last executing test programs: 4m53.17847357s ago: executing program 1 (id=3220): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0xe, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x0, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r1, 0x540a, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000040)) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x80000000000001, 0x5, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) ioctl$auto_TIOCVHANGUP(r0, 0x5437, 0x0) 4m52.192774423s ago: executing program 1 (id=3225): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x6, 0x0, 0x6, 0x0, 0x7, 0xa505}, 0x800}, 0x80000000, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = gettid() close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) tkill$auto(r1, 0x7) ioctl$auto(0xc8, 0x800454d7, 0x5c8d) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x2003f0, 0x15) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r4, 0x900064d1, 0x6162) 4m51.961730254s ago: executing program 1 (id=3226): r0 = socket$nl_generic(0x10, 0x3, 0x10) alarm$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40026f34, 0x0) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) read$auto(r2, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000000)=""/156, 0x9c) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) kill$auto(0x0, 0x11) syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket(0x1a, 0x5, 0xfffffffd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) msgctl$auto_IPC_INFO(0x3ff, 0x3, &(0x7f0000000140)={{0x10000000, 0x0, 0xffffffffffffffff, 0x3c0, 0xfffffffe, 0x4, 0x6}, &(0x7f00000000c0)=0x40, &(0x7f0000000100)=0x42, 0x6, 0xfffffffffffffff7, 0x3, 0x5, 0x8000, 0x0, 0x6, 0x4, @raw=0x5, @inferred=0xffffffffffffffff}) shmctl$auto(0xa, 0x8, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000640)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) 4m51.014327955s ago: executing program 1 (id=3228): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="08009e00ff34"], 0x24}}, 0x4000000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x1, 0x1, 0x0, 0x1, 0x40) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r5 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r4, 0x81}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r5, 0x84, 0x1d, 0x0, 0x0) r6 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x853, 0x2000000000000002, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfdef) read$auto_drm_debugfs_entry_fops_drm_debugfs(r6, &(0x7f0000000100)=""/153, 0x99) getpid() 4m41.723557892s ago: executing program 1 (id=3257): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/driver/rtc\x00', 0x10b206, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x100) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) mkdir$auto(&(0x7f00000003c0)='}[,&*}\x00', 0x6) chroot$auto(0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x5e7d00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) mkdir$auto(0x0, 0x8001) open(0x0, 0x161342, 0x100) socket(0x29, 0x2, 0x2) 4m40.860209252s ago: executing program 1 (id=3258): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/speed\x00', 0x0, 0x0) epoll_pwait$auto(0x3, 0x0, 0x3, 0x0, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000053c0)={0x15b0, r2, 0x1, 0x870bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x1158, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0xc1, 0x1, "78853399a4a3aad6afc1af8e1236907991a43df31db9fb15ae12c85891374619aa9ecf49e8bb1d22fcfa0d1fe38aebc0ff198c3bc133d9ff587a45973a7a1babc2db73f8db2d305d82bcfe8326c73dee9e534b868a0d80c332db8a1258f6e5ccc0b0f12fdaa8f3230004d14c45d10e2e7ede2c7f9aaead2be6afd3bfd3e3223e178d22db0ea620da3130084ff466dd6a8150e7e6cd1dbb5ba7488e13c0b4c4da0fecbd471fd0099b37765da974c1b2745fb37b98c74f3f6fff7ea0e6bf"}, @NFSD_A_SOCK_ADDR={0x32, 0x1, "849e58fa9867e28b8fd72f1af325be3a6fac06200348d02147dd6650b7a4dc7e2a618467af5dcd8adb06a266216b"}, @NFSD_A_SOCK_ADDR={0x103e, 0x1, "c826bea6bcf82fd3a3223436ccf5b5d415f8550971b3c17088a1efaee710dd9ed2041fbc049514b19e12e3f9e751d5ff6acc2d52daa52258f1f0a9e3d68a4d7871399035f0f383647c03f3873dcb9bf67783aee0d8f510d960890cd2ccb46cd4971883b76c784fcac01658f50da7c0452245d264849891965cd993ecc3a4c7d19f0f270834f5153b4b47214059a1660a8b429e9e8930ca9b2845dece2c70d951358f42d2008b930f9137726235c6dc85e233757385ed8a10d1be9338d47974c3621613ed34259fc388dfc5f8fea9356f9a42eab0af48c75f2cabe599546d767497fa59309c0f5521b96400a557fb9a7b6cc229a6390feac02f02d9e13fb3621749f8aa507464c72ba778dbe01c2b88aff9cdd0df27ea1ff49208d5057404bb8e2d125d6bb3f20a364d2526cd8ce037bf7acc329e8a20fba054ee1de13f7d898b39304439540626afe1b59e4c28d1aa980f51eaa94b7cbb42e896c216ddcb0dbac3c0780e84cdf7cd51e5bca5766f5e428359c812caa208c85c65534b13c6a2d5f4350e2bf6bbdeab41faa9dcd47ec1eacd991d46ebbfe0d53a65d35d018d7b6563068735d8044b755e03b9d7a95aa036d3f28ec5f9c7c881ade482f8ed4347a0b7bdbe88cb7bd257d182b0c2137d6c97c367e760320534cd42670c4593ac5761564915a983936b0576bacdc1a8fa8e51a5c802a92503edbfa3094ce77274b7f523b4503c66eed3c4cf1cbf200110bcfe4fc05553c536163c8a5bf374a76b6bf7ae786db69ef02268b7af375aa3cdfe54f50f9ded42e20dfd5c0c60967a93013a084bed797cf071b245306d4743c34e1de807bb1f40f66c481be4bad036156973bfcef8a6a27b4f5e651ccc8f0c939f23b219c9eac1453e806e4194a3b6540e3046a216cca8de54a6da3f5e3b9de9c60da22187e9d11914cf9cebde7f6621f732245ecf0e3a6f235dd92eed11289d83f2e911e6602be8deabfe6ad6858b152e384f57a9fa3e4892899706da8fa0ae8969e68a2242205d122f30646e7367db4f0ba6ea6f1b5548417f1463a766e6f9b7e2a3f4e79fda4e2e944b5488fa31814cc4e1e79b0335b8137ef6156b82ad4ff999289927d62af1fea5826355949a75d31f1463ad8a7964fa9f1b5054f11ddddb053999281cff664f4f139c498cc71a41964e4e403afd9704c6625db1b792140f6efc31f1278966b1a0b41e12adfaa5db2e3093573084082214c0f7c5d6fcbfc5634090ad2090c16fe2663a224193c821cc3510847dddcc7c8ba6950f2184ed1388fc7841a0eca37fa895f7219db92674ff3ee65bdceff7c9f6853a37065111ba07840e081b8af5b10bf39c45cadc365747b361206a2d23b63091bb104df5e958b1921769749d4710eeeeeb51ed5643847d9ef5b519fefe08542ad94043f129c61ca5c4315bda361e7ce5e7c1a9f3615f1be92b2ac0a426c48d97042b3254d2b81fb66fad94cafd39c163790e59c6f4f0b157e622f352fd48cf2732266811060d9687fcc3e090ad313c062795e79e753f314f4f42acaf6b6bc509e15ef186566be65e51f8653eea57a8d0ae44242c490933224d6e58155c2b80bd733f14bdb7a42bef86e71c669a44ad6fb36b6c4167b774dbad474c10b32a26929e94c50e921c16dcd3fdc75feacad998062b89b486281bd4eaf2be915d56c4d9023f64619e5f5d06f9069bd25b3fe4da3f0b6e1cba8479d57db4aa96da531628bf2b525d7c5909607c4ce1b06ba32571255fc7a1031a9e54a8e41253f1edea2e4c27efd61c51269f26de873213cea53f0859a765e95cea7b75d26bcafe93f8aad2f8e9467754492ccf8b55a882d2c3f76e89b747820b0776606aebdc5d87d1c73d08af074f5dd63c7a294250652c783395a58d446012b481f6171828d12d46a0ad8e7be15658e32637ef1dfadeffb61a91db9073d31a4dcdf9542d1d51694dbe3b31f27326e332cd4a2398491302ade41207d98a90d7b98e9c116180613960fdc3a5894a1c6df10d03c946b260033ec3db2a5cdf4f296b651c0efb5f64b12c374abdbd9ec4f4254dc6117b2542fe0ae3ecaf390a3dcc90f05e298aa4f46f00db9f15082ee11dc50a839d456c06bdba514a01be1a7e498f1ae5f929ae2df749bb8146e3b4b48c17179649d1b6d29a83e24feae0154b1c8f0dfa02cd7efb0953e0770eabb81ff0e0f883905c607c0a8794f09cd51f9dbe07aa4d3ab8785fb2637e08bb7fa1a0349d1fe0d40732ec4b75bd192b5ef38bccfccbf293284159b9565274d997b60a7db878b251f24f474e122e615681dd4171410e50f79343be6b97ba46c330622cf2d1bc7b8d1f2b5712ccc6cd94f7e663d83a19ef3e759591e329df0a7b19e097275eb5517ca20eb29d3f8893aa44fe8a4ebd4050b079b21e260d2021cdb1b34b3687bc5d824ce5b60d81db7b6eea07a7f81772bb1f26d850c3bb7d22006df1ae68bb16d77b9024e8a1dfb3470c576fe555f97351cfaef9962c4f59e60f0f513795266318ac591478078f4fe60afb6addd060010954da2e0c97748621b44c7e75a822891396d429bee0e393ebe52b663c99c55ead2e2737b4923247bf42fa5279a71e84f62feb241c842489ddcf5c82bb3e894603f227f920d77ac2e408027a44b16c22a979c53b0ffff85eab1b3e8013f4f82d4a1d1cf1e33ff8e5274a9cf8318a9e1199a5a0151581630544fd0bb36e34683127666a7cb229d90acf7d9c46443a14b443318edac20a16bf8598bf7af34ba855cd69a5733cf83ded160f8c9a576d74f4306daa58b1d4409efcb14184cd980481118ba09d4f04ccbd0c6ee210ead9c5619654683adafea7ce85fc8bfdc867f6582838fcf15e489fa259d05773ddd663fd3c98820ffcd5f02b8343ef5f7aa2fb4371130bbec6a43eda0da4a8c05e021d2612857a1d2d167b61355bbe894b059881b29d3bc999bebc83a8f4130d8402a349fcf39a2df56fe47d487d5d799c08c1037e20dd191b663fa5d0c1ab1286c6551f8fd4a9fa93a4b9caadc41e4d96d4be662477f8c14463df6f6d57d35e71f3ed7cbea77e98fb6ad3e982fd6a3ab73834eb4c521effc879ff6bc0c49eabe70b5349062e9956c828e7f3352e702713400606486b72e894185c8a981c4ecaf7abc45ba7c0b9edc14f279f4497eccd0b987cc5ebc3b168c3498f87622c146d769f557f0f30b6f8b01ccb9a52035446e824f3b4a00ceafa1d03ddb1499fdc2225271d47d5ca47ae8f9ed1334d9dcfe1c29a17b3adb64aa13509f511f835f63a95015f59c5bdf9c2cc4780ba48f8ac50b87575d945395ecae1e9949e62a34c6df1071c70fc42c2236b7872038fff63f9637d75f418aaed315a44c8cb8d58cf940ec26bd9b0d7345520abb626b0cc2b61e16fd45f746a03b592082adb7ef94393f6b95dd2fdf9a0b6a228f6cb5598bd10f837519babe5df332b2eb1932b7c4fe3e2d5bc2b1a38763b84ec03dd3b1d475aea7151573b2e28b92e43eacbfb38a9b5d97f63af7f0ea782e78c7608a6d79d61bff0d90e79c3b19c2cba344eeae1901e57aaaa156b8bd9c6ea264ed4846edf82a1dfd17ce579ad69218a269a17ee4a9981fdd936e62ee7ac0533c363490919d06ece7ceab17a3e83a7cd8ce742da38264f378f4721570efb7576a8f1c239bac4d39a8371e4655b48c698058c282b09962a7dd70b2dae7338c888b71a9aeda115d5e75f44a8f934216c0b1bcbd3e67341cfc67ab28d9bbae9064a704c0e7db749370905ddedbc96fafa5f85c4cb598c8a64ff96e6e5ee8831cc0d6960363d828e988e3b106f38c33a755eab9fbf69a541129b804e8f4512d4a20facfa1089f5ebeca4d93a4cf75192a1c491d39fbf2e562c3f90e12ce529bc5de70d979019863f8a97e6872778d0ebe5c6fce45f79350f55ac6d97b6f85bad0600a3b74b541b47568c95f668898ba140ea920f98231ac78df528d7aa7fd07691087d5cc888165dda870321a158177bc462be5b8098d3107c322924aa6a6800d3ce6cd07f2fa743becbfc7a0ad2c0d24505fd0b1ed6a73163281992a29b5d0b64913257907d72f1bb1d31771818a9903ca63a01b9770fc63df22f350ff0a8c3c03e3e6969a3c836dbe67a2768d73deff3fc5b698105b74d4b9762cb9be67e62427a19cebc77a944ffd9d9dc2043b9691a61abcb0382aa7396b5ff3852325c2fb3e7623a9e236208be889099f97c776c196ada3952e01e04ae587e8a12804c723d57ea419fcb2110c6019f054b309abbc487c38c90d3ad7cf9e769e481c82f7213db92527c1c892e46a748187d952b86dbb893cf339a38fe1d13b8af2edec50f8e43c7cd2cdf7d0439df4c6406d238feb97cd47895713defdd3d36832f49dbfe073b6a64331dfa92015540a3e75b0795ba071d56b10f4dffed69e06706e499aaf893d9817afe59481034a4ff0b4f047f968b2c4946da16f3ee945317a6ffc4afc4ff0a840ad2477d94badce1b04d7450914c258143a1c9176d6a2d9b7f77d3b3669ced1ea33cc98be7ce094730f62e44fb470741fac50dd3c1d7e5078b937b82f2d17b46b9a4987f5bf6faa8318754c93aceb33621126432cf383a1d35b3667eb789b7e9b60929550eb3356b46a97b47d1c31bb69b2b55850f5de784f4d36167c82ee7f9c91362460b34f7d91d4502a4d1bf7a51bb225d9ccac7f5d75e8f69cd9687b2a459298624a2f64e04a7807166d31f16678d5b36aa44c9c078492f8f96e6c71464921bb1c887c4c55efbff34c0c5041fcade692c503f6eedf69b42080e955ebe68abcc57a38c835f48f19186d9948ba372a494c6e63d390c4f7edcc6958813e7f5d25c38f07af2b6f570bd7a8811835b8a1ddee3c3afbede864c184e471efe1ca4b0ebe587e26ae5386e3f4918b863a80bf54a6d2db30061abe28e0293d62d9f98be6cb7c8f1f34efd1f3524b8292dd335bdc86ad5718b2b0998d94b140778381dd9e94940184960a3f572a35a7a12f339ef6e5775ed707ed051c40bbec1ea92d72e4470545fe93a08c7ae3d7bc874faeb7c7386f8fb0b6c4a0c7974b58c34f919741e2a1c245a60ee54d6fc833870c10484772e347c20816085f3f2aebdbe61b632ae6bfcabe3cf0ba8e4eb531ea953a4373f98abaff0a846262a72489c57569ce7689773f888876a8bc7c8e4c7292ef203e3ca74b744328e27b6a1141d5c59d0522298ffc68a9e1222b7da80125c8c7d670f4b162db175e63e4bbc82c47ce88ea71870e419f062c5e253ad094e3b54cdb4fdebd3f1c3d1ec1d08e942ac92e522094e927d6157006dfbe60e981e0277e573d55fa65d450bf5fde3e5e8b833b2dd070546ff8f4e6cdb570c29dc602cf97cbea200b6ab46e5df1ac82509f768319675b8f93e43f6b7afc780090706c92c8c9d3b18312c45f0c69b43312f4d43bab38f14f3e2eff5b39ed16043ae84406a1b2cd950f9555f7895a2ba54b30cf05a780eaecd3ce8b28bc709003ac372d974fce287347b599367c3df0a4bb48106a31cb79a85a3e0a7cac58b29cf440717a912be4504613aed60e5faf5945e6c79ce871c8a086d6b0548d90e981d753433c3e62b88ccddc98603e842b14dc04726c01e9818d7d2daf20f71e6730c8286e446c6f8d468b05207e7fe07eb6143670da4009a0ca17756500cc37ea3e27ecd50058ab6cf35d0b76ea67e49c17c96ac06f74941abc5da98143a7bb3776cf66b13bdcfbbeac8f5be6ed5b8f4a55448da7cd1aa68a42ae320917f531e63e1de6c9f7427e0e2e5ac3fa5a19a3ec913df34a561ebf955040a257b43fe5afb290e009fbc3aff568475f001fd186ba198d6ed0fb15b9c233f7722f6200da0a53bad3e5f70ea38bd5502a4eb247d13790563796dd96280"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xe, 0x2, '&%.\xbc/$.-@\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0xb0, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_ADDR={0x43, 0x1, "01fa803c3a1f4916ea32c246c00f98ec29687052a546d5a4e1e9f206fc3a2663850d85ec317b6185b41a39fbb19e5959cd996554606336da33dec709787012"}, @NFSD_A_SOCK_ADDR={0x55, 0x1, "146c25322b4f2ae75cc5691bb96b7fac3cda78876a1ee51a013893c497646495961efd5f23dd371b7920e28a80fbbde3e4f1c2a928006698f7fbfd6d48e54c5362ab534f377396750d83d6e71abc9af509"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x390, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x5c, 0x1, "b8238b92847e5fc3f5ad949d702c0141aba23afd435352c023ffa76287fc92a3d42265b91aab380e73cbc5a99bc3d51bf3262ccb3ea490ae9d1b970b144c3f9fcf727832c44512219276b476e48b6a81c2a035488fd374f8"}, @NFSD_A_SOCK_ADDR={0x5e, 0x1, "446805091c2be7432581a23c76e7402bc97de1614d4893746ea2be258c3823487d4fd9431e37f85960f0c6767bc12ef5eaa24a7403d7c336cd94c5bf77e2f41dbd6c6b7d6651012b5cb8a8197a767e8aae8c81de045742372ed0"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x29, 0x2, '/sys/devices/virtual/net/bond0/speed\x00'}, @NFSD_A_SOCK_ADDR={0x58, 0x1, "cf8369b666f116b0a7fde3e5e30eff17c762c435d004b3d2e7d7f1717aa0419103ec151452094fdedadd59080c1a576f2cb4952ac94098708b6f3444dc003c459869abb4eaaad836c0e5badac11501b345572b4a"}, @NFSD_A_SOCK_ADDR={0x25, 0x1, "26a688fef009318442f031950a05f3cfe4cd9ca6de1d1933f2b0f78ef313f0c114"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_ADDR={0xc0, 0x1, "513257f655f0e7fcffe29d59346ed85d690f58ccbfa39276e81f4295e191a022685fa17669e878e4baa5ccc822677a7ea1bbb645d552f075715a8f8a57ecb154d52f67a1f2301baf0740f188c4409b18910c366f34239ac2588b778adec461e16c2f531e3726c6d5ba669a28be8ca90cbd1923a059226193e8721937aec10cb1323dd52a736552a96ced50d70a83f06bcf407b794c16de6fcbb6522b40a48ad6ce00a5c8de20f4dc5b81bff1e8919a184b6c6bdb52e6c179f328f436"}, @NFSD_A_SOCK_ADDR={0xb0, 0x1, "782011f116d2d0c5d96f53a9513f26aa97d143b64e27da70e3e5caaca7a245e1d4fbf42e6af0972d0200f13d2cb3e8fa41c96d8229238e040197c7a92f0981187c8d33a12af3a7c7ac9797a7e95948e3b6d55519e695919d53c95a751a7b986652ab1f7fc6911e4ba73e288466c287227a4caf785c44aa6441909e3d5aa0ab6cf95ad583ef0b0d7c6fdbc9f7bc24cd08f3adb313c292647e257cf345023c4eda9b0ae42d27ab652fecd1ce47"}, @NFSD_A_SOCK_ADDR={0x9b, 0x1, "44b8c9024ca1a7c6f23b6d0a5906ad970efce18720209662b4fd9b4fcf69362f8b642bc9242e1b45c2adcd656fa704b247e0dc9ee6aeab6fe9ad10083d1f02d02496c90d56d1004a9f7513781ca2afa30a2388748393eb8dda356b863fb07bfc89c85707e9806dd752398c603e3e71fa96798753dbad57bad63b2647e4d7e5c010098073407608e059fa49470a5727f55f974c6abbff8f"}]}]}, 0x15b0}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) read$auto(r0, 0x0, 0x20) 4m25.634642933s ago: executing program 32 (id=3258): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/speed\x00', 0x0, 0x0) epoll_pwait$auto(0x3, 0x0, 0x3, 0x0, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000053c0)={0x15b0, r2, 0x1, 0x870bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x1158, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0xc1, 0x1, "78853399a4a3aad6afc1af8e1236907991a43df31db9fb15ae12c85891374619aa9ecf49e8bb1d22fcfa0d1fe38aebc0ff198c3bc133d9ff587a45973a7a1babc2db73f8db2d305d82bcfe8326c73dee9e534b868a0d80c332db8a1258f6e5ccc0b0f12fdaa8f3230004d14c45d10e2e7ede2c7f9aaead2be6afd3bfd3e3223e178d22db0ea620da3130084ff466dd6a8150e7e6cd1dbb5ba7488e13c0b4c4da0fecbd471fd0099b37765da974c1b2745fb37b98c74f3f6fff7ea0e6bf"}, @NFSD_A_SOCK_ADDR={0x32, 0x1, "849e58fa9867e28b8fd72f1af325be3a6fac06200348d02147dd6650b7a4dc7e2a618467af5dcd8adb06a266216b"}, @NFSD_A_SOCK_ADDR={0x103e, 0x1, "c826bea6bcf82fd3a3223436ccf5b5d415f8550971b3c17088a1efaee710dd9ed2041fbc049514b19e12e3f9e751d5ff6acc2d52daa52258f1f0a9e3d68a4d7871399035f0f383647c03f3873dcb9bf67783aee0d8f510d960890cd2ccb46cd4971883b76c784fcac01658f50da7c0452245d264849891965cd993ecc3a4c7d19f0f270834f5153b4b47214059a1660a8b429e9e8930ca9b2845dece2c70d951358f42d2008b930f9137726235c6dc85e233757385ed8a10d1be9338d47974c3621613ed34259fc388dfc5f8fea9356f9a42eab0af48c75f2cabe599546d767497fa59309c0f5521b96400a557fb9a7b6cc229a6390feac02f02d9e13fb3621749f8aa507464c72ba778dbe01c2b88aff9cdd0df27ea1ff49208d5057404bb8e2d125d6bb3f20a364d2526cd8ce037bf7acc329e8a20fba054ee1de13f7d898b39304439540626afe1b59e4c28d1aa980f51eaa94b7cbb42e896c216ddcb0dbac3c0780e84cdf7cd51e5bca5766f5e428359c812caa208c85c65534b13c6a2d5f4350e2bf6bbdeab41faa9dcd47ec1eacd991d46ebbfe0d53a65d35d018d7b6563068735d8044b755e03b9d7a95aa036d3f28ec5f9c7c881ade482f8ed4347a0b7bdbe88cb7bd257d182b0c2137d6c97c367e760320534cd42670c4593ac5761564915a983936b0576bacdc1a8fa8e51a5c802a92503edbfa3094ce77274b7f523b4503c66eed3c4cf1cbf200110bcfe4fc05553c536163c8a5bf374a76b6bf7ae786db69ef02268b7af375aa3cdfe54f50f9ded42e20dfd5c0c60967a93013a084bed797cf071b245306d4743c34e1de807bb1f40f66c481be4bad036156973bfcef8a6a27b4f5e651ccc8f0c939f23b219c9eac1453e806e4194a3b6540e3046a216cca8de54a6da3f5e3b9de9c60da22187e9d11914cf9cebde7f6621f732245ecf0e3a6f235dd92eed11289d83f2e911e6602be8deabfe6ad6858b152e384f57a9fa3e4892899706da8fa0ae8969e68a2242205d122f30646e7367db4f0ba6ea6f1b5548417f1463a766e6f9b7e2a3f4e79fda4e2e944b5488fa31814cc4e1e79b0335b8137ef6156b82ad4ff999289927d62af1fea5826355949a75d31f1463ad8a7964fa9f1b5054f11ddddb053999281cff664f4f139c498cc71a41964e4e403afd9704c6625db1b792140f6efc31f1278966b1a0b41e12adfaa5db2e3093573084082214c0f7c5d6fcbfc5634090ad2090c16fe2663a224193c821cc3510847dddcc7c8ba6950f2184ed1388fc7841a0eca37fa895f7219db92674ff3ee65bdceff7c9f6853a37065111ba07840e081b8af5b10bf39c45cadc365747b361206a2d23b63091bb104df5e958b1921769749d4710eeeeeb51ed5643847d9ef5b519fefe08542ad94043f129c61ca5c4315bda361e7ce5e7c1a9f3615f1be92b2ac0a426c48d97042b3254d2b81fb66fad94cafd39c163790e59c6f4f0b157e622f352fd48cf2732266811060d9687fcc3e090ad313c062795e79e753f314f4f42acaf6b6bc509e15ef186566be65e51f8653eea57a8d0ae44242c490933224d6e58155c2b80bd733f14bdb7a42bef86e71c669a44ad6fb36b6c4167b774dbad474c10b32a26929e94c50e921c16dcd3fdc75feacad998062b89b486281bd4eaf2be915d56c4d9023f64619e5f5d06f9069bd25b3fe4da3f0b6e1cba8479d57db4aa96da531628bf2b525d7c5909607c4ce1b06ba32571255fc7a1031a9e54a8e41253f1edea2e4c27efd61c51269f26de873213cea53f0859a765e95cea7b75d26bcafe93f8aad2f8e9467754492ccf8b55a882d2c3f76e89b747820b0776606aebdc5d87d1c73d08af074f5dd63c7a294250652c783395a58d446012b481f6171828d12d46a0ad8e7be15658e32637ef1dfadeffb61a91db9073d31a4dcdf9542d1d51694dbe3b31f27326e332cd4a2398491302ade41207d98a90d7b98e9c116180613960fdc3a5894a1c6df10d03c946b260033ec3db2a5cdf4f296b651c0efb5f64b12c374abdbd9ec4f4254dc6117b2542fe0ae3ecaf390a3dcc90f05e298aa4f46f00db9f15082ee11dc50a839d456c06bdba514a01be1a7e498f1ae5f929ae2df749bb8146e3b4b48c17179649d1b6d29a83e24feae0154b1c8f0dfa02cd7efb0953e0770eabb81ff0e0f883905c607c0a8794f09cd51f9dbe07aa4d3ab8785fb2637e08bb7fa1a0349d1fe0d40732ec4b75bd192b5ef38bccfccbf293284159b9565274d997b60a7db878b251f24f474e122e615681dd4171410e50f79343be6b97ba46c330622cf2d1bc7b8d1f2b5712ccc6cd94f7e663d83a19ef3e759591e329df0a7b19e097275eb5517ca20eb29d3f8893aa44fe8a4ebd4050b079b21e260d2021cdb1b34b3687bc5d824ce5b60d81db7b6eea07a7f81772bb1f26d850c3bb7d22006df1ae68bb16d77b9024e8a1dfb3470c576fe555f97351cfaef9962c4f59e60f0f513795266318ac591478078f4fe60afb6addd060010954da2e0c97748621b44c7e75a822891396d429bee0e393ebe52b663c99c55ead2e2737b4923247bf42fa5279a71e84f62feb241c842489ddcf5c82bb3e894603f227f920d77ac2e408027a44b16c22a979c53b0ffff85eab1b3e8013f4f82d4a1d1cf1e33ff8e5274a9cf8318a9e1199a5a0151581630544fd0bb36e34683127666a7cb229d90acf7d9c46443a14b443318edac20a16bf8598bf7af34ba855cd69a5733cf83ded160f8c9a576d74f4306daa58b1d4409efcb14184cd980481118ba09d4f04ccbd0c6ee210ead9c5619654683adafea7ce85fc8bfdc867f6582838fcf15e489fa259d05773ddd663fd3c98820ffcd5f02b8343ef5f7aa2fb4371130bbec6a43eda0da4a8c05e021d2612857a1d2d167b61355bbe894b059881b29d3bc999bebc83a8f4130d8402a349fcf39a2df56fe47d487d5d799c08c1037e20dd191b663fa5d0c1ab1286c6551f8fd4a9fa93a4b9caadc41e4d96d4be662477f8c14463df6f6d57d35e71f3ed7cbea77e98fb6ad3e982fd6a3ab73834eb4c521effc879ff6bc0c49eabe70b5349062e9956c828e7f3352e702713400606486b72e894185c8a981c4ecaf7abc45ba7c0b9edc14f279f4497eccd0b987cc5ebc3b168c3498f87622c146d769f557f0f30b6f8b01ccb9a52035446e824f3b4a00ceafa1d03ddb1499fdc2225271d47d5ca47ae8f9ed1334d9dcfe1c29a17b3adb64aa13509f511f835f63a95015f59c5bdf9c2cc4780ba48f8ac50b87575d945395ecae1e9949e62a34c6df1071c70fc42c2236b7872038fff63f9637d75f418aaed315a44c8cb8d58cf940ec26bd9b0d7345520abb626b0cc2b61e16fd45f746a03b592082adb7ef94393f6b95dd2fdf9a0b6a228f6cb5598bd10f837519babe5df332b2eb1932b7c4fe3e2d5bc2b1a38763b84ec03dd3b1d475aea7151573b2e28b92e43eacbfb38a9b5d97f63af7f0ea782e78c7608a6d79d61bff0d90e79c3b19c2cba344eeae1901e57aaaa156b8bd9c6ea264ed4846edf82a1dfd17ce579ad69218a269a17ee4a9981fdd936e62ee7ac0533c363490919d06ece7ceab17a3e83a7cd8ce742da38264f378f4721570efb7576a8f1c239bac4d39a8371e4655b48c698058c282b09962a7dd70b2dae7338c888b71a9aeda115d5e75f44a8f934216c0b1bcbd3e67341cfc67ab28d9bbae9064a704c0e7db749370905ddedbc96fafa5f85c4cb598c8a64ff96e6e5ee8831cc0d6960363d828e988e3b106f38c33a755eab9fbf69a541129b804e8f4512d4a20facfa1089f5ebeca4d93a4cf75192a1c491d39fbf2e562c3f90e12ce529bc5de70d979019863f8a97e6872778d0ebe5c6fce45f79350f55ac6d97b6f85bad0600a3b74b541b47568c95f668898ba140ea920f98231ac78df528d7aa7fd07691087d5cc888165dda870321a158177bc462be5b8098d3107c322924aa6a6800d3ce6cd07f2fa743becbfc7a0ad2c0d24505fd0b1ed6a73163281992a29b5d0b64913257907d72f1bb1d31771818a9903ca63a01b9770fc63df22f350ff0a8c3c03e3e6969a3c836dbe67a2768d73deff3fc5b698105b74d4b9762cb9be67e62427a19cebc77a944ffd9d9dc2043b9691a61abcb0382aa7396b5ff3852325c2fb3e7623a9e236208be889099f97c776c196ada3952e01e04ae587e8a12804c723d57ea419fcb2110c6019f054b309abbc487c38c90d3ad7cf9e769e481c82f7213db92527c1c892e46a748187d952b86dbb893cf339a38fe1d13b8af2edec50f8e43c7cd2cdf7d0439df4c6406d238feb97cd47895713defdd3d36832f49dbfe073b6a64331dfa92015540a3e75b0795ba071d56b10f4dffed69e06706e499aaf893d9817afe59481034a4ff0b4f047f968b2c4946da16f3ee945317a6ffc4afc4ff0a840ad2477d94badce1b04d7450914c258143a1c9176d6a2d9b7f77d3b3669ced1ea33cc98be7ce094730f62e44fb470741fac50dd3c1d7e5078b937b82f2d17b46b9a4987f5bf6faa8318754c93aceb33621126432cf383a1d35b3667eb789b7e9b60929550eb3356b46a97b47d1c31bb69b2b55850f5de784f4d36167c82ee7f9c91362460b34f7d91d4502a4d1bf7a51bb225d9ccac7f5d75e8f69cd9687b2a459298624a2f64e04a7807166d31f16678d5b36aa44c9c078492f8f96e6c71464921bb1c887c4c55efbff34c0c5041fcade692c503f6eedf69b42080e955ebe68abcc57a38c835f48f19186d9948ba372a494c6e63d390c4f7edcc6958813e7f5d25c38f07af2b6f570bd7a8811835b8a1ddee3c3afbede864c184e471efe1ca4b0ebe587e26ae5386e3f4918b863a80bf54a6d2db30061abe28e0293d62d9f98be6cb7c8f1f34efd1f3524b8292dd335bdc86ad5718b2b0998d94b140778381dd9e94940184960a3f572a35a7a12f339ef6e5775ed707ed051c40bbec1ea92d72e4470545fe93a08c7ae3d7bc874faeb7c7386f8fb0b6c4a0c7974b58c34f919741e2a1c245a60ee54d6fc833870c10484772e347c20816085f3f2aebdbe61b632ae6bfcabe3cf0ba8e4eb531ea953a4373f98abaff0a846262a72489c57569ce7689773f888876a8bc7c8e4c7292ef203e3ca74b744328e27b6a1141d5c59d0522298ffc68a9e1222b7da80125c8c7d670f4b162db175e63e4bbc82c47ce88ea71870e419f062c5e253ad094e3b54cdb4fdebd3f1c3d1ec1d08e942ac92e522094e927d6157006dfbe60e981e0277e573d55fa65d450bf5fde3e5e8b833b2dd070546ff8f4e6cdb570c29dc602cf97cbea200b6ab46e5df1ac82509f768319675b8f93e43f6b7afc780090706c92c8c9d3b18312c45f0c69b43312f4d43bab38f14f3e2eff5b39ed16043ae84406a1b2cd950f9555f7895a2ba54b30cf05a780eaecd3ce8b28bc709003ac372d974fce287347b599367c3df0a4bb48106a31cb79a85a3e0a7cac58b29cf440717a912be4504613aed60e5faf5945e6c79ce871c8a086d6b0548d90e981d753433c3e62b88ccddc98603e842b14dc04726c01e9818d7d2daf20f71e6730c8286e446c6f8d468b05207e7fe07eb6143670da4009a0ca17756500cc37ea3e27ecd50058ab6cf35d0b76ea67e49c17c96ac06f74941abc5da98143a7bb3776cf66b13bdcfbbeac8f5be6ed5b8f4a55448da7cd1aa68a42ae320917f531e63e1de6c9f7427e0e2e5ac3fa5a19a3ec913df34a561ebf955040a257b43fe5afb290e009fbc3aff568475f001fd186ba198d6ed0fb15b9c233f7722f6200da0a53bad3e5f70ea38bd5502a4eb247d13790563796dd96280"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xe, 0x2, '&%.\xbc/$.