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 0s ago: executing program 7 (id=4290): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xd, 0x0) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) process_madvise$auto(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8000000000000000) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x1000000) kernel console output (not intermixed with test programs): 5.826648][T20770] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 895.826665][T20770] RBP: 00007f3e24410b39 R08: 0000000000000000 R09: 0000000000000000 [ 895.826681][T20770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.826697][T20770] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 895.826730][T20770] [ 896.071206][T20770] ERROR: Out of memory at tomoyo_realpath_from_path. [ 896.193356][T20777] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht' [ 896.878027][T20802] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 896.943135][T20802] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input68 [ 897.350144][T20806] random: crng reseeded on system resumption [ 897.360061][T20806] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 897.368412][T20806] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 897.376929][T20806] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 897.385124][T20806] PM: hibernation: Basic memory bitmaps created [ 897.509324][T20807] PM: hibernation: Basic memory bitmaps freed [ 897.651830][T20810] random: crng reseeded on system resumption [ 897.661957][T20810] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 897.674501][T20810] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 897.691835][T20810] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 897.712120][T20810] PM: hibernation: Basic memory bitmaps created [ 897.840154][T20810] PM: hibernation: Basic memory bitmaps freed [ 899.187949][T20833] netlink: 350 bytes leftover after parsing attributes in process `syz.2.3562'. [ 899.917129][T20835] FAULT_INJECTION: forcing a failure. [ 899.917129][T20835] name failslab, interval 1, probability 0, space 0, times 0 [ 899.932074][T20835] CPU: 0 UID: 0 PID: 20835 Comm: syz.0.3563 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 899.932110][T20835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 899.932126][T20835] Call Trace: [ 899.932134][T20835] [ 899.932144][T20835] dump_stack_lvl+0x16c/0x1f0 [ 899.932185][T20835] should_fail_ex+0x512/0x640 [ 899.932218][T20835] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 899.932253][T20835] should_failslab+0xc2/0x120 [ 899.932300][T20835] __kmalloc_noprof+0xd2/0x510 [ 899.932335][T20835] ? rcu_is_watching+0x12/0xc0 [ 899.932360][T20835] ? lock_acquire+0x2cd/0x350 [ 899.932392][T20835] tomoyo_realpath_from_path+0xc2/0x6e0 [ 899.932426][T20835] ? tomoyo_profile+0x47/0x60 [ 899.932460][T20835] tomoyo_path_perm+0x274/0x460 [ 899.932485][T20835] ? tomoyo_path_perm+0x260/0x460 [ 899.932512][T20835] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 899.932539][T20835] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 899.932569][T20835] ? d_add+0x47a/0x780 [ 899.932590][T20835] ? rcu_is_watching+0x12/0xc0 [ 899.932621][T20835] ? __pfx_current_check_access_path+0x10/0x10 [ 899.932649][T20835] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 899.932676][T20835] ? lookup_dcache+0x66/0x170 [ 899.932704][T20835] tomoyo_path_symlink+0x97/0xe0 [ 899.932736][T20835] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 899.932774][T20835] security_path_symlink+0x152/0x2e0 [ 899.932801][T20835] do_symlinkat+0x10d/0x310 [ 899.932835][T20835] ? __pfx_do_symlinkat+0x10/0x10 [ 899.932869][T20835] ? getname_flags.part.0+0x1c5/0x550 [ 899.932898][T20835] __x64_sys_symlink+0x75/0x90 [ 899.932933][T20835] do_syscall_64+0xcd/0x490 [ 899.932968][T20835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.932993][T20835] RIP: 0033:0x7f3e2438e929 [ 899.933012][T20835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 899.933037][T20835] RSP: 002b:00007f3e2521e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 899.933061][T20835] RAX: ffffffffffffffda RBX: 00007f3e245b5fa0 RCX: 00007f3e2438e929 [ 899.933079][T20835] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 899.933095][T20835] RBP: 00007f3e24410b39 R08: 0000000000000000 R09: 0000000000000000 [ 899.933112][T20835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.933127][T20835] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 899.933151][T20835] [ 899.933161][T20835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 899.950405][T20837] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3564'. [ 900.219522][T20844] FAULT_INJECTION: forcing a failure. [ 900.219522][T20844] name failslab, interval 1, probability 0, space 0, times 0 [ 900.232323][T20844] CPU: 1 UID: 0 PID: 20844 Comm: syz.2.3566 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 900.232346][T20844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 900.232356][T20844] Call Trace: [ 900.232360][T20844] [ 900.232366][T20844] dump_stack_lvl+0x16c/0x1f0 [ 900.232393][T20844] should_fail_ex+0x512/0x640 [ 900.232416][T20844] ? tomoyo_encode2+0x100/0x3e0 [ 900.232434][T20844] should_failslab+0xc2/0x120 [ 900.232448][T20844] __kmalloc_noprof+0xd2/0x510 [ 900.232471][T20844] tomoyo_encode2+0x100/0x3e0 [ 900.232492][T20844] tomoyo_encode+0x29/0x50 [ 900.232509][T20844] tomoyo_path_perm+0x3a5/0x460 [ 900.232525][T20844] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 900.232541][T20844] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 900.232558][T20844] ? d_add+0x47a/0x780 [ 900.232571][T20844] ? rcu_is_watching+0x12/0xc0 [ 900.232589][T20844] ? __pfx_current_check_access_path+0x10/0x10 [ 900.232606][T20844] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 900.232621][T20844] ? lookup_dcache+0x66/0x170 [ 900.232637][T20844] tomoyo_path_symlink+0x97/0xe0 [ 900.232657][T20844] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 900.232680][T20844] security_path_symlink+0x152/0x2e0 [ 900.232696][T20844] do_symlinkat+0x10d/0x310 [ 900.232722][T20844] ? __pfx_do_symlinkat+0x10/0x10 [ 900.232743][T20844] ? getname_flags.part.0+0x1c5/0x550 [ 900.232761][T20844] __x64_sys_symlink+0x75/0x90 [ 900.232783][T20844] do_syscall_64+0xcd/0x490 [ 900.232805][T20844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.232820][T20844] RIP: 0033:0x7f218b18e929 [ 900.232832][T20844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.232846][T20844] RSP: 002b:00007f218c014038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 900.232861][T20844] RAX: ffffffffffffffda RBX: 00007f218b3b5fa0 RCX: 00007f218b18e929 [ 900.232871][T20844] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 900.232880][T20844] RBP: 00007f218b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 900.232889][T20844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.232898][T20844] R13: 0000000000000000 R14: 00007f218b3b5fa0 R15: 00007ffe2ebb6db8 [ 900.232911][T20844] [ 900.881593][T20849] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 900.973096][T20859] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 904.296967][T20872] random: crng reseeded on system resumption [ 904.327317][T20872] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 904.335504][T20872] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 904.365014][T20862] vidtv vidtv.0: No streaming. Skipping. [ 904.395077][T20872] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 904.414045][T20872] PM: hibernation: Basic memory bitmaps created [ 904.768899][T20870] PM: hibernation: Basic memory bitmaps freed [ 905.309743][T20890] FAULT_INJECTION: forcing a failure. [ 905.309743][T20890] name failslab, interval 1, probability 0, space 0, times 0 [ 905.322735][T20890] CPU: 0 UID: 0 PID: 20890 Comm: syz.2.3577 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 905.322781][T20890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 905.322797][T20890] Call Trace: [ 905.322807][T20890] [ 905.322817][T20890] dump_stack_lvl+0x16c/0x1f0 [ 905.322863][T20890] should_fail_ex+0x512/0x640 [ 905.322899][T20890] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 905.322933][T20890] should_failslab+0xc2/0x120 [ 905.322955][T20890] __kmalloc_noprof+0xd2/0x510 [ 905.322984][T20890] ? rcu_is_watching+0x12/0xc0 [ 905.322999][T20890] ? lock_acquire+0x2cd/0x350 [ 905.323021][T20890] tomoyo_realpath_from_path+0xc2/0x6e0 [ 905.323041][T20890] ? tomoyo_profile+0x47/0x60 [ 905.323074][T20890] tomoyo_path_perm+0x274/0x460 [ 905.323099][T20890] ? tomoyo_path_perm+0x260/0x460 [ 905.323127][T20890] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 905.323146][T20890] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 905.323163][T20890] ? d_add+0x47a/0x780 [ 905.323175][T20890] ? rcu_is_watching+0x12/0xc0 [ 905.323193][T20890] ? __pfx_current_check_access_path+0x10/0x10 [ 905.323210][T20890] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 905.323225][T20890] ? lookup_dcache+0x66/0x170 [ 905.323241][T20890] tomoyo_path_symlink+0x97/0xe0 [ 905.323262][T20890] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 905.323285][T20890] security_path_symlink+0x152/0x2e0 [ 905.323301][T20890] do_symlinkat+0x10d/0x310 [ 905.323322][T20890] ? __pfx_do_symlinkat+0x10/0x10 [ 905.323343][T20890] ? getname_flags.part.0+0x1c5/0x550 [ 905.323360][T20890] __x64_sys_symlink+0x75/0x90 [ 905.323381][T20890] do_syscall_64+0xcd/0x490 [ 905.323404][T20890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.323418][T20890] RIP: 0033:0x7f218b18e929 [ 905.323431][T20890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.323446][T20890] RSP: 002b:00007f218c014038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 905.323461][T20890] RAX: ffffffffffffffda RBX: 00007f218b3b5fa0 RCX: 00007f218b18e929 [ 905.323470][T20890] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 905.323480][T20890] RBP: 00007f218b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 905.323490][T20890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 905.323499][T20890] R13: 0000000000000000 R14: 00007f218b3b5fa0 R15: 00007ffe2ebb6db8 [ 905.323512][T20890] [ 905.323542][T20890] ERROR: Out of memory at tomoyo_realpath_from_path. [ 905.924293][T20904] random: crng reseeded on system resumption [ 905.935089][T20904] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 905.943384][T20904] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 905.951733][T20904] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 905.960117][T20904] PM: hibernation: Basic memory bitmaps created [ 906.138420][T20904] PM: hibernation: Basic memory bitmaps freed [ 906.756636][T20917] random: crng reseeded on system resumption [ 906.766538][T20917] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 906.774702][T20917] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 906.783522][T20917] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 906.791870][T20917] PM: hibernation: Basic memory bitmaps created [ 906.837465][T20917] PM: hibernation: Basic memory bitmaps freed [ 907.288975][T20919] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3588'. [ 907.411731][T20923] FAULT_INJECTION: forcing a failure. [ 907.411731][T20923] name failslab, interval 1, probability 0, space 0, times 0 [ 907.427866][T20923] CPU: 0 UID: 0 PID: 20923 Comm: syz.0.3590 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 907.427904][T20923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 907.427922][T20923] Call Trace: [ 907.427931][T20923] [ 907.427941][T20923] dump_stack_lvl+0x16c/0x1f0 [ 907.427983][T20923] should_fail_ex+0x512/0x640 [ 907.428020][T20923] should_failslab+0xc2/0x120 [ 907.428046][T20923] __kmalloc_cache_noprof+0x6a/0x3e0 [ 907.428078][T20923] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 907.428114][T20923] ? device_add+0xccc/0x1a70 [ 907.428142][T20923] device_add+0xccc/0x1a70 [ 907.428166][T20923] ? __pfx___debug_object_init+0x10/0x10 [ 907.428192][T20923] ? alloc_workqueue+0x198/0x200 [ 907.428221][T20923] ? __pfx_device_add+0x10/0x10 [ 907.428250][T20923] nfc_register_device+0x41/0x3c0 [ 907.428276][T20923] nci_register_device+0x7f1/0xb80 [ 907.428309][T20923] ? __pfx_nci_register_device+0x10/0x10 [ 907.428344][T20923] ? lockdep_init_map_type+0x5c/0x280 [ 907.428378][T20923] virtual_ncidev_open+0x141/0x220 [ 907.428408][T20923] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 907.428436][T20923] misc_open+0x35d/0x420 [ 907.428465][T20923] ? __pfx_misc_open+0x10/0x10 [ 907.428494][T20923] chrdev_open+0x234/0x6a0 [ 907.428529][T20923] ? __pfx_apparmor_file_open+0x10/0x10 [ 907.428568][T20923] ? __pfx_chrdev_open+0x10/0x10 [ 907.428606][T20923] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 907.428640][T20923] do_dentry_open+0x741/0x1c10 [ 907.428673][T20923] ? __pfx_chrdev_open+0x10/0x10 [ 907.428711][T20923] vfs_open+0x82/0x3f0 [ 907.428737][T20923] path_openat+0x1de4/0x2cb0 [ 907.428774][T20923] ? __pfx_path_openat+0x10/0x10 [ 907.428812][T20923] do_filp_open+0x20b/0x470 [ 907.428845][T20923] ? __pfx_do_filp_open+0x10/0x10 [ 907.428888][T20923] ? alloc_fd+0x471/0x7d0 [ 907.428923][T20923] do_sys_openat2+0x11b/0x1d0 [ 907.428957][T20923] ? __pfx_do_sys_openat2+0x10/0x10 [ 907.428991][T20923] __x64_sys_openat+0x174/0x210 [ 907.429020][T20923] ? __pfx___x64_sys_openat+0x10/0x10 [ 907.429055][T20923] do_syscall_64+0xcd/0x490 [ 907.429092][T20923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.429118][T20923] RIP: 0033:0x7f3e2438e929 [ 907.429140][T20923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 907.429166][T20923] RSP: 002b:00007f3e2521e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 907.429191][T20923] RAX: ffffffffffffffda RBX: 00007f3e245b5fa0 RCX: 00007f3e2438e929 [ 907.429210][T20923] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 907.429228][T20923] RBP: 00007f3e24410b39 R08: 0000000000000000 R09: 0000000000000000 [ 907.429245][T20923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 907.429261][T20923] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 907.429285][T20923] [ 907.927753][T20930] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input70 [ 908.159491][T20933] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71 [ 908.792944][T18679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 908.801430][T18679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 908.815795][T18679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 908.824422][T18679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 908.832455][T18679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 908.930054][T20952] chnl_net:caif_netlink_parms(): no params data found [ 908.983575][T20952] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.991774][T20952] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.000453][T20952] bridge_slave_0: entered allmulticast mode [ 909.017971][T20952] bridge_slave_0: entered promiscuous mode [ 909.025432][T20952] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.035360][T20952] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.043063][T20952] bridge_slave_1: entered allmulticast mode [ 909.051249][T20952] bridge_slave_1: entered promiscuous mode [ 909.072998][T20952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.089692][T20952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 909.180129][T20952] team0: Port device team_slave_0 added [ 909.187021][T20961] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3597'. [ 909.214890][T20952] team0: Port device team_slave_1 added [ 909.271655][T20963] FAULT_INJECTION: forcing