last executing test programs: 6m36.611630688s ago: executing program 2 (id=1339): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x9eb, 0x0, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20000000) pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x100000005) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x5410, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000, 0xc, 0xf, 0x40000000088fd6, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x3, 0x0, 0x4, 0x7, 0x100000000001, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/statistics/tx_packets\x00', 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x1, 0x5, 0x0, 0x9) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) read$auto(0x3, 0x0, 0x80) sendfile$auto(r3, r3, 0x0, 0x5) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket(0x2, 0x3, 0xff) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6m35.589781446s ago: executing program 2 (id=1342): sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000006) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/user/max_fanotify_groups\x00', 0x202, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/numa_balancing\x00', 0x18242, 0x0) sendfile$auto(r1, r1, 0x0, 0x80000000003) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/mountinfo\x00', 0x800, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/de\xef\xe7auDio1\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeS\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95', 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), r3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f00000002c0)={0x4, 0xf, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0xffe, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x2, 0x7, 0x200000100103}) mmap$auto(0x7, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) readahead$auto(r2, 0x7fffffffffffffff, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0x7fb, 0x80000011, 0x2, 0x208000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000080)={0x0, 0xce, {0x9, 0x4, 0xc6, 0x3ff, 0x4, 0xffffffff, 0x4, 0x20400000, 0x9}}) mprotect$auto(0x0, 0x806121, 0x6) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f0, 0x15) r5 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mmap$auto(0xc, 0x4, 0x2, 0x11, r0, 0x2) ppoll$auto(&(0x7f0000000000)={r5, 0x8, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0)={0x1}, 0x8) mq_timedsend$auto(r5, 0x0, 0x2000, 0x2, 0x0) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) 6m34.855166388s ago: executing program 2 (id=1348): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x9, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x4, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) ioctl$auto_tracing_buffers_fops_trace(r2, 0x5220, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x1, 0x40}, 0x8, 0x8000) socket(0xa, 0x1, 0x100) close_range$auto(r0, 0x8, 0xfffffbfc) ioctl$auto_OTPSELECT(0xffffffffffffffff, 0x80044d0d, &(0x7f00000000c0)=0x10009) r4 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r6, 0xc0045520, r5) shutdown$auto(0x200000003, 0x2) fcntl$auto_F_DUPFD(r4, 0x0, r4) read$auto(r2, &(0x7f0000000380)='/sys/kernel\x93R\x04\xbeHh{aU/deb\x05&\x12\xddv{\x93\xb0 y\xd2\x12\xffu\x9c/ieee80211/phy15/netd\x00\x00:wlan1/staYions/;8\x05\x00\x00\x00\x00\x00\x00\x000:00:00/driver_buffered_\'N\x9d\xc7d\'\a^\xa4\x18\x88\x8a\xe69\x92<9\xaeW\xc2\xa6w)\xc0\x99\x9bc\xca\xc1j)5\xaa\aaWRkzf\x9fn\x8b\x8b\xb4\xd2\x9b\xb7\xbc\x9dBF\t\x1eS\xa7\x11U\x053\xe6\x1d\xb7\xab2\xfc\x82\x9b\a\xd8\x8aqG\x1d\xf7\x82j)SB\xc5\xa0\xe4\xdd\x9d~`<\xd6\xc5\b\x9c\x19rj\xaf\\\x1c\x01~\xffMi\xb5\x03\xd1\x87c\xee^/r\b\xba\x89]\xa9[\x16D\xdf\xb6t\xb6\xc9g\xef\xdb\t\xb4\x868xB`FN\x91A\n\xc4\n\xd1\xb0\xa4\xf2k\x8a\xfa\f|\f\x13\x80\xc7\xd3,\xb5J\xde\xdd\xd9\xd27m\xf3\x9d\xe4\xbe\xc2Uz\x94\xb6\x17\xe1\x98\x03^\xb3\xce\xb4\v\xb7\x88\xbe\xee\x13\x7f\xead\x0f\xd6\xae\xceEm\xf1\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0xfffffffffffffffd) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x4000}, 0x6) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xa0c82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) 6m33.347397491s ago: executing program 2 (id=1354): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x4e0400, 0x0) ioctl$auto_OTPERASE(r0, 0x400c4d19, &(0x7f0000000040)={0x2, 0x0, 0x7}) r1 = fsmount$auto(r0, 0x5, 0x80000000) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0xe6d6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000200), r1) sendmsg$auto_NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x81) msgctl$auto(0x10000, 0xce, &(0x7f0000000380)={{0x0, 0xee01, 0xffffffffffffffff, 0x7, 0x1000, 0x0, 0x3}, &(0x7f0000000300)=0x30, &(0x7f0000000340)=0x20, 0x5, 0xcd37, 0x9, 0x4, 0x4, 0x0, 0x5, 0xfb, @inferred=0xffffffffffffffff, @raw=0xfff}) msgctl$auto(0x10000, 0x1, &(0x7f0000000480)={{0x8, 0xee01, 0xffffffffffffffff, 0x9, 0x9, 0xec, 0x800}, &(0x7f0000000400), &(0x7f0000000440)=0x6, 0x0, 0x675, 0xfffffffffffffff8, 0x0, 0xff, 0x3, 0x7, 0x3, @inferred=0xffffffffffffffff, @raw=0xe000}) setresgid$auto(r6, 0xee00, r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000540), r3) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000e40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000580)={0x86c, r11, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x75a, 0x7d, 0x0, 0x1, [@generic="7c57637768cc8d4148260778f947e79591f3a0fd3c108928a38fe5beb2ca69f8224bc1003e9e81abfb0016b74e71970b126d5570f894553c7c796aa9be4b52b9596bb8a632c722a7896eb4374c6282be04a0aee51b6c39dde378112a170948e56685730b8b6ce8ea2cc6e07e8b5a10cadf16f81e927e4534987574dea33f21fbf758ad249a419239428b8eff2d41380e79a468661feb15acd4f5d5a044", @nested={0x174, 0x14e, 0x0, 0x1, [@nested={0x4, 0x9d}, @nested={0x4, 0x2}, @nested={0x4, 0xfc}, @nested={0x4, 0xc3}, @generic="5bf01805ac3546170733a2618090285bcdd4c4f1ccf7c72e42e258af8f2158b3d56a1840dba80ee9bb78d9f3591def2fc280b12981f73dd4a4ee21d6f956c10a14dd35981a5f90a2bfdc2480bec81d4eed7c346f16ab0e485bb4e8a046e7e9bc4db66eb3861dc417378840c5ea928507c433116721711be3fa05f7e4f52da242a0535ded11194db1f875569a02bd270225e57014b0f64dde178f3e", @generic="bb0ce80372739ec5c94a1e43f02db2ab1c371c23200cd9af281901c7390bc5ffcc324657005abb1e3d8a51a499b93dbcfa90a15eee155ebf0638b2019e24ecdae540c269d438f7d5d7a9ac2c5e6f0dc131fda96cda3b6523c9498357ac3337e2", @nested={0x4, 0x75}, @generic="a36459634065c9190dfbef3e00e841f3795a9d24aa82c3a2b1ec03c1d306fc058574d74306e58db30359e656d8f2bcdac001800942ccac954568b11e9eddecc3b3a51e8743944d41ee037f54aa14d66cf32241a4d4717ece2715e66e2c09a3b3d4"]}, @generic="ba84af518f2a69cfa7c0b5ad547b4973f5bfee7346716dc4713676c84a184da4d4a6ab4151f5b166242a60b7e8e3983a7da918999f18cddd7f305cbb22a051e40ba9d8379f8f3c8583ee2796a2c5e16c5f920994d1a8fa002e6d883be67ea363dd7922de3837bf05f21aa073a2cc76f85e43268babbe8c0a0cd606ab2041f52f48c2b4eda1cabeddb54159a7718810195c611b22f7a7f1eec6712468e5343d16afdd4c5ba96cef57850d78592f03849515d9f2824f2de4733f7d6262e13e931402fcaa59a46c27a0352b8a8b9843c984f84adc2e2b6b1a2cc3566786ff1792e226f1b2eaa5e61259bd664f000ea048418287050ab2f70b9567944ff0", @generic="3e76965557c8c7db98c50c887b57366e79a4c96e6bca681dc3ec97f0782d06a5cb6a329393616847661a33418ba67fb1670465496b1d76756f2e42784e331c53aee58cf2734d87b913c469eca9729054d801d0c110bfe054261709f6eccab42d02dd7a760399c98cf02ed0af288f446bb57d2a2b1a548ed2c1c21a1dc55912e027eeab213e1beabc116bc8e2efaf93b494f5120cd33192f87188d17976cb9295eac9857a1ce930b2b7ed93a36bbfe58ff834ed679dff42252d14809e1ab81d18e3541c11a583", @nested={0x26b, 0x4c, 0x0, 0x1, [@typed={0x4, 0xb2}, @generic="a7c2946086d89f520e9fad9d96d48f61b4dc32b8ba125774fd22c0b2417469624e7d76440b9b39fe0ec132739b98", @generic="6399172acfc4e11e3ae4cc823cc3217dfeafc443bc24f883ed18fabbfab23b10d2e3b2313f540b1abf51c8ce3acdf25507e49e15324ce26351831d22a59b21d5fa7360a0562b6ce86b5609d80f8d0f5cb121503a29affce7cdb64a67132722c2ccedbd74068dfd26a498fa41dce9405c286b7d1005f5f7ec23d105a8f14d5dd00744c057e8c83b41c78404900178bf3ecd4aac626d177b60af681b3cacfef47cd2194cc4e430e12476ce8ae963496c7256cca0d5bf481848b5f441e62f1576277aa8bd6410f95ea655d0df66c2e5be4d9ec7472145df9175bb0f9abc088ddb90c3e48b0777c665c3330792d2d4ea3f", @nested={0x4, 0x1a}, @typed={0x7c, 0xee, 0x0, 0x0, @binary="7c712414b12eac2f649abc3d845270f90ca8c57d0f4bc1bc6c5a2cda305ee9e84eeb7417124ddcd92cc2bc89984498117269c06068177c4f7a5b12979521c7b477b2429985e9e312b82b523c277beff07871e6ad3f468932d8ca1cebb958ec9c94d845e4510ddf9254565f4f25bc6da731682f3e79f244ed"}, @nested={0x4, 0xf5}, @generic="7a914810fc8da52d71f695e4d97a90ffdd098cb7942f84569c32cf69afdc6ff3d6b31551d45fb1d49e5ece5518c6979d71202fa7800b33657a4d53c656042249b9c3a82021642788457f721a56dbd05a71f9da19b66763ef32da2c51f256610adfcebbba2fb4f8679fc77861cc1f2ca79f371e4ad77f5e2090340dcea95e9b4de684b4c3bf5d9d3a96f1ca27b996090af143406086d16135ddbcf08e7a687e00bab2b2cfb1f788fc880beca1af91b55e7b779cf0b89634321c01d5d279cacdf09f1d"]}, @generic, @nested={0x98, 0x13e, 0x0, 0x1, [@nested={0x4, 0x4b}, @generic="878e60a8de51708aacd200de0448ef643808908e7ac788678230fe7946e599f58a43a9bc4067d875bd8194aabd1d752d", @typed={0xc, 0x56, 0x0, 0x0, @u64=0xe}, @nested={0x4, 0x68}, @typed={0x4d, 0xd3, 0x0, 0x0, @binary="cee03ab79574ee031b8126259e6d2f046b233fa024270b670a10ac705c632cac8cd581eada94a91a06d466f1951617cb0a6e872b456f297a57a4b2ec9b542ac7f1892bc1ce3f76f948"}]}, @generic="642245d0d9430b4a94ae2265b26d19fcb3b0e60734d05212881ff1fc8d70cf99c47d690a2c628cc12a7834752b8f8e5ae0d6e0ee93ed3aa02107cd3a0db022d1c7df51b50ccdb7110c41479c479abdd70bdee1b66d318fc7cf7ce569b6efda4eb3abbfd4605c62bebf91c69f5cffc3e44dbbdd74b221c2", @typed={0x8, 0x23, 0x0, 0x0, @uid=r8}]}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x4f, 0x1f, "96d763f557dea877908f55cc00489d0a7120d94854421ff2112589e0c707acd507284a8063338848d27ea53b1a828d0e069b49d8d1a0098d1fdfd30fe986f85220a8fd01909da322b95b64"}, @NL80211_ATTR_VHT_CAPABILITY={0x8f, 0x9d, "fb211a6cb4fedad83607b462ff2e6cf5864b4c28c925bfde448765dde719781c77729685afa0b53eba2767199206b36bb6124aedf7ed8c160a8bb761a5c92c2c3e8754ebc04bfcebb7d3ca150b30487b592d2cdcca5707bcadf60d96322458ebf8862b5a9ee52fa0703eed03f2526cd5cc9fe5d7dd8b87ffc574eac15e75cf27564e479e94accadc2d143e"}, @NL80211_ATTR_SSID={0x18, 0x34, "4e9be50baf86fd4c93d32d985f918dbec06c0d29"}]}, 0x86c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) write$auto_zero_fops_mem(r1, &(0x7f0000000e80)="f89685548fa845e8c29064f42642fef65915ee19cf983b50cfb0b2029332018fb8189ac65d2b4a4e6e74be955335b44a3d55006d0da1e1c69c8ef5fcc8e7a945ad91901ce4a058cf3f771e550db844d164a7b011124ae80f44824f95f7a95f7774b97669f8683f9dbbe4a19bf0d3e05662e232ce23a2b224c719", 0x7a) msgctl$auto_IPC_STAT(0x7, 0x2, &(0x7f0000000f80)={{0x2, r5, r6, 0x9, 0x6, 0x2, 0x4}, &(0x7f0000000f00)=0xa, &(0x7f0000000f40)=0x8, 0x6, 0x6, 0xf4, 0x2, 0x8d40, 0x7, 0x0, 0x7, @raw=0x6, @inferred=r7}) r13 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001040), r3) sendmsg$auto_NL80211_CMD_GET_REG(r10, &(0x7f00000011c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001080)={0xf8, r13, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x1}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_MAC={0x64, 0x6, "75ffc96a5b446fb8bee852105ac4e5831d407cde1dafd3f8f6076fdbe693b542a57df3bf2971ccb9c776c35b21c8aadc9a9d86cadb5c33bcf7fb052b3fdbc1531ed007092fe688fc73d8a46a8062d620188d32c750f0c9542056c49231e59e6b"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x52, 0xac, "5aaa37c3a89d2c421f48407df048c39d2e4e853f9e3c766e3e9c036a18281c104d4bd1aa5793bbeec27f3632fc997d748213a565b9b2ed8a216955bd8062d5aa48bf84747bfe36d55f808fcd8966"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x81}, 0x20040000) fsconfig$auto_SHMEM_HUGE_ALWAYS(r1, 0x1, &(0x7f0000001200)='%\x00', &(0x7f0000001240)="add6b10b751483a45e3adb7daf8f2c9eb8e47a1b38b971cf20ce2180fed7d4090d7cf2a273f6228049", 0x1) execve$auto(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002300)=&(0x7f00000022c0)='[+.\x00', &(0x7f0000002380)=&(0x7f0000002340)='nl80211\x00') semtimedop$auto(0x5, &(0x7f00000023c0)={0x7fff, 0x7, 0x5}, 0x1, &(0x7f0000002400)={0x0, 0x2}) r14 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(r1, 0x1c0000000000000, &(0x7f0000002440)="1c7d4de9e770b66b399a15aff4e2e8f87096c8b55d5f91158e34cbd6924a4e1956b9fbb4de6d4112e290d3b9fb8685e97b61bac02407caa808dd7f9f0f66a3eddb58fd6b8e733087285059ce056f3384405ba0e875ed764e1b6a5e9b3f0661921904ec2a599ebe13dd28115beff87ae6e8adc461a160c1ed0d038ff535561b84bc7047f8d4cf6bccb11c3babddaf0974d4f1874ad3ac8a3b36115e1776f43ec502846fe8d48736f67134fe33") read$auto_ipsec_dbg_fops_ipsec(r14, &(0x7f0000002500)=""/72, 0x48) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r14, &(0x7f0000002640)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002600)={&(0x7f00000025c0)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x40) socket(0x6, 0x2, 0x7) semctl$auto_SETVAL(0xa575, 0x8, 0x10, 0xffffffffffff12c7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002680)='/proc/sys/net/ipv6/neigh/ip6gretap0/app_solicit\x00', 0x101800, 0x0) clone$auto(0x1, 0xbc5, &(0x7f00000026c0)=0x9, &(0x7f0000002700)=0x9, 0xcba) open(&(0x7f0000002740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101000, 0x4) msgctl$auto(0x4, 0xcbe, &(0x7f0000003800)={{0x5, r8, r6, 0x9, 0x9d, 0x9, 0x1}, &(0x7f0000003780)=0xd5, &(0x7f00000037c0)=0x3, 0x1, 0x100, 0xfffffffffffffff8, 0x2, 0x9, 0x3, 0x9, 0x4, @inferred=r12, @raw=0xc77}) 6m33.004246827s ago: executing program 2 (id=1356): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/mountinfo\x00', 0x800, 0x0) (async, rerun: 64) unshare$auto(0x40000080) (async, rerun: 64) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/de\xef\xe7auDio1\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeS\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95', 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), r1) (async, rerun: 32) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) (rerun: 32) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x4000000eb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) readahead$auto(r0, 0x7fffffffffffffff, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x1, 0x0) (async, rerun: 32) r3 = socket(0xa, 0x801, 0x106) (rerun: 32) setsockopt$auto(r3, 0x6, 0x24, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0x7fb, 0x80000011, 0x2, 0x208000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async, rerun: 32) mprotect$auto(0x0, 0x806121, 0x6) (async, rerun: 32) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) r4 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r4, 0x0, 0x2000, 0x2, 0x0) (async) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) (async) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) 6m32.383644344s ago: executing program 2 (id=1360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x8000000000) r2 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000180)=0x1) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r3, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020026bd7000ff9a7d001c000000000014001f00fe88000000000000000000000000010100"/46], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x100000005) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) (async, rerun: 32) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000, 0x7, 0xf, 0x40000000008fd6, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x3, 0x62, 0x4, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, 0x0, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0xfffffffffffffffc, 0x9, 0xe) (async) mmap$auto(0x0, 0x400000000000002, 0x8ffd, 0x40eb1, 0x602, 0x300000000000) (async) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) (async) finit_module$auto(0xffffffffffffffff, 0x0, 0x6) (async) socket(0x2, 0x801, 0x100) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), r5) (async) open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) 6m17.345311725s ago: executing program 32 (id=1360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0x8000000000) r2 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000180)=0x1) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r3, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020026bd7000ff9a7d001c000000000014001f00fe88000000000000000000000000010100"/46], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x100000005) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) (async, rerun: 32) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000, 0x7, 0xf, 0x40000000008fd6, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x3, 0x62, 0x4, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, 0x0, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0xfffffffffffffffc, 0x9, 0xe) (async) mmap$auto(0x0, 0x400000000000002, 0x8ffd, 0x40eb1, 0x602, 0x300000000000) (async) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) (async) finit_module$auto(0xffffffffffffffff, 0x0, 0x6) (async) socket(0x2, 0x801, 0x100) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), r5) (async) open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) 5m33.370084555s ago: executing program 4 (id=1525): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x15, 0x5, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0x23, 0x80805, 0x0) bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/247, 0xf7) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x7, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x7256391b, 0x7, 0x6d3f, 0x9, 0x20000002, 0xfffffffffffffffe]}, 0x0) socket(0x1a, 0x4, 0x6) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0xc, 0x2495dae0, 0x6]}, 0x0) (async) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000e00)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde4727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e28782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348b6148c5b44409f58d8d5f29344fe8a2e4c2432ae622bb1912ea65d5574bff895025bd72cd780d59cbaa0886afd5d6676d2de6266903115525c075cc3f75ce9eba3787a890e1f758f0e502c4c9c0538dc94", 0xc2d) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) mmap$auto(0x0, 0x2060009, 0x3, 0xeb2, r0, 0x8000) (async) io_uring_setup$auto(0x7ff, &(0x7f0000000080)={0x7efffffc, 0x8, 0x3002, 0x7, 0x7, 0x4006, 0xffffffffffffffff, [0x0, 0x0, 0x4000000], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x69cb, 0x6, 0x3}, {0x5, 0x8001, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x17, r4, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c020000", @ANYRESHEX, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x41}, 0x40804) pkey_mprotect$auto(0x6, 0x8003, 0x8, 0x2) close_range$auto(0x2, 0xa, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 5m32.211489025s ago: executing program 4 (id=1532): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/irq/11/effective_affinity_list\x00', 0x443102, 0x0) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20803, 0x0) setsockopt$auto(r0, 0x3, 0x8, &(0x7f0000000040)='/dev/dsp1\x00', 0x44) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd6/queue/iosched/writes_starved\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000100)='%\x00', 0x38f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r5, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) io_uring_setup$auto(0x9, &(0x7f00000001c0)={0x2, 0x3, 0xff, 0x1ff, 0x4, 0x1, r0, [0x0, 0x8, 0x8], {0x6, 0x7, 0x8, 0x4, 0x3, 0x9, 0x0, 0x6, 0xa000000000000001}, {0x6c63, 0x6, 0x8, 0x6, 0x7, 0x9, 0x9, 0x8001, 0x6}}) r6 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close_range$auto(r0, r6, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r7, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 5m28.095632318s ago: executing program 4 (id=1542): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x2) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x4b, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x6, 0x401bf, 0x7352, 0x42, 0x8000, 0x1ffde, 0x7, 0x10000000000002, 0x5, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x3, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x100000000, 0xfffffffffffffffc, 0x1000000000000000, 0x1, 0x2000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffc, 0x800000000000, 0x0, 0x5, 0xff]}, 0x1fe, 0xd) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x5, "335ec7eb11d6390874222c9821ee838775eca032f0fd39bc6f05f0f74b96915e", @raw=0x40}) socket(0x1f, 0x80002, 0x73) r1 = socket(0x10, 0x2, 0x0) nanosleep$auto(0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) preadv$auto(r2, 0x0, 0x6, 0x2, 0x8) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x541c, r4) read$auto_dfs_cpu_ops_debugfs(r4, 0x0, 0x0) 5m27.441141291s ago: executing program 4 (id=1543): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x2) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x4b, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x6, 0x401bf, 0x7352, 0x42, 0x8000, 0x1ffde, 0x7, 0x10000000000002, 0x5, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x3, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x100000000, 0xfffffffffffffffc, 0x1000000000000000, 0x1, 0x2000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffc, 0x800000000000, 0x0, 0x5, 0xff]}, 0x1fe, 0xd) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x5, "335ec7eb11d6390874222c9821ee838775eca032f0fd39bc6f05f0f74b96915e", @raw=0x40}) socket(0x1f, 0x80002, 0x73) r1 = socket(0x10, 0x2, 0x0) nanosleep$auto(0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) preadv$auto(r2, 0x0, 0x6, 0x2, 0x8) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x541c, r4) read$auto_dfs_cpu_ops_debugfs(r4, 0x0, 0x0) 5m26.664164398s ago: executing program 4 (id=1546): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x2) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x4b, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x6, 0x401bf, 0x7352, 0x42, 0x8000, 0x1ffde, 0x7, 0x10000000000002, 0x5, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x3, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x100000000, 0xfffffffffffffffc, 0x1000000000000000, 0x1, 0x2000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffc, 0x800000000000, 0x0, 0x5, 0xff]}, 0x1fe, 0xd) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x5, "335ec7eb11d6390874222c9821ee838775eca032f0fd39bc6f05f0f74b96915e", @raw=0x40}) socket(0x1f, 0x80002, 0x73) r1 = socket(0x10, 0x2, 0x0) nanosleep$auto(0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) preadv$auto(r2, 0x0, 0x6, 0x2, 0x8) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x541c, r4) read$auto_dfs_cpu_ops_debugfs(r4, 0x0, 0x0) 5m25.456506178s ago: executing program 4 (id=1551): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) connect$auto(0x3, 