last executing test programs: 2m35.31757985s ago: executing program 0 (id=3457): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r5 = socket(0x15, 0x5, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r6, 0x5, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80080) r7 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r7, &(0x7f0000000100)="632d7efe595046ab5c98199adf260600de16baef6176e6021e1dcedc5b00e8fdd880fee6fb9ca2ac324280530000000000000000e0ffffff10", 0x39) signalfd4$auto(0xffffffffffffffff, &(0x7f0000000080)={0x8000}, 0x9, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000200), r4) close_range$auto(0x2, 0x8, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) getsockopt$auto(r5, 0x114, 0x2720, 0xfffffffffffffffc, 0x0) 2m33.446966879s ago: executing program 0 (id=3464): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r1 = fcntl$auto_F_GETOWN(r0, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = socket(0x10, 0x2, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x26640, 0x155) (async) socket(0x2, 0x2, 0x0) (async) r3 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r4 = open(0x0, 0x22240, 0x155) fgetxattr$auto(r4, 0x0, 0x0, 0xffffffff) (async) socket(0x2, 0x1, 0x106) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) socket(0x2, 0x1, 0x106) (async) listen$auto(0x3, 0x81) (async) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) (async) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20532744969ade88d855f193c95f28bc3c513ebf3eff4351f87b0faf7023fa053bf89a895e877a3367e65b5cfcc0de71483bafc5342b48eb81ab4569a594b13f90a2f7deac835d8bc97b323ddad056f6ec482fe966c405fddcd80001ecb82c4a"], 0x1ac}}, 0x20000890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2102, 0x0) (async) futex$auto(&(0x7f0000000140)=0x5e8, 0x1, 0x3, &(0x7f00000001c0)={0x2, 0x7}, &(0x7f0000000280)=0xc7, 0x2ed4) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) (async) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x4, 0x2, r1, 0x9, 0x5) (async) socket(0x29, 0x80000, 0x0) (async) mmap$auto(0x0, 0xe983, 0x80000000df, 0xeb1, 0x401, 0x8000) (async) sendmmsg$auto(0x3, &(0x7f0000000040)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x10000000008}, 0x106, 0x0, 0x4, 0x3}, 0xed7138c}, 0x9ae, 0x0) 2m33.057354188s ago: executing program 0 (id=3466): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000006980)=ANY=[@ANYBLOB="36c29976", @ANYRES16=r3, @ANYBLOB="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"], 0x124c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x8000000003, 0xeb4, 0xffffffffffffffff, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0xfffffffffffffffc, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) write$auto(r4, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0x2c, 0x5, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) modify_ldt$auto(0x40, 0x0, 0x7ff) r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen_full\x00', 0x4c2002, 0x0) pread64$auto(r5, 0x0, 0x7ff, 0x400) socket(0x9, 0x6, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D3\x00', 0x1, 0x0) 2m31.537176856s ago: executing program 0 (id=3469): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x0, 0x0, 0x50, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r4, @ANYBLOB="0900bd16ad6c99df25020000000600010001800000"], 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x808) socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x11b, 0x2, 0x0, 0x0) readv$auto(r3, &(0x7f0000000a80)={0x0, 0xffff}, 0x800000000001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4c800) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r0) socket(0x10, 0x2, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0) pread64$auto(r6, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0xa, 0x3, 0x2008, 0x0, 0x3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 2m29.619768242s ago: executing program 0 (id=3475): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x35, 0x2, 0x80000036) setsockopt$auto(r0, 0x29, 0x3e, 0x0, 0x1ff) prctl$auto(0x1000000003b, 0x3, 0x0, 0xd, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) read$auto(r0, 0x0, 0x3) socket(0xa, 0x2, 0x0) mmap$auto(0x7e, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8002) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xc) socket(0x2, 0x1, 0x106) socket(0x15, 0x3, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) write$auto(0x3, 0x0, 0x7fffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0xd) ftruncate$auto(0x0, 0x8800000) socket(0x2, 0x2, 0x88) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) listen$auto(0x3, 0x400000) mmap$auto(0x0, 0xa, 0xdf, 0x9b72, 0x2, 0x5) prctl$auto(0x7b, 0x1, 0x4, 0xfffffffffffffe01, 0x7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) 2m28.41648071s ago: executing program 0 (id=3478): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x7, 0xffffffffffffffff, @relative_fd, 0x100000000}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21022cbc7000ebdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x2020009, 0x80, 0xeb1, 0x401, 0x807) write$auto(0x3, 0x0, 0xffd8) 2m13.367594982s ago: executing program 32 (id=3478): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x105100, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x0, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x4, 0x7, 0xffffffffffffffff, @relative_fd, 0x100000000}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21022cbc7000ebdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x2020009, 0x80, 0xeb1, 0x401, 0x807) write$auto(0x3, 0x0, 0xffd8) 6.94987307s ago: executing program 1 (id=4011): mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) (async) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) select$auto(0xa404, &(0x7f0000000080)={[0xfe, 0x274, 0x5, 0xd, 0x8, 0x76, 0x100, 0x0, 0xfffffffffffffffa, 0x1, 0x31c, 0x1, 0xa, 0x502, 0x4, 0x101]}, &(0x7f0000000100)={[0x7f, 0xec, 0x8b, 0x40, 0x1, 0x401, 0x5, 0x2, 0x2, 0x7fffffff, 0x3, 0x400000000, 0x3a802154, 0xe4, 0x8]}, &(0x7f0000000180)={[0xfffffffffffffe01, 0x1, 0x7, 0x4, 0x9, 0x400, 0xda100000000, 0x3, 0x7, 0x127e, 0xffffffffffffffff, 0x8, 0x2, 0x3, 0xb54, 0xfffffffffffffff9]}, &(0x7f0000000000)={0xffffffffffffe388, 0x401}) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) (async) socket(0x10, 0x2, 0x4) socket(0x1d, 0x2, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_create$auto(0x6) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/kexec_crash_size\x00', 0x102, 0x0) pread64$auto(r0, 0x0, 0x3ff, 0x9) ioctl$auto_FITHAW(0xffffffffffffffff, 0xc0045878, 0xffffffffffff8001) connect$auto(0x3, 0x0, 0x18) 6.323746332s ago: executing program 4 (id=4015): statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0xfff, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r0}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x3d, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xd, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x7ff, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC=r3], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020005, 0x2, 0x110, r0, 0x7fff) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8901, 0xffffffffffffffff) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) 5.952456334s ago: executing program 4 (id=4018): bind$auto(0xffffffffffffffff, 0x0, 0x66) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, 0x0, 0xa00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(0x0, 0x591002, 0x0) vmsplice$auto(0xffffffffffffffff, 0x0, 0x2, 0x5) writev$auto(0xffffffffffffffff, 0x0, 0x4) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop1\x00', 0x80400, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) mprotect$auto(0x8000, 0x8, 0x8) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) close_range$auto(r2, r0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) acct$auto(0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0}, 0x4000) vmsplice$auto(0x1, &(0x7f0000000000)={0x0, 0x5}, 0x6, 0x8) 5.325373091s ago: executing program 1 (id=4019): r0 = socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x3, 0x10e, 0x8, 0xfffffffffffffffc, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/msr/parameters/allow_writes\x00', 0x80302, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x15, 0x5, 0x0) socket(0xa, 0x4, 0x3ff) socketpair$auto(0xaf, 0x8, 0x3, 0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) sendfile$auto(r2, r2, 0x0, 0x7ffff000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r3, 0x64c6, 0x1e2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00f50000893e8222b6fd435937a093c74762b998199f2c45653cdc2a3ad20c1a966366ea4e86aa27f889a8b6a26af9be0daa59dc00b684bdadf2b4835fbaa33d1134703210ea7953efb382b860cf5b1db599e8e8a99895b005f796948efa639cf29fcd30dc6df610e10ddcfdbe20ecf57c0600000000000000cc70ef759a353dbab763b78afa4df8b41cd71d70361ec1eaebf7f2bf6fdac170db0c775bf0176b1ff19c43bb8bdffc1248ac5c2fa4386c6f34dcb52ade", @ANYRES16=0x0, @ANYBLOB="200029bd7000fedbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x40000) recvfrom$auto(0x3, 0x0, 0x6, 0x1000fb, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) clock_adjtime$auto(0xfffffffffffffffb, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0x7ffffffeb000) 5.304096623s ago: executing program 3 (id=4021): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)="3100001000000000002ca65de95b667827494d", 0x5e) (async) mmap$auto(0x0, 0x7, 0x4000000000e0, 0xeb1, 0x401, 0x400) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20681, 0x0) (async) rseq$auto(&(0x7f0000000400)={0xe, 0x6, 0x0, 0x9, 0xfffffffe, 0x2, "4125a04a5a947c57594bdcf48be8f6f8203586427262672331fe7a514e555423210c136544a046d30a2cf16bf4c899e9033fc264674bb55a7a268449affb6db8e6517ee451dc24c7fb7fa98cf5288dc4247f5668b3a994108fc46f8ac24670df2b882ba648d71ee94e8d9f196246026261de899b94f6cf529dcebb"}, 0x8001, 0x0, 0x6) (async) migrate_pages$auto(0x0, 0x2, 0x0, &(0x7f00000000c0)=0x3) mmap$auto(0x0, 0x22020007, 0x9, 0xeb1, r1, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80200, 0x0) unshare$auto(0x40100080) (async) mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb1, 0x401, 0x300000000000) (async) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) (async) r3 = syz_clone(0x80f400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0x100040eb1, r2, 0x300000000002) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) shutdown$auto(0x200000003, 0x2) (async) setsockopt$auto_SO_MAX_PACING_RATE(0xffffffffffffffff, 0x3, 0x2f, &(0x7f0000000300)='\xba\xf13\xa4o\xd3\xd2\xe0v\x95\xe6mAk\x90\xa1\xfd\xb0\xe1\xa6W\x85py\x91Q\xe7\xc9\x05\xce\x17\xe6<0e\x12\xe8/\x16\xf0\xd2\xe5\x06[\vFb\xd6\xc0sTv*\xa6\x97\xb4\xcf\xc8d^\xb1\x7f\xeeH\xd2\xa8\xeb\xad\xdfw\xad\x1e\xcf\x13\xd2\xbbh\xb7\xb1\xa2\x14\xbe=Q\xf3\xd6\x85\x8as\x04\x93\x8c3\n\x9e\xcc\xbdP\x89\xee\xa8\x82\x03\x97\xe6^\x85#\x11T\x8dE\xba\nF\xc2\xe2\x06k\xf0~\xa3\x86h\xc2\xb8\xcfk\x1f', 0x4) (async) r4 = pidfd_open$auto(0x0, 0x0) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy12/netdev:wlan0/stations/08:02:11:00:00:01/flags\x00', 0x40000, 0x0) (async) setns(r4, 0x20000000) (async) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x2a4c0, 0x40) (async) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x10', 0x0) (async) ptrace$auto(0x4206, r3, 0x0, 0x5) move_pages$auto(0x1, 0x233, 0x0, 0x0, 0x0, 0x8000000000000000) sched_setaffinity$auto(0x0, 