last executing test programs: 15.429218762s ago: executing program 1 (id=1824): write$auto(0x800000000000c8, 0x0, 0x1a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) set_mempolicy$auto(0x8003, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) r0 = epoll_create$auto(0x3e) r1 = socket(0xa, 0x2, 0x3a) epoll_ctl$auto(r0, 0x1, 0xffffffffffffffff, 0x0) renameat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x4000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000200)=0xfff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x800eb1, r1, 0x8000) r2 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) io_uring_setup$auto(0x7, &(0x7f0000000040)={0x5, 0x3ff, 0x5968, 0xfffffffd, 0x1, 0x8, r2, [0xf5, 0x1, 0xf76], {0x3, 0x8, 0x5, 0x9, 0xfffffffa, 0x5, 0x156c, 0x7, 0x83}, {0x7ff, 0x13, 0x3b, 0x8, 0x5, 0x553, 0x3, 0x9, 0x4}}) keyctl$auto(0x7ff, 0x0, 0xee01, 0x0, 0x0) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x1, 0x20009, 0x4000000000e3, 0x17, 0x401, 0x8003) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0xfffffffffffffffe, 0xdf, 0xeb1, 0x401, 0x7ffc) unshare$auto(0x40000080) 12.139801896s ago: executing program 1 (id=1836): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) r3 = prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) r5 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000480), r2) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000004c0)={0x1128, r5, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0x22, 0x0, "804b915c018488bf370e6a36759fca14d0c0e93cb13854ee761b3b251aec"}, @SMC_NLA_EID_TABLE_ENTRY={0x4}, @SMC_NLA_EID_TABLE_UNSPEC={0x1004, 0x0, "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"}, @SMC_NLA_EID_TABLE_ENTRY={0xf, 0x1, '%*\'--:+)/\\{'}, @SMC_NLA_EID_TABLE_ENTRY={0xd, 0x1, '/dev/ppp\x00'}, @SMC_NLA_EID_TABLE_UNSPEC={0xa5, 0x0, "e8040ab410070efcf6711b2cd3803e7611454e84c9a3cdd72ccbe360881416519f93b78915a5e4ebc06f355678aa5fe2ed97c683501ba4c12b8cfb541c7b457299af36d3aba98427aa4c321704027e76a1b751cb400b9bbf38623aed81b18e345319ce249fe1e31558423eea2bef15e0c925b17bba6b5e9ac8ea87552280e498d0059521fb27d24a5b6d4fcb206f98d33bde07c81401e40af6fdd5a52c394062e9"}, @SMC_NLA_EID_TABLE_ENTRY={0xf, 0x1, '/dev/ptyzf\x00'}, @SMC_NLA_EID_TABLE_ENTRY={0xf, 0x1, '/dev/ptyzf\x00'}]}, 0x1128}, 0x1, 0x0, 0x0, 0x48010}, 0x10) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r6, 0x1260, 0x5) 11.671550794s ago: executing program 0 (id=1830): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r1, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r3, 0xc0285629, r3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) socket(0x6, 0x2, 0x6) semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 10.045392488s ago: executing program 2 (id=1832): mmap$auto(0x0, 0x20009, 0x3, 0x18, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x72bd22, 0x25dbdbff, {}, [@HWSIM_ATTR_PERM_ADDR={0xb, 0x16, "db38c0b06d9a02"}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)={0xa, 0x4ccc0000000, 0x3, 0x9}) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x5, 0x4}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x68100, 0x0) ioctl$auto(r3, 0x545c, 0xffffffffffffffff) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) fallocate$auto(r3, 0x400, 0x100, 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon3\x00', 0x100, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r6, 0x9204, 0x0) sendfile$auto(r2, r5, 0x0, 0x1000200) sysfs$auto(0x2, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, 0x9f1e, 0x0) semctl$auto_SETALL(0x0, 0x2, 0x11, 0x4) 9.813876418s ago: executing program 1 (id=1833): mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) open(&(0x7f00000002c0)='./file0\x00', 0x111280, 0x18) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x40, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/286, 0x11e) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r2, 