-@\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0xb0, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_ADDR={0x43, 0x1, "01fa803c3a1f4916ea32c246c00f98ec29687052a546d5a4e1e9f206fc3a2663850d85ec317b6185b41a39fbb19e5959cd996554606336da33dec709787012"}, @NFSD_A_SOCK_ADDR={0x55, 0x1, "146c25322b4f2ae75cc5691bb96b7fac3cda78876a1ee51a013893c497646495961efd5f23dd371b7920e28a80fbbde3e4f1c2a928006698f7fbfd6d48e54c5362ab534f377396750d83d6e71abc9af509"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x390, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x5c, 0x1, "b8238b92847e5fc3f5ad949d702c0141aba23afd435352c023ffa76287fc92a3d42265b91aab380e73cbc5a99bc3d51bf3262ccb3ea490ae9d1b970b144c3f9fcf727832c44512219276b476e48b6a81c2a035488fd374f8"}, @NFSD_A_SOCK_ADDR={0x5e, 0x1, "446805091c2be7432581a23c76e7402bc97de1614d4893746ea2be258c3823487d4fd9431e37f85960f0c6767bc12ef5eaa24a7403d7c336cd94c5bf77e2f41dbd6c6b7d6651012b5cb8a8197a767e8aae8c81de045742372ed0"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x29, 0x2, '/sys/devices/virtual/net/bond0/speed\x00'}, @NFSD_A_SOCK_ADDR={0x58, 0x1, "cf8369b666f116b0a7fde3e5e30eff17c762c435d004b3d2e7d7f1717aa0419103ec151452094fdedadd59080c1a576f2cb4952ac94098708b6f3444dc003c459869abb4eaaad836c0e5badac11501b345572b4a"}, @NFSD_A_SOCK_ADDR={0x25, 0x1, "26a688fef009318442f031950a05f3cfe4cd9ca6de1d1933f2b0f78ef313f0c114"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}, @NFSD_A_SOCK_ADDR={0xc0, 0x1, "513257f655f0e7fcffe29d59346ed85d690f58ccbfa39276e81f4295e191a022685fa17669e878e4baa5ccc822677a7ea1bbb645d552f075715a8f8a57ecb154d52f67a1f2301baf0740f188c4409b18910c366f34239ac2588b778adec461e16c2f531e3726c6d5ba669a28be8ca90cbd1923a059226193e8721937aec10cb1323dd52a736552a96ced50d70a83f06bcf407b794c16de6fcbb6522b40a48ad6ce00a5c8de20f4dc5b81bff1e8919a184b6c6bdb52e6c179f328f436"}, @NFSD_A_SOCK_ADDR={0xb0, 0x1, "782011f116d2d0c5d96f53a9513f26aa97d143b64e27da70e3e5caaca7a245e1d4fbf42e6af0972d0200f13d2cb3e8fa41c96d8229238e040197c7a92f0981187c8d33a12af3a7c7ac9797a7e95948e3b6d55519e695919d53c95a751a7b986652ab1f7fc6911e4ba73e288466c287227a4caf785c44aa6441909e3d5aa0ab6cf95ad583ef0b0d7c6fdbc9f7bc24cd08f3adb313c292647e257cf345023c4eda9b0ae42d27ab652fecd1ce47"}, @NFSD_A_SOCK_ADDR={0x9b, 0x1, "44b8c9024ca1a7c6f23b6d0a5906ad970efce18720209662b4fd9b4fcf69362f8b642bc9242e1b45c2adcd656fa704b247e0dc9ee6aeab6fe9ad10083d1f02d02496c90d56d1004a9f7513781ca2afa30a2388748393eb8dda356b863fb07bfc89c85707e9806dd752398c603e3e71fa96798753dbad57bad63b2647e4d7e5c010098073407608e059fa49470a5727f55f974c6abbff8f"}]}]}, 0x15b0}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) read$auto(r0, 0x0, 0x20) 2m41.771355108s ago: executing program 4 (id=3685): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000540)=0x6) madvise$auto_MADV_DONTNEED_LOCKED(0xf9, 0x151, 0x18) socket(0x5, 0x1, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) shmctl$auto_SHM_STAT_ANY(0xc, 0xf, &(0x7f0000000340)={{0x4, 0xee01, 0xee01, 0x80, 0x80, 0xfffffff8, 0x7fff}, 0x6, 0x6, 0x9, 0xcd, @raw=0x1000, @inferred=0xffffffffffffffff, 0x1, 0x0, &(0x7f00000005c0)="7aafdb967c337cd9e9ad6dc9b1d4a08f07095c53e01359e1c4dc0d8252120cdc7079cdce7a5297ebbe740e39bd2773faec461345b31ee2e2e99c5d1fa9eed001b3e6684fdb1ba021992215", 0x0}) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f00000000c0)=';') r3 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0xc0086202, r3) clone$auto(0x1ff00, 0x0, &(0x7f0000002040)=0x7, 0x0, 0x9) connect$auto(0xffffffffffffffff, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40200, 0x0) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0xe4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_PLCA_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PLCA_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PLCA_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}]}, 0xe4}}, 0x4000001) socketpair$auto(0x1, 0x9, 0x6, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x202000d, 0x100003, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m40.867244307s ago: executing program 4 (id=3689): fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) r0 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000240)={@_si_pad}, 0x80000001, &(0x7f00000002c0)={{0x7fff, 0x3}, {0x100000000, 0xffffffff00000001}, 0x6, 0xa9f, 0x4, 0x2, 0x100, 0xb18, 0xb, 0x9, 0x1, 0x7f, 0x4, 0xf9f6, 0xdc73, 0x6}) unshare$auto(0xb7) capset$auto(&(0x7f00000001c0)={0x9, r0}, &(0x7f0000000380)={0x7, 0x0, 0x7}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x29, 0x43, 0x0, 0x9) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) close_range$auto(0x2, 0xa, 0x0) r3 = socket(0xa, 0x5, 0x0) socket(0xa, 0x3, 0xff) r4 = socket(0x2, 0x801, 0x100) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44010}, 0x20000054) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r5, r4, 0x9c, 0x0, 0x1, @relative_fd, 0x5}, 0x96) ioctl$auto(0xffffffffffffffff, 0x2203, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy1/rc/name\x00', 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) 2m39.603860189s ago: executing program 4 (id=3691): r0 = socket(0x10, 0x2, 0x4) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) fcntl$auto(0x0, 0x407, 0x100000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, &(0x7f00000000c0)="77e97d2bdee50c19f32304c6af515153d965f6e230") socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x200, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000080)=0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/vlan1/ioam6_id_wide\x00', 0x218602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) r3 = socket(0x29, 0x4, 0x2) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2800, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r4, 0x400445a0, r4) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 2m39.015576033s ago: executing program 2 (id=3693): unshare$auto(0x40000080) mmap$auto(0x0, 0x1000020009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0x11, 0xffffffffffffffff, 0x10008000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r1, 0xae41, r0) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x4b564d01, 0x400, 0x1}]}) mmap$auto(0x40000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x7ffe) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(0x3, 0x40085400, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x7fffffffffffffff, 0xffffffffffff0005, 0x19) mbind$auto(0x4f000, 0x1, 0x1, 0x0, 0x7fff, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) ioprio_set$auto(0x2, 0x800000000, 0x8) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) madvise$auto(0x0, 0xffffffffffff0081, 0x14) 2m38.655771159s ago: executing program 4 (id=3695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) (fail_nth: 11) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_force_wakeup_fops_hci_vhci(r3, &(0x7f0000000080)=""/216, 0xd8) read$auto_ppp_device_fops_ppp_generic(r3, &(0x7f0000000140)=""/184, 0xb8) getsockopt$auto(r2, 0x84, 0x1b, 0x0, &(0x7f0000000040)=0x400) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x83, @remote}, 0x54) write$auto_vhci_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000100)="02a6c1dc", 0x4) connect$auto(0x3, 0x0, 0x55) 2m38.255133529s ago: executing program 4 (id=3696): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x2) shutdown$auto(r0, 0xfffbfff7) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy14/hw_conf\x00', 0x6002, 0x0) mq_notify$auto(r1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3da) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) r2 = epoll_create$auto(0x3e) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(0x0, 0x9, 0x1) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x9, 0x4, 0xfffa, 0x0) 2m38.228728549s ago: executing program 2 (id=3697): mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x2000, 0x4020009, 0xdf, 0xeb1, 0x8001, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000001100), 0x40, 0x0) r1 = socket(0x25, 0x3, 0x38) r2 = fcntl$auto(0x3, 0x401, 0x3) fcntl$auto_F_SET_RW_HINT(r2, 0x40c, 0x8) lseek$auto(r1, 0x55, 0x3) mmap$auto(0x1ff, 0x4000a, 0xdf, 0x9b72, 0x7, 0x28000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0xa, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x6, 0x8, 0x7f, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x5, 0x2, 0x1a7b870a, 0x20076c5, 0x8, 0x100000000}}) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x200000005, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x2, 0x7}) ioctl$auto_VFIO_SET_IOMMU(r3, 0x3b66, 0x0) ioctl$auto_BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, 0x0) r5 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r5, &(0x7f0000000180)=""/61, 0xfffffeeb) 2m37.698402739s ago: executing program 4 (id=3698): openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x212000, 0x0) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aa3e) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x541, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x2, 0x202000a, 0x20100000000002, 0xeb1, 0xfffffffffffffffa, 0x1000002) sendmmsg$auto(r0, &(0x7f00000000c0)={{&(0x7f0000000180)="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", 0x3, &(0x7f0000000080)={&(0x7f0000001180)="bb0f54c84e0386959090aceca7b5a362e50a5f99ef8eae6b8dcff7633ce90c5b0492ca5929412cff19afff1bfb6ecc2cfeaebbb3ab13f043e7b3123370f0939f0b015d9efcacf0b9f00f1f19f35b846a64b4bfadd006bb6c2b15d076dd03e344d36c7ae8eedf7719cd1b827cfc82f3178ea6f0f97b5dd7b00f5f23766981818cf25bbce9921986f448692558b3396ec17c94728035dd5764a6da972b2822f106113f8cee8e849e092b4ab322ce80ed434edf48bf8e4bad9bf1a1cb19398f1f76addb65dff8726075a0726979", 0x8}, 0x593, &(0x7f0000001280)="762d47c9e0cfff60edb229ad39c9d2969541a36007c330d2aaa65c6bdbb03011c673ebd0756dc1aaf84628cb00034bb7951e30c23043b279f1528fca475820c87eb83bf1", 0x6, 0x3}, 0x2000000}, 0x594, 0x6f01) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, 0x0, 0x0) read$auto_tracing_stats_fops_trace(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0xfffffffffffffffd, 0xc, 0xe72, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x62f, 0xff, 0x3) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) bpf$auto(0x0, 0x0, 0x98) flock$auto(r0, 0x2) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x4b70, r2) close_range$auto(0x2, 0x8, 0x0) 2m37.121162816s ago: executing program 2 (id=3702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x2}]}, 0x1c}, 0x1, 0x100000000000000, 0x0, 0x4000080}, 0x4000010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_force_wakeup_fops_hci_vhci(r3, &(0x7f0000000080)=""/216, 0xd8) read$auto_ppp_device_fops_ppp_generic(r3, &(0x7f0000000140)=""/184, 0xb8) getsockopt$auto(r2, 0x84, 0x1b, 0x0, &(0x7f0000000040)=0x400) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x83, @remote}, 0x54) write$auto_vhci_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000100)="02a6c1dc", 0x4) connect$auto(0x3, 0x0, 0x55) 2m35.375084898s ago: executing program 2 (id=3709): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0xfff, 0x8, 0xab8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(r0, 0x80006, 0x3, 0xfffffffffffffffc, 0xa) socket(0x2, 0x801, 0x100) mmap$auto(0x1, 0x3, 0x3, 0x55, r0, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r1, &(0x7f0000000080)=""/213, 0xd5) 2m34.325730651s ago: executing program 2 (id=3711): mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0x4, 0x80}, 0x96) mmap$auto(0xab0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f0000000100)="632d1bfe595046ab5c40bd6173307acb6d16baef6176e669a216aae1806674fdd80500ffffffffffdfff1a0e0100"/56, 0x38) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(0x0, 0x9, 0x1) socket(0x1e, 0x4, 0x0) membarrier$auto(0x4, 0x8000000000000000, 0xffffffff) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/edid_override\x00', 0x2, 0x0) 2m34.05766946s ago: executing program 2 (id=3712): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00', 0x80201, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') socket(0x2, 0xa, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) io_uring_setup$auto(0x85, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket(0x25, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x200448c0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x10b040, 0x0) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={r1, 0x4, 0xf9c, 0x468, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa503}, 0x800}, 0x7, 0x4008) 2m22.530976547s ago: executing program 33 (id=3698): openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x212000, 0x0) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aa3e) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x541, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x2, 0x202000a, 0x20100000000002, 0xeb1, 0xfffffffffffffffa, 0x1000002) sendmmsg$auto(r0, &(0x7f00000000c0)={{&(0x7f0000000180)="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", 0x3, &(0x7f0000000080)={&(0x7f0000001180)="bb0f54c84e0386959090aceca7b5a362e50a5f99ef8eae6b8dcff7633ce90c5b0492ca5929412cff19afff1bfb6ecc2cfeaebbb3ab13f043e7b3123370f0939f0b015d9efcacf0b9f00f1f19f35b846a64b4bfadd006bb6c2b15d076dd03e344d36c7ae8eedf7719cd1b827cfc82f3178ea6f0f97b5dd7b00f5f23766981818cf25bbce9921986f448692558b3396ec17c94728035dd5764a6da972b2822f106113f8cee8e849e092b4ab322ce80ed434edf48bf8e4bad9bf1a1cb19398f1f76addb65dff8726075a0726979", 0x8}, 0x593, &(0x7f0000001280)="762d47c9e0cfff60edb229ad39c9d2969541a36007c330d2aaa65c6bdbb03011c673ebd0756dc1aaf84628cb00034bb7951e30c23043b279f1528fca475820c87eb83bf1", 0x6, 0x3}, 0x2000000}, 0x594, 0x6f01) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto_drm_edid_fops_drm_debugfs(0xffffffffffffffff, 0x0, 0x0) read$auto_tracing_stats_fops_trace(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0xfffffffffffffffd, 0xc, 0xe72, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x4) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x62f, 0xff, 0x3) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) bpf$auto(0x0, 0x0, 0x98) flock$auto(r0, 0x2) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x4b70, r2) close_range$auto(0x2, 0x8, 0x0) 2m18.688896004s ago: executing program 34 (id=3712): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1p\x00', 0x80201, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') socket(0x2, 0xa, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) io_uring_setup$auto(0x85, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket(0x25, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x200448c0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x10b040, 0x0) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={r1, 0x4, 0xf9c, 0x468, 0x9, 0x3, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa503}, 0x800}, 0x7, 0x4008) 1m56.151921788s ago: executing program 0 (id=3831): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x15, 0x10d, "fd5736a95c80db53e7c4aadb2715ac2f88"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4000890) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x20, r0, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x60040440}, 0x0) mlockall$auto(0x7) 1m55.801036566s ago: executing program 0 (id=3832): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000200)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_LEAVES={0x4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r2}]}, 0x20}, 0x1, 0x0, 0x900, 0x44000}, 0x14) 1m55.580853331s ago: executing program 0 (id=3833): r0 = socket$nl_generic(0x10, 0x3, 0x10) alarm$auto(0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40026f34, 0x0) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x8000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) read$auto(r2, 0x0, 0xcefbce6) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000000)=""/156, 0x9c) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) kill$auto(0x0, 0x11) syz_clone3(&(0x7f0000000500)={0x400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket(0x1a, 0x5, 0xfffffffd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) msgctl$auto_IPC_INFO(0x3ff, 0x3, &(0x7f0000000140)={{0x10000000, 0x0, 0xffffffffffffffff, 0x3c0, 0xfffffffe, 0x4, 0x6}, &(0x7f00000000c0)=0x40, &(0x7f0000000100)=0x42, 0x6, 0xfffffffffffffff7, 0x3, 0x5, 0x8000, 0x0, 0x6, 0x4, @raw=0x5, @inferred=0xffffffffffffffff}) shmctl$auto(0xa, 0x8, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000640)={0x24, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x40000) 1m53.800991973s ago: executing program 0 (id=3838): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x10000000017, 0x28, 0x4, 0x8000000156, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) pread64$auto(r1, 0x0, 0xffffffff, 0xfff) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006) open(0x0, 0x1e1401, 0xe5) tkill$auto(0x0, 0x7) write$auto(0x3, 0x0, 0x100082) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10000000001013, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000e00)="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", 0xcb6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x1008000) 1m50.82979018s ago: executing program 5 (id=3845): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_fd=r2, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x60840, 0x0) 1m49.894452857s ago: executing program 0 (id=3846): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x20200, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0xb02, 0x0) sendfile$auto(r1, r0, 0x0, 0x9) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/uprobe_events\x00', 0x86803, 0x0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x1000005, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181841, 0x0) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/options/trace_printk\x00', 0x121082, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) r2 = open(0x0, 0xd02, 0xc3) unshare$auto(0x40000080) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) sendmsg$auto_NL80211_CMD_START_AP(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x644, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_FRAME={0x61b, 0x33, "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"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x9}}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7}]}, 0x644}, 0x1, 0x0, 0x0, 0x48010}, 0x20000800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto(r2, 0x400002, 0x4, 0x0, &(0x7f00000001c0)=0x2) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000240)=0xbb4) select$auto(0x11, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd2, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x9, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) 1m49.337959959s ago: executing program 5 (id=3848): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0xffff) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (fail_nth: 5) 1m48.083067601s ago: executing program 5 (id=3851): r0 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x400, 0x239bae5b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xd}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x7}, @IEEE802154_ATTR_DEV_NAME={0x14, 0x1, 'nicvf0\x00'}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0x38}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x4501}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xd}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyac\x00', 0x80, 0x0) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x200880, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000001480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001440)={&(0x7f00000002c0)={0x114c, r5, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xf8d}, @NL80211_ATTR_SCAN_SUPP_RATES={0x1104, 0x7d, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}, @generic="0de89e6cbd9675ed704b6ab44a1230b88bd1205a4b4a98684d458f632ef635511c4322d6c0eb1d78ac015d512b0d679c6b0bd189ae3cc6a077827dc926204df6771726020018189c37adf3935fb0eabba7283e0031307891ebfd288c9e2e947f325954a83a35a4a7676c82212210ae17ef76a976de17ed58d5a5046dfb672bf12ca9beeea41a2eae600cbd3d9210ccd3cd7bcda44a72bb8111f9df9be79d906a547e0ed474e8332cf2be96dd590d9710dd7ab8bdf4707ace858f926681882c7601fb3a02f282f762bd57abb51394d6a6d3d19c4247ffb8f511f61100b8a7e1b05531649920924a4d4cc94237ce142c377d7277c4", @nested={0x1004, 0x14e, 0x0, 0x1, [@generic="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"]}]}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_MAC={0x10, 0x6, "e8ff570de000c0e0412702e7"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0xf}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x1}]}, 0x114c}, 0x1, 0x0, 0x0, 0x20004890}, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/tracing/set_event\x00', 0x19d200, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001500)={'wg1\x00'}) r6 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000001580)={@siginfo_0_0={0x7fffffff, 0xfffff83f, 0x6e9b, @_sigsys={&(0x7f0000001540)="a9aa6dc6ac9037c5af6f23bd8ac6d5070c66f5c97dbc13be1e2a16cdc52a291764eb9fe81bc9e073ed2582b4c4", 0xb5f, 0x1}}}, 0x1, &(0x7f0000001600)={{0x5d, 0x400}, {0xd00, 0x6}, 0x800, 0x24, 0x8, 0x1, 0x1, 0x2, 0x8, 0x8000000000000001, 0x100000001, 0x2, 0x2, 0xe000000000000000, 0x8, 0xfe00000000000000}) ptrace$auto_PTRACE_GET_SYSCALL_INFO(0x420e, r6, 0xfffffffffffffff0, 0x7) read$auto_snd_timer_f_ops_timer(r3, &(0x7f00000016c0)=""/242, 0xf2) brk$auto(0xfffffffffffffff7) getpgid$auto(r6) msync$auto(0x6, 0x943b, 0x4) r7 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0xfff, 0x4d, &(0x7f00000017c0)='].\xd9.\xfb\x00', &(0x7f0000001800)=0x9) ioctl$auto_BLKTRACESETUP32(r7, 0xc0401273, &(0x7f0000001840)={"a5b21fb4850c0fae4736412673a9150774892799edbd56c4d75e93d8d7f5308a", 0x4, 0x5, 0x5c, 0x1, 0x401, r6}) msync$auto(0x7, 0x81, 0x100) mmap$auto(0x10000, 0x7, 0x1, 0x7f, r4, 0xc) msync$auto(0x8, 0x8, 0x4) sendmsg$auto_GTP_CMD_GETPDP(r1, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, r0, 0x800, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000019c0), r7) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000001a00), r7) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001a40), r7) msync$auto(0x400, 0x401, 0x0) ioctl$auto_VHOST_SET_VRING_CALL2(r7, 0x4008af21, &(0x7f0000001a80)={0x5, r7}) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b00), r7) sendmsg$auto_NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000003540)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x40010060}, 0xc, &(0x7f0000003500)={&(0x7f0000001b40)={0x19a8, r9, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x5}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xf15f}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x197c, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x8cd, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x893, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x809, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x3}]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x7}]}, 0x19a8}}, 0x10) ioperm$auto(0x4, 0x1, 0x7) 1m47.427276062s ago: executing program 5 (id=3852): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/max_writeback_mb_bump\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/4096, 0x1000) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000200)='5', 0x1) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x800000000000000, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x5, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x1260, 0x5) 1m47.272320754s ago: executing program 0 (id=3853): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/driver/rtc\x00', 0x10b206, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x100) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) mkdir$auto(&(0x7f00000003c0)='}[,&*}\x00', 0x6) chroot$auto(0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x5e7d00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) mkdir$auto(0x0, 0x8001) socket(0x18, 0x805, 0x2) open(0x0, 0x161342, 0x100) socket(0x29, 0x2, 0x2) 1m45.344146115s ago: executing program 5 (id=3856): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) rename$auto(&(0x7f0000000140)='}[,&*}\x00', &(0x7f0000000180)='./file0\x00') 1m45.235506936s ago: executing program 5 (id=3857): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, &(0x7f0000001240)="3917ee414d3f8a9bcd34c452c26d6300b82c3c9549e9472728af0421ae7d3c9426c381e1c46becdfc5982ab696cd844473dcb4b41d51ec8bda9264d08b9d865876b48fe2614a1e863fecb06080aca4a32bed") ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) madvise$auto(0x1, 0x8, 0x4a35) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket(0x1a, 0x5, 0xfffffffd) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) bind$auto(r2, 0x0, 0x67) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x7, 0x90, 0x1, 0x9493, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x591]}, 0x0) socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x89e0, 0x38) 1m31.806402652s ago: executing program 35 (id=3853): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/driver/rtc\x00', 0x10b206, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x100) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) mkdir$auto(&(0x7f00000003c0)='}[,&*}\x00', 0x6) chroot$auto(0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x5e7d00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) mkdir$auto(0x0, 0x8001) socket(0x18, 0x805, 0x2) open(0x0, 0x161342, 0x100) socket(0x29, 0x2, 0x2) 1m30.170330951s ago: executing program 36 (id=3857): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, &(0x7f0000001240)="3917ee414d3f8a9bcd34c452c26d6300b82c3c9549e9472728af0421ae7d3c9426c381e1c46becdfc5982ab696cd844473dcb4b41d51ec8bda9264d08b9d865876b48fe2614a1e863fecb06080aca4a32bed") ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) madvise$auto(0x1, 0x8, 0x4a35) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) socket(0xf, 0x3, 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) socket(0x1a, 0x5, 0xfffffffd) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) bind$auto(r2, 0x0, 0x67) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x7, 0x90, 0x1, 0x9493, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x591]}, 0x0) socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x89e0, 0x38) 8.490034957s ago: executing program 3 (id=4098): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mouse0\x00', 0x181502, 0x0) write$auto(r0, 0x0, 0x3) close_range$auto(r0, 0xfffffffffffff000, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x1, 0x101, 0x0, &(0x7f0000000040)}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0xd4, 0x7, 0x9, 0x0, 0x10001, 0x1, 0x2, {0x8, 0x10000}, 0x1, 0x6, 0xfffffffffffffff9, 0x1007ffe, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0x1, 0x1800}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) setsockopt$auto(r2, 0x8001, 0x9, &(0x7f0000000300)='\x00\x90\x01\x17O\xa3\x93X[\xe9L\xa2\f\x9c\x7f\xe8 \x85\xe5\xc4$K\xaa\xe7\x83\x04X[\xa43P\x1e~\x1c\x92\x9a\xd2\x99M/\x94\x94\xc33\xaa\x8b\xd1\x97U9\xee\xd8\x0f\xf2\x85%\xc7\xc6\v`\x8e\x18\x92hGD@\x1c\xf4\x15\x8f\x11{p\xac\xfe\xff\'m\x05\xec\xa1\xbfD#\x00\x1e\xb1N]\xe8\xcd\x8av\x17\x80\x8a|*\xf0\xae7~\xa8!