0xb00, &(0x7f00000003c0)) symlink$auto(0x0, 0x0) 4.952600634s ago: executing program 3 (id=4022): socket(0xa, 0x801, 0x84) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x6000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) 4.309399176s ago: executing program 2 (id=4023): io_uring_setup$auto(0x59, &(0x7f0000000080)={0xfffffffe, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x7, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0xfc, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x9, 0x100000000}}) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x60100, 0x0) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000d40)=""/16, 0x10) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video42\x00', 0x169000, 0x0) ioctl$auto(r1, 0xc0845658, r1) socket(0xa, 0x2, 0x0) getpeername$auto(0x3, 0x0, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x7fffffffffffffff, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r3 = socket(0xa, 0x5, 0x0) setsockopt$auto(r3, 0x0, 0x24, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc0c1}, 0x4000040) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r4, 0xffff, 0x29}, 0x3, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) pkey_free$auto(0x1) keyctl$auto(0xfffffffd, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) 4.229571476s ago: executing program 1 (id=4024): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyx7\x00', 0x2200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyS2\x00', 0x4404c2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/48, 0x30) (async, rerun: 64) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r1) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) r2 = set_tid_address$auto(0x0) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0x3f1) (async) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r1, 0x0, 0x20000000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) (async) select$auto(0x80000001, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd3e, 0x1, 0x948b, 0xaef, 0x2, 0xffffffffffffffff, 0x3, 0x6, 0x80000001, 0x7, 0x10006d3f, 0x9, 0x9, 0xffffffffffffeffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) (async) ioctl$auto(r1, 0x57, r0) (async) getgid() mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r4 = getpid() openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) (async, rerun: 64) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) openat$auto(r1, &(0x7f00000000c0)='./file0\x00', 0x0, 0xff) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000001c0), 0x50000, 0x0) socket(0xa, 0x801, 0x84) 4.169048541s ago: executing program 3 (id=4025): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) prlimit64$auto(0x0, 0x3, 0x0, 0x0) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) flistxattr$auto(r2, &(0x7f0000000000)='\x00', 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto_PPPIOCSMAXCID(r0, 0x40047451, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.171986515s ago: executing program 3 (id=4026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x805, 0x0) bpf$auto(0xfffffffc, &(0x7f0000000100)=@bpf_attr_4={0x80, 0xffffffffffffffff, 0x40, r1}, 0x6f4) close_range$auto(r0, r1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x7ffd) msgsnd$auto(0x5, 0x0, 0x3, 0x8) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x8000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x17a, 0xfffffe01, 0x35}]}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) 3.166791236s ago: executing program 4 (id=4027): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x20) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x801, 0x106) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) (fail_nth: 7) 3.05054098s ago: executing program 2 (id=4028): mmap$auto(0x100000, 0x5, 0xfffffffffffffffa, 0x40eb2, 0x401, 0x300000000000) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) (async) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) (async) setresuid$auto(0x2, 0x7, 0x8080) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x37, 0x1, 0x0, 0x7f, 0x100000000) (async) write$auto(r0, 0x0, 0x100000a3d9) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) (async) semctl$auto(0x8, 0x806, 0x13, 0x46) (async) getsockopt$auto(0xffffffffffffffff, 0xff, 0x90, &(0x7f0000000100)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000140)=0x3) (async) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0xb, 0x5, 0x8000001f, 0x40107, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0xa, 0x10000004) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x28, 0x801, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) (async) shutdown$auto(0x200000003, 0x2) (async) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) (async) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) mmap$auto(0x0, 0x2000b, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r5 = socket(0x2b, 0x1, 0x1) ioctl$auto(r5, 0x8941, 0x4) (async) connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r4}, 0x18) 3.047943409s ago: executing program 3 (id=4029): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) write$auto(0x3, 0x0, 0x100082) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket(0x23, 0x80805, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000880)=0x0) getsockname$auto(r1, &(0x7f00000008c0)=@nfc={0x27, r2, 0x0, 0x3}, &(0x7f0000000900)=0x7) r3 = socketpair$auto(0xfffffffd, 0x5, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) set_mempolicy$auto(0x5, &(0x7f0000000000)=0x9, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x705102, 0x0) read$auto(r1, 0x0, 0x24) write$auto(0x3, 0x0, 0x81) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000040), r3) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mlockall$auto(0x7) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 2.661323477s ago: executing program 1 (id=4030): capset$auto(0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0xa, 0x6, 0x5, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) (async) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c80"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv6/conf/hsr_slave_0/router_solicitation_interval\x00', 0x4a0202, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b67, 0x1) (async) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) (async) write$auto(0x3, 0x0, 0xfdef) unshare$auto(0x40000080) (async) write$auto(0xca, &(0x7f0000000400)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G8\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8f5\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\x92\xa5\xe4\xdd\xe9\xf2\x0e\xc8', 0x100) r2 = socket(0x11, 0x1, 0x87) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r2) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000180)="285ecf7e037b55e1ab7a4f76992f65c6415bf83a1dbdf2c6c5e006b2e5e027c00f96dad6274a64b2878a42144a92217419d1586fc6d20bdf574fae2b958d59a2518677c559eba44de9112cf6c1fa7f9f93f6fd92bc4e4c39199566e6357935fffc05c8b7523b36cd1db40563ab0d5ef018172ca9860267e22834fb3e01c71b86121c9b09f81877d895ba10c871673dc023c9a133074d031b377b9b1c638b2450d6e4") ioctl$auto(r3, 0x541c, r4) setsockopt$auto_SO_TIMESTAMPNS_OLD(0xffffffffffffffff, 0x8, 0x23, &(0x7f0000000140)='/dev/tty12\x00', 0x7) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) mprotect$auto(0x0, 0x806121, 0x6) 2.599939877s ago: executing program 2 (id=4031): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32, @ANYBLOB="060006000500000008002e"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000"], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.30765515s ago: executing program 4 (id=4032): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) r2 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x138) open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x401) msync$auto(0x2, 0x9, 0x40) select$auto(0x9, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/class/firmware/timeout\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000540)=""/150, 0x96) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) unshare$auto(0x40000080) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x5, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) 2.295374189s ago: executing program 2 (id=4033): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) (async) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0x1) (async) ioctl$auto_EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r3, 0x29, 0x4b, 0x0, 0x0) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) (async) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.063381372s ago: executing program 2 (id=4034): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) mmap$auto(0x6, 0x40000000000e983, 0xdf, 0xeb1, r0, 0x8000) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x40040, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/pcmC0D0p\x00', 0xa00, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) open(0x0, 0x161342, 0x100) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0xfffffffc, 0x0) socket(0x26, 0xa, 0x84) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000000), 0x55) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r5 = open(0x0, 0xeee00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_XFS_IOC_SWAPEXT(r5, 0xc0c0586d, &(0x7f0000000880)={0xa6, @raw=0x6, @raw=0xfff, 0xa18, 0x0, '\x00', {0xffffffff, 0x69, 0x3, 0xee00, 0xee01, 0x5, 0x9, 0x100000001, {0x6, 0xfffffffc}, {0x200}, {0x80, 0x80000000}, 0x9, 0x26, 0x40, 0x80000000, 0x7, 0x9, 0x400, 0xc, 0x7, 0xb284, '\x00', 0x2, 0x5, 0x4, 0x7}}) msgctl$auto_IPC_STAT(0xfffffffd, 0x2, &(0x7f00000009c0)={{0x91f5, 0x0, 0x0, 0x0, 0x100, 0xfffffff8, 0x1}, &(0x7f0000000940), &(0x7f0000000980)=0xd, 0x0, 0x1, 0x0, 0x8, 0x80, 0x0, 0x6, 0x8, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) sendmsg$auto_NBD_CMD_DISCONNECT(r4, &(0x7f0000001540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001500)={&(0x7f0000000a40)={0xa44, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x7690}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0xf9f}, @NBD_ATTR_BACKEND_IDENTIFIER={0x16, 0xa, '/dev/snd/pcmC0D0p\x00'}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_SOCKETS={0x548, 0x7, 0x0, 0x1, [@nested={0x63, 0x80, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @fd}, @generic="079a1031c32fb8a37311bd16911a4e4d545353b83eb6dc8df89aa0004098204d0cf8acb5a4cf64b15dfe08f29fdf097f6cfbacfa7751bead7b4d35dc646dbe904840fba18d1cf0", @nested={0x4, 0x15}, @nested={0x4, 0xec}, @nested={0x4, 0x2b}, @typed={0x4, 0x104}]}, @nested={0xbd, 0x82, 0x0, 0x1, [@generic="bd62bfa72cc33ba9ab939ba1433584ff39af8ef04c5d628d050a20d1a4725d101bc8cadc6be3963e26352ac54ee1bdd82c0d9cf16c1b22767e74af75b1ad1fb034a118b0ae49651f2334f5f9f63664e5a303e0e8cf8e0e14f8720ccd75c32157bc58e48c8a0c9118e3dbeefa494dc237cb17dc2658ad07d0457a90ab23eec44f9dc99d232da73b4f521249d649fd22cda223bd9953bfb9e2c653d246bbec463c63ea390c8acaba8dbe61a87a0cdc75b3e3", @typed={0x8, 0x5c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="a1a7b0159a81a610ed0eef23e5065fc2c4079fed7fcf1414d8b1d423403b7c5a503547e1abd07960b78e1e1f0158903e27c63683577128595a57b9eceb945bbdb88601f68e928dbfb85299dd15d004ff1ddfc6eab0e7ba155bc3713660cf80a6491d1c5e5fd5e317d39d0bb3aba20ab42151eca7c0e05eb392af7551605e359338c288ae26f49cf8451b3b5501fdf1588d63b18625935b629c7affb4445aabb3033fdc44634db7c04a39d37ee4742f4da9ec52", @typed={0x8, 0x4f, 0x0, 