0x0, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x8000000000003, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 5m9.741674258s ago: executing program 33 (id=1551): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0x300, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) connect$auto(0x3, 0x0, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xa001, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x8000000000003, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 1m1.320901894s ago: executing program 1 (id=2184): mmap$auto(0x0, 0x202000a, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) poll$auto(&(0x7f0000000000)={r0, 0xe7f1, 0x1723}, 0x8, 0x2) r1 = getpgid$auto(0xffffffffffffffff) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r2, 0x8008b705, 0x0) fremovexattr$auto(r0, &(0x7f0000000040)='ns/pid_for_children\x00') 1m1.000180268s ago: executing program 1 (id=2187): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdb04000000000008000100fcffffff08000100ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 59.591881073s ago: executing program 1 (id=2190): sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4c084) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon18\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x101, 0x400008, 0xdf, 0x11, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x2c, 0x3, 0x9) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x800, 0x0) lsm_set_self_attr$auto(0x400, &(0x7f0000000180)={0x3, 0x3, 0x0, 0x96, "c7fd0386352b501c61161f384b542b2e4732075986c7903d8e5c9c5e513c5ee4580dc1f7ea0f02706688f12b49e6c9fb4fec648a9022a0e08500a9173523380918cc048eb1f7f5c2b314adcf58df27f0818c07759417aeea5f3b33b3d1fc1e1d4db76f5684e73c5ae8047bcc35cc79ed4b295ee9034b612d6289a0b64c7732cb1e9f92a648c0ea097dd1ecf0e5770b3aa6d2d89a4b9a"}, 0x5, 0x2) fcntl$auto(0x0, 0x407, 0x100000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) ioctl$auto_SNDCTL_DSP_POST(r1, 0x5008, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) keyctl$auto(0x7, 0xfffffffb, 0x2, 0x3e, 0x8) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) writev$auto(r1, &(0x7f0000000340)={&(0x7f00000002c0)="31b4a86d1b056cd2157c0af9c029e3defd8fcaeb1b0e66ab21f742b154095cb01de75dadd3bb787264dbe0c739f1fe861fee9385b2e814b54dffac44dda9fe8a0aec62ccc0b1d0e559459b1caaf5a9fa817506f3ee2d7c57f3f9d44f004d03116d921e359efe811a9a0c77c8", 0x5}, 0xf) 58.32542344s ago: executing program 1 (id=2192): futex$auto(&(0x7f00000003c0)=0x58, 0x5, 0x3, 0x0, &(0x7f0000000440)=0x2, 0x2000005) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x1c9002, 0x0) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 57.739015329s ago: executing program 1 (id=2193): close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop8\x00', 0x343102, 0x0) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x731e01, 0x0) read$auto_tap_fops_tap(r0, &(0x7f0000000100)=""/221, 0xdd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(r0, 0x0, 0x3, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x2, 0x400007, 0xe895, 0x16, r1, 0x401) r2 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3}, 0x55) io_uring_setup$auto(0x52, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto_BPF_OBJ_PIN(0x6, 0x0, 0x5) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x7, 0xd, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) ioctl$auto(0x3, 0x5309, 0x38) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xf0180, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fops_u32_ro_(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/bpf_offloaded_id\x00', 0x20082, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r3) 56.625188664s ago: executing program 1 (id=2198): mmap$auto(0x0, 0x100000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x0, 0x806121, 0x6) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x800, 0x0) read$auto_dfs_cpu_ops_debugfs(r1, &(0x7f00000000c0)=""/128, 0x80) lseek$auto(0x0, 0x0, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) socket(0xa, 0x1, 0x100) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) listen$auto(0x3, 0x83) ioctl$auto(0x3, 0xae41, 0x38) ioctl$auto(0x3, 0x4020aea5, 0x38) 54.555501678s ago: executing program 3 (id=2204): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) write$auto_cachefiles_daemon_fops_internal(r0, 0x0, 0x0) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0x12, r1, 0x4) r3 = open_by_handle_at$auto(r2, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, r3, 0xfff) r4 = geteuid() keyctl$auto(0x1e, r4, r4, 0x5, 0x8) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x200000c0) mmap$auto(0xfffffffd, 0x8, 0xdf, 0x9b7e, 0x2, 0x8003) close_range$auto(0x2, 0xa, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf257e00000004008700080062000010000084001501c3991eff9f839e066026e213626609002100b805414f5b112a44d6875b15c45625a1d8502d7cc067902bf55ce2c5c11d4225f128db3dec1907e02bcf361e22fa649e8610ccef1ef63d274d664ea74441c76891de999e8c4f69131d6669b8c097cab0cf92a7d0c3663de237920b905caf4c1063fc543b92853be961bce59ff8178a772365d81dc490"], 0xac}, 0x1, 0x68, 0x0, 0x24040080}, 0xd0) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x20000) unshare$auto(0x20000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) 52.697205142s ago: executing program 3 (id=2207): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) (async) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x2080, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c09, 0x0) (async) get_robust_list$auto(0x0, 0x0, 0x0) (async) socket(0x1d, 0x3, 0x1) ioctl$auto(r1, 0x5411, 0x10000000000402) (async) setsockopt$auto(r1, 0x4, 0x7493, 0x0, 0x5) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) read$auto(0xffffffffffffffff, 0x0, 0x20) (async) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (async) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) (async) unshare$auto(0x40000080) (async) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) (async) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x7, 0xfffffffffffffffd, 0xd4, 0x4, 0x28c, 0x0, 0x8000000000000001, 0x8, 0x9, {0xfffffffe, 0x10000}, 0x8, 0x6, 0xfffffffffff7fffd, 0x1007ffd, 0x0, 0xfe, 0x81, 0xffffffffffff628e, 0x200003d, 0xdeb1, 0x803}) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r3, 0x40004) mmap$auto(0x0, 0x2020009, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x10001, 0x10, 0x2, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x955b, 0x8, 0x7, 0x5}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r4, 0x3, 0x7f, @uprobe_multi={0x81, 0x1ff, 0x8, 0x0, 0x1f, 0x4}}, 0x81) (async) landlock_create_ruleset$auto(0x0, 0x9, 0x0) (async) landlock_restrict_self$auto(r3, 0x0) (async) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) 52.065771123s ago: executing program 3 (id=2208): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) getpid() mmap$auto(0x0, 0x6, 0xd35c, 0xfffffffffffffff8, 0x401, 0x5) socket(0xa, 0x3, 0x3b) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) mmap$auto(0x3, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/dfscache\x00', 0x101000, 0x0) mq_unlink$auto(&(0x7f0000000040)='/dev/rtc0\x00') pread64$auto(r3, 0x0, 0xd58, 0x75e8) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000380), 0x40082, 0x0) msgctl$auto(0x4, 0x62c6, &(0x7f0000000240)={{0xffff, 0xffffffffffffffff, 0xee00, 0x40, 0xc6, 0xfff, 0xf}, &(0x7f00000000c0)=0x8c, &(0x7f0000000100)=0x4a, 0x7, 0x80, 0xc, 0x5, 0x3, 0x7, 0x0, 0x2, @raw=0x4, @inferred=0x0}) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f0000001480)={{0x4, r4, 0xffffffffffffffff, 0x3, 0x0, 0x7}, 0x3d8, 0xa, 0x8, 0x7f10, @raw=0x400, @inferred, 0x4, 0x0, &(0x7f00000003c0)="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", &(0x7f0000000140)="99263440333d1cd0f1c20d8310dc89a57fd20977188897e5eeecefc9ce97d81e1b4cd6"}) lstat$auto(&(0x7f0000000040)=':,\x00', &(0x7f0000001540)={0x5, 0x60, 0x10000, 0xff, r4, r6, 0x0, 0x7c, 0x7, 0x70ba, 0x3, 0x6d, 0x7, 0x4000000000040, 0x1, 0x1, 0x11fa64e0}) move_pages$auto(r5, 0xfffffffffffffffc, 0x0, 0x0, &(0x7f00000001c0)=0x400ffff, 0x87) writev$auto(r2, &(0x7f0000001500)={0x0, 0xfffffffffffffffc}, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe4643, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="24715ea66f74203370cf91233645c97cd2202afe765a2d22fb65f5ea325cb0052001a6c5a862e7ef1fdfd888e373343fcd421c9472bd40a14ebe5d0fc502bffa", @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdbdf25010000000800010020100000040007800c0002000100000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x3, 0x0) 51.35131179s ago: executing program 3 (id=2210): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) (async) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x4600c3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) readv$auto(0x3, &(0x7f0000000600)={&(0x7f00000001c0), 0x4}, 0x1da) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) (async) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, r2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4010ae67, 0x38) (async) ioctl$auto(0x3, 0x4010ae67, 0x38) io_uring_setup$auto(0x8000, &(0x7f0000000080)={0x8000, 0x8, 0x3a, 0x3ff, 0x7f, 0x6, r0, [0xfffffff9, 0x300000, 0xffffff81], {0x2, 0xaa3d, 0x8, 0x2b1, 0x0, 0x10001, 0x9, 0x7, 0x8}, {0x19, 0xeae, 0x2, 0xf, 0xffffffff, 0x4e8, 0x3, 0x3, 0xfffffffffffffffa}}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) 49.429618541s ago: executing program 3 (id=2213): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x23, 0x2, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40044) syz_genetlink_get_family_id$auto_ipvs(0x0, r1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) r2 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r2, 0x4018bc13, &(0x7f0000000100)={0x4, 0x9d}) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/dummy0/stable_secret\x00', 0x100, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4bd029f0845c6b5196ced8ef9b1a53b4011ed14a904f19072629f7cc6ed922acba72edc667e917861d1e7dc8a72ee61bc9cca") r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) r4 = mq_open$auto(&(0x7f0000000200)='\\*)A\x00', 0x83, 0x9, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40050c4}, 0x820) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xb, 0x6, 0xd, 0x4, 0x53000000, r4, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x9, 0xffffffff, 0xf4, 0x5, r0}, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0xa901, 0x0) get_robust_list$auto(0x1, 0x0, 0x0) 49.02775267s ago: executing program 3 (id=2215): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) io_cancel$auto(0x6, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) geteuid() r0 = open(&(0x7f00000000c0)='\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x80000000000000d4, 0x1, 0x20006, 0x0, 0x5, 0x4, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0xb, 0x0, 0x9, 0x81, 0xfffffffffbff628e, 0x800000a747, 0xdead, 0x804}) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001200)='/proc/self/mounts\x00', 0x28000, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) capget$auto(0x0, 0xfffffffffffffffe) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r0, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x16, 0x0, 0x10052b) open(&(0x7f0000000080)='./file0\x00', 0x5a9e83, 0x0) 41.650379635s ago: executing program 34 (id=2198): mmap$auto(0x0, 0x100000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mprotect$auto(0x0, 0x806121, 0x6) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x800, 0x0) read$auto_dfs_cpu_ops_debugfs(r1, &(0x7f00000000c0)=""/128, 0x80) lseek$auto(0x0, 0x0, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) socket(0xa, 0x1, 0x100) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) listen$auto(0x3, 0x83) ioctl$auto(0x3, 0xae41, 0x38) ioctl$auto(0x3, 0x4020aea5, 0x38) 33.678040168s ago: executing program 35 (id=2215): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) io_cancel$auto(0x6, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) geteuid() r0 = open(&(0x7f00000000c0)='\x00', 0x40000, 0x31) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x80000000000000d4, 0x1, 0x20006, 0x0, 0x5, 0x4, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0xb, 0x0, 0x9, 0x81, 0xfffffffffbff628e, 0x800000a747, 0xdead, 0x804}) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001200)='/proc/self/mounts\x00', 0x28000, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) capget$auto(0x0, 0xfffffffffffffffe) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r0, 0x0) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x16, 0x0, 0x10052b) open(&(0x7f0000000080)='./file0\x00', 0x5a9e83, 0x0) 12.751746547s ago: executing program 6 (id=2224): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x2b}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, 0x0, 0x40000) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='0\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) 11.080356387s ago: executing program 6 (id=2266): pipe$auto(&(0x7f0000000000)=0xffffffffffffffff) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r0, 0x21, &(0x7f00000006c0)="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", 0x4) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000680)='/dev/sg0\x00', 0x40, 0x0) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) mprotect$auto(0x8000, 0x80, 0x8) ioctl$auto_SG_GET_COMMAND_Q2(r1, 0x2270, &(0x7f00000006c0)) 10.165394205s ago: executing program 0 (id=2267): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x10, 0x7f, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x33a00, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/cache/index2/coherency_line_size\x00', 0x80880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4105, 0x1009) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x111402, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) prctl$auto(0x0, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) socket(0xa, 0x3, 0x2f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000000c0)={[0x1ff, 0x407, 0x6, 0x0, 0x7, 0x3, 0x20000000000c0e, 0x1000010001, 0x3, 0x8, 0x80000001, 0x2000000000009, 0x6d3b, 0x9, 0x40000000000002, 0xfffffffffffffffe]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/version\x00', 0x40802, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x2, 0x0) 10.031230978s ago: executing program 6 (id=2268): r0 = socket(0x8, 0x1, 0x106) read$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)=""/216, 0xd8) r1 = prctl$auto(0x59616d61, 0x7, 0x1, 0x8, 0xfffffffffffffffb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) msgctl$auto_IPC_STAT(0x25, 0x2, &(0x7f0000000180)={{0x7, 0xee00, 0x0, 0x7ffffffd, 0x7fff, 0x5, 0x2}, &(0x7f0000000000)=0x6, 0x0, 0x3, 0xff, 0x506, 0x2, 0x10001, 0x3b5d, 0x77f, 0x2, @raw=0x80000008}) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x4040800) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1000}, 0x1) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) read$auto(r3, 0x0, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) madvise$auto(0x8, 0x2003f4, 0x15) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2a, 0x1000000100000df, 0x9b72, 0x1000, 0x28000) bind$auto(r0, &(0x7f0000000040)=@l2={0x1f, 0xfff, @any, 0x1a40, 0xf4433357406fb71e}, 0x6a) 9.760046268s ago: executing program 7 (id=2237): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00046, 0x8d21, 0x10, r0, 0x300000000002) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x2, 0xcff4, 0xdf, 0x10000000009b73, r0, 0x8000) r1 = socket(0x15, 0x1, 0x105) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000000)=0x2) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000540)={0x0, 0x6, "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"}) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0xd, 0x6, 0x1fc, 0x62, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xca}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x5, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card1/pcm1c/sub4/sw_params\x00', 0x610002, 0x0) 8.789795373s ago: executing program 5 (id=2269): r0 = ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, &(0x7f0000000040)) futex$auto(&(0x7f00000003c0)=0x58, 0x5, 0x3, 0x0, &(0x7f0000000440)=0x2, 0x2000005) r1 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/sessionid\x00', 0x340, 0x0) bpf$auto(0xb, &(0x7f0000000100)=@link_create={@prog_fd=r0, @target_fd=r1, 0xcdd, 0x6, @tracing={0x0, 0x3ff}}, 0xc5f) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x1c9002, 0x0) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 8.528727895s ago: executing program 0 (id=2270): r0 = socket(0x8, 0x1, 0x1) bind$auto(r0, 0x0, 0x6b) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x26, 0x4909b6f5, 0x1ffde, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x0, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/id\x00', 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r1, 0x0, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) ioctl$auto(r2, 0x64ca, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r4 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x3, 0x0, 0x0) timer_delete$auto(0x1) fstat$auto(r3, 0x0) ioctl$auto(r5, 0x5393, r4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000001800), r0) sendmsg$auto_NFC_CMD_VENDOR(r6, 0x0, 0x1) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r8, 0x0, 0x8040840) fstat$auto(r0, &(0x7f0000000400)={0x5, 0xa7b, 0x7, 0x8001, 0x0, 0xee00, 0x0, 0x9, 0x80, 0x7fff, 0x4d5c, 0x6, 0x1, 0x8, 0x8000000000000000, 0x3, 0xfffffffffffffbff}) write$auto(r1, &(0x7f0000000380)='@\x00', 0x400) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0) 7.939701625s ago: executing program 7 (id=2271): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r1, 0x400454ca, 0x38) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r3) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000600)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_TSCONFIG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc084}, 0x4000) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x7) madvise$auto_MADV_PAGEOUT(0x0, 0x9, 0x15) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getresuid$auto(&(0x7f0000000140)=0xf, &(0x7f00000001c0)=0x40, &(0x7f0000000200)) r5 = socket(0xa, 0x3, 0x2) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) ioctl$auto(r6, 0x5609, r5) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x40040) 7.920854299s ago: executing program 5 (id=2279): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x2) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x4b, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x6, 0x401bf, 0x7352, 0x42, 0x8000, 0x1ffde, 0x7, 0x10000000000002, 0x5, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x3, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x100000000, 0xfffffffffffffffc, 0x1000000000000000, 0x1, 0x2000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffc, 0x800000000000, 0x0, 0x5, 0xff]}, 0x1fe, 0xd) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x24008000) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x5, "335ec7eb11d6390874222c9821ee838775eca032f0fd39bc6f05f0f74b96915e", @raw=0x40}) socket(0x1f, 0x80002, 0x73) r1 = socket(0x10, 0x2, 0x0) nanosleep$auto(0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) preadv$auto(r2, 0x0, 0x6, 0x2, 0x8) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) read$auto_dfs_cpu_ops_debugfs(r5, 0x0, 0x0) 6.922762714s ago: executing program 5 (id=2272): ioctl$auto_TUNGETVNETBE2(0xffffffffffffffff, 0x800454df, 0x0) futex$auto(&(0x7f00000003c0)=0x58, 0x5, 0x3, 0x0, 0x0, 0x2000005) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x1c9002, 0x0) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 6.494952528s ago: executing program 0 (id=2273): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='nfs\x00\"p\x17\x9b\xdd\xb4\xed\xb9\xb0\xc7@\xd0_\xf9\xa1\x17tP\x86\xb1,\x93\x87\xae\x03\x8a\xc4\xb5q\xd4\x8c\xc3\xa2?