\xcc<\x9b\xa28\xcem\vL\x05\xa1v\x8c\\*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x03m\xec\\\xa6\xb9C\xd4\xf0@\x13\xba\xd21\xd3o\x11\xaau\x92\x181\x7f\x1da\xe7h:u\xd0\xa9\x04\tlcf\xf3\xb2.\xcfy\x19\x93)\xbf:\xc74\xb4\x06\x9d*\r\xcd\xf0\xd6eqv\xeb\xbbQ\xae\x8b\xdd \xe7\xcd\xfcV\x18i\xf1\xf4\xec\x92k\xe3Lv(A\x9d\xb4~\xd1[9\x84\x13B\xc6du\xab]F\x88\xfe\x88\xb4\x92\xcbk\xc32\xd0\x95\xe8\x97\xbe\x84wH\x16\x9755\xbe\xb8\xb3\xa7\x87GT=^\xc7 \xdb\xf3\xc9+k\xe1 \xa2\x06\xc6\x87[\xef\xfe\x12\xe0\x18\xe6\xbe\x1d\x98Y\xf9.L:\xf3\xb7\xdbc\x1a\xc1\xe6!k\x87\xa5\xe8z\xba\xb7\x13\xc7\x94E^\x80\x05\xfe\xfd\\\x88-g\xf4-e\xe4O\xfa\x87\xffi\x11\x8di\x02\xb9)hE\x83\x00\x00\x00', 0xf6bb) clone$auto(0x1000000006, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port3/state\x00', 0x2400, 0x0) read$auto(r3, &(0x7f00000002c0)='\x91\xf3\xc5\xe7\xf4\xfc\x8e\xf5\x1a14\x8a\xd9\x9a\x11\xb1\x10q\xdf\x8doi\xfc\x9f\x18\x9a\xd4\x1d\xf7\xc7\xf9\xf8\xa2\xa3\x10Cs]\x01\xfec~\x9c\x9e\xb2\xa5Io\x11\x83\xf2\x06\a\xc0\xca\xcd\x1fHl2\xf4a\x88`\xd8(\x0fR\xb4\xcb\xc9\xf4E\xe8\xdd\xec\x85\xfa\xdc\xd7\x0eZ\xb5\x8f\x06\x89Ss6\x04\x00'/100, 0x5ff15ff9) clone$auto(0xfffffffffffffffd, 0x8006, 0x0, 0x0, 0xfffffffffffffff8) setresuid$auto(0x0, 0xee01, 0x0) r4 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x42, 0x0, &(0x7f00000000c0)=0x1e) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000002c0), 0xa82, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f00000001c0)='@;\x94:IN\x18\xfa7Cl\x108\xcb#\x00\xa1Vq\xc9\x00\xa6=`<\x00\x00\xe7{\x87sN\xaa%\x10h\xc7\xebOi\x88\x8a#\xdf\x9a\xe9\x9f\x06\x0f\x18\x8b\x7f9%\xee\x1cT!\xae>\xf7E\xcc\x95\xf0\x01\x10Z\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x84, 0x9, 0x0) shmget$auto(0x5, 0x7, 0xfffffff7) mmap$auto(0x6, 0x3, 0x8000000000000001, 0x9b73, r3, 0x8003) close_range$auto(0x2, r4, 0x0) 6.039645049s ago: executing program 7 (id=4107): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, &(0x7f0000001240)="3917ee414d3f8a9bcd34c452c26d6300b82c3c9549e9472728af0421ae7d3c9426c381e1c46becdfc5982ab696cd844473dcb4b41d51ec8bda9264d08b9d865876b48fe2614a1e863fecb06080aca4a32bed") ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socket(0xf, 0x3, 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1a, 0x5, 0xfffffffd) r2 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) bind$auto(r2, 0x0, 0x67) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x7, 0x90, 0x1, 0x9493, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x591]}, 0x0) socket(0x15, 0x5, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) socket(0x15, 0x5, 0x0) ioctl$auto(0x3, 0x89e0, 0x38) 5.81870129s ago: executing program 6 (id=4108): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) memfd_create$auto(0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) finit_module$auto(0x3, 0xfffffffffffffffe, 0x3) read$auto(r0, 0x0, 0xffff) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 5.700706281s ago: executing program 8 (id=4109): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/21t\x00', 0x101b00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r4, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r1, 0x3) (async) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, r1, 0x3) open_by_handle_at$auto(r2, &(0x7f0000000240)={0x29, 0x136e, "8f42bd27dada11e75b65c0f11428bc9312cab1077e737d4629d7867bca4825b1c2c21fa15504a19b9a"}, 0x7d) (async) r5 = open_by_handle_at$auto(r2, &(0x7f0000000240)={0x29, 0x136e, "8f42bd27dada11e75b65c0f11428bc9312cab1077e737d4629d7867bca4825b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r5, 0x1, 0x1021, 0x0, 0xd) (async) setsockopt$auto(r5, 0x1, 0x1021, 0x0, 0xd) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x8000000000000000, 0x400008, 0x4, 0x14, 0xffffffffffffffff, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x50802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) socket(0x2b, 0x1, 0x0) (async) socket(0x2b, 0x1, 0x0) 4.743856678s ago: executing program 7 (id=4110): socket(0x2, 0x3, 0xa) socket(0x2, 0x5, 0x0) socket(0x2, 0x801, 0x100) socket(0x25, 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40106f52, 0xffffffffffffffff) 4.638889215s ago: executing program 8 (id=4111): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mouse0\x00', 0x181502, 0x0) write$auto(r0, 0x0, 0x3) close_range$auto(r0, 0xfffffffffffff000, 0xffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x2fd, 0x1, 0x101, 0x0, &(0x7f0000000040)}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0xd4, 0x7, 0x9, 0x0, 0x10001, 0x1, 0x2, {0x8, 0x10000}, 0x1, 0x6, 0xfffffffffffffff9, 0x1007ffe, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0x1, 0x1800}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.637313754s ago: executing program 6 (id=4112): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000032c0)='\xc4!\x00', &(0x7f0000003300)=0x1ff) mkdir$auto(0x0, 0x3) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = prctl$auto_PR_SET_MM_START_CODE(0x7, 0x1, 0xffffffffffffffff, 0x9, 0x400) close_range$auto(r1, 0xffffffffffffffff, 0xffffffff) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x200, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x143980, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu3\x00', 0x40001, 0x0) ioctl$auto(r3, 0x40045431, 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x25, 0x4, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x44c15}, 0xc0804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r4, @ANYRES16=0x0, @ANYBLOB="1000833dc57eac1cd66c331b0d375dfba5b92cbd7000fddbdf25080000a9f800000000000000065bbd79c9000000ff12e4a5e5ed9a6cf99ecd488333be9ff207b40839572a008f547969681310bef46108fb6c02562422ac5dd0e72b576a01ec9846a18dabe534207fba4ae14e0c18a766b47ab4"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r6 = prctl$auto(0x1, 0x1009, 0x0, 0x0, 0x10000000000003) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x9, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x0, 0x0) ioctl$auto(r6, 0x540a, r7) 4.151060741s ago: executing program 8 (id=4113): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101300, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/192, 0xc0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) mq_timedsend$auto(r0, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x8000000000000000, 0x5, &(0x7f0000000140)={0x4, 0x6}) rseq$auto(&(0x7f0000000300)={0x80000001, 0x401, 0x0, 0x20000006, 0xe, 0x10}, 0x8202, 0x20000001, 0x6) r1 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r1, 0x11, 0x66, 0x0, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101300, 0x0) (async) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/192, 0xc0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) (async) mq_timedsend$auto(r0, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x8000000000000000, 0x5, &(0x7f0000000140)={0x4, 0x6}) (async) rseq$auto(&(0x7f0000000300)={0x80000001, 0x401, 0x0, 0x20000006, 0xe, 0x10}, 0x8202, 0x20000001, 0x6) (async) socket(0x2, 0x80802, 0x0) (async) setsockopt$auto(r1, 0x11, 0x66, 0x0, 0x8) (async) 3.848832093s ago: executing program 7 (id=4114): madvise$auto(0x0, 0x10000010000, 0xa) mlockall$auto(0x7) mmap$auto(0x0, 0x754a, 0xde, 0x1d, 0x2, 0x5) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x200007, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) close_range$auto(r0, 0x8, 0x0) r1 = socket(0x15, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r1, r2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x4140aecd, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0xa, 0x2, 0x3a) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) clone$auto(0x21, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x8002e, 0x0, 0xb) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto_KVM_CREATE_VM(r0, 0x4138ae84, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 3.561951278s ago: executing program 6 (id=4115): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), r0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) adjtimex$auto(&(0x7f00000005c0)={0xf332b6e, 0x0, 0x0, 0x8, 0x3, 0x7, 0x9, 0x0, 0x10001, 0xfffffffffffffffe, 0x2, {0x8, 0x10000}, 0x2dd, 0x6, 0xfffffffffffffffd, 0x203, 0x0, 0x80000001, 0x83, 0xffffffffffff628e, 0x8, 0x0, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) clock_adjtime$auto(0xc, &(0x7f00000000c0)={0xa, 0x0, 0x54, 0xc, 0x8001, 0x1, 0x5, 0x0, 0xef08, 0x3, 0x5, {0x4, 0x8f}, 0x6, 0x1002003, 0x101, 0x4, 0x0, 0x1ff, 0x106, 0x2, 0x40, 0xa5da, 0xfffffffd}) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0xffffffffffffff86) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop15/hctx0/cpu1/default_rq_list\x00', 0x0, 0x0) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x3, 0x0, 0x23, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0xffb, 0xdf, 0x9b72, 0x400, 0xa7ffd) socket(0xa, 0x1, 0x0) ioctl$auto(0x3, 0x894b, 0x38) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000028, 0xd98, 0x2}, 0x0, 0x7ffffffff000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r2, &(0x7f0000000300)={{&(0x7f0000000140), 0x12, 0x0, 0x2, 0x0, 0xf59, 0x1}, 0x7}, 0x8, 0x7fff) 3.39545511s ago: executing program 8 (id=4116): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) write$auto(r0, &(0x7f0000000080)='1\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x8800) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x4d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) listen$auto(0x3, 0x81) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r5 = gettid() process_vm_writev$auto(r5, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x2802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x6, 0x5, 0x7) 3.089479461s ago: executing program 3 (id=4117): socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, 0x6a) socketpair$auto(0x7, 0x5, 0x1fffffff, &(0x7f00000000c0)=0x4) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x95eb, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 1.968104227s ago: executing program 6 (id=4118): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) write$auto(r0, &(0x7f0000000080)='1\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b7e, 0x2, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x4d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) listen$auto(0x3, 0x81) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf257e000000"], 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r5 = gettid() process_vm_writev$auto(r5, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x2802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x6, 0x5, 0x7) 1.831763406s ago: executing program 3 (id=4119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14ffffff", @ANYRES16=r1, @ANYBLOB="c70b879c18ee3c25581703"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44884) 1.790161152s ago: executing program 8 (id=4120): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_fake_panic_fops_(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x9003, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r0, 0xc2604110, &(0x7f0000000040)={0x6, [{[0x2, 0xf5e, 0x1ff, 0xd, 0x7f, 0x8, 0x5, 0x663d349e]}, {[0x2, 0xa6, 0x5c915993, 0xfffffffd, 0x6, 0xe, 0x80000001, 0x3]}, {[0x2, 0xe, 0x2, 0x579c8feb, 0x9, 0x6, 0x7, 0xa53]}], [{[0x75d, 0x9, 0x6, 0x17f29ee4, 0x400, 0x7, 0xc, 0x44]}, {[0x1, 0xeade, 0x1, 0x3, 0xf0, 0x5, 0x101, 0x1]}, {[0x7e61, 0x6, 0x7, 0x0, 0x5, 0x5, 0x100, 0x9]}, {[0x4, 0x5, 0x1, 0xfffffff7, 0x20000005, 0x0, 0xfffffffb, 0x1]}, {[0x3, 0x1000, 0x8, 0x8, 0x2, 0xe8c, 0xf, 0xd403]}], [{0xfffffffa, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x7f, 0x6, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x61, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x49c5fc8b, 0x0, 0x0, 0x0, 0x1}, {0x7ff, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x6, 0x9, 0x0, 0x1, 0x1}, {0x9, 0x6, 0x0, 0x1}, {0x7fd, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xfffffffd, 0x1, 0x1, 0x1}, {0x8, 0x4, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x5, 0x1, 0x1, 0x0, 0x1}], [{0xbe, 0xd5, 0x0, 0x1, 0x0, 0x1}, {0xc2, 0x7fffffff, 0x1, 0x1, 0x1}, {0xbc, 0xbb5e, 0x1, 0x0, 0x0, 0x1}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x100, 0x12e800, 0x1, 0x1, 0x1, 0x1}, {0x2, 0xf, 0x0, 0x1, 0x1}, {0xffff, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x80000000, 0x6, 0x0, 0x1}], 0x100, 0x2, 0x4, 0x9, 0x5, 0x1, 0x8, "938f570ba48ab1df6ea169301a0f4b75", "16fef137d6f6aa1d93e7fd319170d04be4063eb16bddc7a41e5782dfff02104539c9b5e571a002e14933724526d0c013"}) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dri/card2\x00', 0x200100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000080)=@test={0xffffffffffffffff, 0x82, 0x1ff, 0x19d2e2e9, 0x5, 0x81, 0xfffffff1, 0x1, 0x1, 0x5, 0x9b9, 0x8, 0x7fffffff, 0x4, 0x2}, 0x66) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000840)="13") ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f00000000c0)) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="48dcf68e", @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf25190000001800018014000200776c616e3000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_INFO(0x100, 0x3, &(0x7f00000012c0)={{0x632, 0xffffffffffffffff, 0xee00, 0x1, 0x5, 0x1, 0x80}, 0x0, 0x0, 0x1b, 0x7, 0x5, 0x7, 0x1, 0xdd34, 0x7, 0x8, @raw=0xffff}) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vkms/drm/card1/card1-Virtual-1/modes\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/44, 0x2c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1102, 0x0) read$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0xffffffffffff0004, 0x19) 1.758082883s ago: executing program 7 (id=4121): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x48180, 0x0) socket(0x2, 0x1, 0x106) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/oss\x00', 0x480, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r1 = socket(0x2, 0xa, 0x1) r2 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r1, 0x10000}, 0x10) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008011, r2, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57699, 0x9b72, 0x2, 0x8000000000008000) mmap$auto(0x0, 0x20009, 0x8000, 0xeb1, 0x401, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x68100, 0x0) ioctl$auto_TIOCMSET2(r3, 0x5418, &(0x7f00000011c0)) r4 = socketpair$auto(0x6, 0x5, 0x2, 0x0) read$auto(r0, &(0x7f0000000080)='/dev/sda\x00', 0xffa) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/free_buffer\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r6 = socket(0x2, 0x1, 0x0) setsockopt$auto(r6, 0x6, 0x24, 0x0, 0x40) ioctl$auto(r5, 0x5393, r4) 1.480159715s ago: executing program 3 (id=4122): r0 = socket(0xa, 0x1, 0x100) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f0000000580)={[0xe83, 0x8, 0xfffffffffffffc01, 0x0, 0xfff9, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x4, 0x3, 0x5, 0x2, 0x5]}, 0x0) sendmmsg$auto(r1, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, 0x0, 0x100, 0x8}, 0x1a}, 0x3, 0x6) mknod$auto(0x0, 0x20e9, 0x103) r2 = socket(0xa, 0x801, 0x84) setsockopt$auto(r2, 0x10000000084, 0x0, 0x0, 0x10) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) (fail_nth: 17) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fff) unshare$auto(0xa4) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) socket(0x0, 0x3, 0x3c) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) 789.264084ms ago: executing program 6 (id=4123): rseq$auto(&(0x7f00000002c0)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0xfffffff4, 0x0, 0x7) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x4, 0x400008, 0x3, 0x9b72, r1, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffe, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x8, 0xe, 0x3, 0x9, 0x0, 0x200, 0xe223, 0x80000000, 0x2000009, 0x7, 0xfffffffffffffff7}) madvise$auto(0x110c230000, 0x8031ca, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r2, &(0x7f000000be80)='batadv0\x00', 0xf) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f000000c1c0)={0x14, r3, 0x35712d2af9a9dbe3, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) ioperm$auto(0x3, 0xe, 0x2000000000000149) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000380), 0x101100, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000088}, 0x20000000) kcmp$auto(0x1, 0x100000001, 0x5, 0x8f0, 0x24000) 571.353303ms ago: executing program 3 (id=4124): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = gettid() tgkill$auto_SIGCONT(r0, r0, 0x12) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f00000000c0), 0x55) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/036/001\x00', 0x82, 0x0) ioctl$auto(r2, 0x8008551c, 0xffffffffffffffff) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000)="bc8d1503f2dd2dc1f115a13307a6317f") readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x800) 0s ago: executing program 7 (id=4125): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x181800, 0x0) write$auto(0x3, 0x0, 0xfffffdef) read$auto_clk_dump_fops_(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8040) madvise$auto(0x0, 0xf663, 0x15) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\x00\xab\x01\xcd\x92I}\xe8N\x94\xf2\xa2\x00\x00\f\x15\xd8a\x8b\x06\x9e\xae\x87\\\xfd\x01U\xc8\x911.\xb0`T\xd3M\x8a\xbf\xe9\x83\xea8\xd1\xda\xcf9\x02u@\xeb\xcd\xb2\tBAh\xe3\x02K\xfcS_X\xe3\xd7\x84\xb8o\xe6\xac>d\xf8', 0x7e) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim5/ports/0/pp_hold\x00', 0x1, 0x0) mmap$auto(0x1, 0x1, 0x1, 0x9b72, 0x2, 0x7) socket(0x11, 0x80003, 0x300) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)='7', 0x1) kernel console output (not intermixed with test programs): 0.403207][T24664] alloc_pages_noprof+0x131/0x390 [ 1200.403231][T24664] pte_alloc_one+0x1c/0x3a0 [ 1200.403265][T24664] __pte_alloc+0x6d/0x3c0 [ 1200.403289][T24664] ? __pfx___pte_alloc+0x10/0x10 [ 1200.403315][T24664] ? walk_to_pmd+0x310/0x4d0 [ 1200.403345][T24664] vm_insert_pages+0x8ee/0xa50 [ 1200.403383][T24664] ? __pfx_vm_insert_pages+0x10/0x10 [ 1200.403420][T24664] io_uring_mmap+0x3ba/0x5a0 [ 1200.403456][T24664] ? __pfx_io_uring_mmap+0x10/0x10 [ 1200.403485][T24664] ? vma_merge_new_range+0x37f/0xa00 [ 1200.403516][T24664] ? vm_area_alloc+0x1f/0x160 [ 1200.403546][T24664] ? lockdep_init_map_type+0x5c/0x280 [ 1200.403585][T24664] __mmap_region+0x128e/0x25e0 [ 1200.403625][T24664] ? __pfx___mmap_region+0x10/0x10 [ 1200.403670][T24664] ? register_lock_class+0x41/0x4c0 [ 1200.403702][T24664] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1200.403735][T24664] ? __lock_acquire+0xb8a/0x1c90 [ 1200.403776][T24664] ? __mutex_trylock_common+0xe9/0x250 [ 1200.403849][T24664] ? trace_cap_capable+0x18d/0x200 [ 1200.403885][T24664] mmap_region+0x32b/0x3f0 [ 1200.403925][T24664] do_mmap+0xa3e/0x1210 [ 1200.403959][T24664] ? __pfx_do_mmap+0x10/0x10 [ 1200.403986][T24664] ? __pfx_down_write_killable+0x10/0x10 [ 1200.404023][T24664] vm_mmap_pgoff+0x281/0x450 [ 1200.404055][T24664] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1200.404084][T24664] ? __fget_files+0x20e/0x3c0 [ 1200.404122][T24664] ksys_mmap_pgoff+0x32c/0x5c0 [ 1200.404147][T24664] ? __pfx_ksys_write+0x10/0x10 [ 1200.404179][T24664] __x64_sys_mmap+0x125/0x190 [ 1200.404213][T24664] do_syscall_64+0xcd/0x490 [ 1200.404248][T24664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.404271][T24664] RIP: 0033:0x7fd292f8e929 [ 1200.404291][T24664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.404315][T24664] RSP: 002b:00007fd293ee4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1200.404338][T24664] RAX: ffffffffffffffda RBX: 00007fd2931b5fa0 RCX: 00007fd292f8e929 [ 1200.404354][T24664] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 1200.404369][T24664] RBP: 00007fd293ee4090 R08: 0000000000000003 R09: 0000000000008000 [ 1200.404384][T24664] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 1200.404400][T24664] R13: 0000000000000000 R14: 00007fd2931b5fa0 R15: 00007ffc15515bd8 [ 1200.404435][T24664] [ 1200.749086][ C0] vkms_vblank_simulate: vblank timer overrun [ 1201.289957][T24672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3849'. [ 1201.301580][T24672] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1203.681040][T24698] binder: 24697:24698 ioctl 3b66 0 returned -22 [ 1204.131848][T24710] binder: 24709:24710 ioctl 3b66 0 returned -22 [ 1207.482265][T24751] binder: 24750:24751 ioctl 3b66 0 returned -22 [ 1207.817614][T24753] FAULT_INJECTION: forcing a failure. [ 1207.817614][T24753] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.831070][T24753] CPU: 0 UID: 0 PID: 24753 Comm: syz.6.3869 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1207.831108][T24753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1207.831124][T24753] Call Trace: [ 1207.831135][T24753] [ 1207.831145][T24753] dump_stack_lvl+0x16c/0x1f0 [ 1207.831189][T24753] should_fail_ex+0x512/0x640 [ 1207.831229][T24753] should_failslab+0xc2/0x120 [ 1207.831254][T24753] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1207.831286][T24753] ? __lock_acquire+0x622/0x1c90 [ 1207.831317][T24753] ? tipc_nametbl_insert_publ+0x5a/0x1720 [ 1207.831369][T24753] tipc_nametbl_insert_publ+0x5a/0x1720 [ 1207.831410][T24753] ? do_raw_spin_lock+0x12c/0x2b0 [ 1207.831448][T24753] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1207.831485][T24753] ? net_generic+0xea/0x2a0 [ 1207.831531][T24753] tipc_nametbl_publish+0x137/0x280 [ 1207.831577][T24753] tipc_sk_publish+0x1d8/0x430 [ 1207.831604][T24753] ? __pfx_tipc_sk_publish+0x10/0x10 [ 1207.831633][T24753] ? __local_bh_enable_ip+0xa4/0x120 [ 1207.831665][T24753] tipc_sk_bind+0x16f/0x380 [ 1207.831694][T24753] tipc_bind+0x190/0x2a0 [ 1207.831722][T24753] __sys_bind+0x1a4/0x260 [ 1207.831754][T24753] ? __pfx___sys_bind+0x10/0x10 [ 1207.831798][T24753] ? xfd_validate_state+0x61/0x180 [ 1207.831828][T24753] ? __sys_setsockopt+0x140/0x1a0 [ 1207.831870][T24753] __x64_sys_bind+0x72/0xb0 [ 1207.831898][T24753] ? lockdep_hardirqs_on+0x7c/0x110 [ 1207.831933][T24753] do_syscall_64+0xcd/0x490 [ 1207.831973][T24753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.832000][T24753] RIP: 0033:0x7f656858e929 [ 1207.832021][T24753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1207.832046][T24753] RSP: 002b:00007f6569434038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1207.832071][T24753] RAX: ffffffffffffffda RBX: 00007f65687b5fa0 RCX: 00007f656858e929 [ 1207.832090][T24753] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000007 [ 1207.832106][T24753] RBP: 00007f6568610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1207.832123][T24753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1207.832138][T24753] R13: 0000000000000000 R14: 00007f65687b5fa0 R15: 00007fff5eb4ae18 [ 1207.832171][T24753] [ 1207.844925][T24755] binder: 24754:24755 ioctl 3b66 0 returned -22 [ 1208.491158][T24766] FAULT_INJECTION: forcing a failure. [ 1208.491158][T24766] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.508007][T24766] CPU: 0 UID: 0 PID: 24766 Comm: syz.6.3872 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1208.508053][T24766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1208.508070][T24766] Call Trace: [ 1208.508080][T24766] [ 1208.508091][T24766] dump_stack_lvl+0x16c/0x1f0 [ 1208.508138][T24766] should_fail_ex+0x512/0x640 [ 1208.508174][T24766] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1208.508218][T24766] should_failslab+0xc2/0x120 [ 1208.508244][T24766] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1208.508269][T24766] ? lockdep_init_map_type+0x5c/0x280 [ 1208.508291][T24766] ? __d_alloc+0x31/0xaa0 [ 1208.508314][T24766] __d_alloc+0x31/0xaa0 [ 1208.508336][T24766] d_alloc_pseudo+0x1c/0xc0 [ 1208.508352][T24766] alloc_file_pseudo+0xcf/0x230 [ 1208.508369][T24766] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1208.508384][T24766] ? alloc_fd+0x471/0x7d0 [ 1208.508405][T24766] sock_alloc_file+0x50/0x210 [ 1208.508420][T24766] __sys_socket+0x1c0/0x260 [ 1208.508437][T24766] ? __pfx___sys_socket+0x10/0x10 [ 1208.508455][T24766] ? do_user_addr_fault+0x843/0x1370 [ 1208.508478][T24766] __x64_sys_socket+0x72/0xb0 [ 1208.508494][T24766] ? lockdep_hardirqs_on+0x7c/0x110 [ 1208.508514][T24766] do_syscall_64+0xcd/0x490 [ 1208.508536][T24766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.508551][T24766] RIP: 0033:0x7f6568590847 [ 1208.508564][T24766] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1208.508578][T24766] RSP: 002b:00007f6569432fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1208.508593][T24766] RAX: ffffffffffffffda RBX: 00007f65687b5fa0 RCX: 00007f6568590847 [ 1208.508602][T24766] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1208.508611][T24766] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1208.508620][T24766] R10: 0000200000001100 R11: 0000000000000286 R12: 0000000000000000 [ 1208.508629][T24766] R13: 0000000000000000 R14: 00007f65687b5fa0 R15: 00007fff5eb4ae18 [ 1208.508647][T24766] [ 1208.716412][ C0] vkms_vblank_simulate: vblank timer overrun [ 1209.086342][T24771] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3874'. [ 1209.117823][ T5149] Bluetooth: hci6: unexpected subevent 0x01 length: 4 < 18 [ 1209.181796][ T30] audit: type=1800 audit(6046402881.899:78): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3874" name="dbroot" dev="configfs" ino=87558 res=0 errno=0 [ 1209.954219][T24786] FAULT_INJECTION: forcing a failure. [ 1209.954219][T24786] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.972812][T24786] CPU: 1 UID: 0 PID: 24786 Comm: syz.6.3878 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1209.972836][T24786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1209.972845][T24786] Call Trace: [ 1209.972851][T24786] [ 1209.972857][T24786] dump_stack_lvl+0x16c/0x1f0 [ 1209.972885][T24786] should_fail_ex+0x512/0x640 [ 1209.972937][T24786] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1209.972962][T24786] should_failslab+0xc2/0x120 [ 1209.972976][T24786] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1209.972998][T24786] ? __alloc_skb+0x2b2/0x380 [ 1209.973020][T24786] __alloc_skb+0x2b2/0x380 [ 1209.973040][T24786] ? __pfx___alloc_skb+0x10/0x10 [ 1209.973072][T24786] ? rcu_is_watching+0x12/0xc0 [ 1209.973096][T24786] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 1209.973134][T24786] ? audit_log_start+0x2c5/0x7f0 [ 1209.973162][T24786] audit_log_start+0x2ea/0x7f0 [ 1209.973181][T24786] ? __pfx_audit_log_start+0x10/0x10 [ 1209.973199][T24786] ? rcu_is_watching+0x12/0xc0 [ 1209.973218][T24786] ? __local_bh_enable_ip+0xa4/0x120 [ 1209.973236][T24786] ? arch_do_signal_or_restart+0x211/0x790 [ 1209.973257][T24786] audit_seccomp+0x60/0x1f0 [ 1209.973276][T24786] __secure_computing+0x2bf/0x320 [ 1209.973295][T24786] syscall_trace_enter+0x89/0x260 [ 1209.973318][T24786] do_syscall_64+0x347/0x490 [ 1209.973341][T24786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.973356][T24786] RIP: 0033:0x7f656858e929 [ 1209.973369][T24786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1209.973383][T24786] RSP: 002b:00007f65694339f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1209.973398][T24786] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f656858e929 [ 1209.973408][T24786] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 000000000000000b [ 1209.973416][T24786] RBP: 00007f6569434040 R08: 00007f6569435000 R09: 000000000000000b [ 1209.973426][T24786] R10: 00000000000392cc R11: 0000000000000246 R12: 0000000000000000 [ 1209.973435][T24786] R13: 0000000000000000 R14: 00007f65687b5fa0 R15: 00007fff5eb4ae18 [ 1209.973454][T24786] [ 1209.973475][T24786] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1210.152786][T24787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3878'. [ 1210.159211][T24786] audit: out of memory in audit_log_start [ 1213.251994][T24822] binder: 24821:24822 ioctl 3b66 0 returned -22 [ 1214.204678][T24835] sp0: Synchronizing with TNC [ 1215.340911][T24839] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1216.327646][T24853] FAULT_INJECTION: forcing a failure. [ 1216.327646][T24853] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.341564][T24853] CPU: 1 UID: 0 PID: 24853 Comm: syz.6.3893 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1216.341601][T24853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1216.341617][T24853] Call Trace: [ 1216.341626][T24853] [ 1216.341637][T24853] dump_stack_lvl+0x16c/0x1f0 [ 1216.341680][T24853] should_fail_ex+0x512/0x640 [ 1216.341715][T24853] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1216.341757][T24853] should_failslab+0xc2/0x120 [ 1216.341782][T24853] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1216.341820][T24853] ? copy_process+0x4b6/0x76a0 [ 1216.341850][T24853] ? _raw_spin_unlock_irq+0x23/0x50 [ 1216.341886][T24853] copy_process+0x4b6/0x76a0 [ 1216.341916][T24853] ? __pfx___futex_wait+0x10/0x10 [ 1216.341950][T24853] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1216.341983][T24853] ? lockdep_hardirqs_on+0x7c/0x110 [ 1216.342030][T24853] ? __pfx_copy_process+0x10/0x10 [ 1216.342080][T24853] kernel_clone+0xfc/0x960 [ 1216.342113][T24853] ? __pfx_kernel_clone+0x10/0x10 [ 1216.342173][T24853] __do_sys_clone+0xce/0x120 [ 1216.342204][T24853] ? __pfx___do_sys_clone+0x10/0x10 [ 1216.342253][T24853] ? __sys_getsockopt+0x144/0x1b0 [ 1216.342301][T24853] do_syscall_64+0xcd/0x490 [ 1216.342341][T24853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.342374][T24853] RIP: 0033:0x7f656858e929 [ 1216.342396][T24853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1216.342423][T24853] RSP: 002b:00007f6569413038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1216.342447][T24853] RAX: ffffffffffffffda RBX: 00007f65687b6080 RCX: 00007f656858e929 [ 1216.342466][T24853] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001 [ 1216.342489][T24853] RBP: 00007f6568610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1216.342505][T24853] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 1216.342522][T24853] R13: 0000000000000000 R14: 00007f65687b6080 R15: 00007fff5eb4ae18 [ 1216.342557][T24853] [ 1216.544474][ C1] vkms_vblank_simulate: vblank timer overrun [ 1218.477800][T19841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1218.488174][T19841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1218.505686][T19841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1218.538542][T19841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1218.556254][T19841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1218.823032][T24870] kexec: Could not allocate control_code_buffer [ 1219.119060][T24887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3900'. [ 1219.236537][T24884] could not allocate digest TFM handle [ 1219.383259][T24877] chnl_net:caif_netlink_parms(): no params data found [ 1219.640599][T19841] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1219.652624][T19841] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1219.662256][T19841] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1219.672160][T19841] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1219.681518][T19841] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1219.808609][T24877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.820688][T24877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.828744][T24877] bridge_slave_0: entered allmulticast mode [ 1219.837972][T24877] bridge_slave_0: entered promiscuous mode [ 1219.847848][T24877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.855431][T24877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.863370][T24877] bridge_slave_1: entered allmulticast mode [ 1219.877197][T24877] bridge_slave_1: entered promiscuous mode [ 1220.002612][T24877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1220.060651][T24877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.211378][T24877] team0: Port device team_slave_0 added [ 1220.233367][T24877] team0: Port device team_slave_1 added [ 1220.517879][T24877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.580260][T24877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.608214][T24877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.625900][T24877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.639635][T24877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1220.665958][T24877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.685240][ T5149] Bluetooth: hci7: command tx timeout [ 1220.759638][T24877] hsr_slave_0: entered promiscuous mode [ 1220.866303][T24877] hsr_slave_1: entered promiscuous mode [ 1220.872662][T24877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1220.880933][T24877] Cannot create hsr debugfs directory [ 1221.025867][T24893] chnl_net:caif_netlink_parms(): no params data found [ 1221.194544][T24914] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3904'. [ 1221.231827][ T5149] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 1221.285281][ T30] audit: type=1800 audit(6046402893.999:79): pid=24916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3904" name="dbroot" dev="configfs" ino=87965 res=0 errno=0 [ 1221.686901][T24893] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.694065][T24893] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.721971][T24893] bridge_slave_0: entered allmulticast mode [ 1221.747055][T24893] bridge_slave_0: entered promiscuous mode [ 1221.778962][T24893] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.786714][T24893] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.793976][T24893] bridge_slave_1: entered allmulticast mode [ 1221.803062][T24893] bridge_slave_1: entered promiscuous mode [ 1221.805442][ T5149] Bluetooth: hci8: command tx timeout [ 1221.940584][T24893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1221.981906][T24893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1222.097168][T24893] team0: Port device team_slave_0 added [ 1222.116745][T24893] team0: Port device team_slave_1 added [ 1222.256951][T24931] FAULT_INJECTION: forcing a failure. [ 1222.256951][T24931] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1222.321152][T24931] CPU: 0 UID: 0 PID: 24931 Comm: syz.3.3908 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1222.321191][T24931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1222.321207][T24931] Call Trace: [ 1222.321217][T24931] [ 1222.321228][T24931] dump_stack_lvl+0x16c/0x1f0 [ 1222.321274][T24931] should_fail_ex+0x512/0x640 [ 1222.321317][T24931] get_futex_key+0x1d0/0x1540 [ 1222.321352][T24931] ? __pfx_get_futex_key+0x10/0x10 [ 1222.321395][T24931] futex_wake+0xea/0x530 [ 1222.321435][T24931] ? __pfx_futex_wake+0x10/0x10 [ 1222.321471][T24931] ? rcu_is_watching+0x12/0xc0 [ 1222.321510][T24931] do_futex+0x1e3/0x350 [ 1222.321543][T24931] ? __pfx_do_futex+0x10/0x10 [ 1222.321578][T24931] ? __pfx___might_resched+0x10/0x10 [ 1222.321610][T24931] __x64_sys_futex+0x1e0/0x4c0 [ 1222.321643][T24931] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 1222.321678][T24931] ? __pfx___x64_sys_futex+0x10/0x10 [ 1222.321710][T24931] ? xfd_validate_state+0x61/0x180 [ 1222.321756][T24931] do_syscall_64+0xcd/0x490 [ 1222.321802][T24931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.321828][T24931] RIP: 0033:0x7f907498e929 [ 1222.321850][T24931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1222.321875][T24931] RSP: 002b:00007f907583d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1222.321901][T24931] RAX: ffffffffffffffda RBX: 00007f9074bb5fa8 RCX: 00007f907498e929 [ 1222.321919][T24931] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9074bb5fac [ 1222.321936][T24931] RBP: 00007f9074bb5fa0 R08: 00007f907583e000 R09: 0000000000000000 [ 1222.321953][T24931] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9074bb5fac [ 1222.321970][T24931] R13: 0000000000000000 R14: 00007ffc197bb240 R15: 00007ffc197bb328 [ 1222.322005][T24931] [ 1222.647221][T24893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1222.654837][T24893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.681559][T24893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1222.695029][T24893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1222.702894][T24893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1222.729945][T24893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1222.741519][T24877] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1222.765556][ T5149] Bluetooth: hci7: command tx timeout [ 1222.851133][T24877] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1222.908826][T24877] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1222.952323][T24893] hsr_slave_0: entered promiscuous mode [ 1222.962427][T24893] hsr_slave_1: entered promiscuous mode [ 1222.980607][T24893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1223.004436][T24893] Cannot create hsr debugfs directory [ 1223.078556][T24877] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1223.451346][T24877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.506655][T24893] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1223.520833][T24947] binder: 24946:24947 ioctl 3b66 0 returned -22 [ 1223.526229][T24877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1223.538818][T24893] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1223.555695][T24893] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1223.584074][T21973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1223.591360][T21973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1223.608555][T24893] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1223.634067][T21973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1223.641310][T21973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.885465][ T5149] Bluetooth: hci8: command tx timeout [ 1224.002905][T24893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1224.053686][T24893] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.063602][T24964] usbip-vudc usbip-vudc.0: gadget not bound [ 1224.073622][T24370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.080859][T24370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.121997][T24370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.129262][T24370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1224.287387][T24893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1224.372849][T24893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1224.539591][T24976] ima: policy update failed [ 1224.569209][T24877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.576191][ T30] audit: type=1802 audit(6046402897.259:80): pid=24976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3916" res=0 errno=0 [ 1224.626037][T24976] netlink: 25 bytes leftover after parsing attributes in process `syz.6.3916'. [ 1224.846894][ T5149] Bluetooth: hci7: command tx timeout [ 1225.549903][T24893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.965952][ T5149] Bluetooth: hci8: command tx timeout [ 1226.183976][T24877] veth0_vlan: entered promiscuous mode [ 1226.252322][T24877] veth1_vlan: entered promiscuous mode [ 1226.301771][T24877] veth0_macvtap: entered promiscuous mode [ 1226.323010][T24877] veth1_macvtap: entered promiscuous mode [ 1226.396404][T24877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1226.437294][T24877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1226.468040][T24877] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.483767][T24877] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.500380][T24877] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.526891][T24877] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.715505][T24893] veth0_vlan: entered promiscuous mode [ 1226.733081][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.757100][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.784977][T24893] veth1_vlan: entered promiscuous mode [ 1226.834243][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1226.852779][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1226.870646][T24893] veth0_macvtap: entered promiscuous mode [ 1226.905011][T24893] veth1_macvtap: entered promiscuous mode [ 1226.925973][ T5149] Bluetooth: hci7: command tx timeout [ 1227.049478][T24893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.201437][T24893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.278043][T24893] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.372986][T24893] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.429348][T24893] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.527861][T24893] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.045372][ T5149] Bluetooth: hci8: command tx timeout [ 1228.196217][T25022] random: crng reseeded on system resumption [ 1228.301977][T25022] FAULT_INJECTION: forcing a failure. [ 1228.301977][T25022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.356904][T25022] CPU: 0 UID: 0 PID: 25022 Comm: syz.6.3924 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1228.356942][T25022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1228.356957][T25022] Call Trace: [ 1228.356966][T25022] [ 1228.356976][T25022] dump_stack_lvl+0x16c/0x1f0 [ 1228.357017][T25022] should_fail_ex+0x512/0x640 [ 1228.357056][T25022] _copy_to_user+0x32/0xd0 [ 1228.357095][T25022] simple_read_from_buffer+0xcb/0x170 [ 1228.357129][T25022] proc_fail_nth_read+0x197/0x270 [ 1228.357160][T25022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1228.357191][T25022] ? rw_verify_area+0xcf/0x680 [ 1228.357221][T25022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1228.357250][T25022] vfs_read+0x1e4/0xc60 [ 1228.357295][T25022] ? __pfx___mutex_lock+0x10/0x10 [ 1228.357330][T25022] ? __pfx_vfs_read+0x10/0x10 [ 1228.357373][T25022] ? __fget_files+0x20e/0x3c0 [ 1228.357414][T25022] ksys_read+0x12a/0x250 [ 1228.357446][T25022] ? __pfx_ksys_read+0x10/0x10 [ 1228.357480][T25022] ? fput+0x70/0xf0 [ 1228.357509][T25022] do_syscall_64+0xcd/0x490 [ 1228.357547][T25022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.357574][T25022] RIP: 0033:0x7f656858d33c [ 1228.357595][T25022] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1228.357619][T25022] RSP: 002b:00007f6569434030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1228.357641][T25022] RAX: ffffffffffffffda RBX: 00007f65687b5fa0 RCX: 00007f656858d33c [ 1228.357658][T25022] RDX: 000000000000000f RSI: 00007f65694340a0 RDI: 0000000000000005 [ 1228.357674][T25022] RBP: 00007f6569434090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.357689][T25022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.357704][T25022] R13: 0000000000000000 R14: 00007f65687b5fa0 R15: 00007fff5eb4ae18 [ 1228.357740][T25022] [ 1229.038271][T25034] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3925'. [ 1229.079260][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1229.145369][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.637242][T25034] hsr_slave_0 (unregistering): left promiscuous mode [ 1230.066540][ T4469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.075009][ T4469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.830250][T25069] FAULT_INJECTION: forcing a failure. [ 1231.830250][T25069] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.856044][T25069] CPU: 1 UID: 0 PID: 25069 Comm: syz.6.3932 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1231.856078][T25069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1231.856100][T25069] Call Trace: [ 1231.856109][T25069] [ 1231.856119][T25069] dump_stack_lvl+0x16c/0x1f0 [ 1231.856155][T25069] should_fail_ex+0x512/0x640 [ 1231.856189][T25069] should_failslab+0xc2/0x120 [ 1231.856209][T25069] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1231.856245][T25069] ? proc_thread_self_get_link+0x1c6/0x240 [ 1231.856283][T25069] proc_thread_self_get_link+0x1c6/0x240 [ 1231.856314][T25069] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1231.856341][T25069] step_into+0x195e/0x2270 [ 1231.856417][T25069] ? __pfx_step_into+0x10/0x10 [ 1231.856468][T25069] ? lookup_fast+0x156/0x610 [ 1231.856498][T25069] walk_component+0xfc/0x5b0 [ 1231.856536][T25069] link_path_walk+0x627/0xe20 [ 1231.856609][T25069] path_openat+0x1b0/0x2cb0 [ 1231.856718][T25069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.856801][T25069] ? __pfx_path_openat+0x10/0x10 [ 1231.856837][T25069] ? __lock_acquire+0xb8a/0x1c90 [ 1231.856899][T25069] do_filp_open+0x20b/0x470 [ 1231.856929][T25069] ? __pfx_do_filp_open+0x10/0x10 [ 1231.857018][T25069] ? alloc_fd+0x471/0x7d0 [ 1231.857064][T25069] do_sys_openat2+0x11b/0x1d0 [ 1231.857090][T25069] ? __pfx_do_sys_openat2+0x10/0x10 [ 1231.857128][T25069] __x64_sys_openat+0x174/0x210 [ 1231.857155][T25069] ? __pfx___x64_sys_openat+0x10/0x10 [ 1231.857199][T25069] do_syscall_64+0xcd/0x490 [ 1231.857274][T25069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.857300][T25069] RIP: 0033:0x7f656858d290 [ 1231.857319][T25069] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1231.857346][T25069] RSP: 002b:00007f6569433fe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1231.857378][T25069] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f656858d290 [ 1231.857400][T25069] RDX: 0000000000000002 RSI: 00007f6568610e1e RDI: 00000000ffffff9c [ 1231.857419][T25069] RBP: 00007f6568610e1e R08: 0000000000000000 R09: 00007f6569435000 [ 1231.857436][T25069] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 1231.857451][T25069] R13: 0000000000000000 R14: 00007f65687b5fa0 R15: 00007fff5eb4ae18 [ 1231.857487][T25069] [ 1231.858108][T25069] FAULT_INJECTION: forcing a failure. [ 1231.858108][T25069] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.159861][T25069] CPU: 1 UID: 0 PID: 25069 Comm: syz.6.3932 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1232.159895][T25069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1232.159908][T25069] Call Trace: [ 1232.159917][T25069] [ 1232.159926][T25069] dump_stack_lvl+0x16c/0x1f0 [ 1232.159974][T25069] should_fail_ex+0x512/0x640 [ 1232.160006][T25069] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1232.160043][T25069] should_failslab+0xc2/0x120 [ 1232.160066][T25069] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1232.160099][T25069] ? __mutex_trylock_common+0xe9/0x250 [ 1232.160130][T25069] ? ptlock_alloc+0x1f/0x70 [ 1232.160163][T25069] ptlock_alloc+0x1f/0x70 [ 1232.160192][T25069] pte_alloc_one+0x82/0x3a0 [ 1232.160226][T25069] __pte_alloc+0x6d/0x3c0 [ 1232.160250][T25069] ? __pfx___pte_alloc+0x10/0x10 [ 1232.160275][T25069] ? walk_to_pmd+0x310/0x4d0 [ 1232.160305][T25069] vm_insert_pages+0x8ee/0xa50 [ 1232.160339][T25069] ? __pfx_vm_insert_pages+0x10/0x10 [ 1232.160375][T25069] io_uring_mmap+0x3ba/0x5a0 [ 1232.160412][T25069] ? __pfx_io_uring_mmap+0x10/0x10 [ 1232.160443][T25069] ? vma_merge_new_range+0x37f/0xa00 [ 1232.160474][T25069] ? vm_area_alloc+0x1f/0x160 [ 1232.160505][T25069] ? lockdep_init_map_type+0x5c/0x280 [ 1232.160542][T25069] __mmap_region+0x128e/0x25e0 [ 1232.160581][T25069] ? __pfx___mmap_region+0x10/0x10 [ 1232.160627][T25069] ? register_lock_class+0x41/0x4c0 [ 1232.160659][T25069] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1232.160693][T25069] ? __lock_acquire+0xb8a/0x1c90 [ 1232.160735][T25069] ? __mutex_trylock_common+0xe9/0x250 [ 1232.160806][T25069] ? trace_cap_capable+0x18d/0x200 [ 1232.160842][T25069] mmap_region+0x32b/0x3f0 [ 1232.160884][T25069] do_mmap+0xa3e/0x1210 [ 1232.160918][T25069] ? __pfx_do_mmap+0x10/0x10 [ 1232.160944][T25069] ? __pfx_down_write_killable+0x10/0x10 [ 1232.160986][T25069] vm_mmap_pgoff+0x281/0x450 [ 1232.161018][T25069] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1232.161049][T25069] ? __fget_files+0x20e/0x3c0 [ 1232.161088][T25069] ksys_mmap_pgoff+0x32c/0x5c0 [ 1232.161112][T25069] ? __pfx_ksys_write+0x10/0x10 [ 1232.161149][T25069] __x64_sys_mmap+0x125/0x190 [ 1232.161184][T25069] do_syscall_64+0xcd/0x490 [ 1232.161222][T25069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.161247][T25069] RIP: 0033:0x7f656858e929 [ 1232.161267][T25069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1232.161290][T25069] RSP: 002b:00007f6569434038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1232.161314][T25069] RAX: ffffffffffffffda RBX: 00007f65687b5fa0 RCX: 00007f656858e929 [ 1232.161330][T25069] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 1232.161345][T25069] RBP: 00007f6569434090 R08: 0000000000000003 R09: 0000000000008000 [ 1232.161360][T25069] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 1232.161375][T25069] R13: 0000000000000000 R14: 00007f65687b5fa0 R15: 00007fff5eb4ae18 [ 1232.161410][T25069] [ 1232.455332][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.813987][T25083] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1232.854918][T25084] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 1234.345549][T25098] FAULT_INJECTION: forcing a failure. [ 1234.345549][T25098] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1234.408760][T25098] CPU: 1 UID: 0 PID: 25098 Comm: syz.3.3939 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1234.408798][T25098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1234.408812][T25098] Call