0x0, @fd=r3}, @nested={0xe9, 0x3e, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @pid}, @nested={0x4, 0x62}, @nested={0x4, 0xc7}, @generic="d4506e09cb74bff17c7917a65ba5c0e1e7209c45c0aa616f88e67e0295f23b01d660e3565b9f71de76ffac908cfad19936865e42e952e9d762414a65cb85a7b13a547e15819db61c6abd0aaa5a12f7cd0f986384cb537aece5aa726d4ed2ba61382986eb9affdae1207697e68581557c9514a7af3f0371e968673bf0d050d3494411ae478bfe5384c3993692cfc7ccaa1241b0c56289ca8ee22ba15d430e3792c1ee227c93926419fdcece78629c0dcf8dad7061", @generic="c259ec37872df9d1688c922cf801bc40a4acfa03eff0ef12e34fca2a809528bca1"]}, @nested={0x217, 0x3f, 0x0, 0x1, [@generic="da38d62f7e43696fae9f8d85ac3f73fb9e1c1f89d5db40797df97459d80ac1b7b767f4681e1220d060a5cacfc05a93dff2d50a55ce21dc43385948f6a018644d5a1d413bbb1bf4318f69eea30fad394ff44703acad6cc0bb491d41739dadc4203831c2f0aee9a106110f3895e91ea869c70cc7bfcbabff9f8df0f616167bc9cc4d43e006a611", @typed={0x8, 0xa2, 0x0, 0x0, @str='-[(\x00'}, @generic="12eef40f2d17ad91c86e91c4d1d26837c9833bbb198be1897012d3344cfe82dbcafe65f827b1e30b7072a82b4dbc8daf5d56d7a9cc3cd3390c8b030cac7405d8b0bae5b21b8a5b7b389ec179edc1f663dbd0714d3e1cc7fd508cf3760317fd530d93c24e2fea60e3939019fbc58b0240529cf350ae493cec934652b0df7d6cd177d29f512196428bc1230eb1fc2efb45af696f25ec3617bdd242386a899109739b9640f05f64853e46bf84d8d48bf9d7faddf41530121804281f27e7664f0fba58d74d", @nested={0x4, 0x65}, @generic="ff9fc89d9e76577f19040aa90f25e2dfb222658b8ce6c02a35b6c177ea51b2cb4675f8e11231c96c83221ea294b12f8faef5ea45816863006b595b359165677829de749cc167", @typed={0x77, 0x1f, 0x0, 0x0, @binary="e1239633892824450d3c664e2031a9f54919d11f5a5fda6af60b71830d6e322595e2d82d2662507ae84c8f75f514dc40c8810ab8fc5f9b09c2c39d15fdb05a2cf5ab973df7505e78c2b316be04e6439fb051a2f9e0f0d8825f26237e14c25ad1b9b53801203bf7ad4d459873723969a458a4cb"}]}, @generic="55a929ff349f5881083c01413e686af50cfaeb3a2245c88cca8f02a71fcfc4905eafc3cf0678205e84dfb1a68ad55f9ae2056b2e442db38eb3e8e28ee7f5a523e9da578daf1db2e86dfe1c214ed95f", @generic="fbed", @typed={0x8, 0x13c, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0xf, 0x0, 0x0, @uid}]}, @NBD_ATTR_SOCKETS={0x49a, 0x7, 0x0, 0x1, [@typed={0xa, 0xee, 0x0, 0x0, @str='&,]-#\x00'}, @typed={0x8, 0x123, 0x0, 0x0, @uid=r6}, @nested={0x264, 0x114, 0x0, 0x1, [@generic="852ff353668b5fdf6dc7089bffbd86678e6e5d50c8c54759c4b8da9c68f65345971feb24ab5a3a7e", @generic="b066", @nested={0x4, 0xbc}, @typed={0x8, 0xdc, 0x0, 0x0, @fd=r1}, @generic="4c7632a9cba4fbea0a9f6e18898450f87881f32f87cb5439824d65f7679245fd4b7be453a64ea04bdb21c6fb57ce7b50e21acc99dc4b023b33a8fb23558c350c53748e22e1f15a9aa1b0d1319936d15e3b122e877fbe1849b376aa4098e4f92404687cc0b37b1ae265a91ba06a086ac37bd681be7bbfd90720bc9c6124a14260e6efc241bc8fe1e3def80a5ea29360badd5717bc97f2aa4f18f9113dff1fffc0628e2d04da95b9fc2616e1962a163a4e11f2cf0d7716dd3808f1097a0ac121017609ef79fa519cbf87b527181a14133f506c08dc12660ac74ff34ff292565a", @typed={0x8, 0xe8, 0x0, 0x0, @ipv4=@broadcast}, @generic="a0679029341717adbdc1cbd393ec47ad6b165e4813943a893ae497a3db0fcdf181be2e5a3a2ba939de7fa2a769dbc83971899c516edeb24f4fabae733ca460564957", @generic="92e53e1b1473942d363c885a30139b7e70437966a63e335c1f16516e448afa1dabbf025b6cf4be0e1f75e9ad12f52f6bfe933c3e271b5d3640864b09246f72def51a396721987e27aef19955f16c0434ec63805c23416506d145f31e0258933dd351e00f86bce2951eca07bb21a922462dbe3e6b719c50133a490fb07323f6354ffc47f678a68a63648f14e299ec49a5b07159cc493fdb97a463a2cfafc5ee6ecb8efa11d7c4ea20e3697223d0a799dc61b37e3418e968d1fcef51630633818bf1814003d2cfa91ddc15c4ba7a32d8709908f09bdca8d6c578f5dc13e82186b84939620f69d8eb0a676eac5e49c6c95af8b110c84cddf36f2e", @typed={0x8, 0xd8, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x16}}]}, @typed={0x8, 0x30, 0x0, 0x0, @u32}, @generic="2bc8147afb8f13ff63c7a1ed569e1996caa1ca857e435f18ed6ba1427cfac0381689a41e82ef7c3dd1c7ed7815c17e41f55b2d1cef4ca3ffd3b4228b495037279628584796f23cde9868ac253a84976ef391e0b75518677c061aeaa928e15e7672b515b135350d5f4e782c34d7724f3261f012191192cd280aeb645867097fb7921569ab647cda05499291f0817e50af6cf31c35677e809e47ca3a8d3e8b86b0cc774656e988d1bd52df910a0e1744eea856e469f9c0572a26b68987a9ee4dd210e1a456b398e67a6be502611cd75408c1183781f2ff1da7bf196725d93065c00004173f6f", @nested={0x8, 0xec, 0x0, 0x1, [@nested={0x4, 0xcf}]}, @nested={0x26, 0x132, 0x0, 0x1, [@generic="9aca5f859fc6758e50291910191427759bb599d072e875bb596872e79f12cd8d8999"]}, @generic="68735dd46c49c41c3d14976a24d2e06dc50387405d138ce521fd6ecc5e506c0cc0a2d32d5960a69f5a217fee57fb89491babf1d0e7654e1a98dc21a1d66990ca90c000023ae3e3f519ed7f106c391cf39488329cece89b2e02", @nested={0x54, 0x2, 0x0, 0x1, [@generic="21261038defd1c5a9ddd6dc9be058a2ca8f688e84ac1bd790964cae9bf572133581bc12637e11d7c2e96b2da40ae168ea4f7f7580b35f1063095498378bb4f1e75f9c01a473a673e1b055e3125c966a0"]}, @nested={0x51, 0xe2, 0x0, 0x1, [@typed={0x8, 0xea, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x10}, @typed={0xc, 0x10, 0x0, 0x0, @u64=0x7fffffff}, @typed={0x8, 0x44, 0x0, 0x0, @uid=r7}, @generic="0adb4adf643823cbefc2efbce1345c32009581acad0a8247c3d5a60941bed3daff2e8b6eca8677e73413c1edda"]}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0xa44}, 0x1, 0x0, 0x0, 0xc091}, 0x4800) msgctl$auto(0x8000, 0x100006, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20008814}, 0x20004090) socket(0x21, 0x2, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x4836, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) readv$auto(0x3, &(0x7f0000003080)={0x0, 0x4}, 0x9) 2.059682979s ago: executing program 3 (id=4035): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x0, 0x0, 0x50, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0900bd16ad6c99df25020000000600010001800000"], 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x808) socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x11b, 0x2, 0x0, 0x0) readv$auto(r3, &(0x7f0000000a80)={0x0, 0xffff}, 0x800000000001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4c800) syz_genetlink_get_family_id$auto_nlctrl(0x0, r0) socket(0x10, 0x2, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0) pread64$auto(r6, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0xa, 0x3, 0x2008, 0x0, 0x3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) 1.601299206s ago: executing program 1 (id=4036): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = open(0x0, 0x22240, 0x55) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x55) statx$auto(r0, 0x0, 0x2001003, 0x4005, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x242e03, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x27, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4004020) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x3, 0x800000000003, 0x15f4da0a, 0x7, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x1e, 0x800, 0x0) getpid() rt_sigprocmask$auto(0x26, &(0x7f0000000040)={0x80000000}, &(0x7f0000000080)={0x9}, 0x8) mmap$auto(0x6, 0x48000a, 0x100002bb, 0x14, r1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_size_kb\x00', 0x105002, 0x0) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x4, 0x4, 0x0, &(0x7f0000000140)=0x97) 612.285549ms ago: executing program 1 (id=4037): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) mmap$auto(0x6, 0x2000b, 0xdd1, 0xfffffffffffffffe, r0, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x1000000004, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(r1, 0x545c, 0xffffffffffffffff) syz_clone3(&(0x7f0000000100)={0x42011400, 0x0, 0x0, 0x0, {0x8000037}, 0x0, 0x0, 0x0, 0x0}, 0x58) unshare$auto(0x40000080) 233.644953ms ago: executing program 4 (id=4038): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x85, 0x11, 0x0, 0x200) 115.712193ms ago: executing program 2 (id=4039): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x3, 0x7, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x1ff) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x80106f53, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x43, 0x100000000, 0x4, 0x8, 0x3d34) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 0s ago: executing program 4 (id=4040): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x20) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x801, 0x106) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) (fail_nth: 8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 90.398050][ T5818] cgroup: Unknown subsys name 'net' [ 90.533542][ T5818] cgroup: Unknown subsys name 'cpuset' [ 90.543305][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.481308][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.715161][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.724587][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.732679][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.740663][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.751425][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.766115][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.779946][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.788405][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.796667][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.826098][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.909313][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.917590][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.926074][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.936678][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.944529][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.964633][ T5151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.972642][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.980541][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.988722][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.997321][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.481178][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 95.567889][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 95.580516][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 95.775206][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.783316][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.790844][ T5832] bridge_slave_0: entered allmulticast mode [ 95.798168][ T5832] bridge_slave_0: entered promiscuous mode [ 95.806653][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 95.837688][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.845124][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.852360][ T5832] bridge_slave_1: entered allmulticast mode [ 95.860197][ T5832] bridge_slave_1: entered promiscuous mode [ 95.934220][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.941991][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.949775][ T5838] bridge_slave_0: entered allmulticast mode [ 95.957133][ T5838] bridge_slave_0: entered promiscuous mode [ 96.008339][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.015670][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.022952][ T5838] bridge_slave_1: entered allmulticast mode [ 96.030387][ T5838] bridge_slave_1: entered promiscuous mode [ 96.037106][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.048060][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.055683][ T5828] bridge_slave_0: entered allmulticast mode [ 96.065450][ T5828] bridge_slave_0: entered promiscuous mode [ 96.076581][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.106676][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.114085][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.121722][ T5828] bridge_slave_1: entered allmulticast mode [ 96.129407][ T5828] bridge_slave_1: entered promiscuous mode [ 96.141605][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.213562][ T5832] team0: Port device team_slave_0 added [ 96.228447][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.255803][ T5832] team0: Port device team_slave_1 added [ 96.291613][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.318733][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.353223][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.361552][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.368725][ T5839] bridge_slave_0: entered allmulticast mode [ 96.376593][ T5839] bridge_slave_0: entered promiscuous mode [ 96.405542][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.418503][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.425596][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.451817][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.463780][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.473191][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.480813][ T5839] bridge_slave_1: entered allmulticast mode [ 96.488149][ T5839] bridge_slave_1: entered promiscuous mode [ 96.497733][ T5838] team0: Port device team_slave_0 added [ 96.507350][ T5838] team0: Port device team_slave_1 added [ 96.528016][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.535234][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.562117][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.640931][ T5828] team0: Port device team_slave_0 added [ 96.662425][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.671291][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.697559][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.710675][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.717749][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.744020][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.759828][ T5828] team0: Port device team_slave_1 added [ 96.768343][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.781397][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.873542][ T5151] Bluetooth: hci0: command tx timeout [ 96.879485][ T5836] Bluetooth: hci1: command tx timeout [ 96.904754][ T5839] team0: Port device team_slave_0 added [ 96.914223][ T5839] team0: Port device team_slave_1 added [ 96.939807][ T5838] hsr_slave_0: entered promiscuous mode [ 96.946225][ T5838] hsr_slave_1: entered promiscuous mode [ 96.954389][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.962429][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.988684][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.019772][ T5832] hsr_slave_0: entered promiscuous mode [ 97.026074][ T5832] hsr_slave_1: entered promiscuous mode [ 97.031863][ T5151] Bluetooth: hci3: command tx timeout [ 97.033253][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.037650][ T5151] Bluetooth: hci2: command tx timeout [ 97.050088][ T5832] Cannot create hsr debugfs directory [ 97.060512][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.067507][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.093968][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.187036][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.194591][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.221089][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.234470][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.241500][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.267648][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.387001][ T5828] hsr_slave_0: entered promiscuous mode [ 97.393537][ T5828] hsr_slave_1: entered promiscuous mode [ 97.400417][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.408010][ T5828] Cannot create hsr debugfs directory [ 97.473095][ T5839] hsr_slave_0: entered promiscuous mode [ 97.480785][ T5839] hsr_slave_1: entered promiscuous mode [ 97.487045][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.495103][ T5839] Cannot create hsr debugfs directory [ 97.822329][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.836483][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.869016][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.907783][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.984652][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.003861][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.030242][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.055222][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.131824][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.148378][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.181162][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.193480][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.284080][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.324688][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.364475][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.372245][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.405334][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.431882][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.456795][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.493333][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.500799][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.514668][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.521855][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.544732][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.593427][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.600637][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.633336][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.640536][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.744070][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.804146][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.875842][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.883055][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.914181][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.937869][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.945129][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.949499][ T5836] Bluetooth: hci1: command tx timeout [ 98.957921][ T5151] Bluetooth: hci0: command tx timeout [ 99.071449][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.115766][ T3434] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.118926][ T5151] Bluetooth: hci2: command tx timeout [ 99.122975][ T3434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.128239][ T5151] Bluetooth: hci3: command tx timeout [ 99.181313][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.188465][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.433976][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.516817][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.642050][ T5838] veth0_vlan: entered promiscuous mode [ 99.697112][ T5838] veth1_vlan: entered promiscuous mode [ 99.765133][ T5832] veth0_vlan: entered promiscuous mode [ 99.783716][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.804388][ T5832] veth1_vlan: entered promiscuous mode [ 99.892191][ T5838] veth0_macvtap: entered promiscuous mode [ 99.904277][ T5838] veth1_macvtap: entered promiscuous mode [ 99.961388][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.969470][ T5839] veth0_vlan: entered promiscuous mode [ 99.983331][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.003047][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.015251][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.025585][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.035497][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.044343][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.066369][ T5832] veth0_macvtap: entered promiscuous mode [ 100.078374][ T5832] veth1_macvtap: entered promiscuous mode [ 100.088229][ T5839] veth1_vlan: entered promiscuous mode [ 100.154109][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.226725][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.255071][ T5839] veth0_macvtap: entered promiscuous mode [ 100.264758][ T5828] veth0_vlan: entered promiscuous mode [ 100.293428][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.304927][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.314320][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.325457][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.336881][ T5839] veth1_macvtap: entered promiscuous mode [ 100.377151][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.405897][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.420609][ T5828] veth1_vlan: entered promiscuous mode [ 100.482340][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.513058][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.532537][ T3434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.550067][ T3434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.565198][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.575564][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.586030][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.598352][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.616298][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.634509][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.650152][ T5828] veth0_macvtap: entered promiscuous mode [ 100.716497][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.726368][ T5828] veth1_macvtap: entered promiscuous mode [ 100.744369][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.761643][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.854168][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.956808][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.997179][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.029346][ T5151] Bluetooth: hci0: command tx timeout [ 101.034839][ T5151] Bluetooth: hci1: command tx timeout [ 101.038334][ T30] audit: type=1326 audit(1750608499.429:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.1.2" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc68cb8e929 code=0x0 [ 101.044413][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.072280][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.085217][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.125070][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.148033][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.190376][ T5151] Bluetooth: hci3: command tx timeout [ 101.190699][ T5836] Bluetooth: hci2: command tx timeout [ 101.330186][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.346314][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.555508][ T3434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.599242][ T3434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.950170][ T5930] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 101.969576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.028088][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.040130][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.111341][ T24] cfg80211: failed to load regulatory.db [ 102.820801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.947811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.109105][ T5836] Bluetooth: hci1: command tx timeout [ 103.114602][ T5836] Bluetooth: hci0: command tx timeout [ 103.269112][ T5836] Bluetooth: hci2: command tx timeout [ 103.274739][ T5151] Bluetooth: hci3: command tx timeout [ 103.420572][ T5946] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.629502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 104.809396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.869651][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.079269][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.289990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.299170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.309188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 105.509282][ T5976] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11'. [ 105.703350][ T5976] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 105.717868][ T5976] Zero length message leads to an empty skb [ 106.492420][ T5979] ecryptfs_parse_packet_length: Error parsing packet length [ 106.508949][ T5979] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 106.726601][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14'. [ 106.812237][ T30] audit: type=1800 audit(1750608505.189:3): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.15" name="version" dev="configfs" ino=6791 res=0 errno=0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       syzkaller syzkaller login: [ 221.252464][ T5151] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 222.492411][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 223.431902][ T30] audit: type=1800 audit(6045575917.824:14): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.316" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 223.564215][ T7671] can: request_module (can-proto-3) failed. [ 224.858166][ T7693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.323'. [ 224.943020][ T7693] HfR: entered promiscuous mode [ 225.015089][ T7693] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 225.863473][ T7710] net_ratelimit: 21 callbacks suppressed [ 225.863498][ T7710] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 226.028896][ T7721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.324'. [ 226.053643][ T7721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.068922][ T7721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.116534][ T7721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.154771][ T7721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.969608][ T7739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.372724][ T7745] mkiss: ax0: crc mode is auto. [ 228.409426][ T7765] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 228.563567][ T7779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.336'. [ 228.858246][ T7772] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 229.326399][ T7772] Process accounting paused [ 232.675513][ T7846] random: crng reseeded on system resumption [ 237.023113][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 237.054481][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 237.772547][ T7922] FAULT_INJECTION: forcing a failure. [ 237.772547][ T7922] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 237.819499][ T7922] CPU: 0 UID: 0 PID: 7922 Comm: syz.1.367 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 237.819543][ T7922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.819560][ T7922] Call Trace: [ 237.819569][ T7922] [ 237.819580][ T7922] dump_stack_lvl+0x16c/0x1f0 [ 237.819631][ T7922] should_fail_ex+0x512/0x640 [ 237.819678][ T7922] should_fail_alloc_page+0xe7/0x130 [ 237.819709][ T7922] prepare_alloc_pages+0x3c2/0x610 [ 237.819772][ T7922] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 237.819839][ T7922] ? __up_read+0x1f8/0x750 [ 237.819894][ T7922] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 237.820001][ T7922] __folio_alloc_noprof+0x11/0x220 [ 237.820053][ T7922] alloc_migration_target+0x2bf/0x770 [ 237.820095][ T7922] migrate_pages_batch+0x3bf/0x31a0 [ 237.820140][ T7922] ? __pfx_alloc_migration_target+0x10/0x10 [ 237.820191][ T7922] ? __pfx_migrate_pages_batch+0x10/0x10 [ 237.820234][ T7922] ? update_and_free_hugetlb_folio+0xd3/0x210 [ 237.820290][ T7922] ? __pfx_update_and_free_hugetlb_folio+0x10/0x10 [ 237.820352][ T7922] migrate_pages_sync+0x12d/0x8a0 [ 237.820392][ T7922] ? __pfx_alloc_migration_target+0x10/0x10 [ 237.820438][ T7922] ? __pfx_migrate_pages_sync+0x10/0x10 [ 237.820473][ T7922] ? __pfx___folio_put+0x10/0x10 [ 237.820532][ T7922] ? rcu_is_watching+0x12/0xc0 [ 237.820564][ T7922] ? _raw_spin_unlock_irq+0x23/0x50 [ 237.820620][ T7922] migrate_pages+0x1b67/0x23b0 [ 237.820662][ T7922] ? __pfx_alloc_migration_target+0x10/0x10 [ 237.820728][ T7922] ? __pfx_migrate_pages+0x10/0x10 [ 237.820767][ T7922] ? queue_pages_range+0x11e/0x180 [ 237.820828][ T7922] ? __pfx___up_read+0x10/0x10 [ 237.820879][ T7922] ? do_migrate_pages+0x458/0x750 [ 237.820920][ T7922] do_migrate_pages+0x48e/0x750 [ 237.820970][ T7922] ? __pfx_do_migrate_pages+0x10/0x10 [ 237.821006][ T7922] ? rcu_is_watching+0x12/0xc0 [ 237.821046][ T7922] ? cap_capable+0xb3/0x250 [ 237.821074][ T7922] ? get_task_mm+0xc2/0xf0 [ 237.821110][ T7922] ? security_capable+0x250/0x260 [ 237.821169][ T7922] kernel_migrate_pages+0x5b0/0x750 [ 237.821204][ T7922] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 237.821251][ T7922] __x64_sys_migrate_pages+0x96/0x100 [ 237.821286][ T7922] ? lockdep_hardirqs_on+0x7c/0x110 [ 237.821336][ T7922] do_syscall_64+0xcd/0x490 [ 237.821392][ T7922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.821426][ T7922] RIP: 0033:0x7fc68cb8e929 [ 237.821453][ T7922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.821485][ T7922] RSP: 002b:00007fc68da72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 237.821517][ T7922] RAX: ffffffffffffffda RBX: 00007fc68cdb5fa0 RCX: 00007fc68cb8e929 [ 237.821539][ T7922] RDX: 0000200000000100 RSI: 0000000000000003 RDI: 0000000000000000 [ 237.821559][ T7922] RBP: 00007fc68cc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 237.821580][ T7922] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 237.821601][ T7922] R13: 0000000000000000 R14: 00007fc68cdb5fa0 R15: 00007ffc2fdfe7d8 [ 237.821643][ T7922] [ 238.132141][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.643465][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'. [ 241.301670][ T7949] team0: Port device team_slave_0 removed [ 244.008942][ T30] audit: type=1326 audit(6045575938.394:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.1.379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc68cb8e929 code=0x0 [ 244.067855][ T7988] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 244.398709][ T7985] FAULT_INJECTION: forcing a failure. [ 244.398709][ T7985] name fail_futex, interval 1, probability 0, space 0, times 0 [ 244.414426][ T7985] CPU: 1 UID: 0 PID: 7985 Comm: syz.1.379 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 244.414469][ T7985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.414504][ T7985] Call Trace: [ 244.414515][ T7985] [ 244.414527][ T7985] dump_stack_lvl+0x16c/0x1f0 [ 244.414582][ T7985] should_fail_ex+0x512/0x640 [ 244.414635][ T7985] get_futex_key+0x1d0/0x1540 [ 244.414678][ T7985] ? __pfx_get_futex_key+0x10/0x10 [ 244.414717][ T7985] ? __pfx___schedule+0x10/0x10 [ 244.414772][ T7985] futex_wait_setup+0x9d/0x550 [ 244.414832][ T7985] __futex_wait+0x194/0x2f0 [ 244.414881][ T7985] ? __pfx___futex_wait+0x10/0x10 [ 244.414935][ T7985] ? __pfx_futex_wake_mark+0x10/0x10 [ 244.414987][ T7985] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 244.415034][ T7985] ? __hrtimer_setup+0x176/0x280 [ 244.415087][ T7985] ? ktime_add_safe+0x60/0x70 [ 244.415139][ T7985] futex_wait+0xe8/0x380 [ 244.415185][ T7985] ? __pfx_futex_wait+0x10/0x10 [ 244.415230][ T7985] ? __lock_acquire+0xb8a/0x1c90 [ 244.415276][ T7985] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 244.415341][ T7985] do_futex+0x229/0x350 [ 244.415381][ T7985] ? __pfx_do_futex+0x10/0x10 [ 244.415417][ T7985] ? rcu_is_watching+0x12/0xc0 [ 244.415448][ T7985] ? ktime_get+0x200/0x310 [ 244.415490][ T7985] ? lockdep_hardirqs_on+0x7c/0x110 [ 244.415538][ T7985] ? read_tsc+0x9/0x20 [ 244.415575][ T7985] __x64_sys_futex+0x1e0/0x4c0 [ 244.415622][ T7985] ? __pfx___x64_sys_futex+0x10/0x10 [ 244.415663][ T7985] ? xfd_validate_state+0x61/0x180 [ 244.415719][ T7985] do_syscall_64+0xcd/0x490 [ 244.415771][ T7985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.415804][ T7985] RIP: 0033:0x7fc68cb8e929 [ 244.415829][ T7985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.415859][ T7985] RSP: 002b:00007ffc2fdfe938 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 244.415889][ T7985] RAX: ffffffffffffffda RBX: 000000000003ba7d RCX: 00007fc68cb8e929 [ 244.415910][ T7985] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc68cdb608c [ 244.415929][ T7985] RBP: 0000000000000032 R08: 00007fc68da73000 R09: 000000132fdfec2f [ 244.415948][ T7985] R10: 00007ffc2fdfea30 R11: 0000000000000246 R12: 00007fc68cdb608c [ 244.415968][ T7985] R13: 00007ffc2fdfea30 R14: 000000000003baaf R15: 00007ffc2fdfea50 [ 244.416010][ T7985] [ 253.053780][ T8081] netlink: 128 bytes leftover after parsing attributes in process `syz.0.399'. [ 256.566940][ T8148] zram0: detected capacity change from 0 to 8 [ 259.111604][ T8192] netlink: 206 bytes leftover after parsing attributes in process `syz.3.421'. [ 259.955048][ T8185] Process accounting resumed [ 260.141250][ T8208] overlayfs: missing 'lowerdir' [ 260.802385][ T8210] bridge0: port 3(vlan1) entered blocking state [ 260.871189][ T8210] bridge0: port 3(vlan1) entered disabled state [ 260.881461][ T8210] vlan1: entered allmulticast mode [ 260.888956][ T8210] veth0_vlan: entered allmulticast mode [ 261.018470][ T8210] vlan1: entered promiscuous mode [ 261.092301][ T8210] bridge0: port 3(vlan1) entered blocking state [ 261.099321][ T8210] bridge0: port 3(vlan1) entered forwarding state [ 263.492443][ T8259] FAULT_INJECTION: forcing a failure. [ 263.492443][ T8259] name failslab, interval 1, probability 0, space 0, times 0 [ 263.543935][ T8258] ubi0: attaching mtd0 [ 263.562200][ T8258] ubi0 error: ubi_attach_mtd_dev: bad VID header (3969) or data offsets (4033) [ 263.585963][ T8259] CPU: 0 UID: 0 PID: 8259 Comm: syz.2.432 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 263.586006][ T8259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.586024][ T8259] Call Trace: [ 263.586034][ T8259] [ 263.586046][ T8259] dump_stack_lvl+0x16c/0x1f0 [ 263.586100][ T8259] should_fail_ex+0x512/0x640 [ 263.586146][ T8259] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 263.586206][ T8259] should_failslab+0xc2/0x120 [ 263.586235][ T8259] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 263.586281][ T8259] ? do_raw_spin_lock+0x12c/0x2b0 [ 263.586328][ T8259] ? ptlock_alloc+0x1f/0x70 [ 263.586375][ T8259] ptlock_alloc+0x1f/0x70 [ 263.586415][ T8259] pte_alloc_one+0x82/0x3a0 [ 263.586465][ T8259] __do_fault+0x320/0x490 [ 263.586514][ T8259] ? __pfx_filemap_map_pages+0x10/0x10 [ 263.586565][ T8259] __handle_mm_fault+0x374c/0x5490 [ 263.586621][ T8259] ? __pfx___handle_mm_fault+0x10/0x10 [ 263.586662][ T8259] ? __pfx_mt_find+0x10/0x10 [ 263.586735][ T8259] ? find_vma+0xbf/0x140 [ 