a failure. [ 909.271655][T20963] name failslab, interval 1, probability 0, space 0, times 0 [ 909.298296][T20963] CPU: 0 UID: 0 PID: 20963 Comm: syz.0.3604 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 909.298333][T20963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 909.298350][T20963] Call Trace: [ 909.298366][T20963] [ 909.298377][T20963] dump_stack_lvl+0x16c/0x1f0 [ 909.298418][T20963] should_fail_ex+0x512/0x640 [ 909.298454][T20963] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 909.298486][T20963] should_failslab+0xc2/0x120 [ 909.298512][T20963] __kmalloc_noprof+0xd2/0x510 [ 909.298546][T20963] ? rcu_is_watching+0x12/0xc0 [ 909.298571][T20963] ? lock_acquire+0x2cd/0x350 [ 909.298603][T20963] tomoyo_realpath_from_path+0xc2/0x6e0 [ 909.298634][T20963] ? tomoyo_profile+0x47/0x60 [ 909.298668][T20963] tomoyo_path_perm+0x274/0x460 [ 909.298695][T20963] ? tomoyo_path_perm+0x260/0x460 [ 909.298722][T20963] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 909.298749][T20963] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 909.298781][T20963] ? d_add+0x47a/0x780 [ 909.298802][T20963] ? rcu_is_watching+0x12/0xc0 [ 909.298835][T20963] ? __pfx_current_check_access_path+0x10/0x10 [ 909.298865][T20963] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 909.298892][T20963] ? lookup_dcache+0x66/0x170 [ 909.298921][T20963] tomoyo_path_symlink+0x97/0xe0 [ 909.298957][T20963] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 909.298996][T20963] security_path_symlink+0x152/0x2e0 [ 909.299025][T20963] do_symlinkat+0x10d/0x310 [ 909.299062][T20963] ? __pfx_do_symlinkat+0x10/0x10 [ 909.299097][T20963] ? getname_flags.part.0+0x1c5/0x550 [ 909.299128][T20963] __x64_sys_symlink+0x75/0x90 [ 909.299167][T20963] do_syscall_64+0xcd/0x490 [ 909.299207][T20963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.299231][T20963] RIP: 0033:0x7f3e2438e929 [ 909.299252][T20963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.299275][T20963] RSP: 002b:00007f3e2521e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 909.299300][T20963] RAX: ffffffffffffffda RBX: 00007f3e245b5fa0 RCX: 00007f3e2438e929 [ 909.299318][T20963] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 909.299335][T20963] RBP: 00007f3e24410b39 R08: 0000000000000000 R09: 0000000000000000 [ 909.299351][T20963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.299374][T20963] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 909.299400][T20963] [ 909.308218][T20963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 909.570190][T20952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.579213][T20952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.616372][T20952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.617601][T20952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.617618][T20952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 909.617665][T20952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.735294][T20952] hsr_slave_0: entered promiscuous mode [ 909.746760][T20952] hsr_slave_1: entered promiscuous mode [ 909.752855][T20952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 909.762566][T20977] random: crng reseeded on system resumption [ 909.777657][T20977] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 909.799336][T20952] Cannot create hsr debugfs directory [ 909.806056][T20977] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 909.852860][T20977] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 909.882777][T20977] PM: hibernation: Basic memory bitmaps created [ 910.011015][T20977] PM: hibernation: Basic memory bitmaps freed [ 910.058520][T20952] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 910.096788][T20952] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 910.161652][T20952] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 910.214709][T20952] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 910.395219][T20952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 910.415177][T20952] 8021q: adding VLAN 0 to HW filter on device team0 [ 910.452229][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.459332][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 910.531682][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.538830][ T8166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 910.886554][T18679] Bluetooth: hci3: command tx timeout [ 911.062896][T20952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.417572][T21003] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3608'. [ 911.594541][T20952] veth0_vlan: entered promiscuous mode [ 911.645814][T20952] veth1_vlan: entered promiscuous mode [ 911.692853][T20952] veth0_macvtap: entered promiscuous mode [ 911.711393][T20952] veth1_macvtap: entered promiscuous mode [ 911.773786][T20952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.800685][T20952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.821834][T20952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.830940][T20952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.839709][T20952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.848696][T20952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.902612][T20952] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 911.965324][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.974716][T20952] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht' [ 911.984420][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.015868][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 912.024048][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 912.091744][T21037] 0x000200000001-0xa29656a63616329 : "" [ 912.097919][T21037] mtd: partition "" is out of reach -- disabled [ 912.108037][T21037] ftl_cs: FTL header not found. [ 912.544503][T21045] random: crng reseeded on system resumption [ 912.559849][T21045] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 912.627432][T21045] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 912.655458][T21045] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 912.663929][T21045] PM: hibernation: Basic memory bitmaps created [ 912.775711][T21044] PM: hibernation: Basic memory bitmaps freed [ 912.966480][T18679] Bluetooth: hci3: command tx timeout [ 913.230949][T21049] netlink: 'syz.3.3618': attribute type 27 has an invalid length. [ 913.239604][T21049] netlink: 146 bytes leftover after parsing attributes in process `syz.3.3618'. [ 913.454598][T21060] ptp ptp0: only physical clock in use now [ 913.461270][T21060] vivid-007: ================= START STATUS ================= [ 913.469281][T21060] vivid-007: Generate PTS: true [ 913.474310][T21060] vivid-007: Generate SCR: true [ 913.479802][T21060] tpg source WxH: 320x240 (Y'CbCr) [ 913.485188][T21060] tpg field: 1 [ 913.490546][T21060] tpg crop: (0,0)/320x240 [ 913.494923][T21060] tpg compose: (0,0)/320x240 [ 913.500129][T21060] tpg colorspace: 8 [ 913.504089][T21060] tpg transfer function: 0/0 [ 913.508766][T21060] tpg Y'CbCr encoding: 0/0 [ 913.513865][T21060] tpg quantization: 0/0 [ 913.519873][T21060] tpg RGB range: 0/2 [ 913.523794][T21060] vivid-007: ================== END STATUS ================== [ 914.133955][T21078] CIFS: VFS: Invalid SecurityFlags: [ 915.046515][T18679] Bluetooth: hci3: command tx timeout [ 916.768470][T21114] netlink: 13 bytes leftover after parsing attributes in process `syz.0.3635'. [ 917.136397][T18679] Bluetooth: hci3: command tx timeout [ 918.010413][T21137] random: crng reseeded on system resumption [ 918.069447][T21137] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 918.079866][T21137] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 918.089633][T21137] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 918.099951][T21137] PM: hibernation: Basic memory bitmaps created [ 918.131837][T21135] QAT: Device 0 not found [ 918.689396][T21132] PM: hibernation: Basic memory bitmaps freed [ 919.181280][T21157] FAULT_INJECTION: forcing a failure. [ 919.181280][T21157] name failslab, interval 1, probability 0, space 0, times 0 [ 919.194096][T21157] CPU: 1 UID: 0 PID: 21157 Comm: syz.0.3650 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 919.194131][T21157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 919.194147][T21157] Call Trace: [ 919.194155][T21157] [ 919.194166][T21157] dump_stack_lvl+0x16c/0x1f0 [ 919.194208][T21157] should_fail_ex+0x512/0x640 [ 919.194244][T21157] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 919.194279][T21157] should_failslab+0xc2/0x120 [ 919.194304][T21157] __kmalloc_noprof+0xd2/0x510 [ 919.194338][T21157] ? rcu_is_watching+0x12/0xc0 [ 919.194363][T21157] ? lock_acquire+0x2cd/0x350 [ 919.194404][T21157] tomoyo_realpath_from_path+0xc2/0x6e0 [ 919.194441][T21157] ? tomoyo_profile+0x47/0x60 [ 919.194476][T21157] tomoyo_path_perm+0x274/0x460 [ 919.194501][T21157] ? tomoyo_path_perm+0x260/0x460 [ 919.194529][T21157] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 919.194556][T21157] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 919.194587][T21157] ? d_add+0x47a/0x780 [ 919.194608][T21157] ? rcu_is_watching+0x12/0xc0 [ 919.194640][T21157] ? __pfx_current_check_access_path+0x10/0x10 [ 919.194670][T21157] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 919.194697][T21157] ? lookup_dcache+0x66/0x170 [ 919.194726][T21157] tomoyo_path_symlink+0x97/0xe0 [ 919.194760][T21157] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 919.194800][T21157] security_path_symlink+0x152/0x2e0 [ 919.194828][T21157] do_symlinkat+0x10d/0x310 [ 919.194864][T21157] ? __pfx_do_symlinkat+0x10/0x10 [ 919.194900][T21157] ? getname_flags.part.0+0x1c5/0x550 [ 919.194931][T21157] __x64_sys_symlink+0x75/0x90 [ 919.194967][T21157] do_syscall_64+0xcd/0x490 [ 919.195005][T21157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.195032][T21157] RIP: 0033:0x7f3e2438e929 [ 919.195054][T21157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.195079][T21157] RSP: 002b:00007f3e2521e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 919.195105][T21157] RAX: ffffffffffffffda RBX: 00007f3e245b5fa0 RCX: 00007f3e2438e929 [ 919.195124][T21157] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 919.195142][T21157] RBP: 00007f3e24410b39 R08: 0000000000000000 R09: 0000000000000000 [ 919.195160][T21157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.195176][T21157] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 919.195201][T21157] [ 919.195212][T21157] ERROR: Out of memory at tomoyo_realpath_from_path. [ 919.235893][T21160] FAULT_INJECTION: forcing a failure. [ 919.235893][T21160] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.481068][T21160] CPU: 0 UID: 0 PID: 21160 Comm: syz.4.3651 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 919.481103][T21160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 919.481117][T21160] Call Trace: [ 919.481125][T21160] [ 919.481135][T21160] dump_stack_lvl+0x16c/0x1f0 [ 919.481165][T21160] should_fail_ex+0x512/0x640 [ 919.481188][T21160] _copy_to_user+0x32/0xd0 [ 919.481210][T21160] simple_read_from_buffer+0xcb/0x170 [ 919.481229][T21160] proc_fail_nth_read+0x197/0x270 [ 919.481247][T21160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 919.481262][T21160] ? security_file_permission+0x71/0x210 [ 919.481282][T21160] ? rw_verify_area+0xcf/0x680 [ 919.481300][T21160] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 919.481316][T21160] vfs_read+0x1e1/0xc60 [ 919.481336][T21160] ? __pfx___mutex_lock+0x10/0x10 [ 919.481366][T21160] ? __pfx_vfs_read+0x10/0x10 [ 919.481384][T21160] ? __fget_files+0x204/0x3c0 [ 919.481403][T21160] ? rcu_is_watching+0x12/0xc0 [ 919.481420][T21160] ? __fget_files+0x20e/0x3c0 [ 919.481440][T21160] ksys_read+0x12a/0x250 [ 919.481459][T21160] ? __pfx_ksys_read+0x10/0x10 [ 919.481481][T21160] do_syscall_64+0xcd/0x490 [ 919.481504][T21160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.481519][T21160] RIP: 0033:0x7fd58df8d33c [ 919.481530][T21160] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 919.481545][T21160] RSP: 002b:00007fd58ede8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 919.481560][T21160] RAX: ffffffffffffffda RBX: 00007fd58e1b5fa0 RCX: 00007fd58df8d33c [ 919.481570][T21160] RDX: 000000000000000f RSI: 00007fd58ede80a0 RDI: 0000000000000004 [ 919.481578][T21160] RBP: 00007fd58ede8090 R08: 0000000000000000 R09: 0000000000000000 [ 919.481588][T21160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.481596][T21160] R13: 0000000000000000 R14: 00007fd58e1b5fa0 R15: 00007ffdad1dd8e8 [ 919.481611][T21160] [ 920.933899][T21203] netlink: 'syz.3.3660': attribute type 27 has an invalid length. [ 920.947608][T21203] netlink: 146 bytes leftover after parsing attributes in process `syz.3.3660'. [ 921.356877][T21224] FAULT_INJECTION: forcing a failure. [ 921.356877][T21224] name failslab, interval 1, probability 0, space 0, times 0 [ 921.372585][T21224] CPU: 0 UID: 0 PID: 21224 Comm: syz.0.3663 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 921.372623][T21224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 921.372640][T21224] Call Trace: [ 921.372649][T21224] [ 921.372659][T21224] dump_stack_lvl+0x16c/0x1f0 [ 921.372704][T21224] should_fail_ex+0x512/0x640 [ 921.372741][T21224] ? lsm_blob_alloc+0x68/0x90 [ 921.372778][T21224] should_failslab+0xc2/0x120 [ 921.372803][T21224] __kmalloc_noprof+0xd2/0x510 [ 921.372842][T21224] lsm_blob_alloc+0x68/0x90 [ 921.372876][T21224] security_sk_alloc+0x30/0x270 [ 921.372904][T21224] sk_prot_alloc+0x1c7/0x2a0 [ 921.372932][T21224] sk_alloc+0x36/0xc20 [ 921.372966][T21224] __netlink_create+0x5e/0x2c0 [ 921.373004][T21224] __netlink_kernel_create+0xed/0x750 [ 921.373032][T21224] ? __pfx___netlink_kernel_create+0x10/0x10 [ 921.373063][T21224] ? __pfx_genl_pernet_init+0x10/0x10 [ 921.373092][T21224] genl_pernet_init+0xbd/0x170 [ 921.373122][T21224] ? __pfx_genl_pernet_init+0x10/0x10 [ 921.373152][T21224] ? lockdep_init_map_type+0x5c/0x280 [ 921.373185][T21224] ? __pfx_genl_rcv+0x10/0x10 [ 921.373212][T21224] ? __pfx_genl_bind+0x10/0x10 [ 921.373240][T21224] ? __pfx_genl_unbind+0x10/0x10 [ 921.373267][T21224] ? __pfx_genl_release+0x10/0x10 [ 921.373297][T21224] ? debug_mutex_init+0x37/0x70 [ 921.373323][T21224] ops_init+0x1e2/0x5f0 [ 921.373348][T21224] setup_net+0x1ff/0x510 [ 921.373370][T21224] ? lockdep_init_map_type+0x5c/0x280 [ 921.373402][T21224] ? __pfx_setup_net+0x10/0x10 [ 921.373423][T21224] ? __raw_spin_lock_init+0x3a/0x110 [ 921.373460][T21224] ? debug_mutex_init+0x37/0x70 [ 921.373495][T21224] copy_net_ns+0x2a6/0x5f0 [ 921.373526][T21224] create_new_namespaces+0x3ea/0xa90 [ 921.373558][T21224] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 921.373588][T21224] ksys_unshare+0x45b/0xa40 [ 921.373620][T21224] ? __pfx_ksys_unshare+0x10/0x10 [ 921.373652][T21224] ? xfd_validate_state+0x61/0x180 [ 921.373688][T21224] __x64_sys_unshare+0x31/0x40 [ 921.373719][T21224] do_syscall_64+0xcd/0x490 [ 921.373758][T21224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.373785][T21224] RIP: 0033:0x7f3e2438e929 [ 921.373808][T21224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.373834][T21224] RSP: 002b:00007f3e2521e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 921.373859][T21224] RAX: ffffffffffffffda RBX: 00007f3e245b5fa0 RCX: 00007f3e2438e929 [ 921.373878][T21224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 921.373894][T21224] RBP: 00007f3e24410b39 R08: 0000000000000000 R09: 0000000000000000 [ 921.373911][T21224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.373927][T21224] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 921.373952][T21224] [ 