Trace: [ 1234.408821][T25098] [ 1234.408831][T25098] dump_stack_lvl+0x16c/0x1f0 [ 1234.408873][T25098] should_fail_ex+0x512/0x640 [ 1234.408913][T25098] get_futex_key+0xf36/0x1540 [ 1234.408942][T25098] ? find_held_lock+0x2b/0x80 [ 1234.408966][T25098] ? __pfx_get_futex_key+0x10/0x10 [ 1234.408991][T25098] ? __mutex_trylock_common+0xe9/0x250 [ 1234.409031][T25098] futex_wake+0xea/0x530 [ 1234.409066][T25098] ? __pfx_futex_wake+0x10/0x10 [ 1234.409095][T25098] ? __lock_acquire+0xb8a/0x1c90 [ 1234.409141][T25098] do_futex+0x1e3/0x350 [ 1234.409171][T25098] ? __pfx_do_futex+0x10/0x10 [ 1234.409196][T25098] ? __might_fault+0xe3/0x190 [ 1234.409240][T25098] mm_release+0x24e/0x300 [ 1234.409268][T25098] do_exit+0x68b/0x2bd0 [ 1234.409302][T25098] ? __pfx_do_exit+0x10/0x10 [ 1234.409331][T25098] ? do_raw_spin_lock+0x12c/0x2b0 [ 1234.409363][T25098] ? find_held_lock+0x2b/0x80 [ 1234.409392][T25098] do_group_exit+0xd3/0x2a0 [ 1234.409425][T25098] get_signal+0x2673/0x26d0 [ 1234.409459][T25098] ? __pfx_get_signal+0x10/0x10 [ 1234.409482][T25098] ? do_futex+0x122/0x350 [ 1234.409511][T25098] ? __pfx_do_futex+0x10/0x10 [ 1234.409542][T25098] arch_do_signal_or_restart+0x8f/0x790 [ 1234.409573][T25098] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1234.409608][T25098] ? ksys_mmap_pgoff+0x85/0x5c0 [ 1234.409632][T25098] ? xfd_validate_state+0x61/0x180 [ 1234.409667][T25098] exit_to_user_mode_loop+0x84/0x110 [ 1234.409704][T25098] do_syscall_64+0x3f6/0x490 [ 1234.409742][T25098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.409773][T25098] RIP: 0033:0x7f907498e929 [ 1234.409793][T25098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1234.409815][T25098] RSP: 002b:00007f907581c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1234.409839][T25098] RAX: fffffffffffffe00 RBX: 00007f9074bb6088 RCX: 00007f907498e929 [ 1234.409856][T25098] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9074bb6088 [ 1234.409871][T25098] RBP: 00007f9074bb6080 R08: 0000000000000000 R09: 0000000000000000 [ 1234.409886][T25098] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9074bb608c [ 1234.409902][T25098] R13: 0000000000000000 R14: 00007ffc197bb240 R15: 00007ffc197bb328 [ 1234.409935][T25098] [ 1234.658199][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.029999][T25114] FAULT_INJECTION: forcing a failure. [ 1235.029999][T25114] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1235.045916][T25114] CPU: 0 UID: 0 PID: 25114 Comm: syz.7.3943 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1235.045952][T25114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1235.045968][T25114] Call Trace: [ 1235.045978][T25114] [ 1235.045989][T25114] dump_stack_lvl+0x16c/0x1f0 [ 1235.046034][T25114] should_fail_ex+0x512/0x640 [ 1235.046076][T25114] should_fail_alloc_page+0xe7/0x130 [ 1235.046105][T25114] prepare_alloc_pages+0x3c2/0x610 [ 1235.046137][T25114] ? rcu_is_watching+0x12/0xc0 [ 1235.046168][T25114] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1235.046207][T25114] ? __lock_acquire+0xb8a/0x1c90 [ 1235.046247][T25114] ? kvm_sched_clock_read+0x11/0x20 [ 1235.046288][T25114] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1235.046322][T25114] ? __lock_acquire+0x622/0x1c90 [ 1235.046367][T25114] ? __lock_acquire+0x622/0x1c90 [ 1235.046403][T25114] ? __lock_acquire+0x622/0x1c90 [ 1235.046434][T25114] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1235.046473][T25114] ? policy_nodemask+0xea/0x4e0 [ 1235.046512][T25114] alloc_pages_mpol+0x1fb/0x550 [ 1235.046536][T25114] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1235.046571][T25114] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1235.046603][T25114] vma_alloc_folio_noprof+0xed/0x1e0 [ 1235.046632][T25114] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1235.046660][T25114] ? find_held_lock+0x2b/0x80 [ 1235.046695][T25114] ? __handle_mm_fault+0x1092/0x5490 [ 1235.046736][T25114] __handle_mm_fault+0x2f21/0x5490 [ 1235.046781][T25114] ? __pfx___handle_mm_fault+0x10/0x10 [ 1235.046816][T25114] ? __pte_offset_map_lock+0x174/0x310 [ 1235.046845][T25114] ? find_held_lock+0x2b/0x80 [ 1235.046868][T25114] ? find_held_lock+0x2b/0x80 [ 1235.046904][T25114] ? follow_page_pte+0x3af/0x14c0 [ 1235.046941][T25114] handle_mm_fault+0x589/0xd10 [ 1235.046983][T25114] __get_user_pages+0x589/0x3b80 [ 1235.047022][T25114] ? __pfx_mt_find+0x10/0x10 [ 1235.047048][T25114] ? __pfx___get_user_pages+0x10/0x10 [ 1235.047091][T25114] populate_vma_page_range+0x278/0x3a0 [ 1235.047124][T25114] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1235.047154][T25114] ? __pfx_find_vma_intersection+0x10/0x10 [ 1235.047184][T25114] ? do_mmap+0x69c/0x1210 [ 1235.047216][T25114] __mm_populate+0x1d8/0x380 [ 1235.047248][T25114] ? __pfx___mm_populate+0x10/0x10 [ 1235.047281][T25114] ? up_write+0x1b2/0x520 [ 1235.047320][T25114] vm_mmap_pgoff+0x362/0x450 [ 1235.047351][T25114] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1235.047385][T25114] ? __x64_sys_futex+0x1e0/0x4c0 [ 1235.047414][T25114] ? __x64_sys_futex+0x1e9/0x4c0 [ 1235.047448][T25114] ksys_mmap_pgoff+0x7d/0x5c0 [ 1235.047474][T25114] ? xfd_validate_state+0x61/0x180 [ 1235.047512][T25114] __x64_sys_mmap+0x125/0x190 [ 1235.047552][T25114] do_syscall_64+0xcd/0x490 [ 1235.047593][T25114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.047618][T25114] RIP: 0033:0x7f7e1458e929 [ 1235.047640][T25114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1235.047666][T25114] RSP: 002b:00007f7e1545e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1235.047700][T25114] RAX: ffffffffffffffda RBX: 00007f7e147b5fa0 RCX: 00007f7e1458e929 [ 1235.047719][T25114] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1235.047736][T25114] RBP: 00007f7e14610b39 R08: 0000000000000002 R09: 0000000000008000 [ 1235.047752][T25114] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1235.047775][T25114] R13: 0000000000000000 R14: 00007f7e147b5fa0 R15: 00007ffeadf26508 [ 1235.047812][T25114] [ 1236.183968][T25132] FAULT_INJECTION: forcing a failure. [ 1236.183968][T25132] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.237455][T25132] CPU: 0 UID: 0 PID: 25132 Comm: syz.8.3947 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1236.237492][T25132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1236.237507][T25132] Call Trace: [ 1236.237516][T25132] [ 1236.237526][T25132] dump_stack_lvl+0x16c/0x1f0 [ 1236.237570][T25132] should_fail_ex+0x512/0x640 [ 1236.237603][T25132] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1236.237639][T25132] should_failslab+0xc2/0x120 [ 1236.237663][T25132] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1236.237695][T25132] ? snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0xd4/0x480 [ 1236.237738][T25132] ? kasan_save_track+0x14/0x30 [ 1236.237776][T25132] snd_mixer_oss_get_volume1_sw.constprop.0.isra.0+0xd4/0x480 [ 1236.237823][T25132] snd_mixer_oss_get_recsrc1_sw+0x104/0x1d0 [ 1236.237868][T25132] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 1236.237906][T25132] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1236.237948][T25132] snd_mixer_oss_ioctl1+0x1880/0x1cf0 [ 1236.237988][T25132] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 1236.238027][T25132] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 1236.238077][T25132] ? find_held_lock+0x2b/0x80 [ 1236.238101][T25132] ? hook_file_ioctl_common+0x145/0x410 [ 1236.238135][T25132] ? __fget_files+0x20e/0x3c0 [ 1236.238175][T25132] snd_mixer_oss_ioctl+0x3e/0x50 [ 1236.238209][T25132] ? __pfx_snd_mixer_oss_ioctl+0x10/0x10 [ 1236.238245][T25132] __x64_sys_ioctl+0x18b/0x210 [ 1236.238276][T25132] do_syscall_64+0xcd/0x490 [ 1236.238315][T25132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.238340][T25132] RIP: 0033:0x7fab6718e929 [ 1236.238361][T25132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.238385][T25132] RSP: 002b:00007fab68027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.238409][T25132] RAX: ffffffffffffffda RBX: 00007fab673b5fa0 RCX: 00007fab6718e929 [ 1236.238425][T25132] RDX: 0000200000000180 RSI: 0000000080044dff RDI: 0000000000000003 [ 1236.238442][T25132] RBP: 00007fab68027090 R08: 0000000000000000 R09: 0000000000000000 [ 1236.238457][T25132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1236.238472][T25132] R13: 0000000000000000 R14: 00007fab673b5fa0 R15: 00007fff1598e3b8 [ 1236.238510][T25132] [ 1236.702461][ T30] audit: type=1804 audit(6046402925.412:81): pid=25139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.3950" name="/newroot/6/file0" dev="tmpfs" ino=51 res=1 errno=0 [ 1236.739177][ T5149] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 1236.766916][ T30] audit: type=1800 audit(6046402925.412:82): pid=25139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3950" name="file0" dev="tmpfs" ino=51 res=0 errno=0 [ 1236.979867][ T30] audit: type=1800 audit(6046402925.452:83): pid=25139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3950" name="file0" dev="tmpfs" ino=51 res=0 errno=0 [ 1237.124181][ T30] audit: type=1800 audit(6046402925.512:84): pid=25136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3948" name="dbroot" dev="configfs" ino=89672 res=0 errno=0 [ 1237.424070][ T5149] Bluetooth: hci8: unexpected subevent 0x01 length: 4 < 18 [ 1237.468576][ T30] audit: type=1800 audit(6046402934.183:85): pid=25145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3952" name="dbroot" dev="configfs" ino=89676 res=0 errno=0 [ 1238.793521][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.865285][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.240612][T25183] FAULT_INJECTION: forcing a failure. [ 1240.240612][T25183] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.258333][T25183] CPU: 0 UID: 0 PID: 25183 Comm: syz.6.3960 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1240.258371][T25183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1240.258388][T25183] Call Trace: [ 1240.258397][T25183] [ 1240.258408][T25183] dump_stack_lvl+0x16c/0x1f0 [ 1240.258454][T25183] should_fail_ex+0x512/0x640 [ 1240.258488][T25183] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1240.258531][T25183] should_failslab+0xc2/0x120 [ 1240.258556][T25183] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1240.258595][T25183] ? shmem_alloc_inode+0x25/0x50 [ 1240.258630][T25183] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1240.258655][T25183] shmem_alloc_inode+0x25/0x50 [ 1240.258680][T25183] alloc_inode+0x64/0x240 [ 1240.258708][T25183] new_inode+0x22/0x1c0 [ 1240.258732][T25183] ? trace_cap_capable+0x18d/0x200 [ 1240.258761][T25183] shmem_get_inode+0x19a/0xfb0 [ 1240.258792][T25183] ? __vm_enough_memory+0x184/0x3f0 [ 1240.258823][T25183] __shmem_file_setup+0x279/0x330 [ 1240.258860][T25183] shmem_zero_setup+0x93/0x1a0 [ 1240.258898][T25183] __mmap_region+0x1ece/0x25e0 [ 1240.258941][T25183] ? __pfx___mmap_region+0x10/0x10 [ 1240.258975][T25183] ? rcu_is_watching+0x12/0xc0 [ 1240.259009][T25183] ? rcu_is_watching+0x12/0xc0 [ 1240.259034][T25183] ? trace_sched_exit_tp+0xde/0x130 [ 1240.259066][T25183] ? __schedule+0x1181/0x5de0 [ 1240.259121][T25183] ? __pfx___schedule+0x10/0x10 [ 1240.259199][T25183] ? trace_cap_capable+0x18d/0x200 [ 1240.259236][T25183] mmap_region+0x1ab/0x3f0 [ 1240.259281][T25183] ? __get_unmapped_area+0x267/0x440 [ 1240.259321][T25183] do_mmap+0xa3e/0x1210 [ 1240.259356][T25183] ? __pfx_do_mmap+0x10/0x10 [ 1240.259385][T25183] ? __pfx_down_write_killable+0x10/0x10 [ 1240.259420][T25183] vm_mmap_pgoff+0x281/0x450 [ 1240.259453][T25183] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1240.259488][T25183] ? __x64_sys_futex+0x1e0/0x4c0 [ 1240.259516][T25183] ? __x64_sys_futex+0x1e9/0x4c0 [ 1240.259552][T25183] ksys_mmap_pgoff+0x7d/0x5c0 [ 1240.259579][T25183] ? xfd_validate_state+0x61/0x180 [ 1240.259618][T25183] __x64_sys_mmap+0x125/0x190 [ 1240.259656][T25183] do_syscall_64+0xcd/0x490 [ 1240.259697][T25183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.259724][T25183] RIP: 0033:0x7f656858e929 [ 1240.259747][T25183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1240.259773][T25183] RSP: 002b:00007f6569434038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1240.259799][T25183] RAX: ffffffffffffffda RBX: 00007f65687b5fa0 RCX: 00007f656858e929 [ 1240.259817][T25183] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 1240.259835][T25183] RBP: 00007f6568610b39 R08: ffffffffffffffff R09: 0000000000008000 [ 1240.259853][T25183] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1240.259870][T25183] R13: 0000000000000000 R14: 00007f65687b5fa0 R15: 00007fff5eb4ae18 [ 1240.259908][T25183] [ 1240.948670][T25185] binder: 25184:25185 ioctl 3b66 0 returned -22 [ 1242.011488][T25195] sp0: Synchronizing with TNC [ 1243.147887][T25227] FAULT_INJECTION: forcing a failure. [ 1243.147887][T25227] name failslab, interval 1, probability 0, space 0, times 0 [ 1243.203029][T25227] CPU: 1 UID: 0 PID: 25227 Comm: syz.8.3970 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1243.203069][T25227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1243.203084][T25227] Call Trace: [ 1243.203094][T25227] [ 1243.203106][T25227] dump_stack_lvl+0x16c/0x1f0 [ 1243.203150][T25227] should_fail_ex+0x512/0x640 [ 1243.203185][T25227] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1243.203227][T25227] should_failslab+0xc2/0x120 [ 1243.203252][T25227] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1243.203285][T25227] ? inode_set_ctime_current+0x2a1/0x8f0 [ 1243.203333][T25227] ? __d_alloc+0x31/0xaa0 [ 1243.203376][T25227] __d_alloc+0x31/0xaa0 [ 1243.203419][T25227] d_alloc_pseudo+0x1c/0xc0 [ 1243.203449][T25227] alloc_file_pseudo+0xcf/0x230 [ 1243.203483][T25227] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1243.203513][T25227] ? hugetlbfs_get_inode+0x31f/0x730 [ 1243.203546][T25227] hugetlb_file_setup+0x4cd/0x620 [ 1243.203578][T25227] ksys_mmap_pgoff+0x189/0x5c0 [ 1243.203613][T25227] __x64_sys_mmap+0x125/0x190 [ 1243.203652][T25227] do_syscall_64+0xcd/0x490 [ 1243.203693][T25227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.203719][T25227] RIP: 0033:0x7fab6718e929 [ 1243.203741][T25227] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1243.203767][T25227] RSP: 002b:00007fab68027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1243.203792][T25227] RAX: ffffffffffffffda RBX: 00007fab673b5fa0 RCX: 00007fab6718e929 [ 1243.203810][T25227] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 1243.203826][T25227] RBP: 00007fab67210b39 R08: 0000000000000401 R09: 0000300000000000 [ 1243.203845][T25227] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1243.203862][T25227] R13: 0000000000000000 R14: 00007fab673b5fa0 R15: 00007fff1598e3b8 [ 1243.203898][T25227] [ 1244.045792][T25240] FAULT_INJECTION: forcing a failure. [ 1244.045792][T25240] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.074422][T25240] CPU: 1 UID: 0 PID: 25240 Comm: syz.7.3972 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1244.074462][T25240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1244.074477][T25240] Call Trace: [ 1244.074487][T25240] [ 1244.074498][T25240] dump_stack_lvl+0x16c/0x1f0 [ 1244.074541][T25240] should_fail_ex+0x512/0x640 [ 1244.074575][T25240] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1244.074613][T25240] should_failslab+0xc2/0x120 [ 1244.074638][T25240] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1244.074669][T25240] ? find_held_lock+0x2b/0x80 [ 1244.074694][T25240] ? skb_clone+0x190/0x3f0 [ 1244.074733][T25240] skb_clone+0x190/0x3f0 [ 1244.074771][T25240] netlink_broadcast_filtered+0xb19/0xf10 [ 1244.074808][T25240] ? sprintf+0xcc/0x100 [ 1244.074839][T25240] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 1244.074873][T25240] ? netlink_has_listeners+0x20f/0x430 [ 1244.074902][T25240] netlink_broadcast+0x39/0x50 [ 1244.074925][T25240] kobject_uevent_env+0xc6a/0x1870 [ 1244.074957][T25240] ? bus_to_subsys+0x131/0x160 [ 1244.074990][T25240] device_add+0x10dd/0x1a70 [ 1244.075019][T25240] ? __pfx_device_add+0x10/0x10 [ 1244.075060][T25240] nfc_register_device+0x41/0x3c0 [ 1244.075103][T25240] nci_register_device+0x7f1/0xb80 [ 1244.075136][T25240] ? __pfx_nci_register_device+0x10/0x10 [ 1244.075172][T25240] ? lockdep_init_map_type+0x5c/0x280 [ 1244.075229][T25240] virtual_ncidev_open+0x141/0x220 [ 1244.075260][T25240] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1244.075288][T25240] misc_open+0x35a/0x420 [ 1244.075317][T25240] ? __pfx_misc_open+0x10/0x10 [ 1244.075348][T25240] chrdev_open+0x231/0x6a0 [ 1244.075386][T25240] ? __pfx_apparmor_file_open+0x10/0x10 [ 1244.075418][T25240] ? __pfx_chrdev_open+0x10/0x10 [ 1244.075462][T25240] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1244.075504][T25240] do_dentry_open+0x744/0x1c10 [ 1244.075542][T25240] ? __pfx_chrdev_open+0x10/0x10 [ 1244.075588][T25240] vfs_open+0x82/0x3f0 [ 1244.075620][T25240] path_openat+0x1de4/0x2cb0 [ 1244.075671][T25240] ? __pfx_path_openat+0x10/0x10 [ 1244.075709][T25240] ? __lock_acquire+0xb8a/0x1c90 [ 1244.075747][T25240] do_filp_open+0x20b/0x470 [ 1244.075784][T25240] ? __pfx_do_filp_open+0x10/0x10 [ 1244.075849][T25240] ? alloc_fd+0x471/0x7d0 [ 1244.075894][T25240] do_sys_openat2+0x11b/0x1d0 [ 1244.075923][T25240] ? __pfx_do_sys_openat2+0x10/0x10 [ 1244.075964][T25240] __x64_sys_openat+0x174/0x210 [ 1244.075994][T25240] ? __pfx___x64_sys_openat+0x10/0x10 [ 1244.076040][T25240] do_syscall_64+0xcd/0x490 [ 1244.076081][T25240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.076108][T25240] RIP: 0033:0x7f7e1458e929 [ 1244.076130][T25240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1244.076156][T25240] RSP: 002b:00007f7e1545e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1244.076181][T25240] RAX: ffffffffffffffda RBX: 00007f7e147b5fa0 RCX: 00007f7e1458e929 [ 1244.076206][T25240] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1244.076224][T25240] RBP: 00007f7e14610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1244.076240][T25240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.076256][T25240] R13: 0000000000000000 R14: 00007f7e147b5fa0 R15: 00007ffeadf26508 [ 1244.076292][T25240] [ 1244.399800][ C1] vkms_vblank_simulate: vblank timer overrun [ 1244.821562][T25248] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 1246.843424][T25271] FAULT_INJECTION: forcing a failure. [ 1246.843424][T25271] name failslab, interval 1, probability 0, space 0, times 0 [ 1246.857201][T25271] CPU: 0 UID: 0 PID: 25271 Comm: syz.8.3977 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1246.857238][T25271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1246.857254][T25271] Call Trace: [ 1246.857263][T25271] [ 1246.857274][T25271] dump_stack_lvl+0x16c/0x1f0 [ 1246.857318][T25271] should_fail_ex+0x512/0x640 [ 1246.857352][T25271] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1246.857394][T25271] should_failslab+0xc2/0x120 [ 1246.857426][T25271] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1246.857464][T25271] ? alloc_vmap_area+0x58e/0x29c0 [ 1246.857490][T25271] ? alloc_vmap_area+0x645/0x29c0 [ 1246.857524][T25271] alloc_vmap_area+0x645/0x29c0 [ 1246.857567][T25271] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1246.857605][T25271] __get_vm_area_node+0x1ca/0x330 [ 1246.857642][T25271] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1246.857674][T25271] ? kernel_clone+0xfc/0x960 [ 1246.857704][T25271] ? local_lock_release+0x99/0x140 [ 1246.857740][T25271] ? kernel_clone+0xfc/0x960 [ 1246.857770][T25271] ? rcu_read_unlock+0x17/0x60 [ 1246.857802][T25271] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1246.857847][T25271] ? kernel_clone+0xfc/0x960 [ 1246.857877][T25271] __vmalloc_node_noprof+0xad/0xf0 [ 1246.857908][T25271] ? kernel_clone+0xfc/0x960 [ 1246.857948][T25271] copy_process+0x2c70/0x76a0 [ 1246.857981][T25271] ? __pfx___futex_wait+0x10/0x10 [ 1246.858016][T25271] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1246.858067][T25271] ? __pfx_copy_process+0x10/0x10 [ 1246.858115][T25271] kernel_clone+0xfc/0x960 [ 1246.858149][T25271] ? __pfx_kernel_clone+0x10/0x10 [ 1246.858201][T25271] __do_sys_clone+0xce/0x120 [ 1246.858232][T25271] ? __pfx___do_sys_clone+0x10/0x10 [ 1246.858280][T25271] ? xfd_validate_state+0x61/0x180 [ 1246.858323][T25271] do_syscall_64+0xcd/0x490 [ 1246.858364][T25271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.858391][T25271] RIP: 0033:0x7fab6718e929 [ 1246.858412][T25271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1246.858439][T25271] RSP: 002b:00007fab68027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1246.858464][T25271] RAX: ffffffffffffffda RBX: 00007fab673b5fa0 RCX: 00007fab6718e929 [ 1246.858484][T25271] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001 [ 1246.858501][T25271] RBP: 00007fab67210b39 R08: 00e0ffff00000000 R09: 0000000000000000 [ 1246.858518][T25271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1246.858535][T25271] R13: 0000000000000000 R14: 00007fab673b5fa0 R15: 00007fff1598e3b8 [ 1246.858571][T25271] [ 1246.858603][T25271] syz.8.3977: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1247.245343][T25271] CPU: 1 UID: 0 PID: 25271 Comm: syz.8.3977 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1247.245380][T25271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1247.245394][T25271] Call Trace: [ 1247.245403][T25271] [ 1247.245413][T25271] dump_stack_lvl+0x16c/0x1f0 [ 1247.245453][T25271] warn_alloc+0x248/0x3a0 [ 1247.245485][T25271] ? __pfx_warn_alloc+0x10/0x10 [ 1247.245521][T25271] ? kfree+0x2b4/0x4d0 [ 1247.245559][T25271] ? __get_vm_area_node+0x208/0x330 [ 1247.245596][T25271] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1247.245627][T25271] ? local_lock_release+0x99/0x140 [ 1247.245661][T25271] ? kernel_clone+0xfc/0x960 [ 1247.245691][T25271] ? rcu_read_unlock+0x17/0x60 [ 1247.245721][T25271] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1247.245764][T25271] ? kernel_clone+0xfc/0x960 [ 1247.245792][T25271] __vmalloc_node_noprof+0xad/0xf0 [ 1247.245822][T25271] ? kernel_clone+0xfc/0x960 [ 1247.245854][T25271] copy_process+0x2c70/0x76a0 [ 1247.245890][T25271] ? __pfx___futex_wait+0x10/0x10 [ 1247.245922][T25271] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1247.245968][T25271] ? __pfx_copy_process+0x10/0x10 [ 1247.246015][T25271] kernel_clone+0xfc/0x960 [ 1247.246046][T25271] ? __pfx_kernel_clone+0x10/0x10 [ 1247.246096][T25271] __do_sys_clone+0xce/0x120 [ 1247.246125][T25271] ? __pfx___do_sys_clone+0x10/0x10 [ 1247.246171][T25271] ? xfd_validate_state+0x61/0x180 [ 1247.246207][T25271] do_syscall_64+0xcd/0x490 [ 1247.246244][T25271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1247.246269][T25271] RIP: 0033:0x7fab6718e929 [ 1247.246290][T25271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1247.246314][T25271] RSP: 002b:00007fab68027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1247.246339][T25271] RAX: ffffffffffffffda RBX: 00007fab673b5fa0 RCX: 00007fab6718e929 [ 1247.246357][T25271] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 0000000000000001 [ 1247.246376][T25271] RBP: 00007fab67210b39 R08: 00e0ffff00000000 R09: 0000000000000000 [ 1247.246393][T25271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1247.246408][T25271] R13: 0000000000000000 R14: 00007fab673b5fa0 R15: 00007fff1598e3b8 [ 1247.246442][T25271] [ 1247.246736][T25271] Mem-Info: [ 1248.003633][T25271] active_anon:31483 inactive_anon:0 isolated_anon:0 [ 1248.003633][T25271] active_file:18678 inactive_file:43810 isolated_file:0 [ 1248.003633][T25271] unevictable:768 dirty:385 writeback:0 [ 1248.003633][T25271] slab_reclaimable:13748 slab_unreclaimable:118582 [ 1248.003633][T25271] mapped:59155 shmem:3286 pagetables:1570 [ 1248.003633][T25271] sec_pagetables:0 bounce:0 [ 1248.003633][T25271] kernel_misc_reclaimable:0 [ 1248.003633][T25271] free:1198881 free_pcp:21256 free_cma:0 [ 1248.155334][T25271] Node 0 active_anon:125932kB inactive_anon:0kB active_file:76504kB inactive_file:175100kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:238540kB dirty:1536kB writeback:0kB shmem:10312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13380kB pagetables:6136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1248.246127][T25271] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1248.416311][T25271] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1248.445205][ C1] vkms_vblank_simulate: vblank timer overrun [ 1248.472966][T25271] lowmem_reserve[]: [ 1248.479639][T25275] can0: slcan on ttyS2. [ 1248.526441][T25271] 0 2481 2482 2482 2482 [ 1248.531151][T25271] Node 0 DMA32 free:894752kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:128164kB inactive_anon:0kB active_file:79092kB inactive_file:173776kB unevictable:1536kB writepending:1736kB present:3129332kB managed:2540848kB mlocked:0kB bounce:0kB free_pcp:36592kB local_pcp:18516kB free_cma:0kB [ 1248.696531][T25271] lowmem_reserve[]: 0 0 1 1 1 [ 1248.701329][T25271] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1248.776361][T25271] lowmem_reserve[]: 