263.586767][ T8259] ? __pfx_find_vma+0x10/0x10 [ 263.586805][ T8259] handle_mm_fault+0x589/0xd10 [ 263.586851][ T8259] ? __pkru_allows_pkey+0x41/0xb0 [ 263.586897][ T8259] do_user_addr_fault+0x7a6/0x1370 [ 263.586948][ T8259] ? rcu_is_watching+0x12/0xc0 [ 263.586986][ T8259] exc_page_fault+0x5c/0xb0 [ 263.587036][ T8259] asm_exc_page_fault+0x26/0x30 [ 263.587067][ T8259] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 263.587109][ T8259] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 10 04 00 66 66 2e 0f [ 263.587140][ T8259] RSP: 0018:ffffc900030e7d20 EFLAGS: 00050202 [ 263.587173][ T8259] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000004 [ 263.587192][ T8259] RDX: fffff5200061cfbb RSI: ffffc900030e7dd8 RDI: 0000000000000000 [ 263.587214][ T8259] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff5200061cfbb [ 263.587234][ T8259] R10: 0000000000000003 R11: 0000000000000001 R12: ffffc900030e7dd8 [ 263.587254][ T8259] R13: 0000000000000004 R14: 00007ffffffff000 R15: 0000000000000000 [ 263.587297][ T8259] _copy_to_user+0xbb/0xd0 [ 263.587352][ T8259] do_timer_create+0x6dc/0x14e0 [ 263.587403][ T8259] ? __pfx_do_timer_create+0x10/0x10 [ 263.587447][ T8259] ? __pfx_do_futex+0x10/0x10 [ 263.587502][ T8259] __x64_sys_timer_create+0x199/0x1d0 [ 263.587550][ T8259] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 263.587596][ T8259] ? fput+0x70/0xf0 [ 263.587629][ T8259] ? xfd_validate_state+0x61/0x180 [ 263.587671][ T8259] ? __pfx_ksys_write+0x10/0x10 [ 263.587730][ T8259] do_syscall_64+0xcd/0x490 [ 263.587787][ T8259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.587820][ T8259] RIP: 0033:0x7f4883b8e929 [ 263.587847][ T8259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.587878][ T8259] RSP: 002b:00007f4884a69038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 263.587909][ T8259] RAX: ffffffffffffffda RBX: 00007f4883db5fa0 RCX: 00007f4883b8e929 [ 263.587931][ T8259] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 263.587950][ T8259] RBP: 00007f4883c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 263.587970][ T8259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.587989][ T8259] R13: 0000000000000000 R14: 00007f4883db5fa0 R15: 00007ffebfeda178 [ 263.588030][ T8259] [ 264.111069][ T8259] netlink: 350 bytes leftover after parsing attributes in process `syz.2.432'. [ 265.191376][ T8283] random: crng reseeded on system resumption [ 265.908219][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.926781][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.694753][ T8312] netlink: 86 bytes leftover after parsing attributes in process `syz.1.444'. [ 266.985915][ T8324] FAULT_INJECTION: forcing a failure. [ 266.985915][ T8324] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 267.061785][ T8324] CPU: 1 UID: 0 PID: 8324 Comm: syz.3.447 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 267.061827][ T8324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.061844][ T8324] Call Trace: [ 267.061854][ T8324] [ 267.061877][ T8324] dump_stack_lvl+0x16c/0x1f0 [ 267.061928][ T8324] should_fail_ex+0x512/0x640 [ 267.061978][ T8324] _copy_to_user+0x32/0xd0 [ 267.062028][ T8324] simple_read_from_buffer+0xcb/0x170 [ 267.062071][ T8324] proc_fail_nth_read+0x197/0x270 [ 267.062107][ T8324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.062146][ T8324] ? rw_verify_area+0xcf/0x680 [ 267.062185][ T8324] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.062221][ T8324] vfs_read+0x1e1/0xc60 [ 267.062290][ T8324] ? __pfx___mutex_lock+0x10/0x10 [ 267.062339][ T8324] ? __pfx_vfs_read+0x10/0x10 [ 267.062393][ T8324] ? __fget_files+0x20e/0x3c0 [ 267.062449][ T8324] ksys_read+0x12a/0x250 [ 267.062494][ T8324] ? __pfx_ksys_read+0x10/0x10 [ 267.062539][ T8324] ? fput+0x70/0xf0 [ 267.062574][ T8324] do_syscall_64+0xcd/0x490 [ 267.062628][ T8324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.062660][ T8324] RIP: 0033:0x7fdd0af8d33c [ 267.062685][ T8324] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 267.062715][ T8324] RSP: 002b:00007fdd0bdc8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.062753][ T8324] RAX: ffffffffffffffda RBX: 00007fdd0b1b5fa0 RCX: 00007fdd0af8d33c [ 267.062778][ T8324] RDX: 000000000000000f RSI: 00007fdd0bdc80a0 RDI: 0000000000000005 [ 267.062796][ T8324] RBP: 00007fdd0bdc8090 R08: 0000000000000000 R09: 0000000000000000 [ 267.062815][ T8324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.062833][ T8324] R13: 0000000000000000 R14: 00007fdd0b1b5fa0 R15: 00007ffe51c18ea8 [ 267.062873][ T8324] [ 267.249605][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.393153][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 271.466155][ T8387] netlink: 354 bytes leftover after parsing attributes in process `syz.2.462'. [ 271.712108][ T5836] Bluetooth: hci3: unexpected event 0x3d length: 726 > 14 [ 271.864475][ T8393] tty tty39: ldisc open failed (-12), clearing slot 38 [ 272.283097][ T8401] FAULT_INJECTION: forcing a failure. [ 272.283097][ T8401] name failslab, interval 1, probability 0, space 0, times 0 [ 272.332023][ T8401] CPU: 1 UID: 0 PID: 8401 Comm: syz.2.464 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 272.332064][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 272.332080][ T8401] Call Trace: [ 272.332090][ T8401] [ 272.332101][ T8401] dump_stack_lvl+0x16c/0x1f0 [ 272.332170][ T8401] should_fail_ex+0x512/0x640 [ 272.332214][ T8401] ? fs_reclaim_acquire+0xae/0x150 [ 272.332253][ T8401] ? tomoyo_encode2+0x100/0x3e0 [ 272.332293][ T8401] should_failslab+0xc2/0x120 [ 272.332323][ T8401] __kmalloc_noprof+0xd2/0x510 [ 272.332366][ T8401] ? d_absolute_path+0x136/0x1a0 [ 272.332404][ T8401] tomoyo_encode2+0x100/0x3e0 [ 272.332452][ T8401] tomoyo_encode+0x29/0x50 [ 272.332491][ T8401] tomoyo_realpath_from_path+0x18f/0x6e0 [ 272.332555][ T8401] tomoyo_check_open_permission+0x2ab/0x3c0 [ 272.332594][ T8401] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 272.332675][ T8401] ? do_raw_spin_lock+0x12c/0x2b0 [ 272.332735][ T8401] tomoyo_file_open+0x6b/0x90 [ 272.332786][ T8401] security_file_open+0x84/0x1e0 [ 272.332827][ T8401] do_dentry_open+0x596/0x1c10 [ 272.332888][ T8401] vfs_open+0x82/0x3f0 [ 272.332926][ T8401] path_openat+0x1de4/0x2cb0 [ 272.332985][ T8401] ? __pfx_path_openat+0x10/0x10 [ 272.333033][ T8401] ? __lock_acquire+0xb8a/0x1c90 [ 272.333082][ T8401] do_filp_open+0x20b/0x470 [ 272.333129][ T8401] ? __pfx_do_filp_open+0x10/0x10 [ 272.333206][ T8401] ? alloc_fd+0x471/0x7d0 [ 272.333259][ T8401] do_sys_openat2+0x11b/0x1d0 [ 272.333292][ T8401] ? __pfx_do_sys_openat2+0x10/0x10 [ 272.333344][ T8401] __x64_sys_openat+0x174/0x210 [ 272.333380][ T8401] ? __pfx___x64_sys_openat+0x10/0x10 [ 272.333434][ T8401] do_syscall_64+0xcd/0x490 [ 272.333486][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.333517][ T8401] RIP: 0033:0x7f4883b8e929 [ 272.333546][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.333575][ T8401] RSP: 002b:00007f4884a48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 272.333615][ T8401] RAX: ffffffffffffffda RBX: 00007f4883db6080 RCX: 00007f4883b8e929 [ 272.333634][ T8401] RDX: 0000000000080100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 272.333652][ T8401] RBP: 00007f4883c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 272.333669][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.333686][ T8401] R13: 0000000000000000 R14: 00007f4883db6080 R15: 00007ffebfeda178 [ 272.333724][ T8401] [ 272.334225][ T8401] ERROR: Out of memory at tomoyo_realpath_from_path. [ 272.682416][ T8406] [U]  [ 272.685523][ T8406] [U] [ 272.688290][ T8406] [U] [ 272.691060][ T8406] [U] [ 272.724718][ T8406] [U] [ 272.727525][ T8406] [U] [ 272.730292][ T8406] [U] [ 272.733061][ T8406] [U] [ 272.753529][ T8407] [U] [ 272.947508][ T8409] syz.3.465 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 273.655538][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.469'. [ 273.954729][ T8426] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 273.990336][ T8427] FAULT_INJECTION: forcing a failure. [ 273.990336][ T8427] name failslab, interval 1, probability 0, space 0, times 0 [ 274.005001][ T8427] CPU: 1 UID: 0 PID: 8427 Comm: syz.2.470 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 274.005040][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 274.005056][ T8427] Call Trace: [ 274.005066][ T8427] [ 274.005077][ T8427] dump_stack_lvl+0x16c/0x1f0 [ 274.005127][ T8427] should_fail_ex+0x512/0x640 [ 274.005168][ T8427] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 274.005217][ T8427] should_failslab+0xc2/0x120 [ 274.005244][ T8427] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 274.005289][ T8427] ? __kernfs_new_node+0xd2/0x8e0 [ 274.005334][ T8427] __kernfs_new_node+0xd2/0x8e0 [ 274.005375][ T8427] ? kernfs_add_one+0x37d/0x840 [ 274.005428][ T8427] ? __pfx___kernfs_new_node+0x10/0x10 [ 274.005479][ T8427] ? find_held_lock+0x2b/0x80 [ 274.005509][ T8427] ? kernfs_root+0xee/0x2a0 [ 274.005557][ T8427] kernfs_new_node+0x13c/0x1e0 [ 274.005609][ T8427] kernfs_create_dir_ns+0x4c/0x1a0 [ 274.005660][ T8427] internal_create_group+0x34d/0xf30 [ 274.005710][ T8427] ? __pfx_internal_create_group+0x10/0x10 [ 274.005752][ T8427] ? __pfx_internal_create_group+0x10/0x10 [ 274.005800][ T8427] ? __pfx_dev_add_physical_location+0x10/0x10 [ 274.005849][ T8427] ? bus_to_subsys+0x131/0x160 [ 274.005888][ T8427] dpm_sysfs_add+0x80/0x280 [ 274.005917][ T8427] device_add+0x9a6/0x1a70 [ 274.005949][ T8427] ? __pfx_device_add+0x10/0x10 [ 274.006011][ T8427] __add_disk+0x457/0xf00 [ 274.006054][ T8427] ? find_held_lock+0x2b/0x80 [ 274.006088][ T8427] add_disk_fwnode+0x3f8/0x5d0 [ 274.006136][ T8427] zram_add+0x4c8/0x700 [ 274.006170][ T8427] ? __pfx_zram_add+0x10/0x10 [ 274.006231][ T8427] ? find_held_lock+0x2b/0x80 [ 274.006268][ T8427] ? __pfx_hot_add_show+0x10/0x10 [ 274.006301][ T8427] ? __pfx_class_attr_show+0x10/0x10 [ 274.006329][ T8427] hot_add_show+0x21/0x80 [ 274.006363][ T8427] class_attr_show+0x6f/0xa0 [ 274.006394][ T8427] sysfs_kf_seq_show+0x216/0x3e0 [ 274.006446][ T8427] seq_read_iter+0x506/0x12c0 [ 274.006503][ T8427] kernfs_fop_read_iter+0x40f/0x5a0 [ 274.006534][ T8427] ? rw_verify_area+0xcf/0x680 [ 274.006578][ T8427] vfs_read+0x8bc/0xc60 [ 274.006627][ T8427] ? __pfx___mutex_lock+0x10/0x10 [ 274.006675][ T8427] ? __pfx_vfs_read+0x10/0x10 [ 274.006746][ T8427] ksys_read+0x12a/0x250 [ 274.006788][ T8427] ? __pfx_ksys_read+0x10/0x10 [ 274.006843][ T8427] do_syscall_64+0xcd/0x490 [ 274.006895][ T8427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.006926][ T8427] RIP: 0033:0x7f4883b8e929 [ 274.006951][ T8427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.006980][ T8427] RSP: 002b:00007f4884a69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.007008][ T8427] RAX: ffffffffffffffda RBX: 00007f4883db5fa0 RCX: 00007f4883b8e929 [ 274.007028][ T8427] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 274.007047][ T8427] RBP: 00007f4883c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 274.007065][ T8427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.007083][ T8427] R13: 0000000000000000 R14: 00007f4883db5fa0 R15: 00007ffebfeda178 [ 274.007124][ T8427] [ 274.319481][ C1] vkms_vblank_simulate: vblank timer overrun [ 274.753448][ T8432] netlink: 338 bytes leftover after parsing attributes