\xe7\xf4\xb2\xd4\xe1\x93A+\xe9\x8d\xc9\xac9|\xc7\t\xff\'\xaa\xac|\xaa\x85\xa9\xd4j\x12\xca\xfe', 0x6, &(0x7f00000004c0)="77bec3605f85e082fbcf491e2b3b12fde18109d1f64859f820ba86bbb7abcf4c75f53e3ecb7fd57568") ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") socket(0x9, 0x2, 0x4) write$auto(r0, &(0x7f0000000200)='-\x00', 0x101) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/batman_adv/parameters/routing_algo\x00', 0x8182, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x208080, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2a22, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 5.359632998s ago: executing program 6 (id=2274): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd41, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10004, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r1, 0x4018bc0e, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000001240)='4', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x7ffe) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005480), 0xffffffffffffffff) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0xe2900, 0x0) mmap$auto(0x81, 0x9, 0xc5c7, 0x16, r3, 0x40) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x123d03, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) 5.359432051s ago: executing program 5 (id=2275): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x222002, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f00000001c0)="2c380a70ac791ee7af33b5df209b8e5935732802de7ee57fbba413c1e505ea8e23cb370d02e2e811537be5676cd1f432551b18fb6da6e0db758c86e652812057f45fda5d18de0e356ecff0fa2f7bedcaefaecef248daf8029e89a5aa09ca906251bd36163a3bfedb5e17c698fdb7cbdac32a049f29214e91be7bda0b00071ff0637700e9a7482c0e2dbefb17263bc8ca897287bb999ad06a30325ab8b0ae75c84ec7495942c028226cbf3b0b1a01e20c9cea1910a6848c9bcdc092b9a687b26b8063f91e15e462b9e0f3abd8d7bcdcb2632be2ee6ae0f88abac538cb") landlock_create_ruleset$auto(&(0x7f0000000000)={0x9, 0x402, 0x7}, 0x6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000000)) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000100)="15") getpid() r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r4 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r4, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x40}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8, 0x2, r6}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IFINDEX={0x8, 0x2, r6}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x4d, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x2000c00c) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.305457647s ago: executing program 0 (id=2276): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/hid/drivers/hid-steam/bind\x00', 0x10000, 0x0) mmap$auto(0x0, 0x21009, 0xe2, 0xeb1, 0x403, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0xffffffffffffffff, &(0x7f0000000080)={@siginfo_0_0={0x4, 0xe70, 0x9}}, 0x5, 0x0) 4.058722837s ago: executing program 5 (id=2277): sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4c084) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon18\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x101, 0x400008, 0xdf, 0x11, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x2c, 0x3, 0x9) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x800, 0x0) fcntl$auto(0x0, 0x407, 0x100000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) setreuid$auto(0x80000000, 0x7fffffffffffffff) ioctl$auto_SNDCTL_DSP_POST(r1, 0x5008, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) keyctl$auto(0x7, 0xfffffffb, 0x2, 0x3e, 0x8) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) writev$auto(r1, &(0x7f0000000340)={&(0x7f00000002c0)="31b4a86d1b056cd2157c0af9c029e3defd8fcaeb1b0e66ab21f742b154095cb01de75dadd3bb787264dbe0c739f1fe861fee9385b2e814b54dffac44dda9fe8a0aec62ccc0b1d0e559459b1caaf5a9fa817506f3ee2d7c57f3f9d44f004d03116d921e359efe811a9a0c77c8", 0x5}, 0xf) 3.857682487s ago: executing program 7 (id=2278): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/loadavg\x00', 0x8c00, 0x0) kill$auto(0x0, 0x12) preadv$auto(r0, &(0x7f0000009180)={&(0x7f0000008180), 0x7}, 0x26, 0x80, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x10}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event0\x00', 0x40000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xfffffffffffffffe, 0x200006, 0x6, 0x40eb1, 0x602, 0xcf05) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0xffffffffffffffff, 0xffb, 0x8000000008011, r3, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2, 0x2) 3.457860792s ago: executing program 5 (id=2280): r0 = socket(0x2, 0x80002, 0x73) r1 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioctl$auto_UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r0, 0xfffffffe, 0x4, 0x4}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x101000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/iosched/fifo_batch\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0x3ff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) r4 = ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r5) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r6 = socket(0x10, 0x2, 0x14) sendmmsg$auto(r6, 0x0, 0x3d55, 0x0) ioctl$auto(0xffffffffffffffff, 0x3, r4) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) 3.06342561s ago: executing program 6 (id=2281): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/loadavg\x00', 0x8c00, 0x0) kill$auto(0x0, 0x12) preadv$auto(r0, &(0x7f0000009180)={&(0x7f0000008180), 0x7}, 0x26, 0x80, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x10}, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x801, 0x0) prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_open_procfs$namespace(0x0, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xfffffffffffffffe, 0x200006, 0x6, 0x40eb1, 0x602, 0xcf05) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0xffffffffffffffff, 0xffb, 0x8000000008011, r3, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2, 0x2) 885.906641ms ago: executing program 0 (id=2282): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x2) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x4b, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x6, 0x401bf, 0x7352, 0x42, 0x8000, 0x1ffde, 0x7, 0x10000000000002, 0x5, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x3, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x100000000, 0xfffffffffffffffc, 0x1000000000000000, 0x1, 0x2000000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0xfffffffffffffffc, 0x800000000000, 0x0, 0x5, 0xff]}, 0x1fe, 0xd) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x24008000) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x5, "335ec7eb11d6390874222c9821ee838775eca032f0fd39bc6f05f0f74b96915e", @raw=0x40}) socket(0x1f, 0x80002, 0x73) r1 = socket(0x10, 0x2, 0x0) nanosleep$auto(0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) preadv$auto(r2, 0x0, 0x6, 0x2, 0x8) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r3, 0x4601, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x541c, r5) read$auto_dfs_cpu_ops_debugfs(r5, 0x0, 0x0) 764.727522ms ago: executing program 6 (id=2283): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf00074908cf77a020a6b61b2cf2306642fd00000008000840", @ANYRES32=0x0, @ANYBLOB="0800020000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x20040090) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r4, 0x80004507, 0x10000000000402) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(r6, 0xae41, r5) 225.5486ms ago: executing program 7 (id=2284): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/nfs/exports\x00', 0x400, 0x0) pread64$auto(r0, 0x0, 0x1ff, 0x8800000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x2, 0x2, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) msync$auto(0x0, 0xe0, 0x6) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x1, 0x0, 0x0, &(0x7f0000000200)={[0xf, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x2, 0x8000000010000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x4, 0xfffffffffffffffe]}, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, &(0x7f0000000080)="a3c72e71ed506a221381f0538fefa465158fbbeb89451043553ff869189cf3250b65c544ccd3988b29f3cdb20660e616d3daa3e36b174c5661e383221287595a7e873202add9b0f11733de4ec2cd9c5b048058ed89c590d73c2e44d11636cb85ea9cb4180c5d1ab11f731cec20", 0x6d) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) 0s ago: executing program 0 (id=2285): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000000028000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) open_tree$auto(r1, 0x0, 0xa0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x101, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, 0x0) accept$auto(r2, 0x0, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) ppoll$auto(&(0x7f0000000200)={r4, 0x6, 0x6}, 0x8, 0x0, 0x0, 0x8) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae80, 0x0) write$auto(0xca, 0x0, 0x10) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x8000, 0x0) ioctl$auto_EVIOCSMASK(r5, 0x40104593, 0x0) socket(0x10, 0x3, 0x0) symlink$auto(&(0x7f0000000140)='./file0/file0\x00', 0x0) kernel console output (not intermixed with test programs): batadv0: Interface deactivated: batadv_slave_0 [ 713.635821][T15065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.786736][T15065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.825021][T15065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.437107][T15087] snd_virmidi snd_virmidi.0: control 61678:131081:3:y>o[kd:207 is already present [ 718.368278][T15143] FAULT_INJECTION: forcing a failure. [ 718.368278][T15143] name fail_futex, interval 1, probability 0, space 0, times 0 [ 718.419832][T15143] CPU: 1 UID: 0 PID: 15143 Comm: syz.0.1789 Not tainted syzkaller #0 PREEMPT(full) [ 718.419862][T15143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 718.419877][T15143] Call Trace: [ 718.419885][T15143] [ 718.419893][T15143] dump_stack_lvl+0x16c/0x1f0 [ 718.419927][T15143] should_fail_ex+0x512/0x640 [ 718.419958][T15143] ? kasan_save_stack+0x42/0x60 [ 718.419987][T15143] get_futex_key+0x1d0/0x1560 [ 718.420018][T15143] ? __pfx_get_futex_key+0x10/0x10 [ 718.420053][T15143] futex_wake+0xea/0x530 [ 718.420086][T15143] ? __lock_acquire+0x62e/0x1ce0 [ 718.420115][T15143] ? __pfx_futex_wake+0x10/0x10 [ 718.420159][T15143] do_futex+0x1e3/0x350 [ 718.420187][T15143] ? __pfx_do_futex+0x10/0x10 [ 718.420230][T15143] __x64_sys_futex+0x1e0/0x4c0 [ 718.420262][T15143] ? __pfx___x64_sys_futex+0x10/0x10 [ 718.420293][T15143] ? set_current_groups+0x91/0xd0 [ 718.420325][T15143] ? __do_sys_setgroups+0xa2/0x4e0 [ 718.420371][T15143] do_syscall_64+0xcd/0x490 [ 718.420402][T15143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.420423][T15143] RIP: 0033:0x7f0331f8ebe9 [ 718.420440][T15143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.420462][T15143] RSP: 002b:00007f0332e1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 718.420481][T15143] RAX: ffffffffffffffda RBX: 00007f03321b5fa8 RCX: 00007f0331f8ebe9 [ 718.420495][T15143] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f03321b5fac [ 718.420508][T15143] RBP: 00007f03321b5fa0 R08: 00007f0332e1b000 R09: 0000000000000000 [ 718.420521][T15143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.420533][T15143] R13: 00007f03321b6038 R14: 00007ffe48f950d0 R15: 00007ffe48f951b8 [ 718.420558][T15143] [ 719.462230][T15165] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1793'. [ 720.273003][T15164] vivid-009: ================= START STATUS ================= [ 720.471283][T15164] vivid-009: Enable Output Cropping: true [ 720.680975][T15164] vivid-009: Enable Output Composing: true [ 720.967767][T15164] vivid-009: Enable Output Scaler: true [ 721.016427][T15164] vivid-009: Tx RGB Quantization Range: Automatic [ 721.087124][T15164] vivid-009: Transmit Mode: HDMI [ 721.092153][T15164] vivid-009: Hotplug Present: 0x00000000 [ 721.097898][T15164] vivid-009: RxSense Present: 0x00000000 [ 721.103558][T15164] vivid-009: EDID Present: 0x00000000 [ 721.168369][T15164] vivid-009: ================== END STATUS ================== [ 722.170813][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1798'. [ 723.098719][T15197] FAULT_INJECTION: forcing a failure. [ 723.098719][T15197] name failslab, interval 1, probability 0, space 0, times 0 [ 723.166241][T15197] CPU: 0 UID: 0 PID: 15197 Comm: syz.0.1800 Not tainted syzkaller #0 PREEMPT(full) [ 723.166269][T15197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 723.166282][T15197] Call Trace: [ 723.166289][T15197] [ 723.166298][T15197] dump_stack_lvl+0x16c/0x1f0 [ 723.166329][T15197] should_fail_ex+0x512/0x640 [ 723.166359][T15197] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 723.166384][T15197] should_failslab+0xc2/0x120 [ 723.166412][T15197] __kmalloc_cache_noprof+0x6a/0x3e0 [ 723.166433][T15197] ? ktime_get_coarse_real_ts64_mg+0x240/0x300 [ 723.166462][T15197] ? hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 723.166488][T15197] hugetlb_vma_lock_alloc+0xbc/0x1f0 [ 723.166511][T15197] hugetlb_reserve_pages+0x151/0xf40 [ 723.166545][T15197] ? __vma_enter_locked+0x163/0x3f0 [ 723.166567][T15197] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 723.166601][T15197] ? atime_needs_update+0x8b/0x710 [ 723.166640][T15197] hugetlbfs_file_mmap+0x4a1/0x730 [ 723.166680][T15197] __mmap_region+0x1311/0x27b0 [ 723.166710][T15197] ? __pfx___mmap_region+0x10/0x10 [ 723.166741][T15197] ? is_bpf_text_address+0x94/0x1a0 [ 723.166768][T15197] ? kernel_text_address+0x8d/0x100 [ 723.166788][T15197] ? __kernel_text_address+0xd/0x40 [ 723.166806][T15197] ? unwind_get_return_address+0x59/0xa0 [ 723.166828][T15197] ? arch_stack_walk+0xa6/0x100 [ 723.166893][T15197] ? trace_cap_capable+0x18d/0x200 [ 723.166923][T15197] mmap_region+0x32b/0x3f0 [ 723.166961][T15197] do_mmap+0xa3e/0x1210 [ 723.166997][T15197] ? __pfx_do_mmap+0x10/0x10 [ 723.167028][T15197] ? __pfx_down_write_killable+0x10/0x10 [ 723.167065][T15197] vm_mmap_pgoff+0x29e/0x470 [ 723.167100][T15197] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 723.167128][T15197] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 723.167161][T15197] ? hugetlbfs_get_inode+0x31f/0x730 [ 723.167193][T15197] ksys_mmap_pgoff+0x1c8/0x5c0 [ 723.167227][T15197] __x64_sys_mmap+0x125/0x190 [ 723.167262][T15197] do_syscall_64+0xcd/0x490 [ 723.167292][T15197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.167313][T15197] RIP: 0033:0x7f0331f8ebe9 [ 723.167329][T15197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.167350][T15197] RSP: 002b:00007f0332e1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 723.167370][T15197] RAX: ffffffffffffffda RBX: 00007f03321b5fa0 RCX: 00007f0331f8ebe9 [ 723.167384][T15197] RDX: 0000000000400002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 723.167397][T15197] RBP: 00007f0332011e19 R08: 0000000000000602 R09: 0000300000000000 [ 723.167410][T15197] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 723.167423][T15197] R13: 00007f03321b6038 R14: 00007f03321b5fa0 R15: 00007ffe48f951b8 [ 723.167449][T15197] [ 723.167458][T15197] HugeTLB: unable to allocate vma specific lock [ 723.678169][T15197] dyndbg: bad flag-op , at start of  [ 723.703098][T15197] dyndbg: flags parse failed [ 724.530231][T15217] sd 0:0:1:0: PR command failed: 1026 [ 724.535762][T15217] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 724.569221][T15217] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 724.766059][T15221] FAULT_INJECTION: forcing a failure. [ 724.766059][T15221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.798563][T15221] CPU: 1 UID: 0 PID: 15221 Comm: syz.1.1807 Not tainted syzkaller #0 PREEMPT(full) [ 724.798590][T15221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 724.798603][T15221] Call Trace: [ 724.798611][T15221] [ 724.798618][T15221] dump_stack_lvl+0x16c/0x1f0 [ 724.798650][T15221] should_fail_ex+0x512/0x640 [ 724.798684][T15221] strncpy_from_user+0x3b/0x2e0 [ 724.798714][T15221] getname_flags.part.0+0x8f/0x550 [ 724.798750][T15221] getname_flags+0x93/0xf0 [ 724.798779][T15221] do_sys_openat2+0xb8/0x1d0 [ 724.798812][T15221] ? __pfx_do_sys_openat2+0x10/0x10 [ 724.798853][T15221] __x64_sys_openat+0x174/0x210 [ 724.798886][T15221] ? __pfx___x64_sys_openat+0x10/0x10 [ 724.798930][T15221] do_syscall_64+0xcd/0x490 [ 724.798960][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.798981][T15221] RIP: 0033:0x7feb0ad8ebe9 [ 724.798997][T15221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.799018][T15221] RSP: 002b:00007feb0bc53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 724.799037][T15221] RAX: ffffffffffffffda RBX: 00007feb0afb5fa0 RCX: 00007feb0ad8ebe9 [ 724.799051][T15221] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 724.799065][T15221] RBP: 00007feb0ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 724.799078][T15221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.799090][T15221] R13: 00007feb0afb6038 R14: 00007feb0afb5fa0 R15: 00007ffc0d416398 [ 724.799116][T15221] [ 726.610067][T15250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1814'. [ 726.860665][T15252] FAULT_INJECTION: forcing a failure. [ 726.860665][T15252] name failslab, interval 1, probability 0, space 0, times 0 [ 726.919805][T15252] CPU: 1 UID: 0 PID: 15252 Comm: syz.3.1814 Not tainted syzkaller #0 PREEMPT(full) [ 726.919844][T15252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 726.919863][T15252] Call Trace: [ 726.919873][T15252] [ 726.919885][T15252] dump_stack_lvl+0x16c/0x1f0 [ 726.919930][T15252] should_fail_ex+0x512/0x640 [ 726.919973][T15252] ? fs_reclaim_acquire+0xae/0x150 [ 726.920020][T15252] ? tomoyo_encode2+0x100/0x3e0 [ 726.920061][T15252] should_failslab+0xc2/0x120 [ 726.920101][T15252] __kmalloc_noprof+0xd2/0x510 [ 726.920135][T15252] ? d_absolute_path+0x136/0x1a0 [ 726.920184][T15252] tomoyo_encode2+0x100/0x3e0 [ 726.920230][T15252] tomoyo_encode+0x29/0x50 [ 726.920271][T15252] tomoyo_realpath_from_path+0x18f/0x6e0 [ 726.920336][T15252] tomoyo_mkdev_perm+0x22b/0x570 [ 726.920371][T15252] ? tomoyo_mkdev_perm+0x217/0x570 [ 726.920409][T15252] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 726.920446][T15252] ? __lock_acquire+0xb97/0x1ce0 [ 726.920493][T15252] ? do_raw_spin_lock+0x12c/0x2b0 [ 726.920556][T15252] ? __pfx_current_check_access_path+0x10/0x10 [ 726.920602][T15252] ? simple_lookup+0x105/0x1d0 [ 726.920640][T15252] tomoyo_path_mknod+0x12a/0x190 [ 726.920669][T15252] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 726.920700][T15252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 726.920750][T15252] security_path_mknod+0x161/0x310 [ 726.920790][T15252] do_mknodat+0x239/0x5d0 [ 726.920828][T15252] ? __pfx_do_mknodat+0x10/0x10 [ 726.920860][T15252] ? getname_flags.part.0+0x1c5/0x550 [ 726.920914][T15252] __x64_sys_mknod+0x87/0xb0 [ 726.920950][T15252] do_syscall_64+0xcd/0x490 [ 726.920992][T15252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.921022][T15252] RIP: 0033:0x7f334758ebe9 [ 726.921046][T15252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.921075][T15252] RSP: 002b:00007f334839c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 726.921103][T15252] RAX: ffffffffffffffda RBX: 00007f33477b6090 RCX: 00007f334758ebe9 [ 726.921123][T15252] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 726.921141][T15252] RBP: 00007f3347611e19 R08: 0000000000000000 R09: 0000000000000000 [ 726.921159][T15252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.921177][T15252] R13: 00007f33477b6128 R14: 00007f33477b6090 R15: 00007ffc987beb88 [ 726.921214][T15252] [ 726.921240][T15252] ERROR: Out of memory at tomoyo_realpath_from_path. [ 727.614775][T15260] queue_state_write: operation too long [ 727.649368][T15258] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1824'. [ 727.676112][T15260] queue_state_write: use 'run', 'start' or 'kick' [ 730.369869][T15281] FAULT_INJECTION: forcing a failure. [ 730.369869][T15281] name failslab, interval 1, probability 0, space 0, times 0 [ 730.468185][T15281] CPU: 0 UID: 0 PID: 15281 Comm: syz.1.1819 Not tainted syzkaller #0 PREEMPT(full) [ 730.468224][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 730.468243][T15281] Call Trace: [ 730.468254][T15281] [ 730.468266][T15281] dump_stack_lvl+0x16c/0x1f0 [ 730.468310][T15281] should_fail_ex+0x512/0x640 [ 730.468349][T15281] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 730.468386][T15281] should_failslab+0xc2/0x120 [ 730.468423][T15281] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 730.468456][T15281] ? alloc_empty_file+0x55/0x1e0 [ 730.468502][T15281] alloc_empty_file+0x55/0x1e0 [ 730.468543][T15281] path_openat+0xda/0x2cb0 [ 730.468574][T15281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.468618][T15281] ? __pfx_path_openat+0x10/0x10 [ 730.468661][T15281] do_filp_open+0x20b/0x470 [ 730.468697][T15281] ? __pfx_do_filp_open+0x10/0x10 [ 730.468757][T15281] ? alloc_fd+0x471/0x7d0 [ 730.468798][T15281] do_sys_openat2+0x11b/0x1d0 [ 730.468844][T15281] ? __pfx_do_sys_openat2+0x10/0x10 [ 730.468903][T15281] __x64_sys_openat+0x174/0x210 [ 730.468959][T15281] ? __pfx___x64_sys_openat+0x10/0x10 [ 730.469019][T15281] do_syscall_64+0xcd/0x490 [ 730.469062][T15281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.469090][T15281] RIP: 0033:0x7feb0ad8ebe9 [ 730.469112][T15281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.469140][T15281] RSP: 002b:00007feb0bc53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 730.469167][T15281] RAX: ffffffffffffffda RBX: 00007feb0afb5fa0 RCX: 00007feb0ad8ebe9 [ 730.469186][T15281] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 730.469204][T15281] RBP: 00007feb0ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 730.469221][T15281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.469237][T15281] R13: 00007feb0afb6038 R14: 00007feb0afb5fa0 R15: 00007ffc0d416398 [ 730.469274][T15281] [ 731.405424][T15287] QAT: Stopping all acceleration devices. [ 734.586800][ T9798] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 735.784825][T15316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 735.833382][T15316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 735.889195][T15316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 735.940004][T15316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 736.006888][T15316] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 736.013122][T15316] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 736.097229][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163f829 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 736.112597][ C0] Call Trace: [ 736.115882][ C0] [ 736.118738][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 736.124038][ C0] mce_cpu_restart+0x98/0xb0 [ 736.128674][ C0] __flush_smp_call_function_queue+0x27d/0x8c0 [ 736.134851][ C0] __sysvec_call_function_single+0x87/0x400 [ 736.140813][ C0] sysvec_call_function_single+0x9f/0xc0 [ 736.146460][ C0] [ 736.149394][ C0] [ 736.152335][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 736.158326][ C0] RIP: 0010:lock_acquire+0x62/0x350 [ 736.163542][ C0] Code: 6f 3e 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 d2 20 14 0f 0f 82 74 02 00 00 8b 35 6a 52 14 0f 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 29 6f 3e 12 0f 85 c7 02 00 00 48 83 c4 [ 736.183161][ C0] RSP: 0018:ffffc9000464f778 EFLAGS: 00000206 [ 736.189230][ C0] RAX: 0000000000000046 RBX: ffffffff8e5c0fe0 RCX: 00000000d796a7b9 [ 736.197289][ C0] RDX: 0000000000000000 RSI: ffffffff8de275fd RDI: ffffffff8c162d00 [ 736.205287][ C0] RBP: 0000000000000002 R08: 73b36eb47e6fe33d R09: 0000000000000000 [ 736.213262][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000000 [ 736.221236][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 736.229227][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 736.234284][ C0] __virt_addr_valid+0x213/0x610 [ 736.239250][ C0] ? __virt_addr_valid+0x1f7/0x610 [ 736.244382][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 736.250819][ C0] free_pages+0x1a/0x80 [ 736.254984][ C0] kasan_depopulate_vmalloc_pte+0x5f/0x80 [ 736.260803][ C0] __apply_to_page_range+0xa8f/0x1350 [ 736.266190][ C0] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 736.272613][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 736.278425][ C0] ? find_held_lock+0x2b/0x80 [ 736.283110][ C0] ? purge_vmap_node+0x78f/0xa30 [ 736.288086][ C0] kasan_release_vmalloc+0xd1/0xe0 [ 736.293204][ C0] purge_vmap_node+0x1c4/0xa30 [ 736.297989][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 736.303291][ C0] ? on_each_cpu_cond_mask+0x5a/0x90 [ 736.308601][ C0] __purge_vmap_area_lazy+0xa06/0xc60 [ 736.314007][ C0] _vm_unmap_aliases+0x43b/0x670 [ 736.318973][ C0] ? __pfx__vm_unmap_aliases+0x10/0x10 [ 736.324454][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 736.329512][ C0] change_page_attr_set_clr+0x252/0x4a0 [ 736.335507][ C0] ? __pfx_change_page_attr_set_clr+0x10/0x10 [ 736.341601][ C0] ? find_held_lock+0x2b/0x80 [ 736.346286][ C0] set_memory_nx+0xb5/0x110 [ 736.350807][ C0] ? __pfx_set_memory_nx+0x10/0x10 [ 736.355932][ C0] ? kimage_unmap_segment+0x20/0x20 [ 736.361153][ C0] machine_kexec_cleanup+0x92/0x280 [ 