0 0 0 0 0 [ 1248.781159][T25271] Node 1 Normal free:3880332kB boost:0kB min:55552kB low:69440kB high:83328kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:47524kB local_pcp:14820kB free_cma:0kB [ 1248.885854][T25271] lowmem_reserve[]: 0 0 0 0 0 [ 1248.890642][T25271] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1248.994850][T25271] Node 0 DMA32: 4*4kB (UE) 670*8kB (M) 789*16kB (ME) 655*32kB (ME) 372*64kB (UM) 342*128kB (UM) 233*256kB (M) 169*512kB (ME) 97*1024kB (UME) 3*2048kB (UM) 130*4096kB (M) = 890672kB [ 1249.210487][T25271] Node 0 Normal: 4*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1249.266434][T25274] can0 (unregistered): slcan off ttyS2. [ 1249.272827][T25271] Node 1 Normal: 4*4kB (UE) 9*8kB (UME) 9*16kB (UE) 3*32kB (U) 11*64kB (UME) 7*128kB (UME) 3*256kB (UME) 2*512kB (U) 0*1024kB 1*2048kB (U) 946*4096kB (UM) = 3880584kB [ 1249.363501][T25271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1249.373548][T25271] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1249.384587][T25271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1249.399876][T25271] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1249.409807][T25271] 69629 total pagecache pages [ 1249.415577][T25271] 0 pages in swap cache [ 1249.419758][T25271] Free swap = 124996kB [ 1249.423918][T25271] Total swap = 124996kB [ 1249.472962][T25271] 2097051 pages RAM [ 1249.485219][T25271] 0 pages HighMem/MovableOnly [ 1249.489938][T25271] 429861 pages reserved [ 1249.494098][T25271] 0 pages cma reserved [ 1253.955397][T25334] binder: 25332:25334 ioctl 3b66 0 returned -22 [ 1255.164376][T25369] FAULT_INJECTION: forcing a failure. [ 1255.164376][T25369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.328143][T25369] CPU: 1 UID: 0 PID: 25369 Comm: syz.3.3995 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1255.328179][T25369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1255.328194][T25369] Call Trace: [ 1255.328203][T25369] [ 1255.328212][T25369] dump_stack_lvl+0x16c/0x1f0 [ 1255.328254][T25369] should_fail_ex+0x512/0x640 [ 1255.328293][T25369] _copy_to_user+0x32/0xd0 [ 1255.328333][T25369] mon_text_copy_to_user+0xce/0x1a0 [ 1255.328374][T25369] mon_text_read_u+0x594/0xbd0 [ 1255.328418][T25369] ? __debugfs_file_get+0x1fe/0x840 [ 1255.328441][T25369] ? __pfx_mon_text_read_u+0x10/0x10 [ 1255.328488][T25369] full_proxy_read+0x13c/0x200 [ 1255.328512][T25369] ? __pfx_full_proxy_read+0x10/0x10 [ 1255.328537][T25369] vfs_read+0x1e4/0xc60 [ 1255.328576][T25369] ? __pfx___mutex_lock+0x10/0x10 [ 1255.328611][T25369] ? __pfx_vfs_read+0x10/0x10 [ 1255.328653][T25369] ? __fget_files+0x20e/0x3c0 [ 1255.328697][T25369] ksys_read+0x12a/0x250 [ 1255.328729][T25369] ? __pfx_ksys_read+0x10/0x10 [ 1255.328772][T25369] do_syscall_64+0xcd/0x490 [ 1255.328811][T25369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.328837][T25369] RIP: 0033:0x7f907498e929 [ 1255.328857][T25369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.328881][T25369] RSP: 002b:00007f907583d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1255.328904][T25369] RAX: ffffffffffffffda RBX: 00007f9074bb5fa0 RCX: 00007f907498e929 [ 1255.328921][T25369] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000006 [ 1255.328965][T25369] RBP: 00007f907583d090 R08: 0000000000000000 R09: 0000000000000000 [ 1255.328981][T25369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1255.328996][T25369] R13: 0000000000000000 R14: 00007f9074bb5fa0 R15: 00007ffc197bb328 [ 1255.329031][T25369] [ 1258.375317][T25402] random: crng reseeded on system resumption [ 1259.689490][T25397] binder: 25396:25397 ioctl 3b66 0 returned -22 [ 1260.220899][T25411] tc_dump_action: action bad kind [ 1260.461602][T25417] hub 8-0:1.0: USB hub found [ 1260.496924][T25417] hub 8-0:1.0: 1 port detected [ 1260.543469][T25421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4004'. [ 1260.622633][T25421] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4004'. [ 1260.651030][T25418] could not allocate digest TFM handle [ 1261.946095][T25420] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4003'. [ 1262.355422][T25429] tipc: Can't bind to reserved service type 3 [ 1264.120804][T25453] hub 8-0:1.0: USB hub found [ 1264.200898][T25453] hub 8-0:1.0: 1 port detected [ 1265.029897][T25471] FAULT_INJECTION: forcing a failure. [ 1265.029897][T25471] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1265.072369][T25471] CPU: 0 UID: 0 PID: 25471 Comm: syz.8.4012 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1265.072409][T25471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1265.072425][T25471] Call Trace: [ 1265.072435][T25471] [ 1265.072446][T25471] dump_stack_lvl+0x16c/0x1f0 [ 1265.072493][T25471] should_fail_ex+0x512/0x640 [ 1265.072535][T25471] should_fail_alloc_page+0xe7/0x130 [ 1265.072564][T25471] prepare_alloc_pages+0x3c2/0x610 [ 1265.072595][T25471] ? rcu_is_watching+0x12/0xc0 [ 1265.072626][T25471] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1265.072672][T25471] ? rcu_is_watching+0x12/0xc0 [ 1265.072698][T25471] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1265.072729][T25471] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1265.072769][T25471] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1265.072805][T25471] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1265.072846][T25471] ? __lock_acquire+0xb8a/0x1c90 [ 1265.072887][T25471] ? __kasan_slab_free+0x51/0x70 [ 1265.072924][T25471] ? alloc_vmap_area+0x1f06/0x29c0 [ 1265.072951][T25471] ? __vmalloc_node_range_noprof+0x271/0x14b0 [ 1265.072981][T25471] ? __vmalloc_node_noprof+0xad/0xf0 [ 1265.073010][T25471] ? __snd_dma_alloc_pages+0x53/0x90 [ 1265.073042][T25471] ? snd_dma_alloc_dir_pages+0x151/0x240 [ 1265.073081][T25471] ? do_alloc_pages+0x115/0x280 [ 1265.073109][T25471] ? snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1265.073142][T25471] ? snd_pcm_hw_params+0x15e1/0x1b40 [ 1265.073178][T25471] ? do_syscall_64+0xcd/0x490 [ 1265.073216][T25471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.073251][T25471] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1265.073288][T25471] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1265.073329][T25471] ? policy_nodemask+0xea/0x4e0 [ 1265.073373][T25471] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1265.073413][T25471] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1265.073456][T25471] kasan_populate_vmalloc+0xf1/0x1f0 [ 1265.073500][T25471] alloc_vmap_area+0x959/0x29c0 [ 1265.073545][T25471] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1265.073584][T25471] __get_vm_area_node+0x1ca/0x330 [ 1265.073622][T25471] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1265.073654][T25471] ? __snd_dma_alloc_pages+0x53/0x90 [ 1265.073690][T25471] ? __mutex_trylock_common+0xe9/0x250 [ 1265.073726][T25471] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1265.073762][T25471] ? __snd_dma_alloc_pages+0x53/0x90 [ 1265.073805][T25471] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1265.073844][T25471] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1265.073888][T25471] ? __snd_dma_alloc_pages+0x53/0x90 [ 1265.073921][T25471] __vmalloc_node_noprof+0xad/0xf0 [ 1265.073952][T25471] ? __snd_dma_alloc_pages+0x53/0x90 [ 1265.073984][T25471] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1265.074021][T25471] __snd_dma_alloc_pages+0x53/0x90 [ 1265.074060][T25471] snd_dma_alloc_dir_pages+0x151/0x240 [ 1265.074099][T25471] do_alloc_pages+0x115/0x280 [ 1265.074135][T25471] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1265.074177][T25471] snd_pcm_hw_params+0x15e1/0x1b40 [ 1265.074218][T25471] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1265.074252][T25471] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1265.074288][T25471] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1265.074318][T25471] ? __asan_memset+0x23/0x50 [ 1265.074354][T25471] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1265.074390][T25471] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1265.074438][T25471] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1265.074499][T25471] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1265.074536][T25471] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1265.074569][T25471] ? hook_file_ioctl_common+0x145/0x410 [ 1265.074598][T25471] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1265.074632][T25471] ? __fget_files+0x20e/0x3c0 [ 1265.074671][T25471] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1265.074704][T25471] __x64_sys_ioctl+0x18b/0x210 [ 1265.074738][T25471] do_syscall_64+0xcd/0x490 [ 1265.074779][T25471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.074806][T25471] RIP: 0033:0x7fab6718e929 [ 1265.074829][T25471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.074855][T25471] RSP: 002b:00007fab68027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1265.074880][T25471] RAX: ffffffffffffffda RBX: 00007fab673b5fa0 RCX: 00007fab6718e929 [ 1265.074900][T25471] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000007 [ 1265.074917][T25471] RBP: 00007fab67210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1265.074934][T25471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.074951][T25471] R13: 0000000000000000 R14: 00007fab673b5fa0 R15: 00007fff1598e3b8 [ 1265.074988][T25471] [ 1265.702584][T25471] syz.8.4012: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1265.826411][T25471] CPU: 1 UID: 0 PID: 25471 Comm: syz.8.4012 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1265.826450][T25471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1265.826466][T25471] Call Trace: [ 1265.826476][T25471] [ 1265.826487][T25471] dump_stack_lvl+0x16c/0x1f0 [ 1265.826531][T25471] warn_alloc+0x248/0x3a0 [ 1265.826571][T25471] ? __pfx_warn_alloc+0x10/0x10 [ 1265.826611][T25471] ? kfree+0x2b4/0x4d0 [ 1265.826653][T25471] ? __get_vm_area_node+0x208/0x330 [ 1265.826692][T25471] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1265.826729][T25471] ? __mutex_trylock_common+0xe9/0x250 [ 1265.826766][T25471] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1265.826802][T25471] ? __snd_dma_alloc_pages+0x53/0x90 [ 1265.826846][T25471] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1265.826886][T25471] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 1265.826931][T25471] ? __snd_dma_alloc_pages+0x53/0x90 [ 1265.826963][T25471] __vmalloc_node_noprof+0xad/0xf0 [ 1265.826993][T25471] ? __snd_dma_alloc_pages+0x53/0x90 [ 1265.827025][T25471] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1265.827063][T25471] __snd_dma_alloc_pages+0x53/0x90 [ 1265.827096][T25471] snd_dma_alloc_dir_pages+0x151/0x240 [ 1265.827134][T25471] do_alloc_pages+0x115/0x280 [ 1265.827171][T25471] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1265.827210][T25471] snd_pcm_hw_params+0x15e1/0x1b40 [ 1265.827258][T25471] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1265.827292][T25471] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1265.827328][T25471] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1265.827359][T25471] ? __asan_memset+0x23/0x50 [ 1265.827395][T25471] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1265.827426][T25471] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1265.827474][T25471] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1265.827534][T25471] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1265.827570][T25471] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1265.827603][T25471] ? hook_file_ioctl_common+0x145/0x410 [ 1265.827631][T25471] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1265.827666][T25471] ? __fget_files+0x20e/0x3c0 [ 1265.827706][T25471] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1265.827738][T25471] __x64_sys_ioctl+0x18b/0x210 [ 1265.827773][T25471] do_syscall_64+0xcd/0x490 [ 1265.827815][T25471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.827842][T25471] RIP: 0033:0x7fab6718e929 [ 1265.827863][T25471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.827890][T25471] RSP: 002b:00007fab68027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1265.827916][T25471] RAX: ffffffffffffffda RBX: 00007fab673b5fa0 RCX: 00007fab6718e929 [ 1265.827934][T25471] RDX: 00002000000000c0 RSI: 00000000c0045002 RDI: 0000000000000007 [ 1265.827950][T25471] RBP: 00007fab67210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1265.827967][T25471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1265.827983][T25471] R13: 0000000000000000 R14: 00007fab673b5fa0 R15: 00007fff1598e3b8 [ 1265.828019][T25471] [ 1265.833603][T25471] Mem-Info: [ 1266.159799][T25471] active_anon:30089 inactive_anon:0 isolated_anon:0 [ 1266.159799][T25471] active_file:18224 inactive_file:43818 isolated_file:0 [ 1266.159799][T25471] unevictable:768 dirty:518 writeback:0 [ 1266.159799][T25471] slab_reclaimable:14376 slab_unreclaimable:117834 [ 1266.159799][T25471] mapped:56689 shmem:1890 pagetables:1588 [ 1266.159799][T25471] sec_pagetables:0 bounce:0 [ 1266.159799][T25471] kernel_misc_reclaimable:0 [ 1266.159799][T25471] free:1200513 free_pcp:22306 free_cma:0 [ 1266.205317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.214602][T25471] Node 0 active_anon:120356kB inactive_anon:0kB active_file:72896kB inactive_file:175132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:226756kB dirty:2068kB writeback:0kB shmem:4728kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13264kB pagetables:6208kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1266.248397][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.306646][T25471] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1266.365655][T25471] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1266.394502][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.425263][T25471] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 1266.431087][T25471] Node 0 DMA32 free:902808kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:120408kB inactive_anon:0kB active_file:72896kB inactive_file:173808kB unevictable:1536kB writepending:2068kB present:3129332kB managed:2540848kB mlocked:0kB bounce:0kB free_pcp:46448kB local_pcp:31868kB free_cma:0kB [ 1266.516320][T25471] lowmem_reserve[]: 0 0 1 1 1 [ 1266.521112][T25471] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1266.550084][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.688955][T25471] lowmem_reserve[]: 0 0 0 0 0 [ 1266.875155][T25471] Node 1 Normal free:3883356kB boost:0kB min:55552kB low:69440kB high:83328kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:44504kB local_pcp:31196kB free_cma:0kB [ 1266.906550][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.990842][T25471] lowmem_reserve[]: 0 0 0 0 0 [ 1267.063494][T25471] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1267.152556][T25471] Node 0 DMA32: 2154*4kB (UME) 2299*8kB (UM) 1011*16kB (UME) 614*32kB (UME) 353*64kB (UM) 278*128kB (UME) 247*256kB (UME) 171*512kB (UM) 99*1024kB (UME) 9*2048kB (ME) 125*4096kB (M) = 903600kB [ 1267.172100][T25471] Node 0 Normal: 4*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1267.185482][T25471] Node 1 Normal: 3*4kB (UE) 8*8kB (UME) 9*16kB (UE) 2*32kB (U) 11*64kB (UME) 7*128kB (UME) 4*256kB (UME) 3*512kB (U) 0*1024kB 0*2048kB 947*4096kB (UM) = 3883356kB [ 1267.203785][T25471] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1267.214204][T25471] Node 0 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1267.223835][T25471] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1267.291784][T25471] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1267.386866][T25479] netlink: 338 bytes leftover after parsing attributes in process `syz.7.4014'. [ 1267.415410][T25471] 63926 total pagecache pages [ 1267.420130][T25471] 0 pages in swap cache [ 1267.424315][T25471] Free swap = 124996kB [ 1267.456425][T25471] Total swap = 124996kB [ 1267.460633][T25471] 2097051 pages RAM [ 1267.464446][T25471] 0 pages HighMem/MovableOnly [ 1267.469261][T25471] 429861 pages reserved [ 1267.473438][T25471] 0 pages cma reserved [ 1267.498442][ T5149] Bluetooth: hci7: unexpected subevent 0x01 length: 4 < 18 [ 1267.865176][ T30] audit: type=1800 audit(6046403004.540:86): pid=25484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4014" name="dbroot" dev="configfs" ino=91086 res=0 errno=0 [ 1269.456221][T25495] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1269.570916][T25495] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1269.582058][T25495] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1269.590025][T25495] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1269.596292][T25495] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1269.602474][T25495] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1269.612523][T25495] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1269.623586][T25495] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1269.632865][T25495] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1269.683410][T25495] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1269.709224][T25495] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1269.715722][T25495] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1269.755209][T25495] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1270.057293][T25515] FAULT_INJECTION: forcing a failure. [ 1270.057293][T25515] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1270.117527][T25515] CPU: 0 UID: 0 PID: 25515 Comm: syz.7.4024 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1270.117565][T25515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1270.117580][T25515] Call Trace: [ 1270.117590][T25515] [ 1270.117601][T25515] dump_stack_lvl+0x16c/0x1f0 [ 1270.117645][T25515] should_fail_ex+0x512/0x640 [ 1270.117688][T25515] should_fail_alloc_page+0xe7/0x130 [ 1270.117717][T25515] prepare_alloc_pages+0x3c2/0x610 [ 1270.117747][T25515] ? stack_trace_save+0x8e/0xc0 [ 1270.117780][T25515] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1270.117824][T25515] ? kasan_save_stack+0x42/0x60 [ 1270.117858][T25515] ? kasan_save_stack+0x33/0x60 [ 1270.117891][T25515] ? kasan_save_track+0x14/0x30 [ 1270.117933][T25515] ? __kasan_kmalloc+0xaa/0xb0 [ 1270.117968][T25515] ? fuse_dev_alloc+0x8e/0x280 [ 1270.118002][T25515] ? fuse_dev_alloc_install+0x13/0x40 [ 1270.118037][T25515] ? cuse_channel_open+0x100/0x7f0 [ 1270.118068][T25515] ? misc_open+0x35a/0x420 [ 1270.118096][T25515] ? chrdev_open+0x231/0x6a0 [ 1270.118132][T25515] ? do_dentry_open+0x744/0x1c10 [ 1270.118166][T25515] ? vfs_open+0x82/0x3f0 [ 1270.118189][T25515] ? path_openat+0x1de4/0x2cb0 [ 1270.118222][T25515] ? do_filp_open+0x20b/0x470 [ 1270.118257][T25515] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1270.118296][T25515] ? register_lock_class+0x41/0x4c0 [ 1270.118339][T25515] ? __lock_acquire+0xb8a/0x1c90 [ 1270.118380][T25515] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1270.118420][T25515] ? policy_nodemask+0xea/0x4e0 [ 1270.118463][T25515] alloc_pages_mpol+0x1fb/0x550 [ 1270.118490][T25515] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1270.118516][T25515] ? fuse_dev_alloc_install+0x2b/0x40 [ 1270.118559][T25515] folio_alloc_noprof+0x20/0x2d0 [ 1270.118588][T25515] cuse_channel_open+0x198/0x7f0 [ 1270.118621][T25515] ? __pfx_cuse_channel_open+0x10/0x10 [ 1270.118654][T25515] misc_open+0x35a/0x420 [ 1270.118682][T25515] ? __pfx_misc_open+0x10/0x10 [ 1270.118713][T25515] chrdev_open+0x231/0x6a0 [ 1270.118750][T25515] ? __pfx_apparmor_file_open+0x10/0x10 [ 1270.118783][T25515] ? __pfx_chrdev_open+0x10/0x10 [ 1270.118824][T25515] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1270.118865][T25515] do_dentry_open+0x744/0x1c10 [ 1270.118910][T25515] ? __pfx_chrdev_open+0x10/0x10 [ 1270.118957][T25515] vfs_open+0x82/0x3f0 [ 1270.118992][T25515] path_openat+0x1de4/0x2cb0 [ 1270.119042][T25515] ? __pfx_path_openat+0x10/0x10 [ 1270.119081][T25515] ? __lock_acquire+0xb8a/0x1c90 [ 1270.119118][T25515] do_filp_open+0x20b/0x470 [ 1270.119154][T25515] ? __pfx_do_filp_open+0x10/0x10 [ 1270.119219][T25515] ? alloc_fd+0x471/0x7d0 [ 1270.119263][T25515] do_sys_openat2+0x11b/0x1d0 [ 1270.119291][T25515] ? __pfx_do_sys_openat2+0x10/0x10 [ 1270.119320][T25515] ? find_held_lock+0x2b/0x80 [ 1270.119354][T25515] __x64_sys_openat+0x174/0x210 [ 1270.119383][T25515] ? __pfx___x64_sys_openat+0x10/0x10 [ 1270.119428][T25515] do_syscall_64+0xcd/0x490 [ 1270.119470][T25515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.119497][T25515] RIP: 0033:0x7f7e1458e929 [ 1270.119520][T25515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1270.119545][T25515] RSP: 002b:00007f7e1545e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1270.119570][T25515] RAX: ffffffffffffffda RBX: 00007f7e147b5fa0 RCX: 00007f7e1458e929 [ 1270.119589][T25515] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1270.119606][T25515] RBP: 00007f7e14610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1270.119622][T25515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.119639][T25515] R13: 0000000000000000 R14: 00007f7e147b5fa0 R15: 00007ffeadf26508 [ 1270.119676][T25515] [ 1270.854474][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 1271.167349][T25527] FAULT_INJECTION: forcing a failure. [ 1271.167349][T25527] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.207519][T25527] CPU: 0 UID: 0 PID: 25527 Comm: syz.8.4028 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1271.207542][T25527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1271.207551][T25527] Call Trace: [ 1271.207557][T25527] [ 1271.207563][T25527] dump_stack_lvl+0x16c/0x1f0 [ 1271.207589][T25527] should_fail_ex+0x512/0x640 [ 1271.207609][T25527] ? __kvmalloc_node_noprof+0x124/0x620 [ 1271.207632][T25527] should_failslab+0xc2/0x120 [ 1271.207646][T25527] __kvmalloc_node_noprof+0x137/0x620 [ 1271.207666][T25527] ? seq_read_iter+0x826/0x12c0 [ 1271.207687][T25527] ? seq_read_iter+0x826/0x12c0 [ 1271.207702][T25527] seq_read_iter+0x826/0x12c0 [ 1271.207720][T25527] ? aa_file_perm+0x4d6/0xfb0 [ 1271.207752][T25527] seq_read+0x39e/0x4e0 [ 1271.207769][T25527] ? __pfx_seq_read+0x10/0x10 [ 1271.207790][T25527] ? get_pid_task+0xfc/0x250 [ 1271.207818][T25527] full_proxy_read+0x13c/0x200 [ 1271.207832][T25527] ? __pfx_full_proxy_read+0x10/0x10 [ 1271.207846][T25527] vfs_read+0x1e4/0xc60 [ 1271.207869][T25527] ? __pfx_vfs_read+0x10/0x10 [ 1271.207888][T25527] ? do_sys_openat2+0x157/0x1d0 [ 1271.207903][T25527] ? __pfx_do_sys_openat2+0x10/0x10 [ 1271.207927][T25527] ksys_read+0x12a/0x250 [ 1271.207945][T25527] ? __pfx_ksys_read+0x10/0x10 [ 1271.207969][T25527] do_syscall_64+0xcd/0x490 [ 1271.207993][T25527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.208007][T25527] RIP: 0033:0x7fab6718e929 [ 1271.208020][T25527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1271.208033][T25527] RSP: 002b:00007fab68027038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1271.208047][T25527] RAX: ffffffffffffffda RBX: 00007fab673b5fa0 RCX: 00007fab6718e929 [ 1271.208057][T25527] RDX: 00000000000000d5 RSI: 0000200000000080 RDI: 0000000000000008 [ 1271.208065][T25527] RBP: 00007fab68027090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.208073][T25527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.208081][T25527] R13: 0000000000000000 R14: 00007fab673b5fa0 R15: 00007fff1598e3b8 [ 1271.208099][T25527] [ 1271.686393][ T5149] Bluetooth: hci1: command 0x0406 tx timeout [ 1271.686682][T19841] Bluetooth: hci7: command 0x0c1a tx timeout [ 1271.692428][ T5149] Bluetooth: hci6: command 0x0c1a tx timeout [ 1271.698473][T19841] Bluetooth: hci5: command 0x0c1a tx timeout [ 1271.698517][T19841] Bluetooth: hci3: command 0x0406 tx timeout [ 1271.705791][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 1271.717274][T19841] Bluetooth: hci0: command 0x0406 tx timeout [ 1271.745153][ T5149] Bluetooth: hci8: command 0x0c1a tx timeout [ 1271.945774][T25530] FAULT_INJECTION: forcing a failure. [ 1271.945774][T25530] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.988070][T25536] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1272.025167][T25530] CPU: 1 UID: 0 PID: 25530 Comm: syz.3.4029 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1272.025206][T25530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1272.025222][T25530] Call Trace: [ 1272.025232][T25530] [ 1272.025242][T25530] dump_stack_lvl+0x16c/0x1f0 [ 1272.025288][T25530] should_fail_ex+0x512/0x640 [ 1272.025325][T25530] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1272.025363][T25530] should_failslab+0xc2/0x120 [ 1272.025389][T25530] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1272.025421][T25530] ? ww_mutex_lock+0x37/0x160 [ 1272.025444][T25530] ? vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 1272.025485][T25530] vkms_atomic_crtc_duplicate_state+0x78/0x1d0 [ 1272.025520][T25530] drm_atomic_get_crtc_state+0x171/0x450 [ 1272.025552][T25530] drm_atomic_get_plane_state+0x436/0x590 [ 1272.025584][T25530] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 