0x80044dfe, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) listen$auto(0x3, 0x3) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) getrandom$auto(0x0, 0x6000000, 0x3) r4 = socket(0x15, 0x1, 0x0) r5 = signalfd$auto(r4, &(0x7f0000000000), 0x4) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10000, 0x0, [{0x7a00c888, 0x1, 0xfffffffdfffffc88}, {0x2, 0x5, 0x2}, {0x12, 0x7f, 0x1}, {0x9, 0x5, 0x5c89}, {0x7, 0x8, 0x8de7}, {0x3, 0x3ff, 0x204}]}) setsockopt$auto(r4, 0x114, 0x1d, 0x0, 0x4) 8.819215178s ago: executing program 2 (id=1834): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f0000000580)={[0xe83, 0x8, 0xfffffffffffffc01, 0x0, 0xfff9, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x4, 0x3, 0x5, 0x2, 0x5]}, 0x0) sendmmsg$auto(r2, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000400), 0x100, 0x8}, 0x8}, 0x3, 0x6) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendfile$auto(r1, r1, 0x0, 0x7fff) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioperm$auto(0x7, 0x6, 0x2) arch_prctl$auto_ARCH_GET_CPUID(0x1011, 0xa445) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r4 = socket(0x0, 0x3, 0x3c) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16, @ANYBLOB="4cb24518"], 0xf8}}, 0x10004010) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64f4040a6ccda016}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x220088c0}, 0x40) close_range$auto(0x2, 0x8, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) 8.536957722s ago: executing program 0 (id=1837): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x220000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x8081, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, 0x0, 0x3) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) r4 = ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, &(0x7f0000000040)=0x6) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) bpf$auto(0x200005, &(0x7f0000000000)=@iter_create={0xffffffffffffffff, 0x1c6}, 0x102) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r4) ioctl$auto_BLKGETDISKSEQ(r0, 0x80081280, 0x0) 8.221372099s ago: executing program 1 (id=1838): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) r3 = prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) r5 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000480), r2) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000004c0)={0x1128, r5, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0x22, 0x0, "804b915c018488bf370e6a36759fca14d0c0e93cb13854ee761b3b251aec"}, @SMC_NLA_EID_TABLE_ENTRY={0x4}, @SMC_NLA_EID_TABLE_UNSPEC={0x1004, 0x0, "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"}, @SMC_NLA_EID_TABLE_ENTRY={0xf, 0x1, '%*\'--:+)/\\{'}, @SMC_NLA_EID_TABLE_ENTRY={0xd, 0x1, '/dev/ppp\x00'}, @SMC_NLA_EID_TABLE_UNSPEC={0xa5, 0x0, "e8040ab410070efcf6711b2cd3803e7611454e84c9a3cdd72ccbe360881416519f93b78915a5e4ebc06f355678aa5fe2ed97c683501ba4c12b8cfb541c7b457299af36d3aba98427aa4c321704027e76a1b751cb400b9bbf38623aed81b18e345319ce249fe1e31558423eea2bef15e0c925b17bba6b5e9ac8ea87552280e498d0059521fb27d24a5b6d4fcb206f98d33bde07c81401e40af6fdd5a52c394062e9"}, @SMC_NLA_EID_TABLE_ENTRY={0xf, 0x1, '/dev/ptyzf\x00'}, @SMC_NLA_EID_TABLE_ENTRY={0xf, 0x1, '/dev/ptyzf\x00'}]}, 0x1128}, 0x1, 0x0, 0x0, 0x48010}, 0x10) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r6, 0x1260, 0x5) 7.965277732s ago: executing program 3 (id=1839): sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r1 = socket(0xf, 0x5, 0x20) setsockopt$auto(r1, 0x6, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, 0x401, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x42100, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYRESOCT=r1, @ANYRES16, @ANYRES32=r3], 0x1094}, 0x1, 0x0, 0x0, 0x4081}, 0xc000) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0xca, 0x7fffffff, 0x16, r3, 0x4) ioctl$auto(r3, 0x57, r2) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) poll$auto(&(0x7f0000000280)={r4, 0x3}, 