923.022534][T21256] program syz.3.3671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 923.165372][T21256] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 923.180987][T21256] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 923.196352][T21256] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 923.202480][T21256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 923.213575][T21256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 923.219911][T21256] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 923.229271][T21256] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 924.618423][T21310] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 924.658992][T21310] vivid-013: ================= START STATUS ================= [ 924.668110][T21310] vivid-013: ================== END STATUS ================== [ 925.128595][T18679] Bluetooth: hci0: command 0x0c1a tx timeout [ 925.206160][T18679] Bluetooth: hci1: command 0x0c1a tx timeout [ 925.212248][T18679] Bluetooth: hci4: command 0x0c1a tx timeout [ 925.218335][T11584] Bluetooth: hci2: command 0x0c1a tx timeout [ 925.278317][T21321] FAULT_INJECTION: forcing a failure. [ 925.278317][T21321] name failslab, interval 1, probability 0, space 0, times 0 [ 925.286110][T18679] Bluetooth: hci3: command 0x0c1a tx timeout [ 925.298959][T21321] CPU: 1 UID: 0 PID: 21321 Comm: syz.0.3682 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 925.298997][T21321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 925.299013][T21321] Call Trace: [ 925.299022][T21321] [ 925.299032][T21321] dump_stack_lvl+0x16c/0x1f0 [ 925.299076][T21321] should_fail_ex+0x512/0x640 [ 925.299113][T21321] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 925.299149][T21321] should_failslab+0xc2/0x120 [ 925.299173][T21321] __kmalloc_noprof+0xd2/0x510 [ 925.299208][T21321] ? rcu_is_watching+0x12/0xc0 [ 925.299234][T21321] ? lock_acquire+0x2cd/0x350 [ 925.299266][T21321] tomoyo_realpath_from_path+0xc2/0x6e0 [ 925.299302][T21321] ? tomoyo_profile+0x47/0x60 [ 925.299338][T21321] tomoyo_path_perm+0x274/0x460 [ 925.299363][T21321] ? tomoyo_path_perm+0x260/0x460 [ 925.299391][T21321] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 925.299418][T21321] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 925.299450][T21321] ? d_add+0x47a/0x780 [ 925.299471][T21321] ? rcu_is_watching+0x12/0xc0 [ 925.299503][T21321] ? __pfx_current_check_access_path+0x10/0x10 [ 925.299532][T21321] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 925.299560][T21321] ? lookup_dcache+0x66/0x170 [ 925.299587][T21321] tomoyo_path_symlink+0x97/0xe0 [ 925.299622][T21321] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 925.299660][T21321] security_path_symlink+0x152/0x2e0 [ 925.299689][T21321] do_symlinkat+0x10d/0x310 [ 925.299725][T21321] ? __pfx_do_symlinkat+0x10/0x10 [ 925.299760][T21321] ? getname_flags.part.0+0x1c5/0x550 [ 925.299798][T21321] __x64_sys_symlink+0x75/0x90 [ 925.299836][T21321] do_syscall_64+0xcd/0x490 [ 925.299874][T21321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.299901][T21321] RIP: 0033:0x7f3e2438e929 [ 925.299925][T21321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.299950][T21321] RSP: 002b:00007f3e2521e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 925.299975][T21321] RAX: ffffffffffffffda RBX: 00007f3e245b5fa0 RCX: 00007f3e2438e929 [ 925.299993][T21321] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 925.300009][T21321] RBP: 00007f3e24410b39 R08: 0000000000000000 R09: 0000000000000000 [ 925.300025][T21321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.300041][T21321] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 925.300066][T21321] [ 925.300098][T21321] ERROR: Out of memory at tomoyo_realpath_from_path. [ 925.703033][T21337] FAULT_INJECTION: forcing a failure. [ 925.703033][T21337] name failslab, interval 1, probability 0, space 0, times 0 [ 925.717035][T21337] CPU: 0 UID: 0 PID: 21337 Comm: syz.0.3685 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 925.717069][T21337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 925.717083][T21337] Call Trace: [ 925.717091][T21337] [ 925.717109][T21337] dump_stack_lvl+0x16c/0x1f0 [ 925.717151][T21337] should_fail_ex+0x512/0x640 [ 925.717186][T21337] ? tomoyo_encode2+0x100/0x3e0 [ 925.717215][T21337] should_failslab+0xc2/0x120 [ 925.717238][T21337] __kmalloc_noprof+0xd2/0x510 [ 925.717274][T21337] tomoyo_encode2+0x100/0x3e0 [ 925.717305][T21337] tomoyo_encode+0x29/0x50 [ 925.717334][T21337] tomoyo_path_perm+0x3a5/0x460 [ 925.717361][T21337] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 925.717387][T21337] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 925.717417][T21337] ? d_add+0x47a/0x780 [ 925.717438][T21337] ? rcu_is_watching+0x12/0xc0 [ 925.717471][T21337] ? __pfx_current_check_access_path+0x10/0x10 [ 925.717501][T21337] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 925.717528][T21337] ? lookup_dcache+0x66/0x170 [ 925.717555][T21337] tomoyo_path_symlink+0x97/0xe0 [ 925.717588][T21337] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 925.717626][T21337] security_path_symlink+0x152/0x2e0 [ 925.717654][T21337] do_symlinkat+0x10d/0x310 [ 925.717688][T21337] ? __pfx_do_symlinkat+0x10/0x10 [ 925.717722][T21337] ? getname_flags.part.0+0x1c5/0x550 [ 925.717756][T21337] __x64_sys_symlink+0x75/0x90 [ 925.717790][T21337] do_syscall_64+0xcd/0x490 [ 925.717825][T21337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.717850][T21337] RIP: 0033:0x7f3e2438e929 [ 925.717870][T21337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.717893][T21337] RSP: 002b:00007f3e251fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 925.717917][T21337] RAX: ffffffffffffffda RBX: 00007f3e245b6080 RCX: 00007f3e2438e929 [ 925.717934][T21337] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 925.717949][T21337] RBP: 00007f3e24410b39 R08: 0000000000000000 R09: 0000000000000000 [ 925.717965][T21337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.717979][T21337] R13: 0000000000000000 R14: 00007f3e245b6080 R15: 00007fff42ec8f18 [ 925.718004][T21337] [ 925.718897][T21337] FAULT_INJECTION: forcing a failure. [ 925.718897][T21337] name failslab, interval 1, probability 0, space 0, times 0 [ 925.980775][T21337] CPU: 0 UID: 0 PID: 21337 Comm: syz.0.3685 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 925.980813][T21337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 925.980827][T21337] Call Trace: [ 925.980835][T21337] [ 925.980844][T21337] dump_stack_lvl+0x16c/0x1f0 [ 925.980884][T21337] should_fail_ex+0x512/0x640 [ 925.980918][T21337] should_failslab+0xc2/0x120 [ 925.980941][T21337] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 925.980973][T21337] ? preempt_count_add+0x76/0x150 [ 925.981007][T21337] ? getname_flags.part.0+0x4c/0x550 [ 925.981035][T21337] getname_flags.part.0+0x4c/0x550 [ 925.981062][T21337] getname_flags+0x93/0xf0 [ 925.981092][T21337] do_sys_openat2+0xb8/0x1d0 [ 925.981118][T21337] ? __pfx_do_sys_openat2+0x10/0x10 [ 925.981143][T21337] ? __fget_files+0x20e/0x3c0 [ 925.981178][T21337] __x64_sys_creat+0xcc/0x120 [ 925.981205][T21337] ? __pfx___x64_sys_creat+0x10/0x10 [ 925.981230][T21337] ? __pfx_ksys_write+0x10/0x10 [ 925.981264][T21337] ? rcu_is_watching+0x12/0xc0 [ 925.981288][T21337] do_syscall_64+0xcd/0x490 [ 925.981323][T21337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.981347][T21337] RIP: 0033:0x7f3e2438e929 [ 925.981366][T21337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.981390][T21337] RSP: 002b:00007f3e251fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 925.981415][T21337] RAX: ffffffffffffffda RBX: 00007f3e245b6080 RCX: 00007f3e2438e929 [ 925.981431][T21337] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000200000000680 [ 925.981447][T21337] RBP: 00007f3e251fd090 R08: 0000000000000000 R09: 0000000000000000 [ 925.981463][T21337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.981477][T21337] R13: 0000000000000000 R14: 00007f3e245b6080 R15: 00007fff42ec8f18 [ 925.981500][T21337] [ 926.283204][T21341] ptrace attach of "./syz-executor exec"[21344] was attempted by "./syz-executor exec"[21341] [ 927.366079][T18679] Bluetooth: hci3: command 0x0c1a tx timeout [ 927.679689][T11584] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 927.687582][T11584] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 927.695719][T11584] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 927.706309][T11584] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 927.713962][T11584] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 927.871112][T21382] chnl_net:caif_netlink_parms(): no params data found [ 927.977057][T21382] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.989222][T21382] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.998110][T21382] bridge_slave_0: entered allmulticast mode [ 928.005184][T21382] bridge_slave_0: entered promiscuous mode [ 928.021612][T21382] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.036135][T21382] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.045850][T21382] bridge_slave_1: entered allmulticast mode [ 928.059540][T21382] bridge_slave_1: entered promiscuous mode [ 928.093752][T21382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.113406][T21382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.211603][T21382] team0: Port device team_slave_0 added [ 928.225918][T21382] team0: Port device team_slave_1 added [ 928.250285][T21382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 928.257498][T21382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.284656][T21382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 928.308138][T21382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 928.315241][T21382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 928.344324][T21382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 928.408447][T21382] hsr_slave_0: entered promiscuous mode [ 928.414520][T21382] hsr_slave_1: entered promiscuous mode [ 928.420790][T21382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 928.428737][T21382] Cannot create hsr debugfs directory [ 928.582674][T21407] netlink: 'syz.4.3704': attribute type 27 has an invalid length. [ 928.593945][T21407] netlink: 146 bytes leftover after parsing attributes in process `syz.4.3704'. [ 928.600928][T21382] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 928.615134][T21382] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 928.628770][T21382] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 928.643576][T21382] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 928.678349][T21382] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.685483][T21382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.692880][T21382] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.699978][T21382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.734755][T21382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.748311][T21215] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.758726][T21215] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.772777][T21382] 8021q: adding VLAN 0 to HW filter on device team0 [ 928.783010][T21215] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.790161][T21215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 928.801915][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.809082][ T8166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 928.933769][T21382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 929.157760][T21382] veth0_vlan: entered promiscuous mode [ 929.172354][T21382] veth1_vlan: entered promiscuous mode [ 929.204521][T21382] veth0_macvtap: entered promiscuous mode [ 929.218835][T21382] veth1_macvtap: entered promiscuous mode [ 929.239733][T21382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 929.263201][T21382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 929.283467][T21382] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.303221][T21382] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.313098][T21382] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.323241][T21382] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 929.381792][T21382] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 929.413430][ T8166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.426178][T21382] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 929.434059][ T8166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.446889][T11584] Bluetooth: hci3: command 0x0c1a tx timeout [ 929.484274][T21219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 929.492962][T21219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.657088][T21438] cifs: Unknown parameter 'no+ 1§• Ö`ÑørêsFn)ÈøaõH†šÄ¿¡h`àØÝë9k¤A}€žŠ1\D@‹Ç.ÁäZÔCg^‚' [ 929.766292][T11584] Bluetooth: hci5: command tx timeout [ 931.529217][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.535693][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.846414][T11584] Bluetooth: hci5: command tx timeout [ 933.926128][T11584] Bluetooth: hci5: command tx timeout [ 933.943308][T21518] FAULT_INJECTION: forcing a failure. [ 933.943308][T21518] name failslab, interval 1, probability 0, space 0, times 0 [ 933.960985][T21518] CPU: 0 UID: 0 PID: 21518 Comm: syz.0.3730 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 933.961029][T21518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 933.961046][T21518] Call Trace: [ 933.961058][T21518] [ 933.961070][T21518] dump_stack_lvl+0x16c/0x1f0 [ 933.961118][T21518] should_fail_ex+0x512/0x640 [ 933.961159][T21518] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 933.961192][T21518] should_failslab+0xc2/0x120 [ 933.961220][T21518] __kmalloc_noprof+0xd2/0x510 [ 933.961259][T21518] ? rcu_is_watching+0x12/0xc0 [ 933.961285][T21518] ? lock_acquire+0x2cd/0x350 [ 933.961322][T21518] tomoyo_realpath_from_path+0xc2/0x6e0 [ 933.961361][T21518] ? tomoyo_profile+0x47/0x60 [ 933.961397][T21518] tomoyo_path_perm+0x274/0x460 [ 933.961427][T21518] ? tomoyo_path_perm+0x260/0x460 [ 933.961455][T21518] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 933.961488][T21518] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 933.961518][T21518] ? d_add+0x47a/0x780 [ 933.961536][T21518] ? rcu_is_watching+0x12/0xc0 [ 933.961565][T21518] ? __pfx_current_check_access_path+0x10/0x10 [ 933.961595][T21518] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 933.961627][T21518] ? lookup_dcache+0x66/0x170 [ 933.961656][T21518] tomoyo_path_symlink+0x97/0xe0 [ 933.961695][T21518] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 933.961739][T21518] security_path_symlink+0x152/0x2e0 [ 933.961770][T21518] do_symlinkat+0x10d/0x310 [ 933.961810][T21518] ? __pfx_do_symlinkat+0x10/0x10 [ 933.961850][T21518] ? getname_flags.part.0+0x1c5/0x550 [ 933.961885][T21518] __x64_sys_symlink+0x75/0x90 [ 933.961934][T21518] do_syscall_64+0xcd/0x490 [ 933.961980][T21518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.962007][T21518] RIP: 0033:0x7f3e2438e929 [ 933.962033][T21518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.962059][T21518] RSP: 002b:00007f3e2521e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 933.962089][T21518] RAX: ffffffffffffffda RBX: 00007f3e245b5fa0 RCX: 00007f3e2438e929 [ 933.962107][T21518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 933.962127][T21518] RBP: 00007f3e24410b39 R08: 0000000000000000 R09: 0000000000000000 [ 933.962144][T21518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.962160][T21518] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 933.962187][T21518] [ 933.962258][T21518] ERROR: Out of memory at