1272.025614][T25530] ? __pfx___might_resched+0x10/0x10 [ 1272.025650][T25530] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1272.025729][T25530] drm_client_modeset_commit_locked+0x14d/0x580 [ 1272.025765][T25530] drm_client_modeset_commit+0x4f/0x80 [ 1272.025796][T25530] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 1272.025840][T25530] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1272.025876][T25530] drm_fbdev_client_restore+0x2c/0x40 [ 1272.025909][T25530] drm_client_dev_restore+0x1f3/0x2a0 [ 1272.025944][T25530] drm_release+0x2c4/0x360 [ 1272.025973][T25530] ? __pfx_drm_release+0x10/0x10 [ 1272.025996][T25530] __fput+0x402/0xb70 [ 1272.026032][T25530] task_work_run+0x14d/0x240 [ 1272.026071][T25530] ? __pfx_task_work_run+0x10/0x10 [ 1272.026105][T25530] ? __pfx___do_sys_close_range+0x10/0x10 [ 1272.026151][T25530] exit_to_user_mode_loop+0xeb/0x110 [ 1272.026192][T25530] do_syscall_64+0x3f6/0x490 [ 1272.026235][T25530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.026262][T25530] RIP: 0033:0x7f907498e929 [ 1272.026284][T25530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1272.026310][T25530] RSP: 002b:00007f907583d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1272.026336][T25530] RAX: 0000000000000000 RBX: 00007f9074bb5fa0 RCX: 00007f907498e929 [ 1272.026355][T25530] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1272.026371][T25530] RBP: 00007f9074a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1272.026388][T25530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1272.026405][T25530] R13: 0000000000000000 R14: 00007f9074bb5fa0 R15: 00007ffc197bb328 [ 1272.026444][T25530] [ 1272.289586][ C1] vkms_vblank_simulate: vblank timer overrun [ 1273.024397][T25539] binder: 25538:25539 ioctl 3b66 0 returned -22 [ 1273.735176][ T5149] Bluetooth: hci7: command 0x0c1a tx timeout [ 1273.807159][ T5149] Bluetooth: hci8: command 0x0c1a tx timeout [ 1275.806150][ T5149] Bluetooth: hci7: command 0x0c1a tx timeout [ 1275.890412][ T5149] Bluetooth: hci8: command 0x0c1a tx timeout [ 1276.072759][T25604] FAULT_INJECTION: forcing a failure. [ 1276.072759][T25604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1276.123370][T25604] CPU: 1 UID: 0 PID: 25604 Comm: syz.3.4044 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1276.123395][T25604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1276.123405][T25604] Call Trace: [ 1276.123411][T25604] [ 1276.123417][T25604] dump_stack_lvl+0x16c/0x1f0 [ 1276.123445][T25604] should_fail_ex+0x512/0x640 [ 1276.123469][T25604] should_fail_alloc_page+0xe7/0x130 [ 1276.123484][T25604] prepare_alloc_pages+0x3c2/0x610 [ 1276.123516][T25604] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1276.123553][T25604] ? trace_sched_exit_tp+0xde/0x130 [ 1276.123584][T25604] ? __schedule+0x1181/0x5de0 [ 1276.123605][T25604] ? __up_read+0x1f8/0x750 [ 1276.123632][T25604] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1276.123657][T25604] ? __pfx___schedule+0x10/0x10 [ 1276.123677][T25604] ? lockdep_hardirqs_on+0x7c/0x110 [ 1276.123700][T25604] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1276.123723][T25604] ? policy_nodemask+0xea/0x4e0 [ 1276.123746][T25604] alloc_pages_mpol+0x1fb/0x550 [ 1276.123761][T25604] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1276.123779][T25604] alloc_pages_noprof+0x131/0x390 [ 1276.123793][T25604] __pmd_alloc+0x3b/0x930 [ 1276.123811][T25604] __handle_mm_fault+0xaac/0x5490 [ 1276.123834][T25604] ? __pfx___handle_mm_fault+0x10/0x10 [ 1276.123868][T25604] handle_mm_fault+0x589/0xd10 [ 1276.123890][T25604] __get_user_pages+0x589/0x3b80 [ 1276.123912][T25604] ? __pfx_mt_find+0x10/0x10 [ 1276.123926][T25604] ? __pfx___get_user_pages+0x10/0x10 [ 1276.123949][T25604] populate_vma_page_range+0x278/0x3a0 [ 1276.123967][T25604] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1276.123983][T25604] ? __pfx_find_vma_intersection+0x10/0x10 [ 1276.124000][T25604] ? do_mmap+0x69c/0x1210 [ 1276.124017][T25604] __mm_populate+0x1d8/0x380 [ 1276.124034][T25604] ? __pfx___mm_populate+0x10/0x10 [ 1276.124052][T25604] ? up_write+0x1b2/0x520 [ 1276.124073][T25604] vm_mmap_pgoff+0x362/0x450 [ 1276.124093][T25604] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1276.124111][T25604] ? __x64_sys_futex+0x1e0/0x4c0 [ 1276.124128][T25604] ? __x64_sys_futex+0x1e9/0x4c0 [ 1276.124147][T25604] ksys_mmap_pgoff+0x7d/0x5c0 [ 1276.124161][T25604] ? xfd_validate_state+0x61/0x180 [ 1276.124179][T25604] ? __pfx_ksys_write+0x10/0x10 [ 1276.124200][T25604] __x64_sys_mmap+0x125/0x190 [ 1276.124221][T25604] do_syscall_64+0xcd/0x490 [ 1276.124245][T25604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.124261][T25604] RIP: 0033:0x7f907498e929 [ 1276.124273][T25604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1276.124287][T25604] RSP: 002b:00007f907581c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1276.124301][T25604] RAX: ffffffffffffffda RBX: 00007f9074bb6080 RCX: 00007f907498e929 [ 1276.124311][T25604] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 1276.124320][T25604] RBP: 00007f9074a10b39 R08: 0000000000000002 R09: 0000000000008000 [ 1276.124336][T25604] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1276.124345][T25604] R13: 0000000000000000 R14: 00007f9074bb6080 R15: 00007ffc197bb328 [ 1276.124365][T25604] [ 1277.064583][T25607] tc_dump_action: action bad kind [ 1278.247070][T25598] FAULT_INJECTION: forcing a failure. [ 1278.247070][T25598] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.312452][T25598] CPU: 0 UID: 0 PID: 25598 Comm: syz.7.4043 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1278.312493][T25598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1278.312509][T25598] Call Trace: [ 1278.312519][T25598] [ 1278.312529][T25598] dump_stack_lvl+0x16c/0x1f0 [ 1278.312574][T25598] should_fail_ex+0x512/0x640 [ 1278.312608][T25598] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1278.312652][T25598] should_failslab+0xc2/0x120 [ 1278.312677][T25598] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1278.312725][T25598] ? dup_fd+0x4e/0xb90 [ 1278.312759][T25598] ? do_futex+0x122/0x350 [ 1278.312793][T25598] dup_fd+0x4e/0xb90 [ 1278.312825][T25598] ? _raw_spin_unlock+0x28/0x50 [ 1278.312855][T25598] ? do_set_mempolicy+0x220/0x480 [ 1278.312908][T25598] __do_sys_close_range+0x4ca/0x730 [ 1278.312949][T25598] ? __pfx___do_sys_close_range+0x10/0x10 [ 1278.312991][T25598] do_syscall_64+0xcd/0x490 [ 1278.313029][T25598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.313053][T25598] RIP: 0033:0x7f7e1458e929 [ 1278.313073][T25598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1278.313096][T25598] RSP: 002b:00007f7e1543d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1278.313119][T25598] RAX: ffffffffffffffda RBX: 00007f7e147b6080 RCX: 00007f7e1458e929 [ 1278.313136][T25598] RDX: 0000000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 1278.313153][T25598] RBP: 00007f7e14610b39 R08: 0000000000000000 R09: 0000000000000000 [ 1278.313169][T25598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1278.313184][T25598] R13: 0000000000000000 R14: 00007f7e147b6080 R15: 00007ffeadf26508 [ 1278.313214][T25598] [ 1278.677128][T25597] FAULT_INJECTION: forcing a failure. [ 1278.677128][T25597] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1278.792118][T25597] CPU: 1 UID: 0 PID: 25597 Comm: syz.7.4043 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1278.792154][T25597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1278.792168][T25597] Call Trace: [ 1278.792176][T25597] [ 1278.792186][T25597] dump_stack_lvl+0x16c/0x1f0 [ 1278.792226][T25597] should_fail_ex+0x512/0x640 [ 1278.792262][T25597] get_futex_key+0xf36/0x1540 [ 1278.792292][T25597] ? find_held_lock+0x2b/0x80 [ 1278.792315][T25597] ? __pfx_get_futex_key+0x10/0x10 [ 1278.792344][T25597] ? __mutex_trylock_common+0xe9/0x250 [ 1278.792382][T25597] futex_wake+0xea/0x530 [ 1278.792416][T25597] ? __pfx_futex_wake+0x10/0x10 [ 1278.792445][T25597] ? __lock_acquire+0xb8a/0x1c90 [ 1278.792487][T25597] do_futex+0x1e3/0x350 [ 1278.792516][T25597] ? __pfx_do_futex+0x10/0x10 [ 1278.792539][T25597] ? __might_fault+0xe3/0x190 [ 1278.792582][T25597] mm_release+0x24e/0x300 [ 1278.792611][T25597] do_exit+0x68b/0x2bd0 [ 1278.792648][T25597] ? __pfx_do_exit+0x10/0x10 [ 1278.792676][T25597] ? do_raw_spin_lock+0x12c/0x2b0 [ 1278.792709][T25597] ? find_held_lock+0x2b/0x80 [ 1278.792739][T25597] do_group_exit+0xd3/0x2a0 [ 1278.792772][T25597] get_signal+0x2673/0x26d0 [ 1278.792812][T25597] ? __pfx_get_signal+0x10/0x10 [ 1278.792845][T25597] ? do_futex+0x122/0x350 [ 1278.792874][T25597] ? __pfx_do_futex+0x10/0x10 [ 1278.792906][T25597] arch_do_signal_or_restart+0x8f/0x790 [ 1278.792935][T25597] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1278.792982][T25597] exit_to_user_mode_loop+0x84/0x110 [ 1278.793018][T25597] do_syscall_64+0x3f6/0x490 [ 1278.793056][T25597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.793081][T25597] RIP: 0033:0x7f7e1458e929 [ 1278.793101][T25597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1278.793124][T25597] RSP: 002b:00007f7e1545e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1278.793147][T25597] RAX: 0000000000000001 RBX: 00007f7e147b5fa8 RCX: 00007f7e1458e929 [ 1278.793163][T25597] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e147b5fac [ 1278.793178][T25597] RBP: 00007f7e147b5fa0 R08: 00007f7e1545f000 R09: 0000000000000000 [ 1278.793194][T25597] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f7e147b5fac [ 1278.793210][T25597] R13: 0000000000000000 R14: 00007ffeadf26420 R15: 00007ffeadf26508 [ 1278.793244][T25597] [ 1279.029491][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.116630][T25622] sp0: Synchronizing with TNC [ 1280.273454][T25640] FAULT_INJECTION: forcing a failure. [ 1280.273454][T25640] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1280.338832][T25639] netlink: 338 bytes leftover after parsing attributes in process `syz.7.4053'. [ 1280.372178][T25640] CPU: 1 UID: 0 PID: 25640 Comm: syz.6.4054 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1280.372216][T25640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1280.372230][T25640] Call Trace: [ 1280.372239][T25640] [ 1280.372249][T25640] dump_stack_lvl+0x16c/0x1f0 [ 1280.372290][T25640] should_fail_ex+0x512/0x640 [ 1280.372330][T25640] should_fail_alloc_page+0xe7/0x130 [ 1280.372357][T25640] prepare_alloc_pages+0x3c2/0x610 [ 1280.372387][T25640] ? __pfx_stack_trace_save+0x10/0x10 [ 1280.372417][T25640] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1280.372458][T25640] ? register_lock_class+0x41/0x4c0 [ 1280.372488][T25640] ? find_held_lock+0x2b/0x80 [ 1280.372512][T25640] ? ima_match_policy+0x7f9/0x22e0 [ 1280.372543][T25640] ? __lock_acquire+0xb8a/0x1c90 [ 1280.372573][T25640] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1280.372628][T25640] ? __lock_acquire+0x622/0x1c90 [ 1280.372659][T25640] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1280.372695][T25640] ? policy_nodemask+0xea/0x4e0 [ 1280.372736][T25640] alloc_pages_mpol+0x1fb/0x550 [ 1280.372762][T25640] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1280.372797][T25640] alloc_pages_noprof+0x131/0x390 [ 1280.372822][T25640] __pmd_alloc+0x3b/0x930 [ 1280.372846][T25640] ? find_held_lock+0x2b/0x80 [ 1280.372870][T25640] __handle_mm_fault+0xaac/0x5490 [ 1280.372912][T25640] ? __pfx___handle_mm_fault+0x10/0x10 [ 1280.372947][T25640] ? __pfx_mt_find+0x10/0x10 [ 1280.372993][T25640] ? find_vma+0xbf/0x140 [ 1280.373016][T25640] ? __pfx_find_vma+0x10/0x10 [ 1280.373045][T25640] handle_mm_fault+0x589/0xd10 [ 1280.373077][T25640] ? __pkru_allows_pkey+0x41/0xb0 [ 1280.373111][T25640] do_user_addr_fault+0x7a6/0x1370 [ 1280.373148][T25640] ? rcu_is_watching+0x12/0xc0 [ 1280.373176][T25640] exc_page_fault+0x5c/0xb0 [ 1280.373211][T25640] asm_exc_page_fault+0x26/0x30 [ 1280.373234][T25640] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1280.373264][T25640] Code: 10 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 10 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1280.373288][T25640] RSP: 0018:ffffc9001120fb70 EFLAGS: 00050202 [ 1280.373308][T25640] RAX: 0000000000000001 RBX: 0000000000000044 RCX: 0000000000000044 [ 1280.373324][T25640] RDX: ffffed100c5d5089 RSI: ffff888062ea8400 RDI: 0000000000000000 [ 1280.373340][T25640] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100c5d5088 [ 1280.373355][T25640] R10: ffff888062ea8443 R11: 0000000000000001 R12: ffff888062ea8400 [ 1280.373371][T25640] R13: 0000000000000044 R14: 00007ffffffff000 R15: 0000000000000000 [ 1280.373404][T25640] _copy_to_user+0xbb/0xd0 [ 1280.373445][T25640] mon_text_copy_to_user+0xce/0x1a0 [ 1280.373485][T25640] mon_text_read_u+0x594/0xbd0 [ 1280.373526][T25640] ? __debugfs_file_get+0x1fe/0x840 [ 1280.373548][T25640] ? __pfx_mon_text_read_u+0x10/0x10 [ 1280.373588][T25640] full_proxy_read+0x13c/0x200 [ 1280.373610][T25640] ? __pfx_full_proxy_read+0x10/0x10 [ 1280.373633][T25640] vfs_read+0x1e4/0xc60 [ 1280.373672][T25640] ? __pfx___mutex_lock+0x10/0x10 [ 1280.373707][T25640] ? __pfx_vfs_read+0x10/0x10 [ 1280.373750][T25640] ? __fget_files+0x20e/0x3c0 [ 1280.373793][T25640] ksys_read+0x12a/0x250 [ 1280.373825][T25640] ? __pfx_ksys_read+0x10/0x10 [ 1280.373868][T25640] do_syscall_64+0xcd/0x490 [ 1280.373906][T25640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.373927][T25640] RIP: 0033:0x7f656858e929 [ 1280.373953][T25640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1280.373975][T25640] RSP: 002b:00007f6569434038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1280.373996][T25640] RAX: ffffffffffffffda RBX: 00007f65687b5fa0 RCX: 00007f656858e929 [ 1280.374013][T25640] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000006 [ 1280.374026][T25640] RBP: 00007f6569434090 R08: 0000000000000000 R09: 0000000000000000 [ 1280.374040][T25640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.374054][T25640] R13: 0000000000000000 R14: 00007f65687b5fa0 R15: 00007fff5eb4ae18 [ 1280.374089][T25640] [ 1280.771887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.971954][ T5149] Bluetooth: hci7: unexpected subevent 0x01 length: 4 < 18 [ 1281.004534][ T30] audit: type=1800 audit(6046403025.717:87): pid=25643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4053" name="dbroot" dev="configfs" ino=92430 res=0 errno=0 [ 1282.441767][ T5149] Bluetooth: hci7: unexpected event 0x03 length: 725 > 11 [ 1284.786650][T25686] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4064'. [ 1285.266211][T25699] ptrace attach of ""[25695] was attempted by "./syz-executor exec"[25699] [ 1288.834718][T25728] FAULT_INJECTION: forcing a failure. [ 1288.834718][T25728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1288.874889][T25728] CPU: 1 UID: 0 PID: 25728 Comm: syz.3.4073 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1288.874925][T25728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1288.874940][T25728] Call Trace: [ 1288.874948][T25728] [ 1288.874959][T25728] dump_stack_lvl+0x16c/0x1f0 [ 1288.875011][T25728] should_fail_ex+0x512/0x640 [ 1288.875048][T25728] _copy_from_user+0x2e/0xd0 [ 1288.875082][T25728] input_event_from_user+0xb9/0x290 [ 1288.875114][T25728] ? __pfx_input_event_from_user+0x10/0x10 [ 1288.875147][T25728] ? __pfx___might_resched+0x10/0x10 [ 1288.875172][T25728] ? input_inject_event+0x1a5/0x390 [ 1288.875209][T25728] evdev_write+0x26b/0x440 [ 1288.875245][T25728] ? __pfx_evdev_write+0x10/0x10 [ 1288.875279][T25728] ? bpf_lsm_file_permission+0x9/0x10 [ 1288.875305][T25728] ? security_file_permission+0x71/0x210 [ 1288.875337][T25728] ? rw_verify_area+0xcf/0x680 [ 1288.875369][T25728] ? __pfx_evdev_write+0x10/0x10 [ 1288.875399][T25728] vfs_write+0x29d/0x1150 [ 1288.875440][T25728] ? __pfx_vfs_write+0x10/0x10 [ 1288.875469][T25728] ? find_held_lock+0x2b/0x80 [ 1288.875493][T25728] ? __fget_files+0x204/0x3c0 [ 1288.875530][T25728] ? __fget_files+0x20e/0x3c0 [ 1288.875571][T25728] ksys_write+0x1f8/0x250 [ 1288.875603][T25728] ? __pfx_ksys_write+0x10/0x10 [ 1288.875646][T25728] do_syscall_64+0xcd/0x490 [ 1288.875684][T25728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.875709][T25728] RIP: 0033:0x7f907498e929 [ 1288.875730][T25728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1288.875754][T25728] RSP: 002b:00007f907583d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1288.875777][T25728] RAX: ffffffffffffffda RBX: 00007f9074bb5fa0 RCX: 00007f907498e929 [ 1288.875793][T25728] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000004 [ 1288.875808][T25728] RBP: 00007f907583d090 R08: 0000000000000000 R09: 0000000000000000 [ 1288.875824][T25728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1288.875838][T25728] R13: 0000000000000000 R14: 00007f9074bb5fa0 R15: 00007ffc197bb328 [ 1288.875872][T25728] [ 1289.293980][T25730] FAULT_INJECTION: forcing a failure. [ 1289.293980][T25730] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.381172][T25730] CPU: 0 UID: 0 PID: 25730 Comm: syz.7.4074 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1289.381217][T25730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1289.381233][T25730] Call Trace: [ 1289.381243][T25730] [ 1289.381254][T25730] dump_stack_lvl+0x16c/0x1f0 [ 1289.381298][T25730] should_fail_ex+0x512/0x640 [ 1289.381334][T25730] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1289.381376][T25730] should_failslab+0xc2/0x120 [ 1289.381401][T25730] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1289.381438][T25730] ? shmem_alloc_inode+0x25/0x50 [ 1289.381470][T25730] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1289.381494][T25730] shmem_alloc_inode+0x25/0x50 [ 1289.381518][T25730] alloc_inode+0x64/0x240 [ 1289.381546][T25730] new_inode+0x22/0x1c0 [ 1289.381569][T25730] ? trace_cap_capable+0x18d/0x200 [ 1289.381597][T25730] shmem_get_inode+0x19a/0xfb0 [ 1289.381628][T25730] ? __vm_enough_memory+0x184/0x3f0 [ 1289.381658][T25730] __shmem_file_setup+0x279/0x330 [ 1289.381694][T25730] shmem_zero_setup+0x93/0x1a0 [ 1289.381733][T25730] __mmap_region+0x1ece/0x25e0 [ 1289.381775][T25730] ? __pfx___mmap_region+0x10/0x10 [ 1289.381812][T25730] ? rcu_is_watching+0x12/0xc0 [ 1289.381845][T25730] ? rcu_is_watching+0x12/0xc0 [ 1289.381871][T25730] ? trace_sched_exit_tp+0xde/0x130 [ 1289.381901][T25730] ? __schedule+0x1181/0x5de0 [ 1289.381953][T25730] ? __pfx___schedule+0x10/0x10 [ 1289.382030][T25730] ? trace_cap_capable+0x18d/0x200 [ 1289.382068][T25730] mmap_region+0x1ab/0x3f0 [ 1289.382105][T25730] ? __get_unmapped_area+0x267/0x440 [ 1289.382138][T25730] do_mmap+0xa3e/0x1210 [ 1289.382179][T25730] ? __pfx_do_mmap+0x10/0x10 [ 1289.382209][T25730] ? __pfx_down_write_killable+0x10/0x10 [ 1289.382244][T25730] vm_mmap_pgoff+0x281/0x450 [ 1289.382277][T25730] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1289.382312][T25730] ? __x64_sys_futex+0x1e0/0x4c0 [ 1289.382342][T25730] ? __x64_sys_futex+0x1e9/0x4c0 [ 1289.382377][T25730] ksys_mmap_pgoff+0x7d/0x5c0 [ 1289.382405][T25730] ? xfd_validate_state+0x61/0x180 [ 1289.382436][T25730] ? __pfx_ksys_write+0x10/0x10 [ 1289.382475][T25730] __x64_sys_mmap+0x125/0x190 [ 1289.382513][T25730] do_syscall_64+0xcd/0x490 [ 1289.382554][T25730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.382581][T25730] RIP: 0033:0x7f7e1458e929 [ 1289.382602][T25730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1289.382627][T25730] RSP: 002b:00007f7e1545e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1289.382653][T25730] RAX: ffffffffffffffda RBX: 00007f7e147b5fa0 RCX: 00007f7e1458e929 [ 1289.382671][T25730] RDX: 0000000000000006 RSI: 0000000004020009 RDI: 0000000000000000 [ 1289.382688][T25730] RBP: 00007f7e14610b39 R08: 0000000000000401 R09: 0000000000008000 [ 1289.382705][T25730] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1289.382722][T25730] R13: 0000000000000000 R14: 00007f7e147b5fa0 R15: 00007ffeadf26508 [ 1289.382758][T25730] [ 1290.838561][T25737] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 1290.993486][T25744] synth uevent: /devices/virtual/cpuid/cpu0: unknown uevent action string [ 1291.003839][T25744] cpuid cpu0: uevent: failed to send synthetic uevent: -22 [ 1291.029137][T25744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4076'. [ 1291.186027][T25743] binder: 25740:25743 ioctl 3b66 0 returned -22 [ 1291.428980][T25749] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 1292.474790][T25752] could not allocate digest TFM handle [ 1292.717791][T25764] FAULT_INJECTION: forcing a failure. [ 1292.717791][T25764] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1292.796376][T25764] CPU: 1 UID: 0 PID: 25764 Comm: syz.8.4083 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1292.796413][T25764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1292.796426][T25764] Call Trace: [ 1292.796435][T25764] [ 1292.796445][T25764] dump_stack_lvl+0x16c/0x1f0 [ 1292.796485][T25764] should_fail_ex+0x512/0x640 [ 1292.796522][T25764] get_futex_key+0x1d0/0x1540 [ 1292.796556][T25764] ? __pfx_get_futex_key+0x10/0x10 [ 1292.796604][T25764] futex_wake+0xea/0x530 [ 1292.796635][T25764] ? rcu_is_watching+0x12/0xc0 [ 1292.796659][T25764] ? __pfx_futex_wake+0x10/0x10 [ 1292.796693][T25764] ? kmem_cache_free+0x2d1/0x4d0 [ 1292.796724][T25764] ? find_held_lock+0x2b/0x80 [ 1292.796746][T25764] ? putname+0x154/0x1a0 [ 1292.796766][T25764] ? do_sys_openat2+0x1b0/0x1d0 [ 1292.796796][T25764] do_futex+0x1e3/0x350 [ 1292.796822][T25764] ? __pfx_do_futex+0x10/0x10 [ 1292.796856][T25764] __x64_sys_futex+0x1e0/0x4c0 [ 1292.796883][T25764] ? __x64_sys_openat+0x174/0x210 [ 1292.796907][T25764] ? __pfx___x64_sys_futex+0x10/0x10 [ 1292.796950][T25764] do_syscall_64+0xcd/0x490 [ 1292.796988][T25764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.797011][T25764] RIP: 0033:0x7fab6718e929 [ 1292.797030][T25764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1292.797053][T25764] RSP: 002b:00007fab680060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1292.797077][T25764] RAX: ffffffffffffffda RBX: 00007fab673b6088 RCX: 00007fab6718e929 [ 1292.797095][T25764] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fab673b608c [ 1292.797111][T25764] RBP: 00007fab673b6080 R08: 00007fab68028000 R09: 0000000000000000 [ 1292.797126][T25764] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fab673b608c [ 1292.797141][T25764] R13: 0000000000000000 R14: 00007fff1598e2d0 R15: 00007fff1598e3b8 [ 1292.797173][T25764] [ 1294.253517][T25775] FAULT_INJECTION: forcing a failure. [ 1294.253517][T25775] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1294.375167][T25775] CPU: 0 UID: 0 PID: 25775 Comm: syz.8.4085 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1294.375208][T25775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1294.375224][T25775] Call Trace: [ 1294.375234][T25775] [ 1294.375245][T25775] dump_stack_lvl+0x16c/0x1f0 [ 1294.375290][T25775] should_fail_ex+0x512/0x640 [ 1294.375332][T25775] should_fail_alloc_page+0xe7/0x130 [ 1294.375359][T25775] prepare_alloc_pages+0x3c2/0x610 [ 1294.375389][T25775] ? rcu_is_watching+0x12/0xc0 [ 1294.375419][T25775] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1294.375463][T25775] ? rcu_is_watching+0x12/0xc0 [ 1294.375489][T25775] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1294.375519][T25775] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1294.375567][T25775] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1294.375609][T25775] ? is_bpf_text_address+0x8a/0x1a0 [ 1294.375644][T25775] ? bpf_ksym_find+0x124/0x1c0 [ 1294.375675][T25775] ? is_bpf_text_address+0x94/0x1a0 [ 1294.375720][T25775] ? __kernel_text_address+0xd/0x40 [ 1294.375758][T25775] ? unwind_get_return_address+0x59/0xa0 [ 1294.375820][T25775] alloc_pages_bulk_noprof+0x71c/0x1410 [ 1294.375859][T25775] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1294.375907][T25775] ? policy_nodemask+0xea/0x4e0 [ 1294.375959][T25775] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1294.375998][T25775] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1294.376040][T25775] kasan_populate_vmalloc+0xf1/0x1f0 [ 1294.376085][T25775] alloc_vmap_area+0x959/0x29c0 [ 1294.376130][T25775] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1294.376168][T25775] __get_vm_area_node+0x1ca/0x330 [ 1294.376206][T25775] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1294.376238][T25775] ? kernel_clone+0xfc/0x960 [ 1294.376268][T25775] ? local_lock_release+0x99/0x140 [ 1294.376304][T25775] ? kernel_clone+0xfc/0x960 [ 1294.376333][T25775] ? rcu_read_unlock+0x17/0x60 [ 1294.376365][T25775] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1294.376410][T25775] ? kernel_clone+0xfc/0x960 [ 1294.376437][T25775] __vmalloc_node_noprof+0xad/0xf0 [ 1294.376470][T25775] ? kernel_clone+0xfc/0x960 [ 1294.376504][T25775] copy_process+0x2c70/0x76a0 [ 1294.376534][T25775] ? __pfx___futex_wait+0x10/0x10 [ 1294.376583][T25775] ? __pfx_copy_process+0x10/0x10 [ 1294.376632][T25775] kernel_clone+0xfc/0x960 [ 1294.376670][T25775] ? __pfx_kernel_clone+0x10/0x10 [ 1294.376727][T25775] __do_sys_clone+0xce/0x120 [ 