0x2, 0x2) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r5 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000580)={0x95, 0xd933, "acb48b517a5c3cce8b37c6b362cd56d19784ff302bf08d6eeb94d3595c34f79d909712e16d1be5e8dd10c15b05d975ccb36f03846908e2c85800a165eea1080b3cbc4ae8319db37775042a25f244b2538b6695c9f86176a3cabc372792be06af15de3bf6e0b7c49d3774c135f19d27699a1869ad132c5d00d998bbe4104f5650974f722f9022b8a70f5d782911c9f41c133a16784e"}, 0x2) r6 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_clock\x00', 0x0, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f00000004c0)={0x1, 0x80, [{0xffffffffffffffff, 0x0, 0x5, 0xef0}, {r5, 0x0, 0xffffffffffffffff, 0x9}, {r0, 0x0, 0x10000333d, 0x7}, {r6, 0x0, 0x7, 0x2}, {r0, 0x0, 0x8, 0xd589}, {r1, 0x0, 0xa7, 0x2}]}) sysfs$auto(0x2, 0x11, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x20040, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) 6.652702913s ago: executing program 3 (id=1840): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r1, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r3, 0xc0285629, r3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) socket(0x6, 0x2, 0x6) semctl$auto_SETVAL(0x4, 0xfffffff7, 0x10, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 5.970672858s ago: executing program 1 (id=1841): openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=r2, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r2, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0xffffffff, 0x9, 0xdf, 0x9b72, 0x7, 0x28000) semctl$auto(0x9, 0x9, 0x8a, 0x1b) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x1d, &(0x7f0000000180)={&(0x7f0000000100), 0x80000000}, 0x10000, 0x0, 0x962, 0x9}, 0x2e6}, 0x9a, 0x69ac, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) 5.961471303s ago: executing program 2 (id=1842): mmap$auto(0x0, 0x20009, 0x3, 0x18, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x72bd22, 0x25dbdbff, {}, [@HWSIM_ATTR_PERM_ADDR={0xb, 0x16, "db38c0b06d9a02"}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)={0xa, 0x4ccc0000000, 0x3, 0x9}) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x5, 0x4}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x68100, 0x0) ioctl$auto(r3, 0x545c, 0xffffffffffffffff) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) fallocate$auto(r3, 0x400, 0x100, 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon3\x00', 0x100, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r6, 0x9204, 0x0) sendfile$auto(r2, r5, 0x0, 0x1000200) sysfs$auto(0x2, 0x1, 0x0) open(0x0, 0x261c2, 0x84) mount$auto(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, 0x9f1e, 0x0) semctl$auto_SETALL(0x0, 0x2, 0x11, 0x4) 5.284989506s ago: executing program 0 (id=1843): write$auto(0x800000000000c8, 0x0, 0x1a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) set_mempolicy$auto(0x8003, 0x0, 0x4) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) r1 = epoll_create$auto(0x3e) r2 = socket(0xa, 0x2, 0x3a) epoll_ctl$auto(r1, 0x1, r0, 0x0) renameat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x4000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000200)=0xfff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x800eb1, r2, 0x8000) r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) io_uring_setup$auto(0x7, &(0x7f0000000040)={0x5, 0x3ff, 0x5968, 0xfffffffd, 0x1, 0x8, r3, [0xf5, 0x1, 0xf76], {0x3, 0x8, 0x5, 0x9, 0xfffffffa, 0x5, 0x156c, 0x7, 0x83}, {0x7ff, 0x13, 0x3b, 0x8, 0x5, 0x553, 0x3, 0x9, 0x4}}) keyctl$auto(0x7ff, 0x0, 0xee01, 0x0, 0x0) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x1, 0x20009, 0x4000000000e3, 0x17, 0x401, 0x8003) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0xfffffffffffffffe, 0xdf, 0xeb1, 0x401, 0x7ffc) unshare$auto(0x40000080) 5.247773743s ago: executing program 3 (id=1844): mmap$auto(0x0, 0x20009, 0x3, 0x18, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x72bd22, 0x25dbdbff, {}, [@HWSIM_ATTR_PERM_ADDR={0xb, 