tomoyo_realpath_from_path. [ 934.962845][T21483] vidtv vidtv.0: No streaming. Skipping. [ 936.006347][T11584] Bluetooth: hci5: command tx timeout [ 936.530839][T21574] FAULT_INJECTION: forcing a failure. [ 936.530839][T21574] name failslab, interval 1, probability 0, space 0, times 0 [ 936.544182][T21574] CPU: 1 UID: 0 PID: 21574 Comm: syz.5.3745 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 936.544220][T21574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 936.544237][T21574] Call Trace: [ 936.544247][T21574] [ 936.544257][T21574] dump_stack_lvl+0x16c/0x1f0 [ 936.544299][T21574] should_fail_ex+0x512/0x640 [ 936.544335][T21574] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 936.544370][T21574] should_failslab+0xc2/0x120 [ 936.544394][T21574] __kmalloc_noprof+0xd2/0x510 [ 936.544428][T21574] ? rcu_is_watching+0x12/0xc0 [ 936.544451][T21574] ? lock_acquire+0x2cd/0x350 [ 936.544480][T21574] tomoyo_realpath_from_path+0xc2/0x6e0 [ 936.544511][T21574] ? tomoyo_profile+0x47/0x60 [ 936.544545][T21574] tomoyo_path_perm+0x274/0x460 [ 936.544572][T21574] ? tomoyo_path_perm+0x260/0x460 [ 936.544600][T21574] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 936.544628][T21574] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 936.544659][T21574] ? d_add+0x47a/0x780 [ 936.544681][T21574] ? rcu_is_watching+0x12/0xc0 [ 936.544713][T21574] ? __pfx_current_check_access_path+0x10/0x10 [ 936.544743][T21574] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 936.544772][T21574] ? lookup_dcache+0x66/0x170 [ 936.544801][T21574] tomoyo_path_symlink+0x97/0xe0 [ 936.544835][T21574] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 936.544875][T21574] security_path_symlink+0x152/0x2e0 [ 936.544910][T21574] do_symlinkat+0x10d/0x310 [ 936.544949][T21574] ? __pfx_do_symlinkat+0x10/0x10 [ 936.544987][T21574] ? getname_flags.part.0+0x1c5/0x550 [ 936.545019][T21574] __x64_sys_symlink+0x75/0x90 [ 936.545055][T21574] do_syscall_64+0xcd/0x490 [ 936.545092][T21574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.545118][T21574] RIP: 0033:0x7fda2278e929 [ 936.545144][T21574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.545169][T21574] RSP: 002b:00007fda23560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 936.545195][T21574] RAX: ffffffffffffffda RBX: 00007fda229b5fa0 RCX: 00007fda2278e929 [ 936.545215][T21574] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 936.545231][T21574] RBP: 00007fda22810b39 R08: 0000000000000000 R09: 0000000000000000 [ 936.545249][T21574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.545266][T21574] R13: 0000000000000000 R14: 00007fda229b5fa0 R15: 00007ffe8c2310e8 [ 936.545292][T21574] [ 936.545762][T21574] ERROR: Out of memory at tomoyo_realpath_from_path. [ 938.041995][T21603] FAULT_INJECTION: forcing a failure. [ 938.041995][T21603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.055285][T21603] CPU: 0 UID: 0 PID: 21603 Comm: syz.5.3753 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 938.055318][T21603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 938.055333][T21603] Call Trace: [ 938.055341][T21603] [ 938.055350][T21603] dump_stack_lvl+0x16c/0x1f0 [ 938.055389][T21603] should_fail_ex+0x512/0x640 [ 938.055422][T21603] _copy_to_user+0x32/0xd0 [ 938.055457][T21603] simple_read_from_buffer+0xcb/0x170 [ 938.055488][T21603] proc_fail_nth_read+0x197/0x270 [ 938.055523][T21603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 938.055549][T21603] ? security_file_permission+0x71/0x210 [ 938.055579][T21603] ? rw_verify_area+0xcf/0x680 [ 938.055609][T21603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 938.055634][T21603] vfs_read+0x1e1/0xc60 [ 938.055667][T21603] ? __pfx___mutex_lock+0x10/0x10 [ 938.055700][T21603] ? __pfx_vfs_read+0x10/0x10 [ 938.055729][T21603] ? __fget_files+0x204/0x3c0 [ 938.055757][T21603] ? rcu_is_watching+0x12/0xc0 [ 938.055785][T21603] ? __fget_files+0x20e/0x3c0 [ 938.055819][T21603] ksys_read+0x12a/0x250 [ 938.055849][T21603] ? __pfx_ksys_read+0x10/0x10 [ 938.055884][T21603] do_syscall_64+0xcd/0x490 [ 938.055919][T21603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.055944][T21603] RIP: 0033:0x7fda2278d33c [ 938.055964][T21603] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 938.055990][T21603] RSP: 002b:00007fda23560030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 938.056013][T21603] RAX: ffffffffffffffda RBX: 00007fda229b5fa0 RCX: 00007fda2278d33c [ 938.056029][T21603] RDX: 000000000000000f RSI: 00007fda235600a0 RDI: 0000000000000005 [ 938.056043][T21603] RBP: 00007fda23560090 R08: 0000000000000000 R09: 0000000000000000 [ 938.056058][T21603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.056073][T21603] R13: 0000000000000000 R14: 00007fda229b5fa0 R15: 00007ffe8c2310e8 [ 938.056096][T21603] [ 938.508596][T21609] FAULT_INJECTION: forcing a failure. [ 938.508596][T21609] name failslab, interval 1, probability 0, space 0, times 0 [ 938.521871][T21609] CPU: 0 UID: 0 PID: 21609 Comm: syz.0.3755 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 938.521908][T21609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 938.521925][T21609] Call Trace: [ 938.521933][T21609] [ 938.521942][T21609] dump_stack_lvl+0x16c/0x1f0 [ 938.521985][T21609] should_fail_ex+0x512/0x640 [ 938.522019][T21609] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 938.522055][T21609] should_failslab+0xc2/0x120 [ 938.522079][T21609] __kmalloc_noprof+0xd2/0x510 [ 938.522112][T21609] ? rcu_is_watching+0x12/0xc0 [ 938.522139][T21609] ? lock_acquire+0x2cd/0x350 [ 938.522170][T21609] tomoyo_realpath_from_path+0xc2/0x6e0 [ 938.522207][T21609] ? tomoyo_profile+0x47/0x60 [ 938.522244][T21609] tomoyo_path_perm+0x274/0x460 [ 938.522270][T21609] ? tomoyo_path_perm+0x260/0x460 [ 938.522299][T21609] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 938.522325][T21609] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 938.522352][T21609] ? d_add+0x47a/0x780 [ 938.522372][T21609] ? rcu_is_watching+0x12/0xc0 [ 938.522400][T21609] ? __pfx_current_check_access_path+0x10/0x10 [ 938.522428][T21609] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 938.522468][T21609] ? lookup_dcache+0x66/0x170 [ 938.522498][T21609] tomoyo_path_symlink+0x97/0xe0 [ 938.522534][T21609] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 938.522571][T21609] security_path_symlink+0x152/0x2e0 [ 938.522596][T21609] do_symlinkat+0x10d/0x310 [ 938.522631][T21609] ? __pfx_do_symlinkat+0x10/0x10 [ 938.522666][T21609] ? getname_flags.part.0+0x1c5/0x550 [ 938.522692][T21609] __x64_sys_symlink+0x75/0x90 [ 938.522725][T21609] do_syscall_64+0xcd/0x490 [ 938.522759][T21609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.522785][T21609] RIP: 0033:0x7f3e2438e929 [ 938.522805][T21609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.522830][T21609] RSP: 002b:00007f3e2521e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 938.522856][T21609] RAX: ffffffffffffffda RBX: 00007f3e245b5fa0 RCX: 00007f3e2438e929 [ 938.522874][T21609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 938.522889][T21609] RBP: 00007f3e24410b39 R08: 0000000000000000 R09: 0000000000000000 [ 938.522905][T21609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.522920][T21609] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 938.522944][T21609] [ 938.522955][T21609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 939.045430][T21623] vidtv vidtv.0: No streaming. Skipping. [ 940.083400][T21634] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input73 [ 941.108477][T21655] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input74 [ 942.041839][T21622] vidtv vidtv.0: No streaming. Skipping. [ 942.707254][T21685] FAULT_INJECTION: forcing a failure. [ 942.707254][T21685] name failslab, interval 1, probability 0, space 0, times 0 [ 942.770830][T21685] CPU: 0 UID: 0 PID: 21685 Comm: syz.0.3786 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 942.770853][T21685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 942.770863][T21685] Call Trace: [ 942.770868][T21685] [ 942.770874][T21685] dump_stack_lvl+0x16c/0x1f0 [ 942.770902][T21685] should_fail_ex+0x512/0x640 [ 942.770924][T21685] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 942.770945][T21685] should_failslab+0xc2/0x120 [ 942.770962][T21685] __kmalloc_noprof+0xd2/0x510 [ 942.770999][T21685] ? rcu_is_watching+0x12/0xc0 [ 942.771024][T21685] ? lock_acquire+0x2cd/0x350 [ 942.771070][T21685] tomoyo_realpath_from_path+0xc2/0x6e0 [ 942.771104][T21685] ? tomoyo_profile+0x47/0x60 [ 942.771126][T21685] tomoyo_path_perm+0x274/0x460 [ 942.771141][T21685] ? tomoyo_path_perm+0x260/0x460 [ 942.771157][T21685] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 942.771173][T21685] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 942.771190][T21685] ? d_add+0x47a/0x780 [ 942.771202][T21685] ? rcu_is_watching+0x12/0xc0 [ 942.771220][T21685] ? __pfx_current_check_access_path+0x10/0x10 [ 942.771237][T21685] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 942.771252][T21685] ? lookup_dcache+0x66/0x170 [ 942.771269][T21685] tomoyo_path_symlink+0x97/0xe0 [ 942.771289][T21685] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 942.771312][T21685] security_path_symlink+0x152/0x2e0 [ 942.771328][T21685] do_symlinkat+0x10d/0x310 [ 942.771348][T21685] ? __pfx_do_symlinkat+0x10/0x10 [ 942.771369][T21685] ? getname_flags.part.0+0x1c5/0x550 [ 942.771385][T21685] __x64_sys_symlink+0x75/0x90 [ 942.771407][T21685] do_syscall_64+0xcd/0x490 [ 942.771430][T21685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.771444][T21685] RIP: 0033:0x7f3e2438e929 [ 942.771457][T21685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 942.771472][T21685] RSP: 002b:00007f3e2521e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 942.771487][T21685] RAX: ffffffffffffffda RBX: 00007f3e245b5fa0 RCX: 00007f3e2438e929 [ 942.771497][T21685] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 942.771506][T21685] RBP: 00007f3e24410b39 R08: 0000000000000000 R09: 0000000000000000 [ 942.771515][T21685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.771524][T21685] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 942.771538][T21685] [ 942.772970][T21685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 944.243275][T21718] random: crng reseeded on system resumption [ 944.269470][T21718] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 944.277782][T21718] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 944.291988][T21718] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 944.308222][T21718] PM: hibernation: Basic memory bitmaps created [ 944.568088][T21723] netlink: zone id is out of range [ 944.577446][T21723] netlink: zone id is out of range [ 944.582765][T21723] netlink: zone id is out of range [ 944.589810][T21723] netlink: zone id is out of range [ 944.608534][T21723] netlink: zone id is out of range [ 944.614288][T21723] netlink: zone id is out of range [ 944.692287][T21723] netlink: zone id is out of range [ 944.699779][T21723] netlink: zone id is out of range [ 944.712091][T21723] netlink: zone id is out of range [ 944.717612][T21723] netlink: zone id is out of range [ 945.078391][T21717] PM: hibernation: Basic memory bitmaps freed [ 946.228075][T21766] FAULT_INJECTION: forcing a failure. [ 946.228075][T21766] name failslab, interval 1, probability 0, space 0, times 0 [ 946.244776][T21766] CPU: 1 UID: 0 PID: 21766 Comm: syz.5.3800 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 946.244814][T21766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 946.244830][T21766] Call Trace: [ 946.244839][T21766] [ 946.244849][T21766] dump_stack_lvl+0x16c/0x1f0 [ 946.244892][T21766] should_fail_ex+0x512/0x640 [ 946.244927][T21766] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 946.244961][T21766] should_failslab+0xc2/0x120 [ 946.244985][T21766] __kmalloc_noprof+0xd2/0x510 [ 946.245018][T21766] ? rcu_is_watching+0x12/0xc0 [ 946.245043][T21766] ? lock_acquire+0x2cd/0x350 [ 946.245074][T21766] tomoyo_realpath_from_path+0xc2/0x6e0 [ 946.245109][T21766] ? tomoyo_profile+0x47/0x60 [ 946.245145][T21766] tomoyo_path_perm+0x274/0x460 [ 946.245170][T21766] ? tomoyo_path_perm+0x260/0x460 [ 946.245198][T21766] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 946.245226][T21766] ? __memcg_slab_post_alloc_hook+0x4a0/0x960 [ 946.245256][T21766] ? d_add+0x47a/0x780 [ 946.245278][T21766] ? rcu_is_watching+0x12/0xc0 [ 946.245310][T21766] ? __pfx_current_check_access_path+0x10/0x10 [ 946.245340][T21766] ? lookup_one_qstr_excl_raw.part.0+0xf9/0x160 [ 946.245367][T21766] ? lookup_dcache+0x66/0x170 [ 946.245395][T21766] tomoyo_path_symlink+0x97/0xe0 [ 946.245430][T21766] ? __pfx_tomoyo_path_symlink+0x10/0x10 [ 946.245468][T21766] security_path_symlink+0x152/0x2e0 [ 946.245496][T21766] do_symlinkat+0x10d/0x310 [ 946.245531][T21766] ? __pfx_do_symlinkat+0x10/0x10 [ 946.245565][T21766] ? getname_flags.part.0+0x1c5/0x550 [ 946.245594][T21766] __x64_sys_symlink+0x75/0x90 [ 946.245629][T21766] do_syscall_64+0xcd/0x490 [ 946.245665][T21766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.245690][T21766] RIP: 0033:0x7fda2278e929 [ 946.245717][T21766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.245744][T21766] RSP: 002b:00007fda23560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 946.245773][T21766] RAX: ffffffffffffffda RBX: 00007fda229b5fa0 RCX: 00007fda2278e929 [ 946.245791][T21766] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 946.245807][T21766] RBP: 00007fda22810b39 R08: 0000000000000000 R09: 0000000000000000 [ 946.245823][T21766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.245839][T21766] R13: 0000000000000000 R14: 00007fda229b5fa0 R15: 00007ffe8c2310e8 [ 946.245863][T21766] [ 946.245923][T21766] ERROR: Out of memory at tomoyo_realpath_from_path. [ 946.622871][T21781] blk_print_req_error: 24 callbacks suppressed [ 946.622885][T21781] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 946.647070][T21781] buffer_io_error: 23 callbacks suppressed [ 946.647131][T21781] Buffer I/O error on dev nbd0, logical block 0, async page read [ 946.668445][T21781] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 946.687411][T21781] Buffer I/O error on dev nbd0, logical block 0, async page read [ 946.729240][T21781] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 946.738348][T21781] Buffer I/O error on dev nbd0, logical block 0, async page read [ 946.746681][T21781] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 946.755959][T21781] Buffer I/O error on dev nbd0, logical block 0, async page read [ 946.804008][T21781] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 946.815411][T21781] Buffer I/O error on dev nbd0, logical block 0, async page read [ 946.826392][T21781] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 946.846156][T21781] Buffer I/O error on dev nbd0, logical block 0, async page read [ 946.857770][T21781] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 946.868559][T21781] Buffer I/O error on dev nbd0, logical block 0, async page read [ 946.876942][T21781] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 946.887242][T21781] Buffer I/O error on dev nbd0, logical block 0, async page read [ 946.895351][T21781] ldm_validate_partition_table(): Disk read failed. [ 946.902910][T21781] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 946.922454][T21781] Buffer I/O error on dev nbd0, logical block 0, async page read [ 946.952118][T21781] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 946.957575][T21778] mkiss: ax0: crc mode is auto. [ 946.962794][T21781] Buffer I/O error on dev nbd0, logical