736.366371][ C0] kimage_free+0x266/0x590 [ 736.370792][ C0] ? find_held_lock+0x2b/0x80 [ 736.375485][ C0] do_kexec_load+0x3d7/0x8a0 [ 736.380090][ C0] ? __pfx_do_kexec_load+0x10/0x10 [ 736.385222][ C0] ? _copy_from_user+0x59/0xd0 [ 736.390016][ C0] __x64_sys_kexec_load+0x1bf/0x230 [ 736.395226][ C0] do_syscall_64+0xcd/0x490 [ 736.399756][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.405661][ C0] RIP: 0033:0x7feb0ad8ebe9 [ 736.410087][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 736.429697][ C0] RSP: 002b:00007feb0bc11038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 736.438114][ C0] RAX: ffffffffffffffda RBX: 00007feb0afb6180 RCX: 00007feb0ad8ebe9 [ 736.446087][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 736.454066][ C0] RBP: 00007feb0ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 736.462055][ C0] R10: 00000001003e0000 R11: 0000000000000246 R12: 0000000000000000 [ 736.470047][ C0] R13: 00007feb0afb6218 R14: 00007feb0afb6180 R15: 00007ffc0d416398 [ 736.478034][ C0] [ 736.503106][T15316] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 736.510654][T15316] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 736.542399][T15316] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 737.055846][ T9798] Bluetooth: hci0: command 0x0c1a tx timeout [ 737.625270][T15338] FAULT_INJECTION: forcing a failure. [ 737.625270][T15338] name failslab, interval 1, probability 0, space 0, times 0 [ 737.740359][T15338] CPU: 0 UID: 0 PID: 15338 Comm: syz.5.1830 Not tainted syzkaller #0 PREEMPT(full) [ 737.740403][T15338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 737.740422][T15338] Call Trace: [ 737.740433][T15338] [ 737.740445][T15338] dump_stack_lvl+0x16c/0x1f0 [ 737.740488][T15338] should_fail_ex+0x512/0x640 [ 737.740536][T15338] should_failslab+0xc2/0x120 [ 737.740576][T15338] __kmalloc_cache_noprof+0x6a/0x3e0 [ 737.740608][T15338] ? proc_self_get_link+0x1a9/0x230 [ 737.740652][T15338] proc_self_get_link+0x1a9/0x230 [ 737.740691][T15338] ? __pfx_proc_self_get_link+0x10/0x10 [ 737.740727][T15338] step_into+0x195e/0x2270 [ 737.740765][T15338] ? __pfx_step_into+0x10/0x10 [ 737.740801][T15338] ? lookup_fast+0x156/0x610 [ 737.740836][T15338] walk_component+0xfc/0x5b0 [ 737.740870][T15338] link_path_walk+0x627/0xe20 [ 737.740914][T15338] path_openat+0x1b0/0x2cb0 [ 737.740947][T15338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.740990][T15338] ? __pfx_path_openat+0x10/0x10 [ 737.741035][T15338] do_filp_open+0x20b/0x470 [ 737.741070][T15338] ? __pfx_do_filp_open+0x10/0x10 [ 737.741131][T15338] ? alloc_fd+0x471/0x7d0 [ 737.741183][T15338] do_sys_openat2+0x11b/0x1d0 [ 737.741228][T15338] ? __pfx_do_sys_openat2+0x10/0x10 [ 737.741285][T15338] __x64_sys_openat+0x174/0x210 [ 737.741329][T15338] ? __pfx___x64_sys_openat+0x10/0x10 [ 737.741390][T15338] do_syscall_64+0xcd/0x490 [ 737.741434][T15338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.741462][T15338] RIP: 0033:0x7f7dded8ebe9 [ 737.741486][T15338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.741516][T15338] RSP: 002b:00007f7ddfc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 737.741544][T15338] RAX: ffffffffffffffda RBX: 00007f7ddefb5fa0 RCX: 00007f7dded8ebe9 [ 737.741563][T15338] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 737.741581][T15338] RBP: 00007f7ddee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 737.741598][T15338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.741614][T15338] R13: 00007f7ddefb6038 R14: 00007f7ddefb5fa0 R15: 00007ffef758a3b8 [ 737.741651][T15338] [ 738.248005][ T9798] Bluetooth: hci1: command 0x0c1a tx timeout [ 738.254116][ T9798] Bluetooth: hci2: command 0x0c1a tx timeout [ 738.260247][ T9798] Bluetooth: hci3: command 0x0c1a tx timeout [ 738.267582][ T9798] Bluetooth: hci4: command 0x0406 tx timeout [ 738.335183][T15333] zswap: compressor not available [ 738.560762][T15343] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 738.570586][T10999] Bluetooth: hci5: command 0x0c1a tx timeout [ 740.387745][T10999] Bluetooth: hci4: command 0x0406 tx timeout [ 740.645197][T10999] Bluetooth: hci5: command 0x0c1a tx timeout [ 742.818479][T10999] Bluetooth: hci5: command 0x0c1a tx timeout [ 747.453281][T15419] FAULT_INJECTION: forcing a failure. [ 747.453281][T15419] name failslab, interval 1, probability 0, space 0, times 0 [ 747.536970][T15419] CPU: 1 UID: 0 PID: 15419 Comm: syz.5.1849 Not tainted syzkaller #0 PREEMPT(full) [ 747.536999][T15419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 747.537011][T15419] Call Trace: [ 747.537018][T15419] [ 747.537026][T15419] dump_stack_lvl+0x16c/0x1f0 [ 747.537058][T15419] should_fail_ex+0x512/0x640 [ 747.537088][T15419] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 747.537118][T15419] should_failslab+0xc2/0x120 [ 747.537146][T15419] __kmalloc_cache_noprof+0x6a/0x3e0 [ 747.537168][T15419] ? rcu_is_watching+0x12/0xc0 [ 747.537188][T15419] ? snd_pcm_oss_open+0x5eb/0x1400 [ 747.537211][T15419] snd_pcm_oss_open+0x5eb/0x1400 [ 747.537240][T15419] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 747.537260][T15419] ? __lock_acquire+0xb97/0x1ce0 [ 747.537288][T15419] ? __pfx_default_wake_function+0x10/0x10 [ 747.537311][T15419] ? __lock_acquire+0xb97/0x1ce0 [ 747.537343][T15419] ? do_raw_spin_lock+0x12c/0x2b0 [ 747.537377][T15419] ? soundcore_open+0x35a/0x580 [ 747.537407][T15419] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 747.537428][T15419] soundcore_open+0x40c/0x580 [ 747.537460][T15419] ? __pfx_soundcore_open+0x10/0x10 [ 747.537489][T15419] chrdev_open+0x234/0x6a0 [ 747.537515][T15419] ? __pfx_apparmor_file_open+0x10/0x10 [ 747.537538][T15419] ? __pfx_chrdev_open+0x10/0x10 [ 747.537567][T15419] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 747.537595][T15419] do_dentry_open+0x982/0x1530 [ 747.537621][T15419] ? __pfx_chrdev_open+0x10/0x10 [ 747.537654][T15419] vfs_open+0x82/0x3f0 [ 747.537688][T15419] path_openat+0x1de4/0x2cb0 [ 747.537721][T15419] ? __pfx_path_openat+0x10/0x10 [ 747.537752][T15419] do_filp_open+0x20b/0x470 [ 747.537777][T15419] ? __pfx_do_filp_open+0x10/0x10 [ 747.537820][T15419] ? alloc_fd+0x471/0x7d0 [ 747.537848][T15419] do_sys_openat2+0x11b/0x1d0 [ 747.537880][T15419] ? __pfx_do_sys_openat2+0x10/0x10 [ 747.537922][T15419] __x64_sys_openat+0x174/0x210 [ 747.537955][T15419] ? __pfx___x64_sys_openat+0x10/0x10 [ 747.538002][T15419] do_syscall_64+0xcd/0x490 [ 747.538033][T15419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.538054][T15419] RIP: 0033:0x7f7dded8ebe9 [ 747.538071][T15419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.538092][T15419] RSP: 002b:00007f7ddfc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 747.538116][T15419] RAX: ffffffffffffffda RBX: 00007f7ddefb5fa0 RCX: 00007f7dded8ebe9 [ 747.538130][T15419] RDX: 0000000000000801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 747.538145][T15419] RBP: 00007f7ddee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 747.538158][T15419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.538171][T15419] R13: 00007f7ddefb6038 R14: 00007f7ddefb5fa0 R15: 00007ffef758a3b8 [ 747.538197][T15419] [ 748.208903][T15426] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1851'. [ 749.157784][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.164329][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.018086][T15461] vivid-007: ================= START STATUS ================= [ 751.081975][T15444] FAULT_INJECTION: forcing a failure. [ 751.081975][T15444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.163835][T15444] CPU: 1 UID: 0 PID: 15444 Comm: syz.0.1856 Not tainted syzkaller #0 PREEMPT(full) [ 751.163878][T15444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 751.163895][T15444] Call Trace: [ 751.163905][T15444] [ 751.163916][T15444] dump_stack_lvl+0x16c/0x1f0 [ 751.163957][T15444] should_fail_ex+0x512/0x640 [ 751.164010][T15444] _copy_from_user+0x2e/0xd0 [ 751.164056][T15444] get_timespec64+0x8b/0x1b0 [ 751.164090][T15444] ? __pfx_get_timespec64+0x10/0x10 [ 751.164122][T15444] ? find_held_lock+0x2b/0x80 [ 751.164157][T15444] __x64_sys_futex+0x288/0x4c0 [ 751.164198][T15444] ? __pfx___x64_sys_futex+0x10/0x10 [ 751.164235][T15444] ? xfd_validate_state+0x61/0x180 [ 751.164286][T15444] do_syscall_64+0xcd/0x490 [ 751.164326][T15444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.164354][T15444] RIP: 0033:0x7f0331f8ebe9 [ 751.164375][T15444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.164402][T15444] RSP: 002b:00007ffe48f95318 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 751.164428][T15444] RAX: ffffffffffffffda RBX: 00000000000b820f RCX: 00007f0331f8ebe9 [ 751.164446][T15444] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f03321b5fac [ 751.164464][T15444] RBP: 0000000000000032 R08: 00007f0332e1b000 R09: 0000001e48f9560f [ 751.164482][T15444] R10: 00007ffe48f95410 R11: 0000000000000246 R12: 00007f03321b5fac [ 751.164500][T15444] R13: 00007ffe48f95410 R14: 00000000000b8241 R15: 00007ffe48f95430 [ 751.164534][T15444] [ 751.167133][T15461] vivid-007: Generate PTS: true [ 751.415620][T15461] vivid-007: Generate SCR: true [ 751.469027][T15461] tpg source WxH: 320x240 (Y'CbCr) [ 751.757611][T15461] tpg field: 1 [ 751.761133][T15461] tpg crop: (0,0)/320x240 [ 751.765498][T15461] tpg compose: (0,0)/320x240 [ 751.770287][T15461] tpg colorspace: 8 [ 751.774200][T15461] tpg transfer function: 0/0 [ 751.778887][T15461] tpg Y'CbCr encoding: 0/0 [ 751.783327][T15461] tpg quantization: 0/0 [ 751.787666][T15461] tpg RGB range: 0/2 [ 751.791588][T15461] vivid-007: ================== END STATUS ================== [ 754.129135][T15486] FAULT_INJECTION: forcing a failure. [ 754.129135][T15486] name failslab, interval 1, probability 0, space 0, times 0 [ 754.227755][T15486] CPU: 1 UID: 0 PID: 15486 Comm: syz.1.1864 Not tainted syzkaller #0 PREEMPT(full) [ 754.227793][T15486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 754.227811][T15486] Call Trace: [ 754.227822][T15486] [ 754.227833][T15486] dump_stack_lvl+0x16c/0x1f0 [ 754.227876][T15486] should_fail_ex+0x512/0x640 [ 754.227917][T15486] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 754.227951][T15486] should_failslab+0xc2/0x120 [ 754.227989][T15486] __kmalloc_cache_noprof+0x6a/0x3e0 [ 754.228019][T15486] ? rcu_is_watching+0x12/0xc0 [ 754.228047][T15486] ? snd_pcm_oss_open+0x5eb/0x1400 [ 754.228079][T15486] snd_pcm_oss_open+0x5eb/0x1400 [ 754.228119][T15486] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 754.228148][T15486] ? __lock_acquire+0xb97/0x1ce0 [ 754.228187][T15486] ? __pfx_default_wake_function+0x10/0x10 [ 754.228217][T15486] ? __lock_acquire+0xb97/0x1ce0 [ 754.228262][T15486] ? do_raw_spin_lock+0x12c/0x2b0 [ 754.228306][T15486] ? soundcore_open+0x35a/0x580 [ 754.228342][T15486] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 754.228369][T15486] soundcore_open+0x40c/0x580 [ 754.228423][T15486] ? __pfx_soundcore_open+0x10/0x10 [ 754.228460][T15486] chrdev_open+0x234/0x6a0 [ 754.228494][T15486] ? __pfx_apparmor_file_open+0x10/0x10 [ 754.228523][T15486] ? __pfx_chrdev_open+0x10/0x10 [ 754.228558][T15486] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 754.228593][T15486] do_dentry_open+0x982/0x1530 [ 754.228627][T15486] ? __pfx_chrdev_open+0x10/0x10 [ 754.228668][T15486] vfs_open+0x82/0x3f0 [ 754.228710][T15486] path_openat+0x1de4/0x2cb0 [ 754.228750][T15486] ? __pfx_path_openat+0x10/0x10 [ 754.228793][T15486] do_filp_open+0x20b/0x470 [ 754.228829][T15486] ? __pfx_do_filp_open+0x10/0x10 [ 754.228891][T15486] ? alloc_fd+0x471/0x7d0 [ 754.228931][T15486] do_sys_openat2+0x11b/0x1d0 [ 754.228974][T15486] ? __pfx_do_sys_openat2+0x10/0x10 [ 754.229027][T15486] __x64_sys_openat+0x174/0x210 [ 754.229064][T15486] ? __pfx___x64_sys_openat+0x10/0x10 [ 754.229113][T15486] do_syscall_64+0xcd/0x490 [ 754.229149][T15486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.229174][T15486] RIP: 0033:0x7feb0ad8ebe9 [ 754.229193][T15486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.229217][T15486] RSP: 002b:00007feb0bc53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 754.229240][T15486] RAX: ffffffffffffffda RBX: 00007feb0afb5fa0 RCX: 00007feb0ad8ebe9 [ 754.229256][T15486] RDX: 0000000000000801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 754.229272][T15486] RBP: 00007feb0ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 754.229287][T15486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.229302][T15486] R13: 00007feb0afb6038 R14: 00007feb0afb5fa0 R15: 00007ffc0d416398 [ 754.229333][T15486] [ 755.442643][T15500] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 755.451857][T15500] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 756.368272][T15506] cgroup: fork rejected by pids controller in /syz0 [ 757.030201][T15512] FAULT_INJECTION: forcing a failure. [ 757.030201][T15512] name fail_futex, interval 1, probability 0, space 0, times 0 [ 757.143713][T15512] CPU: 0 UID: 0 PID: 15512 Comm: syz.1.1868 Not tainted syzkaller #0 PREEMPT(full) [ 757.143752][T15512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 757.143766][T15512] Call Trace: [ 757.143774][T15512] [ 757.143783][T15512] dump_stack_lvl+0x16c/0x1f0 [ 757.143818][T15512] should_fail_ex+0x512/0x640 [ 757.143855][T15512] get_futex_key+0x1d0/0x1560 [ 757.143885][T15512] ? __lock_acquire+0xb97/0x1ce0 [ 757.143915][T15512] ? __pfx_get_futex_key+0x10/0x10 [ 757.143944][T15512] ? __pfx___schedule+0x10/0x10 [ 757.143970][T15512] ? do_raw_spin_unlock+0x172/0x230 [ 757.144011][T15512] futex_wait_setup+0x9d/0x550 [ 757.144054][T15512] __futex_wait+0x194/0x2f0 [ 757.144095][T15512] ? __pfx___futex_wait+0x10/0x10 [ 757.144136][T15512] ? __pfx_futex_wake_mark+0x10/0x10 [ 757.144175][T15512] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 757.144210][T15512] ? __hrtimer_setup+0x176/0x280 [ 757.144247][T15512] ? ktime_add_safe+0x60/0x70 [ 757.144284][T15512] futex_wait+0xe8/0x380 [ 757.144318][T15512] ? __pfx_futex_wait+0x10/0x10 [ 757.144351][T15512] ? __lock_acquire+0xb97/0x1ce0 [ 757.144384][T15512] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 757.144429][T15512] do_futex+0x229/0x350 [ 757.144459][T15512] ? __pfx_do_futex+0x10/0x10 [ 757.144486][T15512] ? rcu_is_watching+0x12/0xc0 [ 757.144509][T15512] ? ktime_get+0x200/0x310 [ 757.144540][T15512] ? lockdep_hardirqs_on+0x7c/0x110 [ 757.144570][T15512] ? read_tsc+0x9/0x20 [ 757.144602][T15512] __x64_sys_futex+0x1e0/0x4c0 [ 757.144637][T15512] ? __pfx___x64_sys_futex+0x10/0x10 [ 757.144668][T15512] ? xfd_validate_state+0x61/0x180 [ 757.144712][T15512] do_syscall_64+0xcd/0x490 [ 757.144746][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.144770][T15512] RIP: 0033:0x7feb0ad8ebe9 [ 757.144788][T15512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.144825][T15512] RSP: 002b:00007ffc0d4164f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 757.144847][T15512] RAX: ffffffffffffffda RBX: 00000000000b996a RCX: 00007feb0ad8ebe9 [ 757.144862][T15512] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feb0afb609c [ 757.144876][T15512] RBP: 0000000000000032 R08: 00007feb0bc54000 R09: 0000001e0d4167ef [ 757.144891][T15512] R10: 00007ffc0d4165f0 R11: 0000000000000246 R12: 00007feb0afb609c [ 757.144915][T15512] R13: 00007ffc0d4165f0 R14: 00000000000b999c R15: 00007ffc0d416610 [ 757.144940][T15512] [ 757.875283][T15563] FAULT_INJECTION: forcing a failure. [ 757.875283][T15563] name failslab, interval 1, probability 0, space 0, times 0 [ 757.947799][T15563] CPU: 0 UID: 0 PID: 15563 Comm: syz.0.1872 Not tainted syzkaller #0 PREEMPT(full) [ 757.947841][T15563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 757.947860][T15563] Call Trace: [ 757.947870][T15563] [ 757.947882][T15563] dump_stack_lvl+0x16c/0x1f0 [ 757.947925][T15563] should_fail_ex+0x512/0x640 [ 757.947966][T15563] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 757.948005][T15563] should_failslab+0xc2/0x120 [ 757.948052][T15563] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 757.948089][T15563] ? security_file_alloc+0x34/0x2b0 [ 757.948135][T15563] security_file_alloc+0x34/0x2b0 [ 757.948175][T15563] init_file+0x93/0x4c0 [ 757.948217][T15563] alloc_empty_file+0x73/0x1e0 [ 757.948261][T15563] path_openat+0xda/0x2cb0 [ 757.948294][T15563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.948336][T15563] ? __pfx_path_openat+0x10/0x10 [ 757.948380][T15563] do_filp_open+0x20b/0x470 [ 757.948416][T15563] ? __pfx_do_filp_open+0x10/0x10 [ 757.948475][T15563] ? alloc_fd+0x471/0x7d0 [ 757.948517][T15563] do_sys_openat2+0x11b/0x1d0 [ 757.948562][T15563] ? __pfx_do_sys_openat2+0x10/0x10 [ 757.948622][T15563] __x64_sys_openat+0x174/0x210 [ 757.948668][T15563] ? __pfx___x64_sys_openat+0x10/0x10 [ 757.948728][T15563] do_syscall_64+0xcd/0x490 [ 757.948768][T15563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.948796][T15563] RIP: 0033:0x7f0331f8ebe9 [ 757.948820][T15563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 757.948850][T15563] RSP: 002b:00007f0332e1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 757.948877][T15563] RAX: ffffffffffffffda RBX: 00007f03321b5fa0 RCX: 00007f0331f8ebe9 [ 757.948896][T15563] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 757.948915][T15563] RBP: 00007f0332011e19 R08: 0000000000000000 R09: 0000000000000000 [ 757.948933][T15563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.948948][T15563] R13: 00007f03321b6038 R14: 00007f03321b5fa0 R15: 00007ffe48f951b8 [ 757.948985][T15563] [ 758.459153][T15559] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1871'. [ 759.453889][T15581] FAULT_INJECTION: forcing a failure. [ 759.453889][T15581] name failslab, interval 1, probability 0, space 0, times 0 [ 759.467939][T15581] CPU: 0 UID: 0 PID: 15581 Comm: syz.5.1876 Not tainted syzkaller #0 PREEMPT(full) [ 759.467967][T15581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 759.467980][T15581] Call Trace: [ 759.467987][T15581] [ 759.467995][T15581] dump_stack_lvl+0x16c/0x1f0 [ 759.468027][T15581] should_fail_ex+0x512/0x640 [ 759.468057][T15581] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 759.468085][T15581] should_failslab+0xc2/0x120 [ 759.468115][T15581] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 759.468141][T15581] ? __d_alloc+0x32/0xae0 [ 759.468170][T15581] __d_alloc+0x32/0xae0 [ 759.468199][T15581] d_alloc_pseudo+0x1c/0xc0 [ 759.468230][T15581] alloc_file_pseudo+0xcf/0x230 [ 759.468263][T15581] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 759.468313][T15581] ? alloc_fd+0x471/0x7d0 [ 759.468340][T15581] sock_alloc_file+0x50/0x210 [ 759.468374][T15581] __sys_socket+0x1c0/0x260 [ 759.468396][T15581] ? __pfx___sys_socket+0x10/0x10 [ 759.468419][T15581] ? xfd_validate_state+0x61/0x180 [ 759.468451][T15581] ? __pfx_do_writev+0x10/0x10 [ 759.468480][T15581] __x64_sys_socket+0x72/0xb0 [ 759.468501][T15581] ? lockdep_hardirqs_on+0x7c/0x110 [ 759.468529][T15581] do_syscall_64+0xcd/0x490 [ 759.468561][T15581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.468583][T15581] RIP: 0033:0x7f7dded8ebe9 [ 759.468600][T15581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.468622][T15581] RSP: 002b:00007f7ddfc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 759.468643][T15581] RAX: ffffffffffffffda RBX: 00007f7ddefb5fa0 RCX: 00007f7dded8ebe9 [ 759.468658][T15581] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000002 [ 759.468671][T15581] RBP: 00007f7ddee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 759.468684][T15581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.468698][T15581] R13: 00007f7ddefb6038 R14: 00007f7ddefb5fa0 R15: 00007ffef758a3b8 [ 759.468725][T15581] [ 761.312041][T15602] FAULT_INJECTION: forcing a failure. [ 761.312041][T15602] name failslab, interval 1, probability 0, space 0, times 0 [ 761.425816][T15602] CPU: 0 UID: 0 PID: 15602 Comm: syz.5.1882 Not tainted syzkaller #0 PREEMPT(full) [ 761.425858][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 761.425877][T15602] Call Trace: [ 761.425893][T15602] [ 761.425905][T15602] dump_stack_lvl+0x16c/0x1f0 [ 761.425951][T15602] should_fail_ex+0x512/0x640 [ 761.425999][T15602] should_failslab+0xc2/0x120 [ 761.426041][T15602] __kmalloc_cache_noprof+0x6a/0x3e0 [ 761.426074][T15602] ? proc_self_get_link+0x1a9/0x230 [ 761.426116][T15602] proc_self_get_link+0x1a9/0x230 [ 761.426156][T15602] ? __pfx_proc_self_get_link+0x10/0x10 [ 761.426192][T15602] step_into+0x195e/0x2270 [ 761.426230][T15602] ? __pfx_step_into+0x10/0x10 [ 761.426266][T15602] ? lookup_fast+0x156/0x610 [ 761.426301][T15602] walk_component+0xfc/0x5b0 [ 761.426333][T15602] link_path_walk+0x627/0xe20 [ 761.426377][T15602] path_openat+0x1b0/0x2cb0 [ 761.426409][T15602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.426451][T15602] ? __pfx_path_openat+0x10/0x10 [ 761.426494][T15602] do_filp_open+0x20b/0x470 [ 761.426528][T15602] ? __pfx_do_filp_open+0x10/0x10 [ 761.426586][T15602] ? alloc_fd+0x471/0x7d0 [ 761.426627][T15602] do_sys_openat2+0x11b/0x1d0 [ 761.426673][T15602] ? __pfx_do_sys_openat2+0x10/0x10 [ 761.426733][T15602] __x64_sys_openat+0x174/0x210 [ 761.426780][T15602] ? __pfx___x64_sys_openat+0x10/0x10 [ 761.426842][T15602] do_syscall_64+0xcd/0x490 [ 761.426887][T15602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.426926][T15602] RIP: 0033:0x7f7dded8ebe9 [ 761.426948][T15602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.426976][T15602] RSP: 002b:00007f7ddfc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 761.427004][T15602] RAX: ffffffffffffffda RBX: 00007f7ddefb5fa0 RCX: 00007f7dded8ebe9 [ 761.427022][T15602] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 761.427045][T15602] RBP: 00007f7ddee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 761.427064][T15602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.427081][T15602] R13: 00007f7ddefb6038 R14: 00007f7ddefb5fa0 R15: 00007ffef758a3b8 [ 761.427118][T15602] [ 763.013579][T15620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1885'. [ 763.417236][T15619] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1887'. [ 764.591118][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 764.701401][T15641] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1891'. [ 764.836637][T15649] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1891'. [ 765.558165][T15656] FAULT_INJECTION: forcing a failure. [ 765.558165][T15656] name failslab, interval 1, probability 0, space 0, times 0 [ 765.635297][T15656] CPU: 1 UID: 0 PID: 15656 Comm: syz.3.1893 Not tainted syzkaller #0 PREEMPT(full) [ 