0x16, "db38c0b06d9a02"}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)={0xa, 0x4ccc0000000, 0x3, 0x9}) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x5, 0x4}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x68100, 0x0) ioctl$auto(r3, 0x545c, 0xffffffffffffffff) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) fallocate$auto(r3, 0x400, 0x100, 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r6, 0x9204, 0x0) sendfile$auto(r2, r5, 0x0, 0x1000200) sysfs$auto(0x2, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, 0x9f1e, 0x0) semctl$auto_SETALL(0x0, 0x2, 0x11, 0x4) 4.914286981s ago: executing program 2 (id=1845): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f0000000580)={[0xe83, 0x8, 0xfffffffffffffc01, 0x0, 0xfff9, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x4, 0x3, 0x5, 0x2, 0x5]}, 0x0) sendmmsg$auto(r2, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000400)="554ae44a7d4987918c09937d09e9a38b1a0400a76365bd775b80b928eef63a4c9692537d2547ab9845f6733f7f", 0x100, 0x8}, 0x8}, 0x3, 0x6) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendfile$auto(r1, r1, 0x0, 0x7fff) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioperm$auto(0x7, 0x6, 0x2) arch_prctl$auto_ARCH_GET_CPUID(0x1011, 0xa445) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r4 = socket(0x0, 0x3, 0x3c) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16, @ANYBLOB="4cb24518"], 0xf8}}, 0x10004010) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64f4040a6ccda016}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x220088c0}, 0x40) close_range$auto(0x2, 0x8, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) 4.137141219s ago: executing program 3 (id=1846): write$auto(0x800000000000c8, 0x0, 0x1a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) set_mempolicy$auto(0x8003, 0x0, 0x4) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf5s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) r1 = epoll_create$auto(0x3e) r2 = socket(0xa, 0x2, 0x3a) epoll_ctl$auto(r1, 0x1, r0, 0x0) renameat2$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x4000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000200)=0xfff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x800eb1, r2, 0x8000) r3 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) io_uring_setup$auto(0x7, &(0x7f0000000040)={0x5, 0x3ff, 0x5968, 0xfffffffd, 0x1, 0x8, r3, [0xf5, 0x1, 0xf76], {0x3, 0x8, 0x5, 0x9, 0xfffffffa, 0x5, 0x156c, 0x7, 0x83}, {0x7ff, 0x13, 0x3b, 0x8, 0x5, 0x553, 0x3, 0x9, 0x4}}) keyctl$auto(0x7ff, 0x0, 0xee01, 0x0, 0x0) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x1, 0x20009, 0x4000000000e3, 0x17, 0x401, 0x8003) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0xfffffffffffffffe, 0xdf, 0xeb1, 0x401, 0x7ffc) unshare$auto(0x40000080) 3.516285228s ago: executing program 1 (id=1847): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) select$auto(0x800, 0x0, 0x0, &(0x7f0000000580)={[0xe83, 0x8, 0xfffffffffffffc01, 0x0, 0xfff9, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x4, 0x3, 0x5, 0x2, 0x5]}, 0x0) sendmmsg$auto(r2, &(0x7f00000003c0)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000400), 0x100, 0x8}, 0x8}, 0x3, 0x6) write$auto(r2, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendfile$auto(r1, r1, 0x0, 0x7fff) unshare$auto(0xa4) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) ioperm$auto(0x7, 0x6, 0x2) arch_prctl$auto_ARCH_GET_CPUID(0x1011, 0xa445) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) r4 = socket(0x0, 0x3, 0x3c) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16, @ANYBLOB="4cb24518"], 0xf8}}, 0x10004010) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x64f4040a6ccda016}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x220088c0}, 0x40) close_range$auto(0x2, 0x8, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) 3.196315144s ago: executing program 3 (id=1848): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_1\x00', 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="08000300060000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x300) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c050000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="120001008b097914854700000040000000000000100002800c001000000100000000000004000800"], 0x51c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x2020009, 0xa0, 0x19, 0xfffffffffffffffa, 0x8000) io_pgetevents$auto(0x1, 0x18, 0x8000000000000081, 0x0, 0x0, 0x0) 2.787659112s ago: executing program 0 (id=1849): mmap$auto(0x0, 0x20009, 0x3, 0x18, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x72bd22, 0x25dbdbff, {}, [@HWSIM_ATTR_PERM_ADDR={0xb, 0x16, "db38c0b06d9a02"}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)={0xa, 0x4ccc0000000, 0x3, 0x9}) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x5, 0x4}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x68100, 0x0) ioctl$auto(r3, 0x545c, 0xffffffffffffffff) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) setsockopt$auto(0x3, 0x0, 0x17, 0x0, 0x28) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) fallocate$auto(r3, 0x400, 0x100, 0x8) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_MON_IOCT_RING_SIZE(r6, 0x9204, 0x0) sendfile$auto(r2, r5, 0x0, 0x1000200) sysfs$auto(0x2, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, 0x9f1e, 0x0) semctl$auto_SETALL(0x0, 0x2, 0x11, 0x4) 1.700226474s ago: executing program 2 (id=1850): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) r3 = prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) r5 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000480), r2) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000004c0)={0x1128, r5, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0x22, 0x0, "804b915c018488bf370e6a36759fca14d0c0e93cb13854ee761b3b251aec"}, @SMC_NLA_EID_TABLE_ENTRY={0x4}, @SMC_NLA_EID_TABLE_UNSPEC={0x1004, 0x0, "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"}, @SMC_NLA_EID_TABLE_ENTRY={0xf, 0x1, '%*\'--:+)/\\{'}, @SMC_NLA_EID_TABLE_ENTRY={0xd, 0x1, '/dev/ppp\x00'}, @SMC_NLA_EID_TABLE_UNSPEC={0xa5, 0x0, "e8040ab410070efcf6711b2cd3803e7611454e84c9a3cdd72ccbe360881416519f93b78915a5e4ebc06f355678aa5fe2ed97c683501ba4c12b8cfb541c7b457299af36d3aba98427aa4c321704027e76a1b751cb400b9bbf38623aed81b18e345319ce249fe1e31558423eea2bef15e0c925b17bba6b5e9ac8ea87552280e498d0059521fb27d24a5b6d4fcb206f98d33bde07c81401e40af6fdd5a52c394062e9"}, @SMC_NLA_EID_TABLE_ENTRY={0xf, 0x1, '/dev/ptyzf\x00'}, @SMC_NLA_EID_TABLE_ENTRY={0xf, 0x1, '/dev/ptyzf\x00'}]}, 0x1128}, 0x1, 0x0, 0x0, 0x48010}, 0x10) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x9, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r6, 0x1260, 0x5) 1.641403286s ago: executing program 0 (id=1851): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x201, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, r1, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video24\x00', 0xa240, 0x0) ioctl$auto(r2, 0xc0585611, r2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, 0x0, 0x4008000) sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x815) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2c, 0x80003, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) 1.618941913s ago: executing program 3 (id=1852): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x220000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x8081, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, 0x0, 0x3) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) r4 = ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, &(0x7f0000000040)=0x6) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xfffffffe, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) bpf$auto(0x200005, &(0x7f0000000000)=@iter_create={0xffffffffffffffff, 0x1c6}, 