block 0, async page read [ 947.007410][T21781] Dev nbd0: unable to read RDB block 0 [ 947.067359][T21781] nbd0: unable to read partition table [ 948.387224][T21812] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input75 [ 948.523446][T21808] sp0: Synchronizing with TNC [ 952.957196][T21920] FAULT_INJECTION: forcing a failure. [ 952.957196][T21920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.986088][T21920] CPU: 1 UID: 0 PID: 21920 Comm: syz.5.3837 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 952.986125][T21920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 952.986140][T21920] Call Trace: [ 952.986149][T21920] [ 952.986159][T21920] dump_stack_lvl+0x16c/0x1f0 [ 952.986203][T21920] should_fail_ex+0x512/0x640 [ 952.986240][T21920] _copy_from_user+0x2e/0xd0 [ 952.986287][T21920] post_copy_siginfo_from_user.isra.0+0x16e/0x300 [ 952.986325][T21920] ? __pfx_post_copy_siginfo_from_user.isra.0+0x10/0x10 [ 952.986373][T21920] __x64_sys_rt_tgsigqueueinfo+0x151/0x210 [ 952.986407][T21920] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 952.986445][T21920] do_syscall_64+0xcd/0x490 [ 952.986481][T21920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.986507][T21920] RIP: 0033:0x7fda2278e929 [ 952.986527][T21920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 952.986551][T21920] RSP: 002b:00007fda23560038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 952.986577][T21920] RAX: ffffffffffffffda RBX: 00007fda229b5fa0 RCX: 00007fda2278e929 [ 952.986596][T21920] RDX: 000000000000001f RSI: 0000000000000071 RDI: 0000000000000070 [ 952.986613][T21920] RBP: 00007fda22810b39 R08: 0000000000000000 R09: 0000000000000000 [ 952.986630][T21920] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 952.986647][T21920] R13: 0000000000000000 R14: 00007fda229b5fa0 R15: 00007ffe8c2310e8 [ 952.986672][T21920] [ 953.147506][ C1] vkms_vblank_simulate: vblank timer overrun [ 953.549807][T21940] FAULT_INJECTION: forcing a failure. [ 953.549807][T21940] name failslab, interval 1, probability 0, space 0, times 0 [ 953.563087][T21940] CPU: 1 UID: 0 PID: 21940 Comm: syz.4.3842 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 953.563124][T21940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 953.563140][T21940] Call Trace: [ 953.563149][T21940] [ 953.563160][T21940] dump_stack_lvl+0x16c/0x1f0 [ 953.563201][T21940] should_fail_ex+0x512/0x640 [ 953.563239][T21940] should_failslab+0xc2/0x120 [ 953.563264][T21940] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 953.563300][T21940] ? proc_net_ns_init+0x42/0x410 [ 953.563326][T21940] ? __pfx_proc_net_ns_init+0x10/0x10 [ 953.563350][T21940] proc_net_ns_init+0x42/0x410 [ 953.563373][T21940] ? __pfx_proc_net_ns_init+0x10/0x10 [ 953.563396][T21940] ops_init+0x1e2/0x5f0 [ 953.563419][T21940] setup_net+0x1ff/0x510 [ 953.563440][T21940] ? lockdep_init_map_type+0x5c/0x280 [ 953.563474][T21940] ? __pfx_setup_net+0x10/0x10 [ 953.563496][T21940] ? __raw_spin_lock_init+0x3a/0x110 [ 953.563532][T21940] ? debug_mutex_init+0x37/0x70 [ 953.563556][T21940] copy_net_ns+0x2a6/0x5f0 [ 953.563583][T21940] create_new_namespaces+0x3ea/0xa90 [ 953.563613][T21940] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 953.563641][T21940] ksys_unshare+0x45b/0xa40 [ 953.563671][T21940] ? __pfx_ksys_unshare+0x10/0x10 [ 953.563701][T21940] ? xfd_validate_state+0x61/0x180 [ 953.563735][T21940] __x64_sys_unshare+0x31/0x40 [ 953.563766][T21940] do_syscall_64+0xcd/0x490 [ 953.563803][T21940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.563830][T21940] RIP: 0033:0x7fd58df8e929 [ 953.563850][T21940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.563876][T21940] RSP: 002b:00007fd58ede8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 953.563901][T21940] RAX: ffffffffffffffda RBX: 00007fd58e1b5fa0 RCX: 00007fd58df8e929 [ 953.563920][T21940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 953.563936][T21940] RBP: 00007fd58e010b39 R08: 0000000000000000 R09: 0000000000000000 [ 953.563953][T21940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.563979][T21940] R13: 0000000000000000 R14: 00007fd58e1b5fa0 R15: 00007ffdad1dd8e8 [ 953.564004][T21940] [ 953.780583][ C1] vkms_vblank_simulate: vblank timer overrun [ 955.209276][T21973] caif:caif_disconnect_client(): nothing to disconnect [ 957.220243][T21998] kexec: Could not allocate control_code_buffer [ 958.042970][T21969] vidtv vidtv.0: No streaming. Skipping. [ 958.050764][T21971] vidtv vidtv.0: No streaming. Skipping. [ 960.296425][T22078] tipc: Started in network mode [ 960.301414][T22078] tipc: Node identity ee00, cluster identity 4711 [ 960.314166][T22078] tipc: Node number set to 60928 [ 960.985001][T22077] Process accounting resumed [ 961.300553][T22119] FAULT_INJECTION: forcing a failure. [ 961.300553][T22119] name failslab, interval 1, probability 0, space 0, times 0 [ 961.333882][T22119] CPU: 0 UID: 0 PID: 22119 Comm: syz.0.3886 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 961.333920][T22119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 961.333938][T22119] Call Trace: [ 961.333946][T22119] [ 961.333957][T22119] dump_stack_lvl+0x16c/0x1f0 [ 961.334001][T22119] should_fail_ex+0x512/0x640 [ 961.334037][T22119] should_failslab+0xc2/0x120 [ 961.334063][T22119] __kmalloc_cache_noprof+0x6a/0x3e0 [ 961.334095][T22119] ? copy_net_ns+0x135/0x5f0 [ 961.334126][T22119] copy_net_ns+0x135/0x5f0 [ 961.334149][T22119] ? copy_cgroup_ns+0x71/0x700 [ 961.334180][T22119] create_new_namespaces+0x3ea/0xa90 [ 961.334220][T22119] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 961.334246][T22119] ksys_unshare+0x45b/0xa40 [ 961.334276][T22119] ? __pfx_ksys_unshare+0x10/0x10 [ 961.334307][T22119] ? xfd_validate_state+0x61/0x180 [ 961.334341][T22119] __x64_sys_unshare+0x31/0x40 [ 961.334371][T22119] do_syscall_64+0xcd/0x490 [ 961.334404][T22119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.334429][T22119] RIP: 0033:0x7f3e2438e929 [ 961.334450][T22119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.334475][T22119] RSP: 002b:00007f3e2521e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 961.334499][T22119] RAX: ffffffffffffffda RBX: 00007f3e245b5fa0 RCX: 00007f3e2438e929 [ 961.334517][T22119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 961.334538][T22119] RBP: 00007f3e24410b39 R08: 0000000000000000 R09: 0000000000000000 [ 961.334555][T22119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.334572][T22119] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 961.334598][T22119] [ 963.066785][T22163] FAULT_INJECTION: forcing a failure. [ 963.066785][T22163] name failslab, interval 1, probability 0, space 0, times 0 [ 963.079831][T22163] CPU: 1 UID: 0 PID: 22163 Comm: syz.0.3900 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 963.079864][T22163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 963.079878][T22163] Call Trace: [ 963.079886][T22163] [ 963.079894][T22163] dump_stack_lvl+0x16c/0x1f0 [ 963.079930][T22163] should_fail_ex+0x512/0x640 [ 963.079953][T22163] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 963.079974][T22163] should_failslab+0xc2/0x120 [ 963.079988][T22163] __kmalloc_noprof+0xd2/0x510 [ 963.080011][T22163] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 963.080039][T22163] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 963.080057][T22163] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 963.080075][T22163] ? rcu_is_watching+0x12/0xc0 [ 963.080092][T22163] ? bpf_lsm_capable+0x9/0x10 [ 963.080109][T22163] ? security_capable+0x7e/0x260 [ 963.080134][T22163] genl_rcv_msg+0x55c/0x800 [ 963.080152][T22163] ? __pfx_genl_rcv_msg+0x10/0x10 [ 963.080169][T22163] ? __pfx_tcp_metrics_nl_cmd_del+0x10/0x10 [ 963.080187][T22163] netlink_rcv_skb+0x155/0x420 [ 963.080202][T22163] ? __pfx_genl_rcv_msg+0x10/0x10 [ 963.080220][T22163] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 963.080238][T22163] ? netlink_deliver_tap+0x1ae/0xd30 [ 963.080253][T22163] genl_rcv+0x28/0x40 [ 963.080268][T22163] netlink_unicast+0x53a/0x7f0 [ 963.080283][T22163] ? __pfx_netlink_unicast+0x10/0x10 [ 963.080301][T22163] netlink_sendmsg+0x8d1/0xdd0 [ 963.080317][T22163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 963.080335][T22163] ____sys_sendmsg+0xa95/0xc70 [ 963.080352][T22163] ? copy_msghdr_from_user+0x10a/0x160 [ 963.080374][T22163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 963.080389][T22163] ? __pfx_kstrtouint+0x10/0x10 [ 963.080407][T22163] ? kstrtouint_from_user+0x13c/0x1d0 [ 963.080424][T22163] ___sys_sendmsg+0x134/0x1d0 [ 963.080445][T22163] ? __pfx____sys_sendmsg+0x10/0x10 [ 963.080473][T22163] ? __pfx_vfs_write+0x10/0x10 [ 963.080493][T22163] ? do_sys_openat2+0x157/0x1d0 [ 963.080509][T22163] __sys_sendmsg+0x16d/0x220 [ 963.080530][T22163] ? __pfx___sys_sendmsg+0x10/0x10 [ 963.080557][T22163] do_syscall_64+0xcd/0x490 [ 963.080580][T22163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.080595][T22163] RIP: 0033:0x7f3e2438e929 [ 963.080607][T22163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 963.080621][T22163] RSP: 002b:00007f3e251fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 963.080636][T22163] RAX: ffffffffffffffda RBX: 00007f3e245b6080 RCX: 00007f3e2438e929 [ 963.080646][T22163] RDX: 0000000000000040 RSI: 0000200000000cc0 RDI: 0000000000000000 [ 963.080655][T22163] RBP: 00007f3e251fd090 R08: 0000000000000000 R09: 0000000000000000 [ 963.080664][T22163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.080673][T22163] R13: 0000000000000000 R14: 00007f3e245b6080 R15: 00007fff42ec8f18 [ 963.080686][T22163] [ 964.392093][T22156] kexec: Could not allocate control_code_buffer [ 964.494665][T22187] netlink: 'syz.3.3906': attribute type 11 has an invalid length. [ 964.511662][T22187] netlink: 'syz.3.3906': attribute type 11 has an invalid length. [ 964.534578][T22187] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3906'. [ 964.544442][T22187] netlink: 'syz.3.3906': attribute type 11 has an invalid length. [ 966.126355][T22228] FAULT_INJECTION: forcing a failure. [ 966.126355][T22228] name failslab, interval 1, probability 0, space 0, times 0 [ 966.139637][T22228] CPU: 0 UID: 0 PID: 22228 Comm: syz.0.3917 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 966.139657][T22228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 966.139666][T22228] Call Trace: [ 966.139671][T22228] [ 966.139676][T22228] dump_stack_lvl+0x16c/0x1f0 [ 966.139702][T22228] should_fail_ex+0x512/0x640 [ 966.139731][T22228] should_failslab+0xc2/0x120 [ 966.139745][T22228] __kmalloc_cache_node_noprof+0x6d/0x420 [ 966.139766][T22228] ? stack_trace_save+0x8e/0xc0 [ 966.139782][T22228] ? __get_vm_area_node+0x101/0x330 [ 966.139799][T22228] __get_vm_area_node+0x101/0x330 [ 966.139816][T22228] __vmalloc_node_range_noprof+0x271/0x14b0 [ 966.139834][T22228] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 966.139854][T22228] ? do_syscall_64+0xcd/0x490 [ 966.139876][T22228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.139892][T22228] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 966.139912][T22228] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 966.139933][T22228] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 966.139952][T22228] __vmalloc_node_noprof+0xad/0xf0 [ 966.139969][T22228] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 966.139988][T22228] bpf_prog_alloc_no_stats+0x54/0x630 [ 966.140006][T22228] ? lock_release+0x201/0x2f0 [ 966.140025][T22228] bpf_prog_alloc+0x3b/0x230 [ 966.140043][T22228] bpf_prog_create+0xa5/0x240 [ 966.140058][T22228] get_filter+0x122/0x1b0 [ 966.140072][T22228] ? __pfx_get_filter+0x10/0x10 [ 966.140087][T22228] ? _copy_from_user+0x59/0xd0 [ 966.140108][T22228] ppp_ioctl+0xb96/0x2660 [ 966.140124][T22228] ? rcu_is_watching+0x12/0xc0 [ 966.140139][T22228] ? __pfx_ppp_ioctl+0x10/0x10 [ 966.140155][T22228] ? __fget_files+0x20e/0x3c0 [ 966.140176][T22228] ? __pfx_ppp_ioctl+0x10/0x10 [ 966.140192][T22228] __x64_sys_ioctl+0x18e/0x210 [ 966.140209][T22228] do_syscall_64+0xcd/0x490 [ 966.140231][T22228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.140245][T22228] RIP: 0033:0x7f3e2438e929 [ 966.140257][T22228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.140272][T22228] RSP: 002b:00007f3e2521e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.140286][T22228] RAX: ffffffffffffffda RBX: 00007f3e245b5fa0 RCX: 00007f3e2438e929 [ 966.140296][T22228] RDX: 00002000000000c0 RSI: 0000000040107447 RDI: 0000000000000003 [ 966.140305][T22228] RBP: 00007f3e2521e090 R08: 0000000000000000 R09: 0000000000000000 [ 966.140314][T22228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.140323][T22228] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 966.140336][T22228] [ 966.140343][T22228] syz.0.3917: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 966.462703][T22228] CPU: 1 UID: 0 PID: 22228 Comm: syz.0.3917 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 966.462737][T22228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 966.462753][T22228] Call Trace: [ 966.462761][T22228] [ 966.462771][T22228] dump_stack_lvl+0x16c/0x1f0 [ 966.462811][T22228] warn_alloc+0x248/0x3a0 [ 966.462845][T22228] ? __pfx_warn_alloc+0x10/0x10 [ 966.462878][T22228] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 966.462911][T22228] ? stack_trace_save+0x8e/0xc0 [ 966.462938][T22228] ? __kasan_kmalloc+0x8a/0xb0 [ 966.462972][T22228] ? __get_vm_area_node+0x208/0x330 [ 966.463003][T22228] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 966.463032][T22228] ? do_syscall_64+0xcd/0x490 [ 966.463066][T22228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.463095][T22228] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 966.463130][T22228] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 966.463166][T22228] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 966.463196][T22228] __vmalloc_node_noprof+0xad/0xf0 [ 966.463225][T22228] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 966.463257][T22228] bpf_prog_alloc_no_stats+0x54/0x630 [ 966.463287][T22228] ? lock_release+0x201/0x2f0 [ 966.463322][T22228] bpf_prog_alloc+0x3b/0x230 [ 966.463352][T22228] bpf_prog_create+0xa5/0x240 [ 966.463378][T22228] get_filter+0x122/0x1b0 [ 966.463402][T22228] ? __pfx_get_filter+0x10/0x10 [ 966.463429][T22228] ? _copy_from_user+0x59/0xd0 [ 966.463463][T22228] ppp_ioctl+0xb96/0x2660 [ 966.463490][T22228] ? rcu_is_watching+0x12/0xc0 [ 966.463515][T22228] ? __pfx_ppp_ioctl+0x10/0x10 [ 966.463545][T22228] ? __fget_files+0x20e/0x3c0 [ 966.463577][T22228] ? __pfx_ppp_ioctl+0x10/0x10 [ 966.463605][T22228] __x64_sys_ioctl+0x18e/0x210 [ 966.463633][T22228] do_syscall_64+0xcd/0x490 [ 966.463669][T22228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.463700][T22228] RIP: 0033:0x7f3e2438e929 [ 966.463720][T22228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.463739][T22228] RSP: 002b:00007f3e2521e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 966.463754][T22228] RAX: ffffffffffffffda RBX: 00007f3e245b5fa0 RCX: 00007f3e2438e929 [ 966.463763][T22228] RDX: 00002000000000c0 RSI: 0000000040107447 RDI: 0000000000000003 [ 966.463772][T22228] RBP: 00007f3e2521e090 R08: 0000000000000000 R09: 0000000000000000 [ 966.463781][T22228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.463790][T22228] R13: 0000000000000000 R14: 00007f3e245b5fa0 R15: 00007fff42ec8f18 [ 966.463803][T22228] [ 966.463963][T22228] Mem-Info: [ 966.747167][T22228] active_anon:66005 inactive_anon:0 isolated_anon:0 [ 966.747167][T22228] active_file:10574 inactive_file:46948 isolated_file:0 [ 966.747167][T22228] unevictable:768 dirty:1128 writeback:0 [ 966.747167][T22228] slab_reclaimable:11665 slab_unreclaimable:109457 [ 966.747167][T22228] mapped:37767 shmem:47093 pagetables:1505 [ 966.747167][T22228] sec_pagetables:0 bounce:0 [ 966.747167][T22228] kernel_misc_reclaimable:0 [ 966.747167][T22228] free:1199896 free_pcp:28271 free_cma:0 [ 966.878568][T22228] Node 0 active_anon:261360kB inactive_anon:0kB active_file:42296kB inactive_file:187656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147068kB dirty:4512kB writeback:0kB shmem:176640kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13796kB pagetables:5800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 966.999092][T22228] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:9172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 967.036062][T22228] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 967.116723][T22228] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 967.146086][T22228] Node 0 DMA32 free:862584kB boost:63488kB min:97564kB low:106080kB high:114596kB reserved_highatomic:0KB free_highatomic:0KB active_anon:261640kB inactive_anon:0kB active_file:42296kB inactive_file:186348kB unevictable:1536kB writepending:4536kB present:3129332kB managed:2540892kB mlocked:0kB bounce:0kB free_pcp:61192kB local_pcp:26216kB free_cma:0kB [ 967.235301][T22228] lowmem_reserve[]: 0 0 1 1 1 [ 967.240171][T22228] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:0kB free_cma:0kB [ 967.277145][T22228] lowmem_reserve[]: 0 0 0 0 0 [ 967.281912][T22228] Node 1 Normal free:3904920kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17828kB local_pcp:0kB free_cma:0kB [ 967.328619][T22228] lowmem_reserve[]: 0 0 0 0 0 [ 967.333385][T22228] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 967.354375][T22228] Node 0 DMA32: 692*4kB (UME) 360*8kB (UME) 170*16kB (ME) 459*32kB (UME) 310*64kB (UME) 71*128kB (UME) 34*256kB (ME) 3*512kB (UME) 16*1024kB (UM) 21*2048kB (UM) 179*4096kB (U) = 854800kB [ 967.385242][T22228] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 967.457550][T22228] Node 1 Normal: 102*4kB (UE) 46*8kB (UME) 43*16kB (UME) 185*32kB (UME) 83*64kB (UME) 36*128kB (UME) 12*256kB (UE) 9*512kB (UME) 5*1024kB (ME) 2*2048kB (UE) 945*4096kB (UM) = 3904920kB [ 967.502028][T22228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.511996][T22228] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 967.526183][T22228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 967.535897][T22228] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 967.546320][T22228] 104007 total pagecache pages [ 967.551108][T22228] 50 pages in swap cache [ 967.565999][T22228] Free swap = 120716kB [ 967.570231][T22228] Total swap = 124996kB [ 967.606070][T22228] 2097051 pages RAM [ 967.609922][T22228] 0 pages HighMem/MovableOnly [ 967.614616][T22228] 429850 pages reserved [ 967.726064][T22228] 0 pages cma reserved [ 967.892318][T22224] kexec: Could not allocate control_code_buffer [ 971.864885][T11584] Bluetooth: hci0: unexpected event 0x3d length: 726 > 14 [ 971.872928][T22336] nbd: must specify at least one socket [ 973.397156][T22377] phram: not enough arguments [ 980.935197][T22453] vidtv vidtv.0: No streaming. Skipping. [ 981.164481][T22455] vidtv vidtv.0: No streaming. Skipping. [ 985.970393][T22555] uinput: write device info first [ 990.005948][T22595] FAULT_INJECTION: forcing a failure. [ 990.005948][T22595] name fail_futex, interval 1, probability 0, space 0, times 0 [ 990.023583][T22595] CPU: 0 UID: 0 PID: 22595 Comm: syz.5.4026 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 990.023626][T22595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.023641][T22595] Call Trace: [ 990.023650][T22595] [ 990.023659][T22595] dump_stack_lvl+0x16c/0x1f0 [ 990.023699][T22595] should_fail_ex+0x512/0x640 [ 990.023734][T22595] get_futex_key+0x293/0x1540 [ 990.023763][T22595] ? __pfx_get_futex_key+0x10/0x10 [ 990.023790][T22595] ? __mutex_trylock_common+0xe9/0x250 [ 990.023823][T22595] ? __pfx___mutex_trylock_common+0x10/0x10 [ 990.023856][T22595] futex_wake+0xea/0x530 [ 990.023886][T22595] ? rcu_is_watching+0x12/0xc0 [ 990.023910][T22595] ? trace_contention_end+0xdd/0x130 [ 990.023942][T22595] ? __pfx_futex_wake+0x10/0x10 [ 990.023972][T22595] ? rcu_is_watching+0x12/0xc0 [ 990.023996][T22595] ? rcu_is_watching+0x12/0xc0 [ 990.024021][T22595] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 990.024059][T22595] do_futex+0x1e3/0x350 [ 990.024087][T22595] ? __pfx_do_futex+0x10/0x10 [ 990.024114][T22595] ? lock_release+0x201/0x2f0 [ 990.024146][T22595] mm_release+0x24e/0x300 [ 990.024171][T22595] do_exit+0x68b/0x2bd0 [ 990.024203][T22595] ? futex_wake+0x456/0x530 [ 990.024233][T22595] ? __pfx_do_exit+0x10/0x10 [ 990.024262][T22595] ? do_raw_spin_lock+0x12c/0x2b0 [ 990.024296][T22595] ? get_signal+0x8f5/0x26d0 [ 990.024320][T22595] ? rcu_is_watching+0x12/0xc0 [ 990.024345][T22595] do_group_exit+0xd3/0x2a0 [ 990.024376][T22595] get_signal+0x2673/0x26d0 [ 990.024405][T22595] ? up_write+0x1b2/0x520 [ 990.024436][T22595] ? __pfx_get_signal+0x10/0x10 [ 990.024460][T22595] ? do_futex+0x122/0x350 [ 990.024487][T22595] ? __pfx_do_futex+0x10/0x10 [ 990.024515][T22595] arch_do_signal_or_restart+0x8f/0x790 [ 990.024542][T22595] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 990.024574][T22595] ? xfd_validate_state+0x61/0x180 [ 990.024612][T22595] exit_to_user_mode_loop+0x84/0x110 [ 990.024647][T22595] do_syscall_64+0x3f6/0x490 [ 990.024683][T22595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.024708][T22595] RIP: 0033:0x7fda2278e929 [ 990.024727][T22595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.024751][T22595] RSP: 002b:00007fda2353f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 990.024775][T22595] RAX: fffffffffffffe00 RBX: 00007fda229b6088 RCX: 00007fda2278e929 [ 990.024793][T22595] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fda229b6088 [ 990.024809][T22595] RBP: 00007fda229b6080 R08: 0000000000000000 R09: 0000000000000000 [ 990.024824][T22595] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda229b608c [ 990.024840][T22595] R13: 0000000000000000 R14: 00007ffe8c231000 R15: 00007ffe8c2310e8 [ 990.024865][T22595] [ 990.306259][T22582] vidtv vidtv.0: No streaming. Skipping. [ 990.802941][T18679] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 990.812609][T18679] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 990.821489][T18679] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 990.831503][T18679] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 990.840920][T18679] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 991.055599][T22618] chnl_net:caif_netlink_parms(): no params data found [ 991.106714][T22618] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.113897][T22618] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.122686][T22618] bridge_slave_0: entered allmulticast mode [ 991.130603][T22618] bridge_slave_0: entered promiscuous mode [ 991.139440][T22618] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.146944][T22618] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.154248][T22618] bridge_slave_1: entered allmulticast mode [ 991.161019][T22618] bridge_slave_1: entered promiscuous mode [ 991.186336][T22618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.198936][T22618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.232087][T22618] team0: Port device team_slave_0 added [ 991.240774][T22618] team0: Port device team_slave_1 added [ 991.271393][T22618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.278500][T22618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.305082][T22618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.320966][T22618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.328858][T22618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.358192][T22618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.400071][T22618] hsr_slave_0: entered promiscuous mode [ 991.406884][T22618] hsr_slave_1: entered promiscuous mode [ 991.413159][T22618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 991.421467][T22618] Cannot create hsr debugfs directory [ 991.532548][T22618] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 991.560528][T22618] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 991.584342][T22618] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 991.596955][T22618] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 991.626488][T22621] Process accounting paused [ 991.650567][T22618] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.657738][T22618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.665051][T22618] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.672130][T22618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.787340][T22618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.813887][T22618] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.151559][T22618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.395715][T22618] veth0_vlan: entered promiscuous mode [ 992.407232][T22618] veth1_vlan: entered promiscuous mode [ 992.430490][T22618] veth0_macvtap: entered promiscuous mode [ 992.439523][T22618] veth1_macvtap: entered promiscuous mode [ 992.453697][T22618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.467442][T22618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.480572][T22618] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.490046][T22618] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.500140][T22618] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.509661][T22618] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.537766][T22618] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 992.564245][ T8166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.572302][T22618] ieee80211 phy31: Selected rate control algorithm 'minstrel_ht' [ 992.583227][ T8166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.600616][T21215] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.609897][T21215] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.886552][T11584] Bluetooth: hci6: command tx timeout [ 992.978606][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.985042][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.978066][T11584] Bluetooth: hci6: command tx timeout [ 996.249542][T22691] vidtv vidtv.0: No streaming. Skipping. [ 996.832905][T22707] vidtv vidtv.0: No streaming. Skipping. [ 997.055789][T11584] Bluetooth: hci6: command tx timeout [ 999.126185][T11584] Bluetooth: hci6: command tx timeout [ 1000.752669][T22828] netlink: 'syz.0.4082': attribute type 4 has an invalid length. [ 1000.778136][T22828] netlink: 314 bytes leftover after parsing attributes in process `syz.0.4082'. [ 1002.200901][T22851] FAULT_INJECTION: forcing a failure. [ 1002.200901][T22851] name failslab, interval 1, probability 0, space 0, times 0 [ 1002.215255][T22851] CPU: 1 UID: 0 PID: 22851 Comm: syz.6.4088 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1002.215287][T22851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1002.215301][T22851] Call Trace: [ 1002.215309][T22851] [ 1002.215318][T22851] dump_stack_lvl+0x16c/0x1f0 [ 1002.215355][T22851] should_fail_ex+0x512/0x640 [ 1002.215396][T22851] should_failslab+0xc2/0x120 [ 1002.215419][T22851] __kvmalloc_node_noprof+0x137/0x620 [ 1002.215450][T22851] ? seq_read_iter+0x826/0x12c0 [ 1002.215478][T22851] ? seq_read_iter+0x826/0x12c0 [ 1002.215502][T22851] seq_read_iter+0x826/0x12c0 [ 1002.215528][T22851] ? aa_file_perm+0x4d6/0xfb0 [ 1002.215557][T22851] seq_read+0x39e/0x4e0 [ 1002.215579][T22851] ? __pfx_seq_read+0x10/0x10 [ 1002.215600][T22851] ? rcu_is_watching+0x12/0xc0 [ 1002.215619][T22851] ? lock_release+0x201/0x2f0 [ 1002.215643][T22851] ? apparmor_file_permission+0x251/0x400 [ 1002.215667][T22851] ? __pfx_seq_read+0x10/0x10 [ 1002.215691][T22851] proc_reg_read+0x240/0x330 [ 1002.215723][T22851] ? __pfx_proc_reg_read+0x10/0x10 [ 1002.215755][T22851] vfs_read+0x1e1/0xc60 [ 1002.215788][T22851] ? __pfx___mutex_lock+0x10/0x10 [ 1002.215823][T22851] ? __pfx_vfs_read+0x10/0x10 [ 1002.215852][T22851] ? __fget_files+0x204/0x3c0 [ 1002.215880][T22851] ? rcu_is_watching+0x12/0xc0 [ 1002.215906][T22851] ? __fget_files+0x20e/0x3c0 [ 1002.215941][T22851] ksys_read+0x12a/0x250 [ 1002.215972][T22851] ? __pfx_ksys_read+0x10/0x10 [ 1002.216005][T22851] do_syscall_64+0xcd/0x490 [ 1002.216039][T22851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.216064][T22851] RIP: 0033:0x7f280f58e929 [ 1002.216084][T22851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.216108][T22851] RSP: 002b:00007f280d3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1002.216132][T22851] RAX: ffffffffffffffda RBX: 00007f280f7b5fa0 RCX: 00007f280f58e929 [ 1002.216149][T22851] RDX: 0000000000000041 RSI: 0000200000000280 RDI: 0000000000000003 [ 1002.216163][T22851] RBP: 00007f280d3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.216178][T22851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.216192][T22851] R13: 0000000000000000 R14: 00007f280f7b5fa0 R15: 00007ffde8322c98 [ 1002.216214][T22851] [ 1004.522704][T22885] zswap: compressor not available [ 1004.748142][T22840] vidtv vidtv.0: No streaming. Skipping. [ 1005.355718][T22903] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4101'. [ 1005.365068][T22903] ipvlan1: entered allmulticast mode [ 1005.373754][T22903] veth0_vlan: entered allmulticast mode [ 1005.388905][T22904] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4101'. [ 1005.627668][T22911] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 1006.283545][T22915] Invalid ELF header magic: != ELF [ 1006.723087][T22934] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 36 out of range (51000000..2150000000) [ 1007.503661][T22951] virtio-pci 0000:00:04.0: [Firmware Bug]: Overriding NUMA node to -1. Contact your vendor for updates. [ 1016.867243][T18679] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1016.874615][T18679] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1016.882165][T18679] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1016.890123][T18679] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1016.898579][T18679] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1016.993552][T23056] chnl_net:caif_netlink_parms(): no params data found [ 1017.039021][T23056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.047311][T23056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.054984][T23056] bridge_slave_0: entered allmulticast mode [ 1017.063196][T23056] bridge_slave_0: entered promiscuous mode [ 1017.070433][T23056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.078147][T23056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.085613][T23056] bridge_slave_1: entered allmulticast mode [ 1017.092987][T23056] bridge_slave_1: entered promiscuous mode [ 1017.114338][T23056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1017.125607][T23056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.150152][T23056] team0: Port device team_slave_0 added [ 1017.157674][T23056] team0: Port device team_slave_1 added [ 1017.178057][T23056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1017.185030][T23056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.212282][T23056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.224115][T23056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.232478][T23056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.260575][T23056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.296352][T23056] hsr_slave_0: entered promiscuous mode [ 1017.303018][T23056] hsr_slave_1: entered promiscuous mode [ 