in process `syz.3.472'. [ 275.187797][ T8438] netlink: 98 bytes leftover after parsing attributes in process `syz.0.475'. [ 275.198236][ T8438] netlink: 2 bytes leftover after parsing attributes in process `syz.0.475'. [ 275.384814][ T8447] netlink: 48 bytes leftover after parsing attributes in process `syz.1.476'. [ 275.912110][ T8438] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.918255][ T8438] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 275.971310][ T8438] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 276.005619][ T8438] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 276.033045][ T8438] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 277.341506][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 277.984732][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 278.050062][ T30] audit: type=1800 audit(4294967317.380:16): pid=8489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.485" name="dbroot" dev="configfs" ino=18219 res=0 errno=0 [ 278.078729][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 278.084814][ T5836] Bluetooth: hci2: command 0x0c1a tx timeout [ 279.197903][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 279.428032][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 279.925835][ T8518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 280.048024][ T8518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.054212][ T8518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.088966][ T8518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.343554][ T8549] can: request_module (can-proto-0) failed. [ 281.496962][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 281.847571][ T8562] sd 0:0:1:0: PR command failed: 1026 [ 281.847625][ T8562] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 281.847681][ T8562] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 282.107488][ T8569] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.137100][ T8574] Bluetooth: hci3: command 0x0c1a tx timeout [ 282.143161][ T8574] Bluetooth: hci2: command 0x0c1a tx timeout [ 284.402230][ T8620] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 284.402230][ T8620] The task syz.3.509 (8620) triggered the difference, watch for misbehavior. [ 287.680478][ T8678] program syz.3.522 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 287.777333][ T8678] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 290.174098][ T8725] Process accounting paused [ 291.006776][ T8736] nfs4: Unknown parameter '€' [ 295.577710][ T8824] block nbd7: not configured, cannot reconfigure [ 296.503653][ T8572] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:1: bg 4: bad block bitmap checksum [ 296.531698][ T8572] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 296.548066][ T8572] EXT4-fs (sda1): This should not happen!! Data will be lost [ 296.548066][ T8572]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               [ 1303.989621][T15790] Bluetooth: hci0: unexpected event 0x01 length: 440 > 1 [ 1304.093725][T27729] Process accounting resumed [ 1305.058482][T27740] kexec: Could not allocate control_code_buffer [ 1305.566504][T27801] FAULT_INJECTION: forcing a failure. [ 1305.566504][T27801] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1305.581123][T27801] CPU: 1 UID: 0 PID: 27801 Comm: syz.1.4019 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 1305.581157][T27801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1305.581172][T27801] Call Trace: [ 1305.581180][T27801] [ 1305.581188][T27801] dump_stack_lvl+0x16c/0x1f0 [ 1305.581229][T27801] should_fail_ex+0x512/0x640 [ 1305.581265][T27801] should_fail_alloc_page+0xe7/0x130 [ 1305.581289][T27801] prepare_alloc_pages+0x3c2/0x610 [ 1305.581319][T27801] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1305.581357][T27801] ? mas_next_slot+0x12d3/0x21b0 [ 1305.581379][T27801] ? __up_read+0x1f8/0x750 [ 1305.581417][T27801] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1305.581455][T27801] ? validate_mm+0x40a/0x570 [ 1305.581509][T27801] ? __pfx_validate_mm+0x10/0x10 [ 1305.581540][T27801] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 1305.581580][T27801] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1305.581616][T27801] ? policy_nodemask+0xea/0x4e0 [ 1305.581654][T27801] alloc_pages_mpol+0x1fb/0x550 [ 1305.581676][T27801] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1305.581696][T27801] ? mas_next_node+0x7e0/0xf50 [ 1305.581731][T27801] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1305.581766][T27801] alloc_pages_noprof+0x131/0x390 [ 1305.581788][T27801] __pmd_alloc+0x3b/0x930 [ 1305.581814][T27801] __handle_mm_fault+0xaac/0x5490 [ 1305.581847][T27801] ? __pfx___handle_mm_fault+0x10/0x10 [ 1305.581885][T27801] ? find_vma+0xbf/0x140 [ 1305.581907][T27801] ? __pfx_find_vma+0x10/0x10 [ 1305.581931][T27801] handle_mm_fault+0x589/0xd10 [ 1305.581981][T27801] __get_user_pages+0x589/0x3b80 [ 1305.582012][T27801] ? __pfx_mt_find+0x10/0x10 [ 1305.582033][T27801] ? __pfx___get_user_pages+0x10/0x10 [ 1305.582061][T27801] ? __pfx___might_resched+0x10/0x10 [ 1305.582085][T27801] ? cap_capable+0xb3/0x250 [ 1305.582108][T27801] populate_vma_page_range+0x278/0x3a0 [ 1305.582141][T27801] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1305.582170][T27801] ? __pfx_find_vma_intersection+0x10/0x10 [ 1305.582197][T27801] ? do_mmap+0x69c/0x1210 [ 1305.582223][T27801] __mm_populate+0x1d8/0x380 [ 1305.582251][T27801] ? __pfx___mm_populate+0x10/0x10 [ 1305.582280][T27801] ? up_write+0x1b2/0x520 [ 1305.582315][T27801] vm_mmap_pgoff+0x362/0x450 [ 1305.582340][T27801] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1305.582366][T27801] ? __x64_sys_futex+0x1e0/0x4c0 [ 1305.582394][T27801] ? __x64_sys_futex+0x1e9/0x4c0 [ 1305.582424][T27801] ksys_mmap_pgoff+0x7d/0x5c0 [ 1305.582448][T27801] ? xfd_validate_state+0x61/0x180 [ 1305.582478][T27801] ? __pfx_ksys_write+0x10/0x10 [ 1305.582518][T27801] __x64_sys_mmap+0x125/0x190 [ 1305.582551][T27801] do_syscall_64+0xcd/0x490 [ 1305.582589][T27801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.582614][T27801] RIP: 0033:0x7fb43218e929 [ 1305.582632][T27801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1305.582656][T27801] RSP: 002b:00007fb433001038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1305.582678][T27801] RAX: ffffffffffffffda RBX: 00007fb4323b6320 RCX: 00007fb43218e929 [ 1305.582695][T27801] RDX: 0000001000000004 RSI: 0000000000000008 RDI: 0000000000000000 [ 1305.582710][T27801] RBP: 00007fb432210b39 R08: 0000000000000002 R09: 0000000000008000 [ 1305.582725][T27801] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1305.582740][T27801] R13: 0000000000000000 R14: 00007fb4323b6320 R15: 00007ffe323ba048 [ 1305.582763][T27801] [ 1305.987209][T27784] zswap: compressor not available [ 1306.063072][T27802] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4022'. [ 1307.479758][T25018] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1330 with max blocks 8 with error 117 [ 1307.536192][T27834] 0x000200000001-0xa29656a63616329 : "" [ 1307.536731][T25018] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1307.536731][T25018] [ 1307.616665][T27831] ALUA LU Group already has a valid ID, ignoring request [ 1307.620455][ T30] audit: type=1800 audit(4294970912.216:43): pid=27831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4029" name="lu_gp_id" dev="configfs" ino=106340 res=0 errno=0 [ 1307.678515][T27834] mtd: partition "" is out of reach -- disabled [ 1307.703702][T27834] FAULT_INJECTION: forcing a failure. [ 1307.703702][T27834] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.786644][T15790] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 1307.811804][T27834] CPU: 0 UID: 0 PID: 27834 Comm: syz.4.4027 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 1307.811849][T27834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1307.811868][T27834] Call Trace: [ 1307.811879][T27834] [ 1307.811891][T27834] dump_stack_lvl+0x16c/0x1f0 [ 1307.811943][T27834] should_fail_ex+0x512/0x640 [ 1307.811991][T27834] should_failslab+0xc2/0x120 [ 1307.812021][T27834] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1307.812074][T27834] ? kvasprintf_const+0x66/0x1a0 [ 1307.812106][T27834] kvasprintf+0xbc/0x160 [ 1307.812132][T27834] ? __pfx_kvasprintf+0x10/0x10 [ 1307.812176][T27834] ? idr_alloc_u32+0x20f/0x2f0 [ 1307.812219][T27834] kvasprintf_const+0x66/0x1a0 [ 1307.812246][T27834] kobject_set_name_vargs+0x5a/0x140 [ 1307.812277][T27834] dev_set_name+0xc7/0x100 [ 1307.812310][T27834] ? __pfx_dev_set_name+0x10/0x10 [ 1307.812344][T27834] ? idr_alloc+0xdd/0x130 [ 1307.812382][T27834] ? __pfx_idr_alloc+0x10/0x10 [ 1307.812421][T27834] ? mtd_add_partition+0x304/0x670 [ 1307.812453][T27834] ? add_mtd_device+0x841/0x1720 [ 1307.812498][T27834] add_mtd_device+0x901/0x1720 [ 1307.812545][T27834] ? __pfx_add_mtd_device+0x10/0x10 [ 1307.812594][T27834] mtd_add_partition+0x30c/0x670 [ 1307.812633][T27834] ? __pfx_mtd_add_partition+0x10/0x10 [ 1307.812662][T27834] ? __might_fault+0x13b/0x190 [ 1307.812704][T27834] ? rcu_is_watching+0x12/0xc0 [ 1307.812742][T27834] mtdchar_blkpg_ioctl+0x20b/0x250 [ 1307.812775][T27834] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1307.812814][T27834] ? lock_release+0x201/0x2f0 [ 1307.812858][T27834] mtdchar_ioctl+0xbc4/0x2090 [ 1307.812893][T27834] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1307.812926][T27834] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1307.812961][T27834] ? __mutex_trylock_common+0xe9/0x250 [ 1307.813000][T27834] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1307.813042][T27834] ? __pfx___might_resched+0x10/0x10 [ 1307.813074][T27834] ? trace_contention_end+0xdd/0x130 [ 1307.813113][T27834] ? __mutex_lock+0x1ca/0xb90 [ 1307.813160][T27834] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1307.813194][T27834] ? __pfx___mutex_lock+0x10/0x10 [ 1307.813251][T27834] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1307.813284][T27834] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1307.813319][T27834] __x64_sys_ioctl+0x18e/0x210 [ 1307.813354][T27834] do_syscall_64+0xcd/0x490 [ 1307.813401][T27834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.813431][T27834] RIP: 0033:0x7f8d3d78e929 [ 1307.813453][T27834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1307.813482][T27834] RSP: 002b:00007f8d3e696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1307.813510][T27834] RAX: ffffffffffffffda RBX: 00007f8d3d9b5fa0 RCX: 00007f8d3d78e929 [ 1307.813530][T27834] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000003 [ 1307.813547][T27834] RBP: 00007f8d3e696090 R08: 0000000000000000 R09: 0000000000000000 [ 1307.813565][T27834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1307.813583][T27834] R13: 0000000000000000 R14: 00007f8d3d9b5fa0 R15: 00007ffd623ccc18 [ 1307.813615][T27834] [ 1308.124865][ C0] vkms_vblank_simulate: vblank timer overrun [ 1310.080816][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1310.087345][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.483908][T27897] 0x000200000001-0xa29656a63616329 : "" [ 1310.489819][T27897] mtd: partition "" is out of reach -- disabled [ 1310.506814][T27897] FAULT_INJECTION: forcing a failure. [ 1310.506814][T27897] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.541127][T27897] CPU: 