0x102) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r4) ioctl$auto_BLKGETDISKSEQ(r0, 0x80081280, 0x0) 525.020165ms ago: executing program 2 (id=1853): setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2, 0x1, 0x1, 0x9b71, r0, 0xb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/block/loop5/queue/scheduler\x00', 0xa0b02, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) read$auto(r1, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x8) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x6, 0x0, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x4, 0x9) get_mempolicy$auto(0x0, 0x0, 0x703, 0x71f6, 0x3) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x10002, 0x0) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1834ccafdd80500ffffffffdfff1a0e00"/56, 0x38) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x206, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0xfffff000}}) clock_adjtime$auto(0x4, &(0x7f0000000100)={0x101, 0x0, 0x1, 0x2, 0x575c, 0x6, 0x2, 0x0, 0x0, 0x3, 0x1, {0xfffffffffffffff8, 0x5}, 0x5, 0x7, 0x2, 0xfffffffc, 0x0, 0x5, 0x9, 0x8, 0x2, 0x3, 0x6782}) close_range$auto(0x2, 0x8, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r3, 0x80, 0xd3) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) lseek$auto(0x3, 0x2, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyya\x00', 0x62800, 0x0) 0s ago: executing program 0 (id=1854): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) fallocate$auto(0x8000000000000003, 0x8, 0x9, 0x20000000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) sysfs$auto(0x2, 0x10, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) getsid$auto(0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x7fff, 0x1, 0x0, 0x1e) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x8903, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xd4, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_MODULE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x80}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_MODULE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7ff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x84}, 0x1000c081) ioctl$auto(r3, 0x7, r1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0xf880, 0xc, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x80101, 0x0) writev$auto(r4, &(0x7f0000000140)={0x0, 0xe4}, 0x4) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            [ 838.788468][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 838.947760][T13825] Bluetooth: hci2: command 0x0406 tx timeout [ 838.953852][T11430] Bluetooth: hci1: command 0x0406 tx timeout [ 838.959974][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 839.959295][ T5835] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 840.031033][ T30] audit: type=1800 audit(6043761738.901:8): pid=15082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1618" name="dbroot" dev="configfs" ino=42248 res=0 errno=0 [ 843.671845][T15133] netlink: 'syz.1.1631': attribute type 11 has an invalid length. [ 843.739344][T15135] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 850.001905][T15228] netlink: 'syz.2.1643': attribute type 11 has an invalid length. [ 850.190306][T15232] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 850.695008][T15237] netlink: 'syz.1.1644': attribute type 11 has an invalid length. [ 850.788825][T15240] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 851.645555][T15241] FAULT_INJECTION: forcing a failure. [ 851.645555][T15241] name failslab, interval 1, probability 0, space 0, times 0 [ 851.671666][T15241] CPU: 1 UID: 0 PID: 15241 Comm: syz.0.1645 Tainted: G U 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 851.671722][T15241] Tainted: [U]=USER [ 851.671732][T15241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 851.671753][T15241] Call Trace: [ 851.671764][T15241] [ 851.671777][T15241] dump_stack_lvl+0x16c/0x1f0 [ 851.671829][T15241] should_fail_ex+0x512/0x640 [ 