765.635336][T15656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 765.635355][T15656] Call Trace: [ 765.635367][T15656] [ 765.635379][T15656] dump_stack_lvl+0x16c/0x1f0 [ 765.635425][T15656] should_fail_ex+0x512/0x640 [ 765.635473][T15656] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 765.635513][T15656] should_failslab+0xc2/0x120 [ 765.635553][T15656] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 765.635590][T15656] ? alloc_empty_file+0x55/0x1e0 [ 765.635641][T15656] alloc_empty_file+0x55/0x1e0 [ 765.635685][T15656] path_openat+0xda/0x2cb0 [ 765.635718][T15656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.635761][T15656] ? __pfx_path_openat+0x10/0x10 [ 765.635806][T15656] do_filp_open+0x20b/0x470 [ 765.635841][T15656] ? __pfx_do_filp_open+0x10/0x10 [ 765.635901][T15656] ? alloc_fd+0x471/0x7d0 [ 765.635942][T15656] do_sys_openat2+0x11b/0x1d0 [ 765.635987][T15656] ? __pfx_do_sys_openat2+0x10/0x10 [ 765.636046][T15656] __x64_sys_openat+0x174/0x210 [ 765.636093][T15656] ? __pfx___x64_sys_openat+0x10/0x10 [ 765.636144][T15656] ? keyctl_keyring_clear+0xb8/0x1a0 [ 765.636180][T15656] do_syscall_64+0xcd/0x490 [ 765.636222][T15656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.636251][T15656] RIP: 0033:0x7f334758ebe9 [ 765.636273][T15656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.636302][T15656] RSP: 002b:00007f33483bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 765.636330][T15656] RAX: ffffffffffffffda RBX: 00007f33477b5fa0 RCX: 00007f334758ebe9 [ 765.636349][T15656] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 765.636369][T15656] RBP: 00007f3347611e19 R08: 0000000000000000 R09: 0000000000000000 [ 765.636386][T15656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.636403][T15656] R13: 00007f33477b6038 R14: 00007f33477b5fa0 R15: 00007ffc987beb88 [ 765.636438][T15656] [ 765.867078][T15662] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1894'. [ 767.261101][T15680] FAULT_INJECTION: forcing a failure. [ 767.261101][T15680] name failslab, interval 1, probability 0, space 0, times 0 [ 767.360311][T15680] CPU: 1 UID: 0 PID: 15680 Comm: syz.3.1899 Not tainted syzkaller #0 PREEMPT(full) [ 767.360348][T15680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 767.360361][T15680] Call Trace: [ 767.360368][T15680] [ 767.360377][T15680] dump_stack_lvl+0x16c/0x1f0 [ 767.360408][T15680] should_fail_ex+0x512/0x640 [ 767.360439][T15680] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 767.360464][T15680] should_failslab+0xc2/0x120 [ 767.360492][T15680] __kmalloc_cache_noprof+0x6a/0x3e0 [ 767.360513][T15680] ? rcu_is_watching+0x12/0xc0 [ 767.360534][T15680] ? snd_pcm_oss_open+0x5eb/0x1400 [ 767.360557][T15680] snd_pcm_oss_open+0x5eb/0x1400 [ 767.360585][T15680] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 767.360606][T15680] ? __lock_acquire+0xb97/0x1ce0 [ 767.360634][T15680] ? __pfx_default_wake_function+0x10/0x10 [ 767.360657][T15680] ? __lock_acquire+0xb97/0x1ce0 [ 767.360691][T15680] ? do_raw_spin_lock+0x12c/0x2b0 [ 767.360725][T15680] ? soundcore_open+0x35a/0x580 [ 767.360755][T15680] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 767.360776][T15680] soundcore_open+0x40c/0x580 [ 767.360807][T15680] ? __pfx_soundcore_open+0x10/0x10 [ 767.360837][T15680] chrdev_open+0x234/0x6a0 [ 767.360863][T15680] ? __pfx_apparmor_file_open+0x10/0x10 [ 767.360905][T15680] ? __pfx_chrdev_open+0x10/0x10 [ 767.360935][T15680] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 767.360966][T15680] do_dentry_open+0x982/0x1530 [ 767.360993][T15680] ? __pfx_chrdev_open+0x10/0x10 [ 767.361034][T15680] vfs_open+0x82/0x3f0 [ 767.361071][T15680] path_openat+0x1de4/0x2cb0 [ 767.361107][T15680] ? __pfx_path_openat+0x10/0x10 [ 767.361146][T15680] do_filp_open+0x20b/0x470 [ 767.361173][T15680] ? __pfx_do_filp_open+0x10/0x10 [ 767.361219][T15680] ? alloc_fd+0x471/0x7d0 [ 767.361250][T15680] do_sys_openat2+0x11b/0x1d0 [ 767.361295][T15680] ? __pfx_do_sys_openat2+0x10/0x10 [ 767.361338][T15680] __x64_sys_openat+0x174/0x210 [ 767.361371][T15680] ? __pfx___x64_sys_openat+0x10/0x10 [ 767.361414][T15680] do_syscall_64+0xcd/0x490 [ 767.361445][T15680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.361466][T15680] RIP: 0033:0x7f334758ebe9 [ 767.361482][T15680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 767.361502][T15680] RSP: 002b:00007f33483bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 767.361522][T15680] RAX: ffffffffffffffda RBX: 00007f33477b5fa0 RCX: 00007f334758ebe9 [ 767.361536][T15680] RDX: 0000000000000801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 767.361549][T15680] RBP: 00007f3347611e19 R08: 0000000000000000 R09: 0000000000000000 [ 767.361562][T15680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.361575][T15680] R13: 00007f33477b6038 R14: 00007f33477b5fa0 R15: 00007ffc987beb88 [ 767.361601][T15680] [ 769.407435][T15704] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 770.117881][T15711] FAULT_INJECTION: forcing a failure. [ 770.117881][T15711] name failslab, interval 1, probability 0, space 0, times 0 [ 770.181625][T15711] CPU: 1 UID: 0 PID: 15711 Comm: syz.5.1906 Not tainted syzkaller #0 PREEMPT(full) [ 770.181664][T15711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 770.181682][T15711] Call Trace: [ 770.181694][T15711] [ 770.181712][T15711] dump_stack_lvl+0x16c/0x1f0 [ 770.181754][T15711] should_fail_ex+0x512/0x640 [ 770.181799][T15711] should_failslab+0xc2/0x120 [ 770.181836][T15711] __kmalloc_cache_noprof+0x6a/0x3e0 [ 770.181867][T15711] ? proc_self_get_link+0x1a9/0x230 [ 770.181908][T15711] proc_self_get_link+0x1a9/0x230 [ 770.181948][T15711] ? __pfx_proc_self_get_link+0x10/0x10 [ 770.181982][T15711] step_into+0x195e/0x2270 [ 770.182019][T15711] ? __pfx_step_into+0x10/0x10 [ 770.182055][T15711] ? lookup_fast+0x156/0x610 [ 770.182089][T15711] walk_component+0xfc/0x5b0 [ 770.182122][T15711] link_path_walk+0x627/0xe20 [ 770.182164][T15711] path_openat+0x1b0/0x2cb0 [ 770.182195][T15711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.182237][T15711] ? __pfx_path_openat+0x10/0x10 [ 770.182282][T15711] do_filp_open+0x20b/0x470 [ 770.182317][T15711] ? __pfx_do_filp_open+0x10/0x10 [ 770.182377][T15711] ? alloc_fd+0x471/0x7d0 [ 770.182417][T15711] do_sys_openat2+0x11b/0x1d0 [ 770.182462][T15711] ? __pfx_do_sys_openat2+0x10/0x10 [ 770.182521][T15711] __x64_sys_openat+0x174/0x210 [ 770.182566][T15711] ? __pfx___x64_sys_openat+0x10/0x10 [ 770.182629][T15711] do_syscall_64+0xcd/0x490 [ 770.182670][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.182698][T15711] RIP: 0033:0x7f7dded8ebe9 [ 770.182730][T15711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 770.182759][T15711] RSP: 002b:00007f7ddfc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 770.182786][T15711] RAX: ffffffffffffffda RBX: 00007f7ddefb5fa0 RCX: 00007f7dded8ebe9 [ 770.182804][T15711] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 770.182823][T15711] RBP: 00007f7ddee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 770.182840][T15711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.182856][T15711] R13: 00007f7ddefb6038 R14: 00007f7ddefb5fa0 R15: 00007ffef758a3b8 [ 770.182891][T15711] [ 770.910501][T15719] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 772.768190][T10999] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 773.552642][T15739] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 773.614197][T15739] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 773.640654][T15739] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 773.670712][T15739] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 773.736010][T15739] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 773.872589][T15739] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 774.527750][T15759] FAULT_INJECTION: forcing a failure. [ 774.527750][T15759] name failslab, interval 1, probability 0, space 0, times 0 [ 774.601323][T15759] CPU: 1 UID: 0 PID: 15759 Comm: syz.5.1917 Not tainted syzkaller #0 PREEMPT(full) [ 774.601361][T15759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.601379][T15759] Call Trace: [ 774.601391][T15759] [ 774.601402][T15759] dump_stack_lvl+0x16c/0x1f0 [ 774.601447][T15759] should_fail_ex+0x512/0x640 [ 774.601492][T15759] should_failslab+0xc2/0x120 [ 774.601533][T15759] __kmalloc_cache_noprof+0x6a/0x3e0 [ 774.601565][T15759] ? proc_self_get_link+0x1a9/0x230 [ 774.601609][T15759] proc_self_get_link+0x1a9/0x230 [ 774.601646][T15759] ? __pfx_proc_self_get_link+0x10/0x10 [ 774.601681][T15759] step_into+0x195e/0x2270 [ 774.601720][T15759] ? __pfx_step_into+0x10/0x10 [ 774.601754][T15759] ? lookup_fast+0x156/0x610 [ 774.601788][T15759] walk_component+0xfc/0x5b0 [ 774.601821][T15759] link_path_walk+0x627/0xe20 [ 774.601863][T15759] path_openat+0x1b0/0x2cb0 [ 774.601895][T15759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.601937][T15759] ? __pfx_path_openat+0x10/0x10 [ 774.601983][T15759] do_filp_open+0x20b/0x470 [ 774.602018][T15759] ? __pfx_do_filp_open+0x10/0x10 [ 774.602079][T15759] ? alloc_fd+0x471/0x7d0 [ 774.602122][T15759] do_sys_openat2+0x11b/0x1d0 [ 774.602167][T15759] ? __pfx_do_sys_openat2+0x10/0x10 [ 774.602227][T15759] __x64_sys_openat+0x174/0x210 [ 774.602283][T15759] ? __pfx___x64_sys_openat+0x10/0x10 [ 774.602365][T15759] do_syscall_64+0xcd/0x490 [ 774.602411][T15759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.602442][T15759] RIP: 0033:0x7f7dded8ebe9 [ 774.602467][T15759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.602498][T15759] RSP: 002b:00007f7ddfc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 774.602528][T15759] RAX: ffffffffffffffda RBX: 00007f7ddefb5fa0 RCX: 00007f7dded8ebe9 [ 774.602549][T15759] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 774.602569][T15759] RBP: 00007f7ddee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 774.602587][T15759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.602605][T15759] R13: 00007f7ddefb6038 R14: 00007f7ddefb5fa0 R15: 00007ffef758a3b8 [ 774.602644][T15759] [ 775.478444][T15771] sd 0:0:1:0: PR command failed: 1026 [ 775.502771][T15771] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 775.565786][T15771] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 775.574461][ T9798] Bluetooth: hci0: command 0x0c1a tx timeout [ 775.653170][ T9798] Bluetooth: hci2: command 0x0c1a tx timeout [ 775.659326][ T9798] Bluetooth: hci1: command 0x0c1a tx timeout [ 775.732903][T10999] Bluetooth: hci3: command 0x0c1a tx timeout [ 775.739056][ T9798] Bluetooth: hci4: command 0x0406 tx timeout [ 775.844518][T15775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1920'. [ 775.892181][ T9798] Bluetooth: hci5: command 0x0c1a tx timeout [ 779.360356][T15842] FAULT_INJECTION: forcing a failure. [ 779.360356][T15842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.413587][T15842] CPU: 1 UID: 0 PID: 15842 Comm: syz.1.1928 Not tainted syzkaller #0 PREEMPT(full) [ 779.413625][T15842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 779.413644][T15842] Call Trace: [ 779.413654][T15842] [ 779.413666][T15842] dump_stack_lvl+0x16c/0x1f0 [ 779.413731][T15842] should_fail_ex+0x512/0x640 [ 779.413785][T15842] strncpy_from_user+0x3b/0x2e0 [ 779.413835][T15842] getname_flags.part.0+0x8f/0x550 [ 779.413897][T15842] getname_flags+0x93/0xf0 [ 779.413936][T15842] do_sys_openat2+0xb8/0x1d0 [ 779.413996][T15842] ? __pfx_do_sys_openat2+0x10/0x10 [ 779.414066][T15842] __x64_sys_openat+0x174/0x210 [ 779.414121][T15842] ? __pfx___x64_sys_openat+0x10/0x10 [ 779.414191][T15842] do_syscall_64+0xcd/0x490 [ 779.414240][T15842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.414273][T15842] RIP: 0033:0x7feb0ad8ebe9 [ 779.414299][T15842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.414332][T15842] RSP: 002b:00007feb0bc53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 779.414364][T15842] RAX: ffffffffffffffda RBX: 00007feb0afb5fa0 RCX: 00007feb0ad8ebe9 [ 779.414388][T15842] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 779.414409][T15842] RBP: 00007feb0ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 779.414430][T15842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.414451][T15842] R13: 00007feb0afb6038 R14: 00007feb0afb5fa0 R15: 00007ffc0d416398 [ 779.414494][T15842] [ 780.299322][T15849] svc: failed to register nfsdv3 RPC service (errno 111). [ 780.338617][T15855] bond0: option all_slaves_active: invalid value (20) [ 780.370535][T15849] svc: failed to register nfsaclv3 RPC service (errno 111). [ 781.232587][ T30] audit: type=1804 audit(7981176597.057:26): pid=15874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1934" name="/newroot/sys/kernel/tracing/set_event" dev="tracefs" ino=1055 res=1 errno=0 [ 781.620476][T15879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1935'. [ 781.794061][T15882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1935'. [ 781.926968][T15879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.054476][T15879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 782.898630][T15898] random: crng reseeded on system resumption [ 782.993318][T15899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1938'. [ 784.320383][T15925] random: crng reseeded on system resumption [ 784.418931][T15914] FAULT_INJECTION: forcing a failure. [ 784.418931][T15914] name failslab, interval 1, probability 0, space 0, times 0 [ 784.636574][T15914] CPU: 0 UID: 0 PID: 15914 Comm: syz.1.1941 Not tainted syzkaller #0 PREEMPT(full) [ 784.636602][T15914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 784.636616][T15914] Call Trace: [ 784.636622][T15914] [ 784.636631][T15914] dump_stack_lvl+0x16c/0x1f0 [ 784.636664][T15914] should_fail_ex+0x512/0x640 [ 784.636693][T15914] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 784.636722][T15914] should_failslab+0xc2/0x120 [ 784.636750][T15914] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 784.636777][T15914] ? security_file_alloc+0x34/0x2b0 [ 784.636810][T15914] security_file_alloc+0x34/0x2b0 [ 784.636839][T15914] init_file+0x93/0x4c0 [ 784.636870][T15914] alloc_empty_file+0x73/0x1e0 [ 784.636905][T15914] path_openat+0xda/0x2cb0 [ 784.636928][T15914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.636958][T15914] ? __pfx_path_openat+0x10/0x10 [ 784.636989][T15914] do_filp_open+0x20b/0x470 [ 784.637014][T15914] ? __pfx_do_filp_open+0x10/0x10 [ 784.637056][T15914] ? alloc_fd+0x471/0x7d0 [ 784.637084][T15914] do_sys_openat2+0x11b/0x1d0 [ 784.637116][T15914] ? __pfx_do_sys_openat2+0x10/0x10 [ 784.637157][T15914] __x64_sys_openat+0x174/0x210 [ 784.637190][T15914] ? __pfx___x64_sys_openat+0x10/0x10 [ 784.637233][T15914] do_syscall_64+0xcd/0x490 [ 784.637263][T15914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.637283][T15914] RIP: 0033:0x7feb0ad8ebe9 [ 784.637299][T15914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.637319][T15914] RSP: 002b:00007feb0bc53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 784.637339][T15914] RAX: ffffffffffffffda RBX: 00007feb0afb5fa0 RCX: 00007feb0ad8ebe9 [ 784.637353][T15914] RDX: 0000000000129900 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 784.637366][T15914] RBP: 00007feb0ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 784.637379][T15914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.637392][T15914] R13: 00007feb0afb6038 R14: 00007feb0afb5fa0 R15: 00007ffc0d416398 [ 784.637423][T15914] [ 786.022679][T15949] deleting an unspecified loop device is not supported. [ 787.768268][ T9798] Bluetooth: hci0: unexpected event 0x03 length: 725 > 11 [ 788.703938][ T9798] Bluetooth: hci1: unexpected event 0x01 length: 5 > 1 [ 796.339267][T16065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1977'. [ 799.195188][T16116] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1987'. [ 799.260347][T16116] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 799.929654][T16122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1989'. [ 801.004277][T16133] FAULT_INJECTION: forcing a failure. [ 801.004277][T16133] name failslab, interval 1, probability 0, space 0, times 0 [ 801.054034][T16133] CPU: 1 UID: 0 PID: 16133 Comm: syz.5.1992 Not tainted syzkaller #0 PREEMPT(full) [ 801.054081][T16133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 801.054104][T16133] Call Trace: [ 801.054116][T16133] [ 801.054130][T16133] dump_stack_lvl+0x16c/0x1f0 [ 801.054181][T16133] should_fail_ex+0x512/0x640 [ 801.054228][T16133] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 801.054268][T16133] should_failslab+0xc2/0x120 [ 801.054315][T16133] __kmalloc_cache_noprof+0x6a/0x3e0 [ 801.054351][T16133] ? snd_ctl_get_preferred_subdevice+0x184/0x200 [ 801.054394][T16133] ? snd_pcm_attach_substream+0x441/0xd60 [ 801.054456][T16133] snd_pcm_attach_substream+0x441/0xd60 [ 801.054508][T16133] snd_pcm_open_substream+0x8d/0x17f0 [ 801.054554][T16133] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 801.054608][T16133] snd_pcm_oss_open+0x735/0x1400 [ 801.054655][T16133] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 801.054689][T16133] ? __lock_acquire+0xb97/0x1ce0 [ 801.054736][T16133] ? __pfx_default_wake_function+0x10/0x10 [ 801.054774][T16133] ? __lock_acquire+0xb97/0x1ce0 [ 801.054829][T16133] ? do_raw_spin_lock+0x12c/0x2b0 [ 801.054906][T16133] ? soundcore_open+0x35a/0x580 [ 801.054961][T16133] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 801.054991][T16133] soundcore_open+0x40c/0x580 [ 801.055034][T16133] ? __pfx_soundcore_open+0x10/0x10 [ 801.055074][T16133] chrdev_open+0x234/0x6a0 [ 801.055112][T16133] ? __pfx_apparmor_file_open+0x10/0x10 [ 801.055144][T16133] ? __pfx_chrdev_open+0x10/0x10 [ 801.055184][T16133] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 801.055225][T16133] do_dentry_open+0x982/0x1530 [ 801.055262][T16133] ? __pfx_chrdev_open+0x10/0x10 [ 801.055307][T16133] vfs_open+0x82/0x3f0 [ 801.055356][T16133] path_openat+0x1de4/0x2cb0 [ 801.055403][T16133] ? __pfx_path_openat+0x10/0x10 [ 801.055457][T16133] do_filp_open+0x20b/0x470 [ 801.055494][T16133] ? __pfx_do_filp_open+0x10/0x10 [ 801.055571][T16133] ? alloc_fd+0x471/0x7d0 [ 801.055612][T16133] do_sys_openat2+0x11b/0x1d0 [ 801.055661][T16133] ? __pfx_do_sys_openat2+0x10/0x10 [ 801.055724][T16133] __x64_sys_openat+0x174/0x210 [ 801.055772][T16133] ? __pfx___x64_sys_openat+0x10/0x10 [ 801.055838][T16133] do_syscall_64+0xcd/0x490 [ 801.055885][T16133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.055917][T16133] RIP: 0033:0x7f7dded8ebe9 [ 801.055941][T16133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.055971][T16133] RSP: 002b:00007f7ddfc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 801.056001][T16133] RAX: ffffffffffffffda RBX: 00007f7ddefb5fa0 RCX: 00007f7dded8ebe9 [ 801.056022][T16133] RDX: 0000000000000801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 801.056043][T16133] RBP: 00007f7ddee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 801.056063][T16133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.056083][T16133] R13: 00007f7ddefb6038 R14: 00007f7ddefb5fa0 R15: 00007ffef758a3b8 [ 801.056121][T16133] [ 801.354738][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.038928][T16199] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 805.802234][T16220] input: f as /devices/virtual/input/input27 [ 810.113181][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.119741][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.128853][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.135664][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.177415][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.199833][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.209416][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.223547][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.279776][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.286150][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.545212][T16309] random: crng reseeded on system resumption [ 811.763930][T16329] bridge0: port 3(hsr0) entered blocking state [ 811.835556][T16329] bridge0: port 3(hsr0) entered disabled state [ 811.841974][T16329] hsr0: entered allmulticast mode [ 811.964464][T16329] hsr_slave_0: entered allmulticast mode [ 812.073736][T16329] hsr_slave_1: entered allmulticast mode [ 812.212023][T16329] hsr0: entered promiscuous mode [ 812.241444][T16329] bridge0: port 3(hsr0) entered blocking state [ 812.247734][T16329] bridge0: port 3(hsr0) entered forwarding state [ 814.523500][T16365] FAULT_INJECTION: forcing a failure. [ 814.523500][T16365] name failslab, interval 1, probability 0, space 0, times 0 [ 814.590846][T16365] CPU: 0 UID: 0 PID: 16365 Comm: syz.5.2029 Not tainted syzkaller #0 PREEMPT(full) [ 814.590884][T16365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 814.590909][T16365] Call Trace: [ 814.590919][T16365] [ 814.590931][T16365] dump_stack_lvl+0x16c/0x1f0 [ 814.590981][T16365] should_fail_ex+0x512/0x640 [ 814.591022][T16365] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 814.591062][T16365] should_failslab+0xc2/0x120 [ 814.591102][T16365] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 814.591139][T16365] ? __d_alloc+0x32/0xae0 [ 814.591178][T16365] __d_alloc+0x32/0xae0 [ 814.591220][T16365] d_alloc_parallel+0x111/0x1480 [ 814.591275][T16365] ? find_held_lock+0x2b/0x80 [ 814.591307][T16365] ? __pfx_d_alloc_parallel+0x10/0x10 [ 814.591358][T16365] ? __d_lookup+0x266/0x4a0 [ 814.591412][T16365] lookup_open.isra.0+0x665/0x1580 [ 814.591449][T16365] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 814.591496][T16365] ? mnt_get_write_access+0x20c/0x300 [ 814.591543][T16365] path_openat+0x893/0x2cb0 [ 814.591590][T16365] ? __pfx_path_openat+0x10/0x10 [ 814.591635][T16365] do_filp_open+0x20b/0x470 [ 814.591672][T16365] ? __pfx_do_filp_open+0x10/0x10 [ 814.591720][T16365] ? __pfx_kfree_link+0x10/0x10 [ 814.591776][T16365] ? alloc_fd+0x471/0x7d0 [ 814.591817][T16365] do_sys_openat2+0x11b/0x1d0 [ 814.591862][T16365] ? __pfx_do_sys_openat2+0x10/0x10 [ 814.591922][T16365] __x64_sys_openat+0x174/0x210 [ 814.591968][T16365] ? __pfx___x64_sys_openat+0x10/0x10 [ 814.592042][T16365] do_syscall_64+0xcd/0x490 [ 814.592086][T16365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.592116][T16365] RIP: 0033:0x7f7dded8ebe9 [ 814.592139][T16365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 814.592169][T16365] RSP: 002b:00007f7ddfc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 814.592196][T16365] RAX: ffffffffffffffda RBX: 00007f7ddefb5fa0 RCX: 00007f7dded8ebe9 [ 814.592216][T16365] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 814.592235][T16365] RBP: 00007f7ddee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 814.592254][T16365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.592271][T16365] R13: 00007f7ddefb6038 R14: 00007f7ddefb5fa0 R15: 00007ffef758a3b8 [ 814.592308][T16365] [ 814.850560][T16368] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2027'. [ 816.608607][T16374] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 816.613525][T16377] can: request_module (can-proto-3) failed. [ 816.616351][T16374] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 816.628447][T16374] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 816.680148][T16374] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 816.686483][T16374] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 816.693424][T16374] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 816.968832][T10999] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 817.128833][T16409] program syz.1.2034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 817.833941][T10999] Bluetooth: hci0: command 0x0c1a tx timeout [ 818.277679][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.301310][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.310403][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.331321][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.339332][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.345627][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.354593][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.360876][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.711519][T10999] Bluetooth: hci5: command 0x0c1a tx timeout [ 818.717607][T10999] Bluetooth: hci4: command 0x0406 tx timeout [ 818.724738][T10999] Bluetooth: hci3: command 0x0c1a tx timeout [ 818.730884][T10999] Bluetooth: hci2: command 0x0c1a tx timeout [ 818.736963][ T9798] Bluetooth: hci1: command 0x0c1a tx timeout [ 821.579839][T16460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2041'. [ 822.324037][T16475] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 822.847720][T16490] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 826.628551][T16512] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 826.729945][T16512] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 828.666145][T16546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2061'. [ 829.470114][T16556] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2060'. [ 831.134457][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 831.134457][T16582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'. [ 831.374543][T16575] HfR: entered promiscuous mode [ 831.429311][T16577] openvswitch: HfR: Dropping previously announced user features [ 831.584713][T16581] HfR: left promiscuous mode [ 833.669095][T16628] queue_state_write: operation too long [ 833.754325][T16628] queue_state_write: use 'run', 'start' or 'kick' [ 834.776914][T16647] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 835.187877][T16648] openvswitch: netlink: Multiple metadata blocks provided [ 835.613857][T16547] Process accounting resumed [ 836.056994][T16659] vivid-003: ================= START STATUS ================= [ 836.130033][T16659] vivid-003: Radio HW Seek Mode: Bounded [ 836.135952][T16659] vivid-003: Radio Programmable HW Seek: false [ 836.183111][T16659] vivid-003: RDS Rx I/O Mode: Block I/O [ 836.204706][T16659] vivid-003: Generate RBDS Instead of RDS: false [ 836.298024][T16659] vivid-003: RDS Reception: true [ 836.303020][T16659] vivid-003: RDS Program Type: 0 inactive [ 836.321453][T16659] vivid-003: RDS PS Name: inactive [ 836.326697][T16659] vivid-003: RDS Radio Text: inactive [ 836.362985][T16659] vivid-003: RDS Traffic Announcement: false inactive [ 836.413472][T16659] vivid-003: RDS Traffic Program: false inactive [ 836.427322][T16659] vivid-003: RDS Music: false inactive [ 836.506868][T16659] vivid-003: ================== END STATUS ================== [ 837.502130][T16687] openvswitch: netlink: nsh attr 68 is out of range max 3 [ 837.542044][T16670] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 837.969650][T16688] netlink: zone id is out of range [ 838.020681][T16688] netlink: zone id is out of range [ 838.110513][T16688] netlink: zone id is out of range [ 838.131956][T16688] netlink: zone id is out of range [ 838.160744][T16688] netlink: zone id is out of range [ 838.331255][T16688] netlink: zone id is out of range [ 838.383129][T16688] netlink: zone id is out of range [ 838.458504][T16688] netlink: zone id is out of range [ 841.067442][T16727] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 841.978685][T16742] binder: 16741:16742 ioctl c05c6104 2000000001c0 returned -22 [ 843.734776][T16772] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2106'. [ 846.148790][T16776] FAULT_INJECTION: forcing a failure. [ 846.148790][T16776] name failslab, interval 1, probability 0, space 0, times 0 [ 846.226166][T16776] CPU: 0 UID: 0 PID: 16776 Comm: syz.0.2108 Not tainted syzkaller #0 PREEMPT(full) [ 846.226203][T16776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 846.226221][T16776] Call Trace: [ 846.226232][T16776] [ 846.226244][T16776] dump_stack_lvl+0x16c/0x1f0 [ 846.226287][T16776] should_fail_ex+0x512/0x640 [ 846.226330][T16776] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 846.226367][T16776] should_failslab+0xc2/0x120 [ 846.226406][T16776] __kmalloc_cache_noprof+0x6a/0x3e0 [ 846.226438][T16776] ? landlock_merge_ruleset+0x118/0x870 [ 846.226479][T16776] landlock_merge_ruleset+0x118/0x870 [ 846.226516][T16776] ? prepare_creds+0x583/0x7d0 [ 846.226562][T16776] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 846.226602][T16776] do_syscall_64+0xcd/0x490 [ 846.226646][T16776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.226676][T16776] RIP: 0033:0x7f0331f8ebe9 [ 846.226699][T16776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 846.226729][T16776] RSP: 002b:00007f0332e1a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 846.226758][T16776] RAX: ffffffffffffffda RBX: 00007f03321b5fa0 RCX: 00007f0331f8ebe9 [ 846.226777][T16776] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000005 [ 846.226796][T16776] RBP: 00007f0332011e19 R08: 0000000000000000 R09: 0000000000000000 [ 846.226814][T16776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 846.226832][T16776] R13: 00007f03321b6038 R14: 00007f03321b5fa0 R15: 00007ffe48f951b8 [ 846.226879][T16776] [ 846.393607][ C0] vkms_vblank_simulate: vblank timer overrun [ 847.212149][T16800] bond0: option all_slaves_active: invalid value () [ 850.210462][T16849] FAULT_INJECTION: forcing a failure. [ 850.210462][T16849] name failslab, interval 1, probability 0, space 0, times 0 [ 850.276591][T16849] CPU: 1 UID: 0 PID: 16849 Comm: syz.1.2124 Not tainted syzkaller #0 PREEMPT(full) [ 850.276632][T16849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 850.276651][T16849] Call Trace: [ 850.276662][T16849] [ 850.276673][T16849] dump_stack_lvl+0x16c/0x1f0 [ 850.276717][T16849] should_fail_ex+0x512/0x640 [ 850.276765][T16849] should_failslab+0xc2/0x120 [ 850.276805][T16849] __kmalloc_cache_noprof+0x6a/0x3e0 [ 850.276839][T16849] ? proc_self_get_link+0x1a9/0x230 [ 850.276882][T16849] proc_self_get_link+0x1a9/0x230 [ 850.276921][T16849] ? __pfx_proc_self_get_link+0x10/0x10 [ 850.276957][T16849] step_into+0x195e/0x2270 [ 850.276996][T16849] ? __pfx_step_into+0x10/0x10 [ 850.277031][T16849] ? lookup_fast+0x156/0x610 [ 850.277066][T16849] walk_component+0xfc/0x5b0 [ 850.277099][T16849] link_path_walk+0x627/0xe20 [ 850.277141][T16849] path_openat+0x1b0/0x2cb0 [ 850.277172][T16849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.277215][T16849] ? __pfx_path_openat+0x10/0x10 [ 850.277260][T16849] do_filp_open+0x20b/0x470 [ 850.277295][T16849] ? __pfx_do_filp_open+0x10/0x10 [ 850.277355][T16849] ? alloc_fd+0x471/0x7d0 [ 850.277396][T16849] do_sys_openat2+0x11b/0x1d0 [ 850.277450][T16849] ? __pfx_do_sys_openat2+0x10/0x10 [ 850.277508][T16849] __x64_sys_openat+0x174/0x210 [ 850.277554][T16849] ? __pfx___x64_sys_openat+0x10/0x10 [ 850.277614][T16849] do_syscall_64+0xcd/0x490 [ 850.277657][T16849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.277687][T16849] RIP: 0033:0x7feb0ad8ebe9 [ 850.277709][T16849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.277738][T16849] RSP: 002b:00007feb0bc53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 850.277765][T16849] RAX: ffffffffffffffda RBX: 00007feb0afb5fa0 RCX: 00007feb0ad8ebe9 [ 850.277785][T16849] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 850.277804][T16849] RBP: 00007feb0ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 850.277821][T16849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.277839][T16849] R13: 00007feb0afb6038 R14: 00007feb0afb5fa0 R15: 00007ffc0d416398 [ 850.277875][T16849] [ 850.981048][T16856] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 850.991558][T16856] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 851.147677][T16856] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 851.232682][T16856] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 851.238911][T16856] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 851.374613][T16856] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 853.021399][T10999] Bluetooth: hci1: command 0x0c1a tx timeout [ 853.028987][T16429] Bluetooth: hci0: command 0x0c1a tx timeout [ 853.170279][T16429] Bluetooth: hci2: command 0x0c1a tx timeout [ 853.251432][T16429] Bluetooth: hci4: command 0x0406 tx timeout [ 853.257488][T16429] Bluetooth: hci3: command 0x0c1a tx timeout [ 853.412266][T16429] Bluetooth: hci5: command 0x0c1a tx timeout [ 855.167548][T16886] ptrace attach of "./syz-executor exec"[14102] was attempted by ""[16886] [ 857.330376][T16924] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2137'. [ 859.238864][T16940] net_ratelimit: 64 callbacks suppressed [ 859.238887][T16940] openvswitch: netlink: IP tunnel dst address not specified [ 859.430982][T16943] openvswitch: netlink: IP tunnel dst address not specified [ 859.891400][T16953] device-mapper: ioctl: Invalid ioctl structure: name , dev 7f00010002 [ 860.115326][T16955] FAULT_INJECTION: forcing a failure. [ 860.115326][T16955] name failslab, interval 1, probability 0, space 0, times 0 [ 860.168214][T16955] CPU: 0 UID: 0 PID: 16955 Comm: syz.1.2144 Not tainted syzkaller #0 PREEMPT(full) [ 860.168255][T16955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 860.168275][T16955] Call Trace: [ 860.168287][T16955] [ 860.168300][T16955] dump_stack_lvl+0x16c/0x1f0 [ 860.168348][T16955] should_fail_ex+0x512/0x640 [ 860.168425][T16955] should_failslab+0xc2/0x120 [ 860.168486][T16955] __kmalloc_cache_noprof+0x6a/0x3e0 [ 860.168522][T16955] ? proc_self_get_link+0x1a9/0x230 [ 860.168570][T16955] proc_self_get_link+0x1a9/0x230 [ 860.168609][T16955] ? __pfx_proc_self_get_link+0x10/0x10 [ 860.168648][T16955] step_into+0x195e/0x2270 [ 860.168692][T16955] ? __pfx_step_into+0x10/0x10 [ 860.168733][T16955] ? lookup_fast+0x156/0x610 [ 860.168773][T16955] walk_component+0xfc/0x5b0 [ 860.168811][T16955] link_path_walk+0x627/0xe20 [ 860.168859][T16955] path_openat+0x1b0/0x2cb0 [ 860.168896][T16955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.168945][T16955] ? __pfx_path_openat+0x10/0x10 [ 860.168998][T16955] do_filp_open+0x20b/0x470 [ 860.169040][T16955] ? __pfx_do_filp_open+0x10/0x10 [ 860.169122][T16955] ? alloc_fd+0x471/0x7d0 [ 860.169178][T16955] do_sys_openat2+0x11b/0x1d0 [ 860.169230][T16955] ? __pfx_do_sys_openat2+0x10/0x10 [ 860.169298][T16955] __x64_sys_openat+0x174/0x210 [ 860.169351][T16955] ? __pfx___x64_sys_openat+0x10/0x10 [ 860.169422][T16955] do_syscall_64+0xcd/0x490 [ 860.169471][T16955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.169505][T16955] RIP: 0033:0x7feb0ad8ebe9 [ 860.169531][T16955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.169564][T16955] RSP: 002b:00007feb0bc53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 860.169607][T16955] RAX: ffffffffffffffda RBX: 00007feb0afb5fa0 RCX: 00007feb0ad8ebe9 [ 860.169626][T16955] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 860.169646][T16955] RBP: 00007feb0ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 860.169665][T16955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.169683][T16955] R13: 00007feb0afb6038 R14: 00007feb0afb5fa0 R15: 00007ffc0d416398 [ 860.169724][T16955] [ 862.308328][T16978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2148'. [ 862.941412][T16991] netlink: 146 bytes leftover after parsing attributes in process `syz.5.2151'. [ 864.848200][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2156'. [ 865.588400][T17023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2158'. [ 866.207901][T17034] vivid-003: ================= START STATUS ================= [ 866.283011][T17034] vivid-003: Radio HW Seek Mode: Bounded [ 866.299735][T17034] vivid-003: Radio Programmable HW Seek: false [ 866.320218][T17034] vivid-003: RDS Rx I/O Mode: Block I/O [ 866.338060][T17034] vivid-003: Generate RBDS Instead of RDS: false [ 866.464323][T17034] vivid-003: RDS Reception: true [ 866.469307][T17034] vivid-003: RDS Program Type: 0 inactive [ 866.495410][T17034] vivid-003: RDS PS Name: inactive [ 866.505566][T17034] vivid-003: RDS Radio Text: inactive [ 866.511274][T17034] vivid-003: RDS Traffic Announcement: false inactive [ 866.518180][T17034] vivid-003: RDS Traffic Program: false inactive [ 866.524819][T17034] vivid-003: RDS Music: false inactive [ 866.533829][T17034] vivid-003: ================== END STATUS ================== [ 868.294767][T17059] random: crng reseeded on system resumption [ 870.233264][T17086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2170'. [ 870.410372][T17086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.484535][T17086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.511848][T17086] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.537439][T17078] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2168'. [ 870.598920][T17086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 871.400104][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.406738][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.235843][T17138] can: request_module (can-proto-0) failed. [ 873.810866][T17143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2181'. [ 874.979799][T17156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2183'. [ 875.781555][T17156] team0: Port device team_slave_1 removed [ 876.861357][T17192] FAULT_INJECTION: forcing a failure. [ 876.861357][T17192] name failslab, interval 1, probability 0, space 0, times 0 [ 876.936572][T17192] CPU: 1 UID: 0 PID: 17192 Comm: syz.1.2190 Not tainted syzkaller #0 PREEMPT(full) [ 876.936621][T17192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 876.936639][T17192] Call Trace: [ 876.936650][T17192] [ 876.936661][T17192] dump_stack_lvl+0x16c/0x1f0 [ 876.936704][T17192] should_fail_ex+0x512/0x640 [ 876.936743][T17192] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 876.936783][T17192] should_failslab+0xc2/0x120 [ 876.936821][T17192] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 876.936856][T17192] ? alloc_empty_file+0x55/0x1e0 [ 876.936902][T17192] alloc_empty_file+0x55/0x1e0 [ 876.936945][T17192] path_openat+0xda/0x2cb0 [ 876.936976][T17192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.937016][T17192] ? __pfx_path_openat+0x10/0x10 [ 876.937058][T17192] do_filp_open+0x20b/0x470 [ 876.937092][T17192] ? __pfx_do_filp_open+0x10/0x10 [ 876.937150][T17192] ? alloc_fd+0x471/0x7d0 [ 876.937189][T17192] do_sys_openat2+0x11b/0x1d0 [ 876.937231][T17192] ? __pfx_do_sys_openat2+0x10/0x10 [ 876.937287][T17192] __x64_sys_openat+0x174/0x210 [ 876.937331][T17192] ? __pfx___x64_sys_openat+0x10/0x10 [ 876.937407][T17192] do_syscall_64+0xcd/0x490 [ 876.937450][T17192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.937479][T17192] RIP: 0033:0x7feb0ad8ebe9 [ 876.937503][T17192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.937532][T17192] RSP: 002b:00007feb0bc53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 876.937561][T17192] RAX: ffffffffffffffda RBX: 00007feb0afb5fa0 RCX: 00007feb0ad8ebe9 [ 876.937581][T17192] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 876.937609][T17192] RBP: 00007feb0ae11e19 R08: 0000000000000000 R09: 0000000000000000 [ 876.937627][T17192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 876.937646][T17192] R13: 00007feb0afb6038 R14: 00007feb0afb5fa0 R15: 00007ffc0d416398 [ 876.937684][T17192] [ 878.010631][T17201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2191'. [ 878.564783][T17194] kexec: Could not allocate control_code_buffer [ 881.101351][T17240] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 882.429544][T17243] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 882.476615][T17248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 883.521655][T17262] ptrace attach of ""[5872] was attempted by ""[17262] [ 889.471895][T17337] random: crng reseeded on system resumption [ 889.630509][T17337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.660702][T17337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 891.215278][T17345] random: crng reseeded on system resumption [ 892.154267][ T30] audit: type=1800 audit(4294967318.702:27): pid=17350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2220" name="trace_pipe" dev="tracefs" ino=147 res=0 errno=0 [ 894.277168][T17365] FAULT_INJECTION: forcing a failure. [ 894.277168][T17365] name failslab, interval 1, probability 0, space 0, times 0 [ 894.296312][T17365] CPU: 0 UID: 0 PID: 17365 Comm: syz.5.2223 Not tainted syzkaller #0 PREEMPT(full) [ 894.296341][T17365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 894.296355][T17365] Call Trace: [ 894.296364][T17365] [ 894.296372][T17365] dump_stack_lvl+0x16c/0x1f0 [ 894.296406][T17365] should_fail_ex+0x512/0x640 [ 894.296442][T17365] should_failslab+0xc2/0x120 [ 894.296473][T17365] __kmalloc_cache_noprof+0x6a/0x3e0 [ 894.296497][T17365] ? proc_self_get_link+0x1a9/0x230 [ 894.296536][T17365] proc_self_get_link+0x1a9/0x230 [ 894.296565][T17365] ? __pfx_proc_self_get_link+0x10/0x10 [ 894.296592][T17365] step_into+0x195e/0x2270 [ 894.296621][T17365] ? __pfx_step_into+0x10/0x10 [ 894.296647][T17365] ? lookup_fast+0x156/0x610 [ 894.296673][T17365] walk_component+0xfc/0x5b0 [ 894.296697][T17365] link_path_walk+0x627/0xe20 [ 894.296730][T17365] path_openat+0x1b0/0x2cb0 [ 894.296753][T17365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.296785][T17365] ? __pfx_path_openat+0x10/0x10 [ 894.296819][T17365] do_filp_open+0x20b/0x470 [ 894.296846][T17365] ? __pfx_do_filp_open+0x10/0x10 [ 894.296891][T17365] ? alloc_fd+0x471/0x7d0 [ 894.296922][T17365] do_sys_openat2+0x11b/0x1d0 [ 894.296956][T17365] ? __pfx_do_sys_openat2+0x10/0x10 [ 894.297001][T17365] __x64_sys_openat+0x174/0x210 [ 894.297036][T17365] ? __pfx___x64_sys_openat+0x10/0x10 [ 894.297082][T17365] do_syscall_64+0xcd/0x490 [ 894.297114][T17365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 894.297136][T17365] RIP: 0033:0x7f7dded8ebe9 [ 894.297152][T17365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 894.297175][T17365] RSP: 002b:00007f7ddfc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 894.297195][T17365] RAX: ffffffffffffffda RBX: 00007f7ddefb5fa0 RCX: 00007f7dded8ebe9 [ 894.297210][T17365] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 894.297224][T17365] RBP: 00007f7ddee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 894.297237][T17365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 894.297251][T17365] R13: 00007f7ddefb6038 R14: 00007f7ddefb5fa0 R15: 00007ffef758a3b8 [ 894.297278][T17365] [ 895.099000][T17371] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2225'. [ 895.252816][T17371] program syz.5.2225 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 896.453036][T17380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2227'. [ 896.639701][T10999] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 896.713712][T10999] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 896.728832][T10999] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 896.750575][T10999] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 896.759025][T10999] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 898.522102][T17400] random: crng reseeded on system resumption [ 898.856476][T10999] Bluetooth: hci6: command tx timeout [ 899.015395][T17404] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2232'. [ 899.811282][T17387] chnl_net:caif_netlink_parms(): no params data found [ 900.350195][T17411] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2233'. [ 900.640522][T17387] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.659571][T17387] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.688693][T17387] bridge_slave_0: entered allmulticast mode [ 900.720378][T17387] bridge_slave_0: entered promiscuous mode [ 900.813480][T17387] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.852226][T17387] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.859366][T17387] bridge_slave_1: entered allmulticast mode [ 900.921879][T10999] Bluetooth: hci6: command tx timeout [ 900.927616][T17387] bridge_slave_1: entered promiscuous mode [ 901.204051][T17387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 901.361617][T17387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.568463][T17387] team0: Port device team_slave_0 added [ 901.823523][T17387] team0: Port device team_slave_1 added [ 902.090080][T17387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.105646][T17387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.268319][T17387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.384501][T17387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.445920][T17387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 902.747590][T17387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.991045][T10999] Bluetooth: hci6: command tx timeout [ 903.501588][T17387] hsr_slave_0: entered promiscuous mode [ 903.638791][T17387] hsr_slave_1: entered promiscuous mode [ 903.645202][T17387] debugfs: 'hsr0' already exists in 'hsr' [ 903.757798][T17387] Cannot create hsr debugfs directory [ 904.086840][T16429] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 904.099625][T16429] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 904.107350][T16429] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 