1017.309319][T23056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1017.317279][T23056] Cannot create hsr debugfs directory [ 1017.400968][T23056] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1017.411183][T23056] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1017.420532][T23056] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1017.430450][T23056] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1017.453304][T23056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.460530][T23056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.468066][T23056] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.475203][T23056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.515857][T23056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.531871][T21206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.540635][T21206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.554618][T23056] 8021q: adding VLAN 0 to HW filter on device team0 [ 1017.569298][T21205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.576712][T21205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1017.593923][ T8166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.601282][ T8166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1017.735149][T23056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1017.893106][T23056] veth0_vlan: entered promiscuous mode [ 1017.903431][T23056] veth1_vlan: entered promiscuous mode [ 1017.924575][T23056] veth0_macvtap: entered promiscuous mode [ 1017.934363][T23056] veth1_macvtap: entered promiscuous mode [ 1017.953716][T23056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.967416][T23056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.978203][T23056] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.987649][T23056] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.997371][T23056] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.006328][T23056] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.034871][T23056] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 1018.060495][ T8166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.062144][T23056] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 1018.080313][ T8166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.099835][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.108113][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.966446][T18679] Bluetooth: hci7: command tx timeout [ 1020.255931][T23101] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967293.4294967295.4294967293), cmd(2) [ 1021.046153][T18679] Bluetooth: hci7: command tx timeout [ 1021.265127][T23108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1021.272032][T23108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1021.279890][T23108] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1021.286772][T23108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1021.292806][T23108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1021.300391][T23108] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1021.306695][T23108] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1021.313268][T23108] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1021.320230][T23108] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1021.327479][T23108] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1021.334160][T23108] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1021.341193][T23108] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1021.347391][T23108] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1021.354940][T23108] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1022.576267][T18679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1022.896174][T11584] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1022.903934][T11584] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1022.912087][T11584] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1022.920144][T11584] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1022.928277][T11584] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1023.028499][T23121] chnl_net:caif_netlink_parms(): no params data found [ 1023.080219][T23121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.088629][T23121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.098841][T23121] bridge_slave_0: entered allmulticast mode [ 1023.106973][T23121] bridge_slave_0: entered promiscuous mode [ 1023.114378][T23121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.122307][T23121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.130212][T23121] bridge_slave_1: entered allmulticast mode [ 1023.137842][T23121] bridge_slave_1: entered promiscuous mode [ 1023.157826][T23121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.170366][T23121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1023.197090][T23121] team0: Port device team_slave_0 added [ 1023.204476][T23121] team0: Port device team_slave_1 added [ 1023.227112][T23121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.234289][T23121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.261742][T23121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.278719][T23121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.288026][T23121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.314970][T18679] Bluetooth: hci2: command 0x0c1a tx timeout [ 1023.316060][T11584] Bluetooth: hci4: command 0x0c1a tx timeout [ 1023.329416][T23121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.360456][T23121] hsr_slave_0: entered promiscuous mode [ 1023.367295][T23121] hsr_slave_1: entered promiscuous mode [ 1023.373913][T23121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1023.381808][T11584] Bluetooth: hci7: command 0x0419 tx timeout [ 1023.381862][T11584] Bluetooth: hci6: command 0x0c1a tx timeout [ 1023.381895][T11584] Bluetooth: hci5: command 0x0c1a tx timeout [ 1023.381929][T11584] Bluetooth: hci3: command 0x0c1a tx timeout [ 1023.381959][T11584] Bluetooth: hci1: command 0x0c1a tx timeout [ 1023.413794][T23121] Cannot create hsr debugfs directory [ 1023.492713][T23121] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1023.503949][T23121] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1023.514157][T23121] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1023.523482][T23121] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1023.546457][T23121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.553585][T23121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.561007][T23121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.568114][T23121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.611375][T23121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.625752][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1023.634855][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1023.647937][T23121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.659889][T21201] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.667104][T21201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.679278][T21205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.686799][T21205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.825080][T23121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1023.991141][T23121] veth0_vlan: entered promiscuous mode [ 1024.003392][T23121] veth1_vlan: entered promiscuous mode [ 1024.025072][T23121] veth0_macvtap: entered promiscuous mode [ 1024.034487][T23121] veth1_macvtap: entered promiscuous mode [ 1024.048918][T23121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.064764][T23121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.077144][T23121] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.087657][T23121] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.097840][T23121] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.107004][T23121] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.134882][T23121] ieee80211 phy34: Selected rate control algorithm 'minstrel_ht' [ 1024.158863][T21201] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.159887][T23121] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 1024.179118][T21201] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.200400][T21201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.209405][T21201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.262001][T23146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4151'. [ 1024.335642][T23148] netlink: 342 bytes leftover after parsing attributes in process `syz.8.4152'. [ 1024.966405][T18679] Bluetooth: hci8: command tx timeout [ 1025.461131][T18679] Bluetooth: hci5: command 0x0c1a tx timeout [ 1025.467877][T18679] Bluetooth: hci6: command 0x0c1a tx timeout [ 1025.474577][T18679] Bluetooth: hci7: command 0x0419 tx timeout [ 1025.824727][T23164] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4157'. [ 1025.919180][T18679] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1025.928939][T18679] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1025.937685][T18679] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1025.945864][T18679] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1025.953866][T18679] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1026.064137][T23165] chnl_net:caif_netlink_parms(): no params data found [ 1026.119446][T23165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.127322][T23165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.134676][T23165] bridge_slave_0: entered allmulticast mode [ 1026.145099][T23165] bridge_slave_0: entered promiscuous mode [ 1026.153175][T23165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.161798][T23165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.170154][T23165] bridge_slave_1: entered allmulticast mode [ 1026.177469][T23165] bridge_slave_1: entered promiscuous mode [ 1026.201145][T23165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.212676][T23165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1026.241878][T23165] team0: Port device team_slave_0 added [ 1026.251970][T23165] team0: Port device team_slave_1 added [ 1026.273745][T23165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.281318][T23165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.309846][T23165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.322058][T23165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.329939][T23165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1026.357510][T23165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.390497][T23165] hsr_slave_0: entered promiscuous mode [ 1026.397018][T23165] hsr_slave_1: entered promiscuous mode [ 1026.403185][T23165] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1026.411099][T23165] Cannot create hsr debugfs directory [ 1026.504890][T23165] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1026.514161][T23165] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1026.524118][T23165] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1026.533460][T23165] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1026.563470][T23165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.570838][T23165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1026.578361][T23165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.585483][T23165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.639311][T23165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.664244][T21219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.683660][T21219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.700707][T23165] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.713237][T21219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.720466][T21219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.754863][T21201] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.754942][T21201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.005499][T23165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.046879][ T5833] Bluetooth: hci8: command tx timeout [ 1027.283272][T23165] veth0_vlan: entered promiscuous mode [ 1027.297425][T23165] veth1_vlan: entered promiscuous mode [ 1027.332007][T23165] veth0_macvtap: entered promiscuous mode [ 1027.343315][T23165] veth1_macvtap: entered promiscuous mode [ 1027.361361][T23165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.375114][T23165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.389752][T23165] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.400072][T23165] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.409674][T23165] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.419162][T23165] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.462018][T23165] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 1027.489042][ T8166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.503150][T23165] ieee80211 phy37: Selected rate control algorithm 'minstrel_ht' [ 1027.512734][ T8166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.526482][ T5833] Bluetooth: hci7: command 0x0419 tx timeout [ 1027.533065][ T5833] Bluetooth: hci6: command 0x0c1a tx timeout [ 1027.539490][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout [ 1027.593791][T21198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.611860][T21198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.007552][T18679] Bluetooth: hci9: command tx timeout [ 1028.563490][T23213] netlink: 342 bytes leftover after parsing attributes in process `syz.9.4162'. [ 1029.136104][T18679] Bluetooth: hci8: command tx timeout [ 1029.607826][ T5833] Bluetooth: hci7: command 0x0419 tx timeout [ 1030.087976][ T5833] Bluetooth: hci9: command tx timeout [ 1030.888669][T18679] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1030.900221][T18679] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1030.910391][T18679] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1030.922085][T18679] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1030.930133][T18679] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1031.084509][T23245] chnl_net:caif_netlink_parms(): no params data found [ 1031.145507][T23245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.152758][T23245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.160881][T23245] bridge_slave_0: entered allmulticast mode [ 1031.168273][T23245] bridge_slave_0: entered promiscuous mode [ 1031.175891][T23245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.184116][T23245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.191599][T23245] bridge_slave_1: entered allmulticast mode [ 1031.199207][T23245] bridge_slave_1: entered promiscuous mode [ 1031.209120][T18679] Bluetooth: hci8: command tx timeout [ 1031.229000][T23245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.240162][T23245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.264961][T23245] team0: Port device team_slave_0 added [ 1031.272459][T23245] team0: Port device team_slave_1 added [ 1031.295618][T23245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.302950][T23245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.329296][T23245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.341766][T23245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.349094][T23245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.378529][T23245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.493024][T23245] hsr_slave_0: entered promiscuous mode [ 1031.509969][T23245] hsr_slave_1: entered promiscuous mode [ 1031.517539][T23245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1031.525155][T23245] Cannot create hsr debugfs directory [ 