1 UID: 0 PID: 27897 Comm: syz.4.4040 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 1310.541181][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1310.541202][T27897] Call Trace: [ 1310.541212][T27897] [ 1310.541225][T27897] dump_stack_lvl+0x16c/0x1f0 [ 1310.541279][T27897] should_fail_ex+0x512/0x640 [ 1310.541328][T27897] should_failslab+0xc2/0x120 [ 1310.541359][T27897] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1310.541401][T27897] ? __pfx___debug_object_init+0x10/0x10 [ 1310.541436][T27897] ? __pfx___debug_object_init+0x10/0x10 [ 1310.541469][T27897] ? device_add+0xccc/0x1a70 [ 1310.541504][T27897] device_add+0xccc/0x1a70 [ 1310.541534][T27897] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1310.541583][T27897] ? lockdep_init_map_type+0x5c/0x280 [ 1310.541627][T27897] ? __pfx_device_add+0x10/0x10 [ 1310.541658][T27897] ? lockdep_init_map_type+0x5c/0x280 [ 1310.541703][T27897] ? __init_waitqueue_head+0xca/0x150 [ 1310.541760][T27897] add_mtd_device+0x999/0x1720 [ 1310.541813][T27897] ? __pfx_add_mtd_device+0x10/0x10 [ 1310.541868][T27897] mtd_add_partition+0x30c/0x670 [ 1310.541902][T27897] ? __pfx_mtd_add_partition+0x10/0x10 [ 1310.541935][T27897] ? __might_fault+0x13b/0x190 [ 1310.541982][T27897] ? rcu_is_watching+0x12/0xc0 [ 1310.542022][T27897] mtdchar_blkpg_ioctl+0x20b/0x250 [ 1310.542059][T27897] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1310.542103][T27897] ? lock_release+0x201/0x2f0 [ 1310.542161][T27897] mtdchar_ioctl+0xbc4/0x2090 [ 1310.542201][T27897] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1310.542238][T27897] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1310.542278][T27897] ? __mutex_trylock_common+0xe9/0x250 [ 1310.542324][T27897] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1310.542369][T27897] ? __pfx___might_resched+0x10/0x10 [ 1310.542405][T27897] ? trace_contention_end+0xdd/0x130 [ 1310.542451][T27897] ? __mutex_lock+0x1ca/0xb90 [ 1310.542503][T27897] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1310.542541][T27897] ? __pfx___mutex_lock+0x10/0x10 [ 1310.542604][T27897] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1310.542641][T27897] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1310.542681][T27897] __x64_sys_ioctl+0x18e/0x210 [ 1310.542720][T27897] do_syscall_64+0xcd/0x490 [ 1310.542771][T27897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.542804][T27897] RIP: 0033:0x7f8d3d78e929 [ 1310.542829][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1310.542861][T27897] RSP: 002b:00007f8d3e696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1310.542892][T27897] RAX: ffffffffffffffda RBX: 00007f8d3d9b5fa0 RCX: 00007f8d3d78e929 [ 1310.542914][T27897] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000003 [ 1310.542933][T27897] RBP: 00007f8d3e696090 R08: 0000000000000000 R09: 0000000000000000 [ 1310.542954][T27897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1310.542973][T27897] R13: 0000000000000000 R14: 00007f8d3d9b5fa0 R15: 00007ffd623ccc18 [ 1310.543004][T27897] [ 1310.850412][T27897] ------------[ cut here ]------------ [ 1310.856009][T27897] WARNING: CPU: 1 PID: 27897 at drivers/mtd/mtdpart.c:37 release_mtd_partition+0x71/0x90 [ 1310.865979][T27897] Modules linked in: [ 1310.869905][T27897] CPU: 1 UID: 0 PID: 27897 Comm: syz.4.4040 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 1310.882013][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1310.892115][T27897] RIP: 0010:release_mtd_partition+0x71/0x90 [ 1310.898087][T27897] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 0f a4 ac fb 48 89 df 5b 5d e9 05 a4 ac fb e8 f0 ca 51 fb 90 <0f> 0b 90 eb c2 e8 55 aa b7 fb eb db 48 89 ef e8 4b aa b7 fb eb a5 [ 1310.917760][T27897] RSP: 0018:ffffc90005077840 EFLAGS: 00010293 [ 1310.923839][T27897] RAX: 0000000000000000 RBX: ffff88803247c000 RCX: ffffffff8b7769ad [ 1310.931966][T27897] RDX: ffff888060a73c00 RSI: ffffffff8669bdc0 RDI: ffff88803247c000 [ 1310.939965][T27897] RBP: ffff88803247c648 R08: 0000000000000001 R09: 0000000000000001 [ 1310.947980][T27897] R10: 0000000000000009 R11: fffffffffffe8560 R12: 0000000000000000 [ 1310.956002][T27897] R13: dffffc0000000000 R14: ffff8880599005a0 R15: 0000000000000000 [ 1310.964003][T27897] FS: 00007f8d3e6966c0(0000) GS:ffff888124861000(0000) knlGS:0000000000000000 [ 1310.972951][T27897] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1310.979714][T27897] CR2: 000000110d78a637 CR3: 00000000316e8000 CR4: 00000000003526f0 [ 1310.987721][T27897] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1310.995732][T27897] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1311.003745][T27897] Call Trace: [ 1311.007034][T27897] [ 1311.009975][T27897] mtd_release+0xa0/0xd0 [ 1311.014265][T27897] ? __pfx_mtd_release+0x10/0x10 [ 1311.019220][T27897] device_release+0xa1/0x240 [ 1311.023855][T27897] kobject_put+0x1e7/0x5a0 [ 1311.028288][T27897] put_device+0x1f/0x30 [ 1311.032477][T27897] add_mtd_device+0xbc7/0x1720 [ 1311.037295][T27897] ? __pfx_add_mtd_device+0x10/0x10 [ 1311.042527][T27897] mtd_add_partition+0x30c/0x670 [ 1311.047511][T27897] ? __pfx_mtd_add_partition+0x10/0x10 [ 1311.052985][T27897] ? __might_fault+0x13b/0x190 [ 1311.057803][T27897] ? rcu_is_watching+0x12/0xc0 [ 1311.062592][T27897] mtdchar_blkpg_ioctl+0x20b/0x250 [ 1311.067744][T27897] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1311.073438][T27897] ? lock_release+0x201/0x2f0 [ 1311.078154][T27897] mtdchar_ioctl+0xbc4/0x2090 [ 1311.082850][T27897] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1311.088018][T27897] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1311.094040][T27897] ? __mutex_trylock_common+0xe9/0x250 [ 1311.099534][T27897] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1311.105476][T27897] ? __pfx___might_resched+0x10/0x10 [ 1311.110781][T27897] ? trace_contention_end+0xdd/0x130 [ 1311.116104][T27897] ? __mutex_lock+0x1ca/0xb90 [ 1311.120814][T27897] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1311.126233][T27897] ? __pfx___mutex_lock+0x10/0x10 [ 1311.131300][T27897] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1311.136541][T27897] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1311.142450][T27897] __x64_sys_ioctl+0x18e/0x210 [ 1311.147297][T27897] do_syscall_64+0xcd/0x490 [ 1311.151832][T27897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.157846][T27897] RIP: 0033:0x7f8d3d78e929 [ 1311.162313][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1311.181972][T27897] RSP: 002b:00007f8d3e696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1311.190469][T27897] RAX: ffffffffffffffda RBX: 00007f8d3d9b5fa0 RCX: 00007f8d3d78e929 [ 1311.198488][T27897] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000003 [ 1311.206493][T27897] RBP: 00007f8d3e696090 R08: 0000000000000000 R09: 0000000000000000 [ 1311.214501][T27897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.222484][T27897] R13: 0000000000000000 R14: 00007f8d3d9b5fa0 R15: 00007ffd623ccc18 [ 1311.230491][T27897] [ 1311.233581][T27897] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1311.240878][T27897] CPU: 1 UID: 0 PID: 27897 Comm: syz.4.4040 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 1311.252967][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1311.263053][T27897] Call Trace: [ 1311.266356][T27897] [ 1311.269316][T27897] dump_stack_lvl+0x3d/0x1f0 [ 1311.273937][T27897] panic+0x71c/0x800 [ 1311.277853][T27897] ? __pfx_panic+0x10/0x10 [ 1311.282293][T27897] ? show_trace_log_lvl+0x29b/0x3e0 [ 1311.287514][T27897] ? check_panic_on_warn+0x1f/0xb0 [ 1311.292644][T27897] ? release_mtd_partition+0x71/0x90 [ 1311.297957][T27897] check_panic_on_warn+0xab/0xb0 [ 1311.302923][T27897] __warn+0xf6/0x3c0 [ 1311.306842][T27897] ? release_mtd_partition+0x71/0x90 [ 1311.312143][T27897] report_bug+0x3c3/0x580 [ 1311.316488][T27897] ? release_mtd_partition+0x71/0x90 [ 1311.321780][T27897] handle_bug+0x184/0x210 [ 1311.326126][T27897] exc_invalid_op+0x17/0x50 [ 1311.330644][T27897] asm_exc_invalid_op+0x1a/0x20 [ 1311.335531][T27897] RIP: 0010:release_mtd_partition+0x71/0x90 [ 1311.341438][T27897] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 0f a4 ac fb 48 89 df 5b 5d e9 05 a4 ac fb e8 f0 ca 51 fb 90 <0f> 0b 90 eb c2 e8 55 aa b7 fb eb db 48 89 ef e8 4b aa b7 fb eb a5 [ 1311.361064][T27897] RSP: 0018:ffffc90005077840 EFLAGS: 00010293 [ 1311.367152][T27897] RAX: 0000000000000000 RBX: ffff88803247c000 RCX: ffffffff8b7769ad [ 1311.375133][T27897] RDX: ffff888060a73c00 RSI: ffffffff8669bdc0 RDI: ffff88803247c000 [ 1311.383116][T27897] RBP: ffff88803247c648 R08: 0000000000000001 R09: 0000000000000001 [ 1311.391109][T27897] R10: 0000000000000009 R11: fffffffffffe8560 R12: 0000000000000000 [ 1311.399092][T27897] R13: dffffc0000000000 R14: ffff8880599005a0 R15: 0000000000000000 [ 1311.407104][T27897] ? delete_node+0x40d/0x8d0 [ 1311.411732][T27897] ? release_mtd_partition+0x70/0x90 [ 1311.417036][T27897] mtd_release+0xa0/0xd0 [ 1311.421296][T27897] ? __pfx_mtd_release+0x10/0x10 [ 1311.426265][T27897] device_release+0xa1/0x240 [ 1311.430889][T27897] kobject_put+0x1e7/0x5a0 [ 1311.435321][T27897] put_device+0x1f/0x30 [ 1311.439495][T27897] add_mtd_device+0xbc7/0x1720 [ 1311.444289][T27897] ? __pfx_add_mtd_device+0x10/0x10 [ 1311.449511][T27897] mtd_add_partition+0x30c/0x670 [ 1311.454467][T27897] ? __pfx_mtd_add_partition+0x10/0x10 [ 1311.459951][T27897] ? __might_fault+0x13b/0x190 [ 1311.464738][T27897] ? rcu_is_watching+0x12/0xc0 [ 1311.469518][T27897] mtdchar_blkpg_ioctl+0x20b/0x250 [ 1311.474643][T27897] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 1311.480339][T27897] ? lock_release+0x201/0x2f0 [ 1311.485052][T27897] mtdchar_ioctl+0xbc4/0x2090 [ 1311.489773][T27897] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 1311.494918][T27897] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1311.500926][T27897] ? __mutex_trylock_common+0xe9/0x250 [ 1311.506417][T27897] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1311.512341][T27897] ? __pfx___might_resched+0x10/0x10 [ 1311.517638][T27897] ? trace_contention_end+0xdd/0x130 [ 1311.522941][T27897] ? __mutex_lock+0x1ca/0xb90 [ 1311.527731][T27897] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 1311.533125][T27897] ? __pfx___mutex_lock+0x10/0x10 [ 1311.538208][T27897] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 1311.543451][T27897] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 1311.549372][T27897] __x64_sys_ioctl+0x18e/0x210 [ 1311.554161][T27897] do_syscall_64+0xcd/0x490 [ 1311.558782][T27897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.564694][T27897] RIP: 0033:0x7f8d3d78e929 [ 1311.569126][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1311.588751][T27897] RSP: 002b:00007f8d3e696038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1311.597182][T27897] RAX: ffffffffffffffda RBX: 00007f8d3d9b5fa0 RCX: 00007f8d3d78e929 [ 1311.605169][T27897] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000003 [ 1311.613241][T27897] RBP: 00007f8d3e696090 R08: 0000000000000000 R09: 0000000000000000 [ 1311.621227][T27897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.629213][T27897] R13: 0000000000000000 R14: 00007f8d3d9b5fa0 R15: 00007ffd623ccc18 [ 1311.637207][T27897] [ 1311.640591][T27897] Kernel Offset: disabled [ 1311.644934][T27897] Rebooting in 86400 seconds..