904.123102][T16429] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 904.130743][T16429] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 904.545863][T17449] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2241'. [ 904.743599][T17449] bridge_slave_1: left allmulticast mode [ 904.749425][T17449] bridge_slave_1: left promiscuous mode [ 904.954862][T17449] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.060331][T16429] Bluetooth: hci6: command tx timeout [ 905.220227][T17449] bridge_slave_0: left allmulticast mode [ 905.232841][T17449] bridge_slave_0: left promiscuous mode [ 905.245844][T17449] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.174450][T16429] Bluetooth: hci7: command tx timeout [ 906.895615][T17466] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 908.051255][T17445] chnl_net:caif_netlink_parms(): no params data found [ 908.118057][T17387] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 908.178990][T17387] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 908.211151][T17387] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 908.220076][T17472] FAULT_INJECTION: forcing a failure. [ 908.220076][T17472] name failslab, interval 1, probability 0, space 0, times 0 [ 908.253566][T16429] Bluetooth: hci7: command tx timeout [ 908.281758][T17472] CPU: 1 UID: 0 PID: 17472 Comm: syz.5.2244 Not tainted syzkaller #0 PREEMPT(full) [ 908.281796][T17472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 908.281815][T17472] Call Trace: [ 908.281826][T17472] [ 908.281838][T17472] dump_stack_lvl+0x16c/0x1f0 [ 908.281881][T17472] should_fail_ex+0x512/0x640 [ 908.281923][T17472] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 908.281962][T17472] should_failslab+0xc2/0x120 [ 908.282000][T17472] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 908.282037][T17472] ? alloc_empty_file+0x55/0x1e0 [ 908.282085][T17472] alloc_empty_file+0x55/0x1e0 [ 908.282130][T17472] path_openat+0xda/0x2cb0 [ 908.282163][T17472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.282206][T17472] ? __pfx_path_openat+0x10/0x10 [ 908.282251][T17472] do_filp_open+0x20b/0x470 [ 908.282292][T17472] ? __pfx_do_filp_open+0x10/0x10 [ 908.282352][T17472] ? alloc_fd+0x471/0x7d0 [ 908.282392][T17472] do_sys_openat2+0x11b/0x1d0 [ 908.282436][T17472] ? __pfx_do_sys_openat2+0x10/0x10 [ 908.282492][T17472] __x64_sys_openat+0x174/0x210 [ 908.282536][T17472] ? __pfx___x64_sys_openat+0x10/0x10 [ 908.282596][T17472] do_syscall_64+0xcd/0x490 [ 908.282638][T17472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.282666][T17472] RIP: 0033:0x7f7dded8ebe9 [ 908.282688][T17472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.282715][T17472] RSP: 002b:00007f7ddfc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 908.282742][T17472] RAX: ffffffffffffffda RBX: 00007f7ddefb5fa0 RCX: 00007f7dded8ebe9 [ 908.282762][T17472] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 908.282782][T17472] RBP: 00007f7ddee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 908.282800][T17472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.282817][T17472] R13: 00007f7ddefb6038 R14: 00007f7ddefb5fa0 R15: 00007ffef758a3b8 [ 908.282852][T17472] [ 908.775180][T17387] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 909.471022][T17480] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2246'. [ 910.105414][T17445] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.112518][T17445] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.175889][T17445] bridge_slave_0: entered allmulticast mode [ 910.243715][T17445] bridge_slave_0: entered promiscuous mode [ 910.278747][T17445] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.312959][T16429] Bluetooth: hci7: command tx timeout [ 910.326382][T17445] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.382662][T17445] bridge_slave_1: entered allmulticast mode [ 910.413565][T17445] bridge_slave_1: entered promiscuous mode [ 910.837024][T17445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.921518][T17445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.380521][T17503] FAULT_INJECTION: forcing a failure. [ 911.380521][T17503] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 911.442327][T17503] CPU: 1 UID: 0 PID: 17503 Comm: syz.5.2245 Not tainted syzkaller #0 PREEMPT(full) [ 911.442357][T17503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 911.442370][T17503] Call Trace: [ 911.442377][T17503] [ 911.442385][T17503] dump_stack_lvl+0x16c/0x1f0 [ 911.442418][T17503] should_fail_ex+0x512/0x640 [ 911.442453][T17503] should_fail_alloc_page+0xe7/0x130 [ 911.442484][T17503] prepare_alloc_pages+0x3c2/0x610 [ 911.442516][T17503] ? is_bpf_text_address+0x8a/0x1a0 [ 911.442548][T17503] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 911.442584][T17503] ? is_bpf_text_address+0x94/0x1a0 [ 911.442609][T17503] ? kernel_text_address+0x8d/0x100 [ 911.442628][T17503] ? __kernel_text_address+0xd/0x40 [ 911.442645][T17503] ? unwind_get_return_address+0x59/0xa0 [ 911.442684][T17503] ? arch_stack_walk+0xa6/0x100 [ 911.442712][T17503] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 911.442738][T17503] ? __lock_acquire+0x62e/0x1ce0 [ 911.442770][T17503] ? __pfx_stack_trace_save+0x10/0x10 [ 911.442800][T17503] ? __pfx_css_rstat_updated+0x10/0x10 [ 911.442823][T17503] ? __lock_acquire+0x62e/0x1ce0 [ 911.442852][T17503] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 911.442886][T17503] ? policy_nodemask+0xea/0x4e0 [ 911.442916][T17503] alloc_pages_mpol+0x1fb/0x550 [ 911.442952][T17503] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 911.442987][T17503] folio_alloc_mpol_noprof+0x36/0x2f0 [ 911.443022][T17503] vma_alloc_folio_noprof+0xed/0x1e0 [ 911.443055][T17503] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 911.443088][T17503] ? rcu_read_unlock+0x2d/0xb0 [ 911.443117][T17503] do_wp_page+0x1e5b/0x4f00 [ 911.443156][T17503] ? __pfx_do_wp_page+0x10/0x10 [ 911.443187][T17503] ? __page_table_check_ptes_set+0x1ae/0x420 [ 911.443217][T17503] ? const_folio_flags+0x5b/0x100 [ 911.443250][T17503] ? folio_add_new_anon_rmap+0x3b0/0x1dc0 [ 911.443278][T17503] do_swap_page+0x2ec8/0x6490 [ 911.443322][T17503] ? __pfx_do_swap_page+0x10/0x10 [ 911.443356][T17503] ? __pfx_default_wake_function+0x10/0x10 [ 911.443384][T17503] ? rcu_is_watching+0x12/0xc0 [ 911.443406][T17503] ? ___pte_offset_map+0x2ad/0x4f0 [ 911.443440][T17503] __handle_mm_fault+0x1719/0x2a50 [ 911.443465][T17503] ? mt_find+0x3ef/0xa30 [ 911.443497][T17503] ? __pfx___handle_mm_fault+0x10/0x10 [ 911.443517][T17503] ? __pfx_mt_find+0x10/0x10 [ 911.443562][T17503] ? find_vma+0xbf/0x140 [ 911.443589][T17503] ? __pfx_find_vma+0x10/0x10 [ 911.443621][T17503] handle_mm_fault+0x589/0xd10 [ 911.443644][T17503] ? __bpf_trace_exceptions+0x1/0x40 [ 911.443678][T17503] do_user_addr_fault+0x7a6/0x1370 [ 911.443714][T17503] ? rcu_is_watching+0x12/0xc0 [ 911.443738][T17503] exc_page_fault+0x5c/0xb0 [ 911.443786][T17503] asm_exc_page_fault+0x26/0x30 [ 911.443809][T17503] RIP: 0010:__do_sys_waitid+0x12e/0x250 [ 911.443846][T17503] Code: 00 48 89 de 49 bd 00 f0 ff ff ff 7f 00 00 4c 89 ef e8 c6 4c 3f 00 49 39 dd 0f 82 17 01 00 00 e8 08 52 3f 00 0f 01 cb 0f ae e8 <44> 89 33 e8 fa 51 3f 00 c7 43 04 00 00 00 00 e8 ee 51 3f 00 8b 44 [ 911.443870][T17503] RSP: 0018:ffffc90004b3fda0 EFLAGS: 00050293 [ 911.443890][T17503] RAX: 0000000000000000 RBX: 0000200000000080 RCX: ffffffff817bb68a [ 911.443905][T17503] RDX: ffff8880898c8000 RSI: ffffffff817bb698 RDI: 0000000000000006 [ 911.443921][T17503] RBP: ffffc90004b3ff18 R08: 0000000000000006 R09: 00007ffffffff000 [ 911.443946][T17503] R10: 0000200000000080 R11: 0000000000000000 R12: 1ffff92000967fb6 [ 911.443961][T17503] R13: 00007ffffffff000 R14: 0000000000000000 R15: fffffffffffffff6 [ 911.443984][T17503] ? __do_sys_waitid+0x11a/0x250 [ 911.444019][T17503] ? __do_sys_waitid+0x128/0x250 [ 911.444060][T17503] ? __pfx___do_sys_waitid+0x10/0x10 [ 911.444095][T17503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 911.444145][T17503] ? __pfx_ksys_write+0x10/0x10 [ 911.444182][T17503] do_syscall_64+0xcd/0x490 [ 911.444216][T17503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.444240][T17503] RIP: 0033:0x7f7dded8ebe9 [ 911.444257][T17503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.444280][T17503] RSP: 002b:00007f7ddfbd9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 911.444301][T17503] RAX: ffffffffffffffda RBX: 00007f7ddefb6180 RCX: 00007f7dded8ebe9 [ 911.444316][T17503] RDX: 0000200000000080 RSI: ffffffffffffffff RDI: 0000000000000000 [ 911.444331][T17503] RBP: 00007f7ddfbd9090 R08: 0000000000000000 R09: 0000000000000000 [ 911.444346][T17503] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 911.444360][T17503] R13: 00007f7ddefb6218 R14: 00007f7ddefb6180 R15: 00007ffef758a3b8 [ 911.444390][T17503] [ 912.452074][T16429] Bluetooth: hci7: command tx timeout [ 912.459148][T17445] team0: Port device team_slave_0 added [ 912.718083][T17445] team0: Port device team_slave_1 added [ 912.755192][T17387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.074244][T17445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 913.198749][T17445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.387312][T17445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 913.481349][T17387] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.558916][T17445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 913.585802][T17445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 913.635247][T17509] FAULT_INJECTION: forcing a failure. [ 913.635247][T17509] name failslab, interval 1, probability 0, space 0, times 0 [ 913.665518][T17509] CPU: 1 UID: 0 PID: 17509 Comm: syz.0.2250 Not tainted syzkaller #0 PREEMPT(full) [ 913.665551][T17509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 913.665564][T17509] Call Trace: [ 913.665571][T17509] [ 913.665580][T17509] dump_stack_lvl+0x16c/0x1f0 [ 913.665613][T17509] should_fail_ex+0x512/0x640 [ 913.665643][T17509] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 913.665672][T17509] should_failslab+0xc2/0x120 [ 913.665700][T17509] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 913.665731][T17509] ? alloc_empty_file+0x55/0x1e0 [ 913.665766][T17509] alloc_empty_file+0x55/0x1e0 [ 913.665798][T17509] path_openat+0xda/0x2cb0 [ 913.665821][T17509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.665851][T17509] ? __pfx_path_openat+0x10/0x10 [ 913.665887][T17509] do_filp_open+0x20b/0x470 [ 913.665912][T17509] ? __pfx_do_filp_open+0x10/0x10 [ 913.665955][T17509] ? alloc_fd+0x471/0x7d0 [ 913.665983][T17509] do_sys_openat2+0x11b/0x1d0 [ 913.666016][T17509] ? __pfx_do_sys_openat2+0x10/0x10 [ 913.666058][T17509] __x64_sys_openat+0x174/0x210 [ 913.666092][T17509] ? __pfx___x64_sys_openat+0x10/0x10 [ 913.666135][T17509] do_syscall_64+0xcd/0x490 [ 913.666166][T17509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.666187][T17509] RIP: 0033:0x7f0331f8ebe9 [ 913.666203][T17509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.666224][T17509] RSP: 002b:00007f0332e1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 913.666243][T17509] RAX: ffffffffffffffda RBX: 00007f03321b5fa0 RCX: 00007f0331f8ebe9 [ 913.666257][T17509] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 913.666270][T17509] RBP: 00007f0332011e19 R08: 0000000000000000 R09: 0000000000000000 [ 913.666283][T17509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.666296][T17509] R13: 00007f03321b6038 R14: 00007f03321b5fa0 R15: 00007ffe48f951b8 [ 913.666321][T17509] [ 913.685354][T17445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.024990][T13491] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.032103][T13491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.210130][T17512] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2251'. [ 914.507218][T17445] hsr_slave_0: entered promiscuous mode [ 914.565501][T17513] program syz.0.2251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 914.575538][T17445] hsr_slave_1: entered promiscuous mode [ 914.601124][T17445] debugfs: 'hsr0' already exists in 'hsr' [ 914.630422][T17445] Cannot create hsr debugfs directory [ 914.702806][T13491] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.709961][T13491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.538797][T17517] FAULT_INJECTION: forcing a failure. [ 915.538797][T17517] name failslab, interval 1, probability 0, space 0, times 0 [ 915.655749][T17517] CPU: 0 UID: 0 PID: 17517 Comm: syz.0.2252 Not tainted syzkaller #0 PREEMPT(full) [ 915.655809][T17517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 915.655825][T17517] Call Trace: [ 915.655835][T17517] [ 915.655844][T17517] dump_stack_lvl+0x16c/0x1f0 [ 915.655880][T17517] should_fail_ex+0x512/0x640 [ 915.655914][T17517] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 915.655946][T17517] should_failslab+0xc2/0x120 [ 915.655977][T17517] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 915.656005][T17517] ? getname_flags.part.0+0x376/0x550 [ 915.656042][T17517] ? getname_flags.part.0+0x4c/0x550 [ 915.656082][T17517] getname_flags.part.0+0x4c/0x550 [ 915.656122][T17517] getname_flags+0x93/0xf0 [ 915.656149][T17517] __x64_sys_renameat2+0xd4/0x130 [ 915.656184][T17517] do_syscall_64+0xcd/0x490 [ 915.656218][T17517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.656255][T17517] RIP: 0033:0x7f0331f8ebe9 [ 915.656291][T17517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 915.656315][T17517] RSP: 002b:00007f0332e1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 915.656338][T17517] RAX: ffffffffffffffda RBX: 00007f03321b5fa0 RCX: 00007f0331f8ebe9 [ 915.656356][T17517] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: ffffffffffffffff [ 915.656372][T17517] RBP: 00007f0332011e19 R08: 0000000000000004 R09: 0000000000000000 [ 915.656386][T17517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.656400][T17517] R13: 00007f03321b6038 R14: 00007f03321b5fa0 R15: 00007ffe48f951b8 [ 915.656430][T17517] [ 916.621249][T17445] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 916.666482][T17521] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2253'. [ 916.720839][T17445] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 916.776026][T17445] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 916.893715][T17445] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 917.060532][T17387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.288633][T17522] FAULT_INJECTION: forcing a failure. [ 917.288633][T17522] name fail_futex, interval 1, probability 0, space 0, times 0 [ 917.425148][T17522] CPU: 0 UID: 0 PID: 17522 Comm: syz.0.2254 Not tainted syzkaller #0 PREEMPT(full) [ 917.425188][T17522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 917.425207][T17522] Call Trace: [ 917.425218][T17522] [ 917.425230][T17522] dump_stack_lvl+0x16c/0x1f0 [ 917.425275][T17522] should_fail_ex+0x512/0x640 [ 917.425326][T17522] ? unwind_get_return_address+0x59/0xa0 [ 917.425365][T17522] get_futex_key+0x1d0/0x1560 [ 917.425396][T17522] ? __pfx_get_futex_key+0x10/0x10 [ 917.425422][T17522] ? stack_trace_save+0x8e/0xc0 [ 917.425447][T17522] ? __pfx_stack_trace_save+0x10/0x10 [ 917.425477][T17522] futex_wait_setup+0x9d/0x550 [ 917.425518][T17522] __futex_wait+0x194/0x2f0 [ 917.425552][T17522] ? __pfx___futex_wait+0x10/0x10 [ 917.425589][T17522] ? __pfx_futex_wake_mark+0x10/0x10 [ 917.425626][T17522] ? futex_private_hash_put+0x176/0x300 [ 917.425656][T17522] ? futex_private_hash_put+0x18a/0x300 [ 917.425684][T17522] futex_wait+0xe8/0x380 [ 917.425716][T17522] ? __pfx_futex_wait+0x10/0x10 [ 917.425758][T17522] ? kmem_cache_free+0x2d1/0x4d0 [ 917.425788][T17522] ? find_held_lock+0x2b/0x80 [ 917.425816][T17522] ? putname+0x154/0x1a0 [ 917.425852][T17522] ? do_sys_openat2+0x1b0/0x1d0 [ 917.425900][T17522] do_futex+0x229/0x350 [ 917.425927][T17522] ? __pfx_do_futex+0x10/0x10 [ 917.425960][T17522] __x64_sys_futex+0x1e0/0x4c0 [ 917.425989][T17522] ? __x64_sys_openat+0x174/0x210 [ 917.426021][T17522] ? __pfx___x64_sys_futex+0x10/0x10 [ 917.426060][T17522] do_syscall_64+0xcd/0x490 [ 917.426090][T17522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.426111][T17522] RIP: 0033:0x7f0331f8ebe9 [ 917.426127][T17522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.426148][T17522] RSP: 002b:00007f0332e1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 917.426168][T17522] RAX: ffffffffffffffda RBX: 00007f03321b5fa8 RCX: 00007f0331f8ebe9 [ 917.426183][T17522] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f03321b5fa8 [ 917.426197][T17522] RBP: 00007f03321b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 917.426210][T17522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.426222][T17522] R13: 00007f03321b6038 R14: 00007ffe48f950d0 R15: 00007ffe48f951b8 [ 917.426248][T17522] [ 918.247641][T17445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.433396][T17445] 8021q: adding VLAN 0 to HW filter on device team0 [ 918.579526][T13491] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.586699][T13491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 918.712676][T13514] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.719810][T13514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.375770][T17387] veth0_vlan: entered promiscuous mode [ 919.447864][T17387] veth1_vlan: entered promiscuous mode [ 919.714836][T17387] veth0_macvtap: entered promiscuous mode [ 919.778093][T17387] veth1_macvtap: entered promiscuous mode [ 919.890703][T17548] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2257'. [ 919.945629][T17387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.320816][T17548] team0: Port device team_slave_1 removed [ 920.432957][T17387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.446745][T17552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2258'. [ 920.566685][ T8488] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.602060][ T8488] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.759443][ T8488] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.820739][ T8488] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 920.931725][T17445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.978502][T17561] FAULT_INJECTION: forcing a failure. [ 920.978502][T17561] name failslab, interval 1, probability 0, space 0, times 0 [ 921.010775][T17561] CPU: 0 UID: 0 PID: 17561 Comm: syz.0.2259 Not tainted syzkaller #0 PREEMPT(full) [ 921.010802][T17561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 921.010815][T17561] Call Trace: [ 921.010822][T17561] [ 921.010830][T17561] dump_stack_lvl+0x16c/0x1f0 [ 921.010861][T17561] should_fail_ex+0x512/0x640 [ 921.010891][T17561] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 921.010920][T17561] should_failslab+0xc2/0x120 [ 921.010953][T17561] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 921.010979][T17561] ? alloc_empty_file+0x55/0x1e0 [ 921.011015][T17561] alloc_empty_file+0x55/0x1e0 [ 921.011047][T17561] path_openat+0xda/0x2cb0 [ 921.011069][T17561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.011099][T17561] ? __pfx_path_openat+0x10/0x10 [ 921.011129][T17561] do_filp_open+0x20b/0x470 [ 921.011154][T17561] ? __pfx_do_filp_open+0x10/0x10 [ 921.011196][T17561] ? alloc_fd+0x471/0x7d0 [ 921.011226][T17561] do_sys_openat2+0x11b/0x1d0 [ 921.011258][T17561] ? __pfx_do_sys_openat2+0x10/0x10 [ 921.011299][T17561] __x64_sys_openat+0x174/0x210 [ 921.011332][T17561] ? __pfx___x64_sys_openat+0x10/0x10 [ 921.011374][T17561] do_syscall_64+0xcd/0x490 [ 921.011405][T17561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.011425][T17561] RIP: 0033:0x7f0331f8ebe9 [ 921.011441][T17561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.011461][T17561] RSP: 002b:00007f0332e1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 921.011480][T17561] RAX: ffffffffffffffda RBX: 00007f03321b5fa0 RCX: 00007f0331f8ebe9 [ 921.011494][T17561] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 921.011508][T17561] RBP: 00007f0332011e19 R08: 0000000000000000 R09: 0000000000000000 [ 921.011520][T17561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.011533][T17561] R13: 00007f03321b6038 R14: 00007f03321b5fa0 R15: 00007ffe48f951b8 [ 921.011558][T17561] [ 921.874120][T17570] FAULT_INJECTION: forcing a failure. [ 921.874120][T17570] name failslab, interval 1, probability 0, space 0, times 0 [ 921.942754][T13491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.976400][T17570] CPU: 0 UID: 0 PID: 17570 Comm: syz.0.2261 Not tainted syzkaller #0 PREEMPT(full) [ 921.976445][T17570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 921.976483][T17570] Call Trace: [ 921.976494][T17570] [ 921.976508][T17570] dump_stack_lvl+0x16c/0x1f0 [ 921.976559][T17570] should_fail_ex+0x512/0x640 [ 921.976613][T17570] should_failslab+0xc2/0x120 [ 921.976659][T17570] __kmalloc_cache_noprof+0x6a/0x3e0 [ 921.976697][T17570] ? proc_self_get_link+0x1a9/0x230 [ 921.976757][T17570] proc_self_get_link+0x1a9/0x230 [ 921.976809][T17570] ? __pfx_proc_self_get_link+0x10/0x10 [ 921.976855][T17570] step_into+0x195e/0x2270 [ 921.976894][T17570] ? __pfx_step_into+0x10/0x10 [ 921.976930][T17570] ? lookup_fast+0x156/0x610 [ 921.976965][T17570] walk_component+0xfc/0x5b0 [ 921.976998][T17570] link_path_walk+0x627/0xe20 [ 921.977042][T17570] path_openat+0x1b0/0x2cb0 [ 921.977074][T17570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.977118][T17570] ? __pfx_path_openat+0x10/0x10 [ 921.977160][T17570] do_filp_open+0x20b/0x470 [ 921.977186][T17570] ? __pfx_do_filp_open+0x10/0x10 [ 921.977248][T17570] ? alloc_fd+0x471/0x7d0 [ 921.977278][T17570] do_sys_openat2+0x11b/0x1d0 [ 921.977313][T17570] ? __pfx_do_sys_openat2+0x10/0x10 [ 921.977357][T17570] __x64_sys_openat+0x174/0x210 [ 921.977391][T17570] ? __pfx___x64_sys_openat+0x10/0x10 [ 921.977437][T17570] do_syscall_64+0xcd/0x490 [ 921.977469][T17570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.977491][T17570] RIP: 0033:0x7f0331f8ebe9 [ 921.977509][T17570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.977531][T17570] RSP: 002b:00007f0332e1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 921.977553][T17570] RAX: ffffffffffffffda RBX: 00007f03321b5fa0 RCX: 00007f0331f8ebe9 [ 921.977575][T17570] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 921.977595][T17570] RBP: 00007f0332011e19 R08: 0000000000000000 R09: 0000000000000000 [ 921.977614][T17570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.977632][T17570] R13: 00007f03321b6038 R14: 00007f03321b5fa0 R15: 00007ffe48f951b8 [ 921.977681][T17570] [ 922.457000][T13491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 922.773602][ T8161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 922.866517][ T8161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 923.429761][T17576] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2262'. [ 923.566867][T17445] veth0_vlan: entered promiscuous mode [ 923.652911][T17445] veth1_vlan: entered promiscuous mode [ 923.738616][T17445] veth0_macvtap: entered promiscuous mode [ 923.779382][T17445] veth1_macvtap: entered promiscuous mode [ 923.929639][T17445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 924.046873][T17445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 924.138531][T13504] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.196072][T13504] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.623494][T13491] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.674881][T13491] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.676650][T17597] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2265'. [ 925.360795][T13504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.431341][T13504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.653894][T16819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.690604][T16819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.914959][T17622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2270'. [ 928.972388][T17622] team0: Port device team_slave_1 removed [ 929.587770][T17641] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 929.999365][T17643] sp0: Synchronizing with TNC [ 930.183120][T17643] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 930.302899][T13491] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.080695][T17656] netlink: 326 bytes leftover after parsing attributes in process `syz.5.2275'. [ 931.220483][T13491] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.944386][T13491] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.009893][T17666] FAULT_INJECTION: forcing a failure. [ 932.009893][T17666] name failslab, interval 1, probability 0, space 0, times 0 [ 932.102585][T17666] CPU: 1 UID: 0 PID: 17666 Comm: syz.5.2277 Not tainted syzkaller #0 PREEMPT(full) [ 932.102628][T17666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 932.102649][T17666] Call Trace: [ 932.102660][T17666] [ 932.102674][T17666] dump_stack_lvl+0x16c/0x1f0 [ 932.102726][T17666] should_fail_ex+0x512/0x640 [ 932.102790][T17666] should_failslab+0xc2/0x120 [ 932.102837][T17666] __kmalloc_cache_noprof+0x6a/0x3e0 [ 932.102875][T17666] ? proc_self_get_link+0x1a9/0x230 [ 932.102910][T17666] proc_self_get_link+0x1a9/0x230 [ 932.102942][T17666] ? __pfx_proc_self_get_link+0x10/0x10 [ 932.102972][T17666] step_into+0x195e/0x2270 [ 932.103004][T17666] ? __pfx_step_into+0x10/0x10 [ 932.103034][T17666] ? lookup_fast+0x156/0x610 [ 932.103063][T17666] walk_component+0xfc/0x5b0 [ 932.103090][T17666] link_path_walk+0x627/0xe20 [ 932.103126][T17666] path_openat+0x1b0/0x2cb0 [ 932.103154][T17666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.103189][T17666] ? __pfx_path_openat+0x10/0x10 [ 932.103227][T17666] do_filp_open+0x20b/0x470 [ 932.103257][T17666] ? __pfx_do_filp_open+0x10/0x10 [ 932.103309][T17666] ? alloc_fd+0x471/0x7d0 [ 932.103343][T17666] do_sys_openat2+0x11b/0x1d0 [ 932.103382][T17666] ? __pfx_do_sys_openat2+0x10/0x10 [ 932.103432][T17666] __x64_sys_openat+0x174/0x210 [ 932.103472][T17666] ? __pfx___x64_sys_openat+0x10/0x10 [ 932.103525][T17666] do_syscall_64+0xcd/0x490 [ 932.103561][T17666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.103585][T17666] RIP: 0033:0x7f7dded8ebe9 [ 932.103604][T17666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.103628][T17666] RSP: 002b:00007f7ddfc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 932.103651][T17666] RAX: ffffffffffffffda RBX: 00007f7ddefb5fa0 RCX: 00007f7dded8ebe9 [ 932.103667][T17666] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 932.103682][T17666] RBP: 00007f7ddee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 932.103697][T17666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 932.103712][T17666] R13: 00007f7ddefb6038 R14: 00007f7ddefb5fa0 R15: 00007ffef758a3b8 [ 932.103747][T17666] [ 932.534898][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.541541][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.808487][T13491] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.722268][T17669] FAULT_INJECTION: forcing a failure. [ 933.722268][T17669] name fail_futex, interval 1, probability 0, space 0, times 0 [ 933.810082][T17669] CPU: 0 UID: 0 PID: 17669 Comm: syz.7.2278 Not tainted syzkaller #0 PREEMPT(full) [ 933.810119][T17669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 933.810139][T17669] Call Trace: [ 933.810149][T17669] [ 933.810162][T17669] dump_stack_lvl+0x16c/0x1f0 [ 933.810208][T17669] should_fail_ex+0x512/0x640 [ 933.810253][T17669] get_futex_key+0x1d0/0x1560 [ 933.810293][T17669] ? __pfx_get_futex_key+0x10/0x10 [ 933.810339][T17669] ? trace_pid_list_is_set+0xfb/0x150 [ 933.810383][T17669] ? do_raw_spin_unlock+0x172/0x230 [ 933.810424][T17669] futex_wait_setup+0x9d/0x550 [ 933.810465][T17669] __futex_wait+0x194/0x2f0 [ 933.810499][T17669] ? __pfx___futex_wait+0x10/0x10 [ 933.810534][T17669] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 933.810561][T17669] ? lockdep_hardirqs_on+0x7c/0x110 [ 933.810607][T17669] ? __pfx_futex_wake_mark+0x10/0x10 [ 933.810653][T17669] ? futex_private_hash_put+0x176/0x300 [ 933.810693][T17669] ? futex_private_hash_put+0x18a/0x300 [ 933.810738][T17669] futex_wait+0xe8/0x380 [ 933.810771][T17669] ? __pfx_futex_wait+0x10/0x10 [ 933.810809][T17669] ? kmem_cache_free+0x2d1/0x4d0 [ 933.810833][T17669] ? find_held_lock+0x2b/0x80 [ 933.810853][T17669] ? putname+0x154/0x1a0 [ 933.810883][T17669] ? do_sys_openat2+0x1b0/0x1d0 [ 933.810920][T17669] do_futex+0x229/0x350 [ 933.810948][T17669] ? __pfx_do_futex+0x10/0x10 [ 933.810994][T17669] __x64_sys_futex+0x1e0/0x4c0 [ 933.811023][T17669] ? __x64_sys_openat+0x174/0x210 [ 933.811055][T17669] ? __pfx___x64_sys_futex+0x10/0x10 [ 933.811091][T17669] do_syscall_64+0xcd/0x490 [ 933.811120][T17669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.811141][T17669] RIP: 0033:0x7f0a76f8ebe9 [ 933.811157][T17669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 933.811177][T17669] RSP: 002b:00007f0a77eba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 933.811196][T17669] RAX: ffffffffffffffda RBX: 00007f0a771b5fa8 RCX: 00007f0a76f8ebe9 [ 933.811210][T17669] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0a771b5fa8 [ 933.811223][T17669] RBP: 00007f0a771b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 933.811236][T17669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.811249][T17669] R13: 00007f0a771b6038 R14: 00007ffe01e3ff20 R15: 00007ffe01e40008 [ 933.811275][T17669] [ 934.365214][T13491] bridge_slave_0: left allmulticast mode [ 934.431665][T13491] bridge_slave_0: left promiscuous mode [ 934.449713][T13491] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.785672][T17700] random: crng reseeded on system resumption [ 936.841773][T17700] FAULT_INJECTION: forcing a failure. [ 936.841773][T17700] name failslab, interval 1, probability 0, space 0, times 0 [ 937.025169][T17700] CPU: 1 UID: 0 PID: 17700 Comm: syz.0.2285 Not tainted syzkaller #0 PREEMPT(full) [ 937.025215][T17700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 937.025233][T17700] Call Trace: [ 937.025244][T17700] [ 937.025256][T17700] dump_stack_lvl+0x16c/0x1f0 [ 937.025300][T17700] should_fail_ex+0x512/0x640 [ 937.025342][T17700] ? lockdep_hardirqs_on+0x7c/0x110 [ 937.025383][T17700] should_failslab+0xc2/0x120 [ 937.025423][T17700] __kmalloc_cache_noprof+0x6a/0x3e0 [ 937.025452][T17700] ? do_raw_spin_lock+0x12c/0x2b0 [ 937.025496][T17700] ? find_held_lock+0x2b/0x80 [ 937.025522][T17700] ? async_schedule_node_domain+0x54/0x120 [ 937.025563][T17700] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 937.025601][T17700] async_schedule_node_domain+0x54/0x120 [ 937.025641][T17700] dev_cache_fw_image+0x38e/0x490 [ 937.025679][T17700] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 937.025720][T17700] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 937.025756][T17700] dpm_for_each_dev+0x5a/0xb0 [ 937.025788][T17700] fw_pm_notify+0x81/0x150 [ 937.025819][T17700] notifier_call_chain+0xbc/0x410 [ 937.025856][T17700] ? __pfx_fw_pm_notify+0x10/0x10 [ 937.025896][T17700] blocking_notifier_call_chain_robust+0xc8/0x160 [ 937.025937][T17700] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 937.025991][T17700] pm_notifier_call_chain_robust+0x27/0x60 [ 937.026034][T17700] snapshot_open+0x218/0x2b0 [ 937.026069][T17700] ? __pfx_snapshot_open+0x10/0x10 [ 937.026106][T17700] misc_open+0x35a/0x420 [ 937.026138][T17700] ? __pfx_misc_open+0x10/0x10 [ 937.026168][T17700] chrdev_open+0x234/0x6a0 [ 937.026267][T17700] ? __pfx_apparmor_file_open+0x10/0x10 [ 937.026310][T17700] ? __pfx_chrdev_open+0x10/0x10 [ 937.026352][T17700] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 937.026393][T17700] do_dentry_open+0x982/0x1530 [ 937.026433][T17700] ? __pfx_chrdev_open+0x10/0x10 [ 937.026479][T17700] vfs_open+0x82/0x3f0 [ 937.026528][T17700] path_openat+0x1de4/0x2cb0 [ 937.026576][T17700] ? __pfx_path_openat+0x10/0x10 [ 937.026623][T17700] do_filp_open+0x20b/0x470 [ 937.026660][T17700] ? __pfx_do_filp_open+0x10/0x10 [ 937.026724][T17700] ? alloc_fd+0x471/0x7d0 [ 937.026785][T17700] do_sys_openat2+0x11b/0x1d0 [ 937.026833][T17700] ? __pfx_do_sys_openat2+0x10/0x10 [ 937.026885][T17700] ? __pfx___might_resched+0x10/0x10 [ 937.026928][T17700] __x64_sys_openat+0x174/0x210 [ 937.026975][T17700] ? __pfx___x64_sys_openat+0x10/0x10 [ 937.027043][T17700] do_syscall_64+0xcd/0x490 [ 937.027090][T17700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.027122][T17700] RIP: 0033:0x7f0331f8ebe9 [ 937.027148][T17700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.027178][T17700] RSP: 002b:00007f0332e1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 937.027228][T17700] RAX: ffffffffffffffda RBX: 00007f03321b5fa0 RCX: 00007f0331f8ebe9 [ 937.027243][T17700] RDX: 0000000000000101 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 937.027257][T17700] RBP: 00007f0332011e19 R08: 0000000000000000 R09: 0000000000000000 [ 937.027271][T17700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.027284][T17700] R13: 00007f03321b6038 R14: 00007f03321b5fa0 R15: 00007ffe48f951b8 [ 937.027323][T17700] [ 937.029140][T17700] [ 937.351372][T17700] ====================================================== [ 937.358389][T17700] WARNING: possible circular locking dependency detected [ 937.365404][T17700] syzkaller #0 Not tainted [ 937.369833][T17700] ------------------------------------------------------ [ 937.376847][T17700] syz.0.2285/17700 is trying to acquire lock: [ 937.382908][T17700] ffff88807e8f86c8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7e0/0x23e0 [ 937.393546][T17700] [ 937.393546][T17700] but task is already holding lock: [ 937.400905][T17700] ffffffff8f5173c8 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 937.409804][T17700] [ 937.409804][T17700] which lock already depends on the new lock. [ 937.409804][T17700] [ 937.420203][T17700] [ 937.420203][T17700] the existing dependency chain (in reverse order) is: [ 937.429209][T17700] [ 937.429209][T17700] -> #4 (dpm_list_mtx){+.+.}-{4:4}: [ 937.436629][T17700] __mutex_lock+0x193/0x1060 [ 937.441764][T17700] device_pm_add+0x87/0x3e0 [ 937.446835][T17700] device_add+0x9cd/0x1aa0 [ 937.451861][T17700] device_create_groups_vargs+0x1f8/0x270 [ 937.458108][T17700] device_create+0xed/0x130 [ 937.463131][T17700] msr_device_create+0x31/0x70 [ 937.468428][T17700] cpuhp_invoke_callback+0x3d5/0xa10 [ 937.474243][T17700] cpuhp_thread_fun+0x47e/0x6f0 [ 937.479635][T17700] smpboot_thread_fn+0x3f4/0xae0 [ 937.485106][T17700] kthread+0x3c5/0x780 [ 937.489719][T17700] ret_from_fork+0x5d4/0x6f0 [ 937.494862][T17700] ret_from_fork_asm+0x1a/0x30 [ 937.500180][T17700] [ 937.500180][T17700] -> #3 (cpuhp_state-up){+.+.}-{0:0}: [ 937.507746][T17700] cpuhp_thread_fun+0x193/0x6f0 [ 937.513134][T17700] smpboot_thread_fn+0x3f4/0xae0 [ 937.518609][T17700] kthread+0x3c5/0x780 [ 937.523212][T17700] ret_from_fork+0x5d4/0x6f0 [ 937.528342][T17700] ret_from_fork_asm+0x1a/0x30 [ 937.533643][T17700] [ 937.533643][T17700] -> #2 (cpu_hotplug_lock){++++}-{0:0}: [ 937.541825][T17700] cpus_read_lock+0x42/0x160 [ 937.546953][T17700] ring_buffer_resize+0x105/0x15c0 [ 937.552603][T17700] tracing_update_buffers+0x15e/0x1f0 [ 937.558509][T17700] event_pid_write.isra.0+0xf8/0x7f0 [ 937.564330][T17700] vfs_write+0x2a0/0x11d0 [ 937.569197][T17700] ksys_write+0x12a/0x250 [ 937.574061][T17700] do_syscall_64+0xcd/0x490 [ 937.579114][T17700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.585539][T17700] [ 937.585539][T17700] -> #1 (trace_types_lock){+.+.}-{4:4}: [ 937.593279][T17700] __mutex_lock+0x193/0x1060 [ 937.598408][T17700] tracing_check_open_get_tr.part.0+0x49/0x190 [ 937.605095][T17700] tracing_open_generic_tr+0x66/0xf0 [ 937.610927][T17700] do_dentry_open+0x982/0x1530 [ 937.616240][T17700] vfs_open+0x82/0x3f0 [ 937.620851][T17700] dentry_open+0x71/0xd0 [ 937.625633][T17700] ima_calc_file_hash+0x2b6/0x490 [ 937.631189][T17700] ima_collect_measurement+0x899/0xa40 [ 937.637199][T17700] process_measurement+0x11fa/0x23e0 [ 937.643019][T17700] ima_file_check+0xc5/0x110 [ 937.648138][T17700] security_file_post_open+0x8e/0x210 [ 937.654059][T17700] path_openat+0x1404/0x2cb0 [ 937.659190][T17700] do_filp_open+0x20b/0x470 [ 937.664265][T17700] do_sys_openat2+0x11b/0x1d0 [ 937.669534][T17700] __x64_sys_openat+0x174/0x210 [ 937.674943][T17700] do_syscall_64+0xcd/0x490 [ 937.680007][T17700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.686432][T17700] [ 937.686432][T17700] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 937.695103][T17700] __lock_acquire+0x12a6/0x1ce0 [ 937.700514][T17700] lock_acquire+0x179/0x350 [ 937.705559][T17700] __mutex_lock+0x193/0x1060 [ 937.710705][T17700] process_measurement+0x7e0/0x23e0 [ 937.716428][T17700] ima_file_check+0xc5/0x110 [ 937.721541][T17700] security_file_post_open+0x8e/0x210 [ 937.727442][T17700] path_openat+0x1404/0x2cb0 [ 937.732559][T17700] do_file_open_root+0x322/0x610 [ 937.738144][T17700] file_open_root+0x2a7/0x450 [ 937.743375][T17700] kernel_read_file_from_path_initns+0x189/0x260 [ 937.750261][T17700] _request_firmware+0x744/0x1470 [ 937.755818][T17700] __async_dev_cache_fw_image+0xb1/0x340 [ 937.761988][T17700] async_schedule_node_domain+0xd1/0x120 [ 937.768154][T17700] dev_cache_fw_image+0x38e/0x490 [ 937.773703][T17700] dpm_for_each_dev+0x5a/0xb0 [ 937.778907][T17700] fw_pm_notify+0x81/0x150 [ 937.783855][T17700] notifier_call_chain+0xbc/0x410 [ 937.789424][T17700] blocking_notifier_call_chain_robust+0xc8/0x160 [ 937.796372][T17700] pm_notifier_call_chain_robust+0x27/0x60 [ 937.802711][T17700] snapshot_open+0x218/0x2b0 [ 937.807830][T17700] misc_open+0x35a/0x420 [ 937.812623][T17700] chrdev_open+0x234/0x6a0 [ 937.817579][T17700] do_dentry_open+0x982/0x1530 [ 937.822875][T17700] vfs_open+0x82/0x3f0 [ 937.827491][T17700] path_openat+0x1de4/0x2cb0 [ 937.832615][T17700] do_filp_open+0x20b/0x470 [ 937.838003][T17700] do_sys_openat2+0x11b/0x1d0 [ 937.843219][T17700] __x64_sys_openat+0x174/0x210 [ 937.848695][T17700] do_syscall_64+0xcd/0x490 [ 937.853731][T17700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.860175][T17700] [ 937.860175][T17700] other info that might help us debug this: [ 937.860175][T17700] [ 937.870402][T17700] Chain exists of: [ 937.870402][T17700] &ima_iint_mutex_key[depth] --> cpuhp_state-up --> dpm_list_mtx [ 937.870402][T17700] [ 937.884065][T17700] Possible unsafe locking scenario: [ 937.884065][T17700] [ 937.891605][T17700] CPU0 CPU1 [ 937.896969][T17700] ---- ---- [ 937.902330][T17700] lock(dpm_list_mtx); [ 937.906491][T17700] lock(cpuhp_state-up); [ 937.913343][T17700] lock(dpm_list_mtx); [ 937.920025][T17700] lock(&ima_iint_mutex_key[depth]); [ 937.925400][T17700] [ 937.925400][T17700] *** DEADLOCK *** [ 937.925400][T17700] [ 937.933539][T17700] 5 locks held by syz.0.2285/17700: [ 937.938734][T17700] #0: ffffffff8f306f48 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 937.947222][T17700] #1: ffffffff8e484808 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 937.957599][T17700] #2: ffffffff8e4c4c70 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 937.969462][T17700] #3: ffffffff8f51c9c8 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 937.978100][T17700] #4: ffffffff8f5173c8 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 937.987434][T17700] [ 937.987434][T17700] stack backtrace: [ 937.993413][T17700] CPU: 1 UID: 0 PID: 17700 Comm: syz.0.2285 Not tainted syzkaller #0 PREEMPT(full) [ 937.993443][T17700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 937.993458][T17700] Call Trace: [ 937.993466][T17700] [ 937.993475][T17700] dump_stack_lvl+0x116/0x1f0 [ 937.993509][T17700] print_circular_bug+0x275/0x350 [ 937.993540][T17700] check_noncircular+0x14c/0x170 [ 937.993573][T17700] __lock_acquire+0x12a6/0x1ce0 [ 937.993609][T17700] lock_acquire+0x179/0x350 [ 937.993639][T17700] ? process_measurement+0x7e0/0x23e0 [ 937.993665][T17700] ? __pfx___might_resched+0x10/0x10 [ 937.993691][T17700] ? process_measurement+0x7e0/0x23e0 [ 937.993714][T17700] __mutex_lock+0x193/0x1060 [ 937.993746][T17700] ? process_measurement+0x7e0/0x23e0 [ 937.993791][T17700] ? __pfx___mutex_lock+0x10/0x10 [ 937.993843][T17700] ? __pfx___might_resched+0x10/0x10 [ 937.993890][T17700] ? find_held_lock+0x2b/0x80 [ 937.993917][T17700] ? down_write+0x14d/0x200 [ 937.993961][T17700] ? process_measurement+0x7e0/0x23e0 [ 937.993988][T17700] process_measurement+0x7e0/0x23e0 [ 937.994022][T17700] ? __pfx_process_measurement+0x10/0x10 [ 937.994054][T17700] ? find_held_lock+0x2b/0x80 [ 937.994080][T17700] ? fscrypt_file_open+0x47c/0x590 [ 937.994135][T17700] ? __pfx___fsnotify_parent+0x10/0x10 [ 937.994162][T17700] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 937.994197][T17700] ima_file_check+0xc5/0x110 [ 937.994225][T17700] ? __pfx_ima_file_check+0x10/0x10 [ 937.994254][T17700] ? vfs_open+0x2e3/0x3f0 [ 937.994296][T17700] security_file_post_open+0x8e/0x210 [ 937.994334][T17700] path_openat+0x1404/0x2cb0 [ 937.994370][T17700] ? trace_kmem_cache_alloc+0x28/0xc0 [ 937.994412][T17700] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 937.994445][T17700] ? __pfx_path_openat+0x10/0x10 [ 937.994478][T17700] ? __asan_memcpy+0x3c/0x60 [ 937.994507][T17700] do_file_open_root+0x322/0x610 [ 937.994542][T17700] ? __pfx_do_file_open_root+0x10/0x10 [ 937.994590][T17700] ? vsnprintf+0x318/0x1160 [ 937.994625][T17700] file_open_root+0x2a7/0x450 [ 937.994660][T17700] ? __pfx_file_open_root+0x10/0x10 [ 937.994693][T17700] ? find_held_lock+0x2b/0x80 [ 937.994720][T17700] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 937.994768][T17700] kernel_read_file_from_path_initns+0x189/0x260 [ 937.994812][T17700] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 937.994855][T17700] ? trace_kmem_cache_alloc+0x28/0xc0 [ 937.994900][T17700] ? _request_firmware+0x503/0x1470 [ 937.994936][T17700] _request_firmware+0x744/0x1470 [ 937.994975][T17700] ? __pfx__request_firmware+0x10/0x10 [ 937.995019][T17700] ? dump_stack_lvl+0x1a3/0x1f0 [ 937.995061][T17700] __async_dev_cache_fw_image+0xb1/0x340 [ 937.995092][T17700] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 937.995128][T17700] ? mark_held_locks+0x49/0x80 [ 937.995157][T17700] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 937.995186][T17700] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 937.995219][T17700] async_schedule_node_domain+0xd1/0x120 [ 937.995249][T17700] dev_cache_fw_image+0x38e/0x490 [ 937.995277][T17700] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 937.995306][T17700] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 937.995333][T17700] dpm_for_each_dev+0x5a/0xb0 [ 937.995357][T17700] fw_pm_notify+0x81/0x150 [ 937.995381][T17700] notifier_call_chain+0xbc/0x410 [ 937.995410][T17700] ? __pfx_fw_pm_notify+0x10/0x10 [ 937.995437][T17700] blocking_notifier_call_chain_robust+0xc8/0x160 [ 937.995470][T17700] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 937.995508][T17700] pm_notifier_call_chain_robust+0x27/0x60 [ 937.995542][T17700] snapshot_open+0x218/0x2b0 [ 937.995569][T17700] ? __pfx_snapshot_open+0x10/0x10 [ 937.995597][T17700] misc_open+0x35a/0x420 [ 937.995622][T17700] ? __pfx_misc_open+0x10/0x10 [ 937.995647][T17700] chrdev_open+0x234/0x6a0 [ 937.995677][T17700] ? __pfx_apparmor_file_open+0x10/0x10 [ 937.995703][T17700] ? __pfx_chrdev_open+0x10/0x10 [ 937.995734][T17700] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 937.995763][T17700] do_dentry_open+0x982/0x1530 [ 937.995792][T17700] ? __pfx_chrdev_open+0x10/0x10 [ 937.995825][T17700] vfs_open+0x82/0x3f0 [ 937.995860][T17700] path_openat+0x1de4/0x2cb0 [ 937.995892][T17700] ? __pfx_path_openat+0x10/0x10 [ 937.995924][T17700] do_filp_open+0x20b/0x470 [ 937.995951][T17700] ? __pfx_do_filp_open+0x10/0x10 [ 937.995987][T17700] ? alloc_fd+0x471/0x7d0 [ 937.996015][T17700] do_sys_openat2+0x11b/0x1d0 [ 937.996051][T17700] ? __pfx_do_sys_openat2+0x10/0x10 [ 937.996088][T17700] ? __pfx___might_resched+0x10/0x10 [ 937.996115][T17700] __x64_sys_openat+0x174/0x210 [ 937.996156][T17700] ? __pfx___x64_sys_openat+0x10/0x10 [ 937.996203][T17700] do_syscall_64+0xcd/0x490 [ 937.996235][T17700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.996259][T17700] RIP: 0033:0x7f0331f8ebe9 [ 937.996277][T17700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.996299][T17700] RSP: 002b:00007f0332e1a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 937.996320][T17700] RAX: ffffffffffffffda RBX: 00007f03321b5fa0 RCX: 00007f0331f8ebe9 [ 937.996336][T17700] RDX: 0000000000000101 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 937.996350][T17700] RBP: 00007f0332011e19 R08: 0000000000000000 R09: 0000000000000000 [ 937.996364][T17700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.996378][T17700] R13: 00007f03321b6038 R14: 00007f03321b5fa0 R15: 00007ffe48f951b8 [ 937.996400][T17700] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 939.718021][T13491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 939.761590][T13491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 939.790434][T13491] bond0 (unregistering): Released all slaves