1294.376759][T25775] ? __pfx___do_sys_clone+0x10/0x10 [ 1294.376810][T25775] ? xfd_validate_state+0x61/0x180 [ 1294.376841][T25775] ? __pfx_ksys_write+0x10/0x10 [ 1294.376889][T25775] do_syscall_64+0xcd/0x490 [ 1294.376927][T25775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.376950][T25775] RIP: 0033:0x7fab6718e929 [ 1294.376970][T25775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1294.376996][T25775] RSP: 002b:00007fab68026fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1294.377020][T25775] RAX: ffffffffffffffda RBX: 00007fab673b5fa0 RCX: 00007fab6718e929 [ 1294.377034][T25775] RDX: 0000000000000000 RSI: 00002000000001e0 RDI: 0000000000208000 [ 1294.377043][T25775] RBP: 00007fab67210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1294.377051][T25775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1294.377060][T25775] R13: 0000000000000000 R14: 00007fab673b5fa0 R15: 00007fff1598e3b8 [ 1294.377078][T25775] [ 1295.117318][T25775] syz.8.4085: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1295.376344][T25775] CPU: 1 UID: 0 PID: 25775 Comm: syz.8.4085 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1295.376384][T25775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1295.376400][T25775] Call Trace: [ 1295.376409][T25775] [ 1295.376419][T25775] dump_stack_lvl+0x16c/0x1f0 [ 1295.376464][T25775] warn_alloc+0x248/0x3a0 [ 1295.376503][T25775] ? __pfx_warn_alloc+0x10/0x10 [ 1295.376543][T25775] ? kfree+0x2b4/0x4d0 [ 1295.376583][T25775] ? __get_vm_area_node+0x208/0x330 [ 1295.376630][T25775] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1295.376664][T25775] ? local_lock_release+0x99/0x140 [ 1295.376702][T25775] ? kernel_clone+0xfc/0x960 [ 1295.376732][T25775] ? rcu_read_unlock+0x17/0x60 [ 1295.376764][T25775] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1295.376810][T25775] ? kernel_clone+0xfc/0x960 [ 1295.376839][T25775] __vmalloc_node_noprof+0xad/0xf0 [ 1295.376870][T25775] ? kernel_clone+0xfc/0x960 [ 1295.376903][T25775] copy_process+0x2c70/0x76a0 [ 1295.376934][T25775] ? __pfx___futex_wait+0x10/0x10 [ 1295.376984][T25775] ? __pfx_copy_process+0x10/0x10 [ 1295.377031][T25775] kernel_clone+0xfc/0x960 [ 1295.377066][T25775] ? __pfx_kernel_clone+0x10/0x10 [ 1295.377118][T25775] __do_sys_clone+0xce/0x120 [ 1295.377148][T25775] ? __pfx___do_sys_clone+0x10/0x10 [ 1295.377197][T25775] ? xfd_validate_state+0x61/0x180 [ 1295.377228][T25775] ? __pfx_ksys_write+0x10/0x10 [ 1295.377275][T25775] do_syscall_64+0xcd/0x490 [ 1295.377315][T25775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.377342][T25775] RIP: 0033:0x7fab6718e929 [ 1295.377363][T25775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1295.377390][T25775] RSP: 002b:00007fab68026fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1295.377416][T25775] RAX: ffffffffffffffda RBX: 00007fab673b5fa0 RCX: 00007fab6718e929 [ 1295.377435][T25775] RDX: 0000000000000000 RSI: 00002000000001e0 RDI: 0000000000208000 [ 1295.377452][T25775] RBP: 00007fab67210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1295.377470][T25775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1295.377486][T25775] R13: 0000000000000000 R14: 00007fab673b5fa0 R15: 00007fff1598e3b8 [ 1295.377522][T25775] [ 1295.377533][T25775] Mem-Info: [ 1295.829905][T25775] active_anon:29734 inactive_anon:0 isolated_anon:0 [ 1295.829905][T25775] active_file:19007 inactive_file:44037 isolated_file:0 [ 1295.829905][T25775] unevictable:768 dirty:534 writeback:0 [ 1295.829905][T25775] slab_reclaimable:14817 slab_unreclaimable:116652 [ 1295.829905][T25775] mapped:58198 shmem:1813 pagetables:1617 [ 1295.829905][T25775] sec_pagetables:0 bounce:0 [ 1295.829905][T25775] kernel_misc_reclaimable:0 [ 1295.829905][T25775] free:1196779 free_pcp:25005 free_cma:0 [ 1295.996273][T25775] Node 0 active_anon:120868kB inactive_anon:0kB active_file:76028kB inactive_file:176008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:233624kB dirty:2232kB writeback:0kB shmem:5040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13620kB pagetables:6324kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1296.205186][T25775] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1296.297073][T25775] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.449273][T25775] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 1296.477376][T25775] Node 0 DMA32 free:872132kB boost:0kB min:34332kB low:42912kB high:51492kB reserved_highatomic:0KB free_highatomic:0KB active_anon:139824kB inactive_anon:0kB active_file:76028kB inactive_file:174684kB unevictable:1536kB writepending:2232kB present:3129332kB managed:2540848kB mlocked:0kB bounce:0kB free_pcp:56704kB local_pcp:26500kB free_cma:0kB [ 1296.539115][T25775] lowmem_reserve[]: 0 0 1 1 1 [ 1296.543909][T25775] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1296.645233][T25775] lowmem_reserve[]: 0 0 0 0 0 [ 1296.650023][T25775] Node 1 Normal free:3887840kB boost:0kB min:55552kB low:69440kB high:83328kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:39968kB local_pcp:11040kB free_cma:0kB [ 1296.746601][T25775] lowmem_reserve[]: 0 0 0 0 0 [ 1296.751395][T25775] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1296.793422][T25775] Node 0 DMA32: 2849*4kB (UME) 104*8kB (UME) 639*16kB (UME) 676*32kB (UME) 368*64kB (UME) 277*128kB (UME) 246*256kB (UM) 174*512kB (UME) 97*1024kB (ME) 1*2048kB (E) 119*4096kB (M) = 843956kB [ 1296.835303][T25775] Node 0 Normal: 4*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1296.873951][T25775] Node 1 Normal: 3*4kB (UE) 7*8kB (UME) 9*16kB (UE) 4*32kB (U) 11*64kB (UME) 8*128kB (UME) 9*256kB (UME) 3*512kB (U) 3*1024kB (U) 0*2048kB 947*4096kB (UM) = 3887892kB [ 1296.958542][T25775] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1296.989090][T25775] Node 0 hugepages_total=6 hugepages_free=1 hugepages_surp=2 hugepages_size=2048kB [ 1297.055142][T25775] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1297.119128][T25775] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1297.166226][T25775] 72130 total pagecache pages [ 1297.171065][T25775] 0 pages in swap cache [ 1297.176225][T25775] Free swap = 124996kB [ 1297.211042][T25775] Total swap = 124996kB [ 1297.247227][T25775] 2097051 pages RAM [ 1297.251090][T25775] 0 pages HighMem/MovableOnly [ 1297.256275][T25775] 429861 pages reserved [ 1297.260452][T25775] 0 pages cma reserved [ 1298.162828][ T30] audit: type=1804 audit(6046403050.873:88): pid=25825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.4091" name="/newroot/38/file0" dev="tmpfs" ino=219 res=1 errno=0 [ 1300.234209][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.240603][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.913406][T25864] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4098'. [ 1300.997124][ T5149] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 1301.218302][ T30] audit: type=1800 audit(6046403061.798:89): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4098" name="dbroot" dev="configfs" ino=92947 res=0 errno=0 [ 1302.347742][T25891] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4105'. [ 1302.362590][ T5149] Bluetooth: hci6: unexpected subevent 0x01 length: 4 < 18 [ 1302.437246][ T30] audit: type=1800 audit(6046403071.130:90): pid=25887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4105" name="dbroot" dev="configfs" ino=92991 res=0 errno=0 [ 1304.696761][T25920] netlink: 330 bytes leftover after parsing attributes in process `syz.8.4111'. [ 1307.854574][T25954] FAULT_INJECTION: forcing a failure. [ 1307.854574][T25954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1307.954590][T25954] CPU: 1 UID: 0 PID: 25954 Comm: syz.3.4122 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1307.954628][T25954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1307.954643][T25954] Call Trace: [ 1307.954652][T25954] [ 1307.954662][T25954] dump_stack_lvl+0x16c/0x1f0 [ 1307.954704][T25954] should_fail_ex+0x512/0x640 [ 1307.954743][T25954] _copy_from_user+0x2e/0xd0 [ 1307.954780][T25954] snd_seq_oss_write+0x397/0x7d0 [ 1307.954821][T25954] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1307.954856][T25954] ? apparmor_file_permission+0x251/0x400 [ 1307.954885][T25954] ? bpf_lsm_file_permission+0x9/0x10 [ 1307.954915][T25954] ? __pfx_odev_write+0x10/0x10 [ 1307.954938][T25954] odev_write+0x51/0xa0 [ 1307.954962][T25954] vfs_write+0x29d/0x1150 [ 1307.955004][T25954] ? __pfx_vfs_write+0x10/0x10 [ 1307.955031][T25954] ? find_held_lock+0x2b/0x80 [ 1307.955054][T25954] ? __fget_files+0x204/0x3c0 [ 1307.955089][T25954] ? __fget_files+0x20e/0x3c0 [ 1307.955131][T25954] ksys_write+0x12a/0x250 [ 1307.955163][T25954] ? __pfx_ksys_write+0x10/0x10 [ 1307.955207][T25954] do_syscall_64+0xcd/0x490 [ 1307.955245][T25954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.955277][T25954] RIP: 0033:0x7f907498e929 [ 1307.955297][T25954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1307.955320][T25954] RSP: 002b:00007f907583d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1307.955344][T25954] RAX: ffffffffffffffda RBX: 00007f9074bb5fa0 RCX: 00007f907498e929 [ 1307.955362][T25954] RDX: 000000000000a3d9 RSI: 0000200000000200 RDI: 0000000000000004 [ 1307.955377][T25954] RBP: 00007f907583d090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.955393][T25954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1307.955408][T25954] R13: 0000000000000000 R14: 00007f9074bb5fa0 R15: 00007ffc197bb328 [ 1307.955442][T25954] [ 1309.245247][ T31] INFO: task syz-executor:17933 blocked for more than 143 seconds. [ 1309.269206][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 1309.298300][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1309.377315][ T31] task:syz-executor state:D stack:24328 pid:17933 tgid:17933 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1309.452775][ T31] Call Trace: [ 1309.466641][ T31] [ 1309.480464][ T31] __schedule+0x116a/0x5de0 [ 1309.509135][ T31] ? __pfx___schedule+0x10/0x10 [ 1309.524408][ T31] ? find_held_lock+0x2b/0x80 [ 1309.534566][ T31] ? schedule+0x2d7/0x3a0 [ 1309.557070][ T31] schedule+0xe7/0x3a0 [ 1309.563880][ T31] schedule_preempt_disabled+0x13/0x30 [ 1309.573411][ T31] __mutex_lock+0x6c7/0xb90 [ 1309.584285][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1309.612938][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1309.634108][ T31] ? net_generic+0xea/0x2a0 [ 1309.654362][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1309.683866][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1309.704132][ T31] nfsd_umount+0x48/0xe0 [ 1309.708701][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1309.720922][ T31] deactivate_super+0xde/0x100 [ 1309.732283][ T31] cleanup_mnt+0x225/0x450 [ 1309.753018][ T31] task_work_run+0x14d/0x240 [ 1309.769607][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1309.784243][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1309.805677][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1309.820834][ T31] do_syscall_64+0x3f6/0x490 [ 1309.837164][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1309.860950][ T31] RIP: 0033:0x7fc0eed8fc57 [ 1309.872345][ T31] RSP: 002b:00007ffd9a40b7f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1309.903901][ T31] RAX: 0000000000000000 RBX: 00007fc0eee10925 RCX: 00007fc0eed8fc57 [ 1309.929846][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9a40b8b0 [ 1309.957584][ T31] RBP: 00007ffd9a40b8b0 R08: 0000000000000000 R09: 0000000000000000 [ 1309.989558][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd9a40c940 [ 1310.027026][ T31] R13: 00007fc0eee10925 R14: 0000000000119fa2 R15: 00007ffd9a40c980 [ 1310.059856][ T31] [ 1310.085516][ T31] INFO: task syz-executor:22219 blocked for more than 144 seconds. [ 1310.130738][ T31] Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 [ 1310.162424][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1310.191117][ T31] task:syz-executor state:D stack:21944 pid:22219 tgid:22219 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1310.223015][ T31] Call Trace: [ 1310.231288][ T31] [ 1310.239249][ T31] __schedule+0x116a/0x5de0 [ 1310.254491][ T31] ? __lock_acquire+0x622/0x1c90 [ 1310.267410][ T31] ? __pfx___schedule+0x10/0x10 [ 1310.279495][ T31] ? find_held_lock+0x2b/0x80 [ 1310.290178][ T31] ? schedule+0x2d7/0x3a0 [ 1310.309140][ T31] schedule+0xe7/0x3a0 [ 1310.323405][ T31] schedule_preempt_disabled+0x13/0x30 [ 1310.354009][ T31] __mutex_lock+0x6c7/0xb90 [ 1310.369546][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1310.400695][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1310.423094][ T31] ? net_generic+0xea/0x2a0 [ 1310.458197][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1310.464210][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1310.479186][ T31] nfsd_umount+0x48/0xe0 [ 1310.488912][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1310.505462][ T31] deactivate_super+0xde/0x100 [ 1310.521701][ T31] cleanup_mnt+0x225/0x450 [ 1310.532160][ T31] task_work_run+0x14d/0x240 [ 1310.545326][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1310.563033][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1310.578748][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1310.598757][ T31] do_syscall_64+0x3f6/0x490 [ 1310.618050][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.643028][ T31] RIP: 0033:0x7ff43bd8fc57 [ 1310.660765][ T31] RSP: 002b:00007ffdaf6c0bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1310.681512][ T5149] Bluetooth: hci7: unexpected subevent 0x01 length: 122 > 18 [ 1310.739752][ T31] RAX: 0000000000000000 RBX: 00007ff43be10925 RCX: 00007ff43bd8fc57 [ 1310.811342][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdaf6c0c90 [ 1310.822463][ T31] RBP: 00007ffdaf6c0c90 R08: 0000000000000000 R09: 0000000000000000 [ 1310.833802][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdaf6c1d20 [ 1310.844967][ T31] R13: 00007ff43be10925 R14: 000000000011919e R15: 00007ffdaf6c1d60 [ 1310.857020][ T31] [ 1310.861550][ T31] [ 1310.861550][ T31] Showing all locks held in the system: [ 1310.943656][ T31] 1 lock held by khungtaskd/31: [ 1310.969091][ T31] #0: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1311.030525][ T31] 1 lock held by udevd/5199: [ 1311.054008][ T31] 2 locks held by syz-executor/17620: [ 1311.077558][ T31] #0: ffff888033e140e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1311.143443][ T31] #1: ffffffff8e9ddc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1311.185521][ T31] 2 locks held by syz-executor/17933: [ 1311.190951][ T31] #0: ffff888033fde0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1311.278937][ T31] #1: ffffffff8e9ddc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1311.320799][ T31] 2 locks held by syz.1.3258/21957: [ 1311.353045][ T31] #0: ffffffff903f24f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1311.376943][ T31] #1: ffffffff8e9ddc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xdd/0x1a40 [ 1311.413018][ T31] 2 locks held by syz-executor/22219: [ 1311.433302][ T31] #0: ffff88804cdee0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1311.480708][ T31] #1: ffffffff8e9ddc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1311.525081][ T31] 2 locks held by syz-executor/24176: [ 1311.530513][ T31] #0: ffff88807cd280e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1311.591437][ T31] #1: ffffffff8e9ddc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1311.605070][ T31] 2 locks held by getty/25898: [ 1311.610551][ T31] #0: ffff8880329010a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1311.636447][ T31] #1: ffffc900043092f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1311.655079][ T31] 2 locks held by syz.6.4123/25963: [ 1311.660322][ T31] #0: ffff88807b302008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1311.685133][ T31] #1: ffffffff8e5cfdb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1311.715070][ T31] 2 locks held by syz.7.4125/25968: [ 1311.720324][ T31] #0: ffff88807b202008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1311.755071][ T31] #1: ffffffff8e5cfdb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1311.775156][ T31] [ 1311.777787][ T31] ============================================= [ 1311.777787][ T31] [ 1311.796399][ T31] NMI backtrace for cpu 1 [ 1311.796420][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1311.796451][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1311.796464][ T31] Call Trace: [ 1311.796472][ T31] [ 1311.796482][ T31] dump_stack_lvl+0x116/0x1f0 [ 1311.796523][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1311.796550][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1311.796584][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1311.796616][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1311.796647][ T31] watchdog+0xf70/0x12c0 [ 1311.796688][ T31] ? __pfx_watchdog+0x10/0x10 [ 1311.796719][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1311.796756][ T31] ? __kthread_parkme+0x19e/0x250 [ 1311.796786][ T31] ? __pfx_watchdog+0x10/0x10 [ 1311.796818][ T31] kthread+0x3c5/0x780 [ 1311.796851][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.796885][ T31] ? rcu_is_watching+0x12/0xc0 [ 1311.796917][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.796950][ T31] ret_from_fork+0x5d4/0x6f0 [ 1311.796980][ T31] ? __pfx_kthread+0x10/0x10 [ 1311.797012][ T31] ret_from_fork_asm+0x1a/0x30 [ 1311.797054][ T31] [ 1311.797063][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1311.925891][ C0] NMI backtrace for cpu 0 [ 1311.925912][ C0] CPU: 0 UID: 0 PID: 25817 Comm: kworker/u8:15 Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1311.925946][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1311.925963][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1311.926002][ C0] RIP: 0010:unwind_next_frame+0x1f6/0x20a0 [ 1311.926045][ C0] Code: 89 c3 39 d0 0f 83 fb 15 00 00 48 ba 00 00 00 00 00 fc ff df 89 c1 48 8d 3c 8d 20 67 f8 91 49 89 f8 49 c1 e8 03 45 0f b6 04 10 <48> 89 fa 83 e2 07 83 c2 03 44 38 c2 7c 2f 45 84 c0 74 2a 48 89 4c [ 1311.926070][ C0] RSP: 0018:ffffc90000007598 EFLAGS: 00000a06 [ 1311.926089][ C0] RAX: 000000000009fe92 RBX: 0000000000000002 RCX: 000000000009fe92 [ 1311.926106][ C0] RDX: dffffc0000000000 RSI: 00000000000a80cc RDI: ffffffff92206168 [ 1311.926125][ C0] RBP: ffffc90000007650 R08: 0000000000000000 R09: 0000000000000000 [ 1311.926147][ C0] R10: 0000000000000000 R11: 000000000009fe92 R12: ffffc90000007658 [ 1311.926164][ C0] R13: ffffc90000007608 R14: ffffc9000000763d R15: ffffffff8afe9271 [ 1311.926183][ C0] FS: 0000000000000000(0000) GS:ffff88812475f000(0000) knlGS:0000000000000000 [ 1311.926207][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1311.926225][ C0] CR2: 0000001b2e4bdff8 CR3: 000000007e540000 CR4: 00000000003526f0 [ 1311.926243][ C0] Call Trace: [ 1311.926251][ C0] [ 1311.926261][ C0] ? __iterate_interfaces+0x2e2/0x650 [ 1311.926289][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1311.926321][ C0] arch_stack_walk+0x94/0x100 [ 1311.926365][ C0] ? __iterate_interfaces+0x2e2/0x650 [ 1311.926394][ C0] stack_trace_save+0x8e/0xc0 [ 1311.926422][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1311.926451][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1311.926479][ C0] ? stack_depot_save_flags+0x28/0xa40 [ 1311.926519][ C0] ? stack_trace_save+0x8e/0xc0 [ 1311.926546][ C0] kasan_save_stack+0x33/0x60 [ 1311.926584][ C0] ? kasan_save_stack+0x33/0x60 [ 1311.926619][ C0] ? kasan_save_track+0x14/0x30 [ 1311.926656][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1311.926695][ C0] ? kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1311.926735][ C0] ? __alloc_skb+0x2b2/0x380 [ 1311.926771][ C0] ? skb_copy+0x1c9/0x3a0 [ 1311.926805][ C0] ? mac80211_hwsim_tx_frame_no_nl.isra.0+0xb6e/0x13c0 [ 1311.926846][ C0] ? mac80211_hwsim_tx_frame+0x1f1/0x2a0 [ 1311.926882][ C0] ? mac80211_hwsim_beacon_tx+0x592/0xa40 [ 1311.926919][ C0] ? __iterate_interfaces+0x2e2/0x650 [ 1311.926966][ C0] kasan_save_track+0x14/0x30 [ 1311.927004][ C0] __kasan_slab_alloc+0x89/0x90 [ 1311.927046][ C0] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 1311.927086][ C0] ? __alloc_skb+0x2b2/0x380 [ 1311.927124][ C0] __alloc_skb+0x2b2/0x380 [ 1311.927166][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 1311.927205][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1311.927248][ C0] skb_copy+0x1c9/0x3a0 [ 1311.927286][ C0] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb6e/0x13c0 [ 1311.927330][ C0] ? lock_acquire+0x179/0x350 [ 1311.927363][ C0] ? __pfx_mac80211_hwsim_tx_frame_no_nl.isra.0+0x10/0x10 [ 1311.927405][ C0] ? mark_held_locks+0x49/0x80 [ 1311.927439][ C0] ? read_tsc+0x9/0x20 [ 1311.927465][ C0] ? mac80211_hwsim_monitor_rx+0x1cd/0x880 [ 1311.927499][ C0] mac80211_hwsim_tx_frame+0x1f1/0x2a0 [ 1311.927539][ C0] mac80211_hwsim_beacon_tx+0x592/0xa40 [ 1311.927583][ C0] __iterate_interfaces+0x2e2/0x650 [ 1311.927606][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1311.927647][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1311.927685][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1311.927713][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 1311.927744][ C0] mac80211_hwsim_beacon+0x105/0x200 [ 1311.927775][ C0] __hrtimer_run_queues+0x202/0xad0 [ 1311.927820][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1311.927861][ C0] ? read_tsc+0x9/0x20 [ 1311.927891][ C0] hrtimer_run_softirq+0x17d/0x350 [ 1311.927934][ C0] handle_softirqs+0x219/0x8e0 [ 1311.927964][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1311.927995][ C0] __irq_exit_rcu+0x109/0x170 [ 1311.928022][ C0] irq_exit_rcu+0x9/0x30 [ 1311.928047][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1311.928084][ C0] [ 1311.928093][ C0] [ 1311.928102][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1311.928132][ C0] RIP: 0010:crng_make_state+0x2b5/0x6d0 [ 1311.928164][ C0] Code: fc 4d 85 ed 0f 85 cf 01 00 00 e8 66 14 5f fc 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c4 0f 5f fc 48 85 db 0f 85 59 02 00 00 <48> 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f e9 38 14 5f fc e8 33 14 [ 1311.928190][ C0] RSP: 0018:ffffc9000d41fa10 EFLAGS: 00000293 [ 1311.928209][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff855c7aa0 [ 1311.928226][ C0] RDX: ffff8880232fbc00 RSI: ffffffff855c7aae RDI: 0000000000000007 [ 1311.928243][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 1311.928260][ C0] R10: 0000000000000000 R11: 2c1a408fce5d0bdb R12: ffff8880b8436730 [ 1311.928277][ C0] R13: 0000000000000200 R14: 0000000000000006 R15: 0000000000000085 [ 1311.928298][ C0] ? crng_make_state+0x480/0x6d0 [ 1311.928324][ C0] ? crng_make_state+0x48e/0x6d0 [ 1311.928356][ C0] _get_random_bytes+0x120/0x1e0 [ 1311.928382][ C0] ? __pfx__get_random_bytes+0x10/0x10 [ 1311.928414][ C0] ? __alloc_skb+0x200/0x380 [ 1311.928455][ C0] ? kfree_skbmem+0x1a4/0x1f0 [ 1311.928486][ C0] nsim_dev_trap_report_work+0x3ad/0xcf0 [ 1311.928529][ C0] process_one_work+0x9cf/0x1b70 [ 1311.928572][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 1311.928607][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1311.928651][ C0] ? assign_work+0x1a0/0x250 [ 1311.928689][ C0] worker_thread+0x6c8/0xf10 [ 1311.928736][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1311.928774][ C0] kthread+0x3c5/0x780 [ 1311.928809][ C0] ? __pfx_kthread+0x10/0x10 [ 1311.928846][ C0] ? rcu_is_watching+0x12/0xc0 [ 1311.928872][ C0] ? __pfx_kthread+0x10/0x10 [ 1311.928908][ C0] ret_from_fork+0x5d4/0x6f0 [ 1311.928942][ C0] ? __pfx_kthread+0x10/0x10 [ 1311.928977][ C0] ret_from_fork_asm+0x1a/0x30 [ 1311.929012][ C0] [ 1312.903004][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1312.909920][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00013-g66701750d556 #0 PREEMPT(full) [ 1312.921750][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1312.931827][ T31] Call Trace: [ 1312.935119][ T31] [ 1312.938067][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1312.942697][ T31] panic+0x71c/0x800 [ 1312.946624][ T31] ? __pfx_panic+0x10/0x10 [ 1312.951075][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1312.956481][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1312.962486][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1312.967888][ T31] ? watchdog+0xdda/0x12c0 [ 1312.972336][ T31] ? watchdog+0xdcd/0x12c0 [ 1312.976781][ T31] watchdog+0xdeb/0x12c0 [ 1312.981075][ T31] ? __pfx_watchdog+0x10/0x10 [ 1312.985794][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1312.991025][ T31] ? __kthread_parkme+0x19e/0x250 [ 1312.996080][ T31] ? __pfx_watchdog+0x10/0x10 [ 1313.000785][ T31] kthread+0x3c5/0x780 [ 1313.004885][ T31] ? __pfx_kthread+0x10/0x10 [ 1313.009505][ T31] ? rcu_is_watching+0x12/0xc0 [ 1313.014298][ T31] ? __pfx_kthread+0x10/0x10 [ 1313.018919][ T31] ret_from_fork+0x5d4/0x6f0 [ 1313.023535][ T31] ? __pfx_kthread+0x10/0x10 [ 1313.028152][ T31] ret_from_fork_asm+0x1a/0x30 [ 1313.033218][ T31] [ 1313.036477][ T31] Kernel Offset: disabled [ 1313.040795][ T31] Rebooting in 86400 seconds..