1031.721397][T23245] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.792938][T23245] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.928590][T23245] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.086889][T23245] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.168391][T18679] Bluetooth: hci9: command tx timeout [ 1032.639807][T23281] random: crng reseeded on system resumption [ 1032.666345][T23245] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1032.712671][T23245] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1032.742091][T23281] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1032.804946][T23281] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1032.879618][T23245] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1032.927399][T23281] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1032.939692][T23245] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1032.968253][T23281] PM: hibernation: Basic memory bitmaps created [ 1033.016328][T18679] Bluetooth: hci10: command tx timeout [ 1033.585058][T23245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.672363][T23245] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.691861][T23276] PM: hibernation: Basic memory bitmaps freed [ 1033.736987][T21198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.744276][T21198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.769739][T21198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.777222][T21198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.104960][T23245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1034.143006][T23245] veth0_vlan: entered promiscuous mode [ 1034.231137][T23245] veth1_vlan: entered promiscuous mode [ 1034.246281][T18679] Bluetooth: hci9: command tx timeout [ 1034.511890][T23245] veth0_macvtap: entered promiscuous mode [ 1034.556715][T23245] veth1_macvtap: entered promiscuous mode [ 1034.592279][T23245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.608721][T23245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.696162][T23245] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.733782][T23245] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.753961][T23245] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.774274][T23245] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.956556][T23245] ieee80211 phy38: Selected rate control algorithm 'minstrel_ht' [ 1035.046220][T18679] Bluetooth: hci10: command tx timeout [ 1035.093766][ T8166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.141631][ T8166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1035.227018][T23245] ieee80211 phy39: Selected rate control algorithm 'minstrel_ht' [ 1035.328152][T21198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1035.347940][T21198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.135265][T18679] Bluetooth: hci10: command tx timeout [ 1039.213113][T18679] Bluetooth: hci10: command tx timeout [ 1042.103430][T23449] futex_wake_op: syz.8.4206 tries to shift op by 64; fix this program [ 1043.935793][T23432] vidtv vidtv.0: No streaming. Skipping. [ 1044.632735][T23508] futex_wake_op: syz.7.4220 tries to shift op by 64; fix this program [ 1047.133916][T23546] phram: not enough arguments [ 1048.119501][T23581] Console: switching to colour frame buffer device 128x48 [ 1049.764951][T23605] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4238'. [ 1053.591466][T23680] Invalid ELF header magic: != ELF [ 1054.418164][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.424915][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.898378][T23764] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1059.913763][T23784] net_ratelimit: 99 callbacks suppressed [ 1059.913810][T23784] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1059.935581][T23764] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1059.960460][T23764] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1059.983406][T23764] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1060.001753][T23764] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1060.033141][T23764] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1060.049972][T23764] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1060.074817][T23764] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1060.086467][T23764] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1060.099698][T23764] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1060.133473][T23764] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1060.145336][T23764] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1060.156517][T23764] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1060.164402][T23764] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1060.177843][T23764] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 1060.197174][T23764] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 1060.219108][T23764] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 1061.846773][T18679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1061.926067][T18679] Bluetooth: hci2: command 0x0c1a tx timeout [ 1062.006377][T18679] Bluetooth: hci1: command 0x0c1a tx timeout [ 1062.006433][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 1062.086763][ T5833] Bluetooth: hci7: command 0x0419 tx timeout [ 1062.091371][T18679] Bluetooth: hci6: command 0x0c1a tx timeout [ 1062.092874][T11584] Bluetooth: hci5: command 0x0c1a tx timeout [ 1062.099302][T18679] Bluetooth: hci3: command 0x0c1a tx timeout [ 1062.166060][T23818] Bluetooth: hci9: command 0x0c1a tx timeout [ 1062.172242][T23818] Bluetooth: hci8: command 0x0c1a tx timeout [ 1062.246236][T23818] Bluetooth: hci10: command 0x0c1a tx timeout [ 1062.727273][ T31] INFO: task syz-executor:16786 blocked for more than 143 seconds. [ 1062.735504][ T31] Tainted: G I 6.16.0-rc3-syzkaller #0 [ 1062.745119][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1062.754259][ T31] task:syz-executor state:D stack:24152 pid:16786 tgid:16786 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1062.766595][ T31] Call Trace: [ 1062.770027][ T31] [ 1062.773086][ T31] __schedule+0x116a/0x5de0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1062.778233][ T31] ? __pfx___schedule+0x10/0x10 [ 1062.783554][ T31] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 1062.791136][ T31] ? shrinker_free+0xfe/0x430 [ 1062.796405][ T31] ? deactivate_locked_super+0x94/0x1a0 [ 1062.802797][ T31] ? cleanup_mnt+0x225/0x450 [ 1062.809348][ T31] ? schedule+0x2d7/0x3a0 [ 1062.814145][ T31] ? rcu_is_watching+0x12/0xc0 [ 1062.819919][ T31] ? lock_release+0x201/0x2f0 [ 1062.825367][ T31] schedule+0xe7/0x3a0 [ 1062.830184][ T31] schedule_preempt_disabled+0x13/0x30 [ 1062.836266][ T31] __mutex_lock+0x6c7/0xb90 [ 1062.841098][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1062.846796][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1062.853239][ T31] ? net_generic+0xea/0x2a0 [ 1062.859425][ T31] ? rcu_is_watching+0x12/0xc0 [ 1062.864982][ T31] ? lock_release+0x201/0x2f0 [ 1062.870424][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1062.876371][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1062.882068][ T31] nfsd_umount+0x48/0xe0 [ 1062.887907][ T31] deactivate_locked_super+0xbe/0x1a0 [ 1062.893574][T23834] vivid-007: ================= START STATUS ================= [ 1062.902668][ T31] deactivate_super+0xde/0x100 [ 1062.908048][ T31] cleanup_mnt+0x225/0x450 [ 1062.912712][T23834] vivid-007: Generate PTS: true [ 1062.918477][ T31] task_work_run+0x14d/0x240 [ 1062.923297][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1062.929319][T23834] vivid-007: Generate SCR: true [ 1062.934343][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1062.940868][T23834] tpg source WxH: 320x240 (Y'CbCr) [ 1062.946342][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1062.951750][ T31] do_syscall_64+0x3f6/0x490 [ 1062.956774][T23834] tpg field: 1 [ 1062.960283][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.966593][T23834] tpg crop: (0,0)/320x240 [ 1062.971101][ T31] RIP: 0033:0x7f218b18fc57 [ 1062.975600][T23834] tpg compose: (0,0)/320x240 [ 1062.981218][ T31] RSP: 002b:00007ffe2ebb6048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1062.989930][T23834] tpg colorspace: 8 [ 1062.994092][T23834] tpg transfer function: 0/0 [ 1062.998868][ T31] RAX: 0000000000000000 RBX: 00007f218b210925 RCX: 00007f218b18fc57 [ 1063.007522][T23834] tpg Y'CbCr encoding: 0/0 [ 1063.012059][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2ebb6100 [ 1063.020703][T23834] tpg quantization: 0/0 [ 1063.024979][T23834] tpg RGB range: 0/2 [ 1063.029400][ T31] RBP: 00007ffe2ebb6100 R08: 0000000000000000 R09: 0000000000000000 [ 1063.037726][T23834] vivid-007: ================== END STATUS ================== [ 1063.045457][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe2ebb7190 [ 1063.054889][ T31] R13: 00007f218b210925 R14: 00000000000deb51 R15: 00007ffe2ebb71d0 [ 1063.063257][ T31] [ 1063.066587][ T31] INFO: lockdep is turned off. [ 1063.071630][ T31] NMI backtrace for cpu 1 [ 1063.071652][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G I 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1063.071684][ T31] Tainted: [I]=FIRMWARE_WORKAROUND [ 1063.071694][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1063.071707][ T31] Call Trace: [ 1063.071714][ T31] [ 1063.071722][ T31] dump_stack_lvl+0x116/0x1f0 [ 1063.071760][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1063.071786][ T31] ? watchdog+0xd79/0x12c0 [ 1063.071818][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1063.071849][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1063.071877][ T31] watchdog+0xf70/0x12c0 [ 1063.071911][ T31] ? __pfx_watchdog+0x10/0x10 [ 1063.071940][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1063.071973][ T31] ? __kthread_parkme+0x19e/0x250 [ 1063.071998][ T31] ? __pfx_watchdog+0x10/0x10 [ 1063.072028][ T31] kthread+0x3c5/0x780 [ 1063.072059][ T31] ? __pfx_kthread+0x10/0x10 [ 1063.072088][ T31] ? rcu_is_watching+0x12/0xc0 [ 1063.072113][ T31] ? __pfx_kthread+0x10/0x10 [ 1063.072152][ T31] ret_from_fork+0x5d4/0x6f0 [ 1063.072182][ T31] ? __pfx_kthread+0x10/0x10 [ 1063.072212][ T31] ret_from_fork_asm+0x1a/0x30 [ 1063.072243][ T31] [ 1063.072254][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1063.203687][ C0] NMI backtrace for cpu 0 [ 1063.203713][ C0] CPU: 0 UID: 0 PID: 23245 Comm: syz-executor Tainted: G I 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1063.203751][ C0] Tainted: [I]=FIRMWARE_WORKAROUND [ 1063.203761][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1063.203777][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x66/0x70 [ 1063.203823][ C0] Code: 82 18 16 00 00 83 f8 02 75 20 48 8b 8a 20 16 00 00 8b 92 1c 16 00 00 48 8b 01 48 83 c0 01 48 39 d0 73 07 48 89 01 48 89 34 c1 cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 [ 1063.203847][ C0] RSP: 0018:ffffc90018dff5e8 EFLAGS: 00000293 [ 1063.203868][ C0] RAX: 0000000000000000 RBX: ffffea0000f99d80 RCX: ffffffff8205af96 [ 1063.203885][ C0] RDX: ffff88801e6a1e00 RSI: ffffffff8205afa0 RDI: 0000000000000007 [ 1063.203901][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1063.203916][ C0] R10: 0000000000000000 R11: 0000000000007c38 R12: 00007f2de92d1000 [ 1063.203931][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 1063.203947][ C0] FS: 0000000000000000(0000) GS:ffff88812475f000(0000) knlGS:0000000000000000 [ 1063.203970][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1063.203986][ C0] CR2: 0000558e08ce2000 CR3: 000000000e382000 CR4: 00000000003526f0 [ 1063.204003][ C0] Call Trace: [ 1063.204013][ C0] [ 1063.204022][ C0] const_folio_flags.constprop.0+0x40/0x70 [ 1063.204064][ C0] unmap_page_range+0x1f7e/0x4350 [ 1063.204102][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1063.204131][ C0] ? uprobe_munmap+0x20/0x5c0 [ 1063.204156][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 1063.204185][ C0] unmap_vmas+0x218/0x470 [ 1063.204211][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1063.204236][ C0] ? mas_next_slot+0x12d3/0x21b0 [ 1063.204267][ C0] exit_mmap+0x1b9/0xb90 [ 1063.204297][ C0] ? uprobe_clear_state+0xfc/0x3e0 [ 1063.204327][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1063.204353][ C0] ? lock_release+0x201/0x2f0 [ 1063.204384][ C0] ? trace_contention_end+0xdd/0x130 [ 1063.204418][ C0] ? lock_release+0x201/0x2f0 [ 1063.204457][ C0] __mmput+0x12a/0x410 [ 1063.204503][ C0] mmput+0x62/0x70 [ 1063.204527][ C0] do_exit+0x7c4/0x2bd0 [ 1063.204558][ C0] ? rcu_is_watching+0x12/0xc0 [ 1063.204583][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1063.204621][ C0] ? __pfx_do_exit+0x10/0x10 [ 1063.204650][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1063.204685][ C0] ? get_signal+0x8f5/0x26d0 [ 1063.204710][ C0] ? rcu_is_watching+0x12/0xc0 [ 1063.204735][ C0] do_group_exit+0xd3/0x2a0 [ 1063.204767][ C0] get_signal+0x2673/0x26d0 [ 1063.204793][ C0] ? __hrtimer_setup+0x176/0x280 [ 1063.204830][ C0] ? hrtimer_nanosleep+0x187/0x380 [ 1063.204854][ C0] ? __pfx_get_signal+0x10/0x10 [ 1063.204887][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1063.204923][ C0] arch_do_signal_or_restart+0x8f/0x790 [ 1063.204952][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1063.204984][ C0] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 1063.205026][ C0] exit_to_user_mode_loop+0x84/0x110 [ 1063.205063][ C0] do_syscall_64+0x3f6/0x490 [ 1063.205102][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.205128][ C0] RIP: 0033:0x7f2dea7c11e5 [ 1063.205147][ C0] Code: Unable to access opcode bytes at 0x7f2dea7c11bb. [ 1063.205158][ C0] RSP: 002b:00007fffb672ab80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1063.205180][ C0] RAX: fffffffffffffdfc RBX: 0000000000000078 RCX: 00007f2dea7c11e5 [ 1063.205197][ C0] RDX: 00007fffb672abc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1063.205212][ C0] RBP: 00007fffb672ac2c R08: 0000000000000000 R09: 0000000000000000 [ 1063.205228][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1063.205243][ C0] R13: 00000000000927c0 R14: 000000000010387a R15: 00007fffb672ac80 [ 1063.205266][ C0] [ 1063.605889][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1063.612824][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G I 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 1063.624580][ T31] Tainted: [I]=FIRMWARE_WORKAROUND [ 1063.629804][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1063.639897][ T31] Call Trace: [ 1063.643227][ T31] [ 1063.646181][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1063.650809][ T31] panic+0x71c/0x800 [ 1063.654831][ T31] ? __pfx_panic+0x10/0x10 [ 1063.659392][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1063.664843][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1063.670858][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1063.676268][ T31] ? watchdog+0xdda/0x12c0 [ 1063.680711][ T31] ? watchdog+0xdcd/0x12c0 [ 1063.685165][ T31] watchdog+0xdeb/0x12c0 [ 1063.689464][ T31] ? __pfx_watchdog+0x10/0x10 [ 1063.694160][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1063.699400][ T31] ? __kthread_parkme+0x19e/0x250 [ 1063.704450][ T31] ? __pfx_watchdog+0x10/0x10 [ 1063.709238][ T31] kthread+0x3c5/0x780 [ 1063.713586][ T31] ? __pfx_kthread+0x10/0x10 [ 1063.718188][ T31] ? rcu_is_watching+0x12/0xc0 [ 1063.722964][ T31] ? __pfx_kthread+0x10/0x10 [ 1063.727572][ T31] ret_from_fork+0x5d4/0x6f0 [ 1063.732174][ T31] ? __pfx_kthread+0x10/0x10 [ 1063.736782][ T31] ret_from_fork_asm+0x1a/0x30 [ 1063.741739][ T31] [ 1063.745109][ T31] Kernel Offset: disabled [ 1063.749886][ T31] Rebooting in 86400 seconds..