851.671882][T15241] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 851.671932][T15241] should_failslab+0xc2/0x120 [ 851.671980][T15241] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 851.672025][T15241] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 851.672083][T15241] acpi_ut_create_generic_state+0x5c/0xb0 [ 851.672131][T15241] acpi_ps_push_scope+0x22/0x230 [ 851.672189][T15241] acpi_ps_parse_loop+0x9f3/0x1d00 [ 851.672248][T15241] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 851.672300][T15241] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 851.672347][T15241] ? acpi_ut_create_thread_state+0x63/0x170 [ 851.672415][T15241] acpi_ps_parse_aml+0x3c1/0xcb0 [ 851.672480][T15241] acpi_ps_execute_method+0x55a/0xb30 [ 851.672517][T15241] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 851.672563][T15241] acpi_ns_evaluate+0x76c/0xca0 [ 851.672600][T15241] ? kasan_save_track+0x14/0x30 [ 851.672646][T15241] acpi_evaluate_object+0x1fa/0xa90 [ 851.672701][T15241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.672736][T15241] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 851.672791][T15241] ? __mutex_trylock_common+0xe9/0x250 [ 851.672835][T15241] acpi_evaluate_integer+0xdd/0x200 [ 851.672880][T15241] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 851.672956][T15241] ? __pfx_status_show+0x10/0x10 [ 851.673006][T15241] status_show+0xa0/0x120 [ 851.673056][T15241] ? __pfx_status_show+0x10/0x10 [ 851.673117][T15241] dev_attr_show+0x53/0xe0 [ 851.673154][T15241] ? __pfx_dev_attr_show+0x10/0x10 [ 851.673186][T15241] sysfs_kf_seq_show+0x213/0x3e0 [ 851.673230][T15241] seq_read_iter+0x506/0x12c0 [ 851.673282][T15241] kernfs_fop_read_iter+0x40f/0x5a0 [ 851.673336][T15241] ? rw_verify_area+0xcf/0x680 [ 851.673386][T15241] vfs_read+0x8bf/0xc60 [ 851.673431][T15241] ? __pfx___mutex_lock+0x10/0x10 [ 851.673479][T15241] ? __pfx_vfs_read+0x10/0x10 [ 851.673545][T15241] ksys_read+0x12a/0x250 [ 851.673584][T15241] ? __pfx_ksys_read+0x10/0x10 [ 851.673637][T15241] do_syscall_64+0xcd/0x490 [ 851.673704][T15241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.673739][T15241] RIP: 0033:0x7f7dffd8e969 [ 851.673766][T15241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 851.673800][T15241] RSP: 002b:00007f7e00bbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 851.673832][T15241] RAX: ffffffffffffffda RBX: 00007f7dfffb6080 RCX: 00007f7dffd8e969 [ 851.673855][T15241] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 851.673876][T15241] RBP: 00007f7dffe10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 851.673897][T15241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.673917][T15241] R13: 0000000000000000 R14: 00007f7dfffb6080 R15: 00007fffaca503b8 [ 851.673962][T15241] [ 851.674781][T15241] ACPI Error: [ 851.742639][T15256] netlink: 'syz.2.1650': attribute type 11 has an invalid length. [ 852.064350][T15241] Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 852.138832][T15259] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 853.843179][T15273] FAULT_INJECTION: forcing a failure. [ 853.843179][T15273] name failslab, interval 1, probability 0, space 0, times 0 [ 853.865744][T15273] CPU: 0 UID: 0 PID: 15273 Comm: syz.3.1652 Tainted: G U 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 853.865802][T15273] Tainted: [U]=USER [ 853.865814][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 853.865836][T15273] Call Trace: [ 853.865846][T15273] [ 853.865859][T15273] dump_stack_lvl+0x16c/0x1f0 [ 853.865913][T15273] should_fail_ex+0x512/0x640 [ 853.865968][T15273] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 853.866019][T15273] should_failslab+0xc2/0x120 [ 853.866069][T15273] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 853.866116][T15273] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 853.866182][T15273] acpi_ut_create_generic_state+0x5c/0xb0 [ 853.866233][T15273] acpi_ps_push_scope+0x22/0x230 [ 853.866292][T15273] acpi_ps_parse_loop+0x9f3/0x1d00 [ 853.866356][T15273] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 853.866409][T15273] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 853.866455][T15273] ? acpi_ut_create_thread_state+0x63/0x170 [ 853.866516][T15273] acpi_ps_parse_aml+0x3c1/0xcb0 [ 853.866579][T15273] acpi_ps_execute_method+0x55a/0xb30 [ 853.866618][T15273] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 853.866664][T15273] acpi_ns_evaluate+0x76c/0xca0 [ 853.866703][T15273] ? kasan_save_track+0x14/0x30 [ 853.866751][T15273] acpi_evaluate_object+0x1fa/0xa90 [ 853.866807][T15273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.866845][T15273] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 853.866914][T15273] ? __mutex_trylock_common+0xe9/0x250 [ 853.866960][T15273] acpi_evaluate_integer+0xdd/0x200 [ 853.867006][T15273] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 853.867071][T15273] ? __pfx_status_show+0x10/0x10 [ 853.867124][T15273] status_show+0xa0/0x120 [ 853.867185][T15273] ? __pfx_status_show+0x10/0x10 [ 853.867251][T15273] dev_attr_show+0x53/0xe0 [ 853.867289][T15273] ? __pfx_dev_attr_show+0x10/0x10 [ 853.867323][T15273] sysfs_kf_seq_show+0x213/0x3e0 [ 853.867370][T15273] seq_read_iter+0x506/0x12c0 [ 853.867426][T15273] kernfs_fop_read_iter+0x40f/0x5a0 [ 853.867482][T15273] ? rw_verify_area+0xcf/0x680 [ 853.867524][T15273] vfs_read+0x8bf/0xc60 [ 853.867571][T15273] ? __pfx___mutex_lock+0x10/0x10 [ 853.867619][T15273] ? __pfx_vfs_read+0x10/0x10 [ 853.867690][T15273] ksys_read+0x12a/0x250 [ 853.867732][T15273] ? __pfx_ksys_read+0x10/0x10 [ 853.867787][T15273] do_syscall_64+0xcd/0x490 [ 853.867839][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.867873][T15273] RIP: 0033:0x7f347f58e969 [ 853.867902][T15273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.867935][T15273] RSP: 002b:00007f348043e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 853.867967][T15273] RAX: ffffffffffffffda RBX: 00007f347f7b6080 RCX: 00007f347f58e969 [ 853.867990][T15273] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000006 [ 853.868011][T15273] RBP: 00007f347f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 853.868033][T15273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.868053][T15273] R13: 0000000000000000 R14: 00007f347f7b6080 R15: 00007fffdc4c8f28 [ 853.868098][T15273] [ 853.868156][T15273] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 854.982892][T15286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1653'. [ 855.001737][T15285] netlink: 'syz.1.1654': attribute type 11 has an invalid length. [ 855.041202][T15289] netlink: 'syz.3.1655': attribute type 11 has an invalid length. [ 855.088941][T15293] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 855.145549][T15294] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 856.360663][T15303] program syz.3.1656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 858.218392][T15319] FAULT_INJECTION: forcing a failure. [ 858.218392][T15319] name failslab, interval 1, probability 0, space 0, times 0 [ 858.297228][T15319] CPU: 1 UID: 0 PID: 15319 Comm: syz.0.1659 Tainted: G U 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 858.297284][T15319] Tainted: [U]=USER [ 858.297295][T15319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 858.297315][T15319] Call Trace: [ 858.297325][T15319] [ 858.297339][T15319] dump_stack_lvl+0x16c/0x1f0 [ 858.297403][T15319] should_fail_ex+0x512/0x640 [ 858.297456][T15319] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 858.297505][T15319] should_failslab+0xc2/0x120 [ 858.297554][T15319] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 858.297601][T15319] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 858.297658][T15319] acpi_ut_create_generic_state+0x5c/0xb0 [ 858.297708][T15319] acpi_ps_push_scope+0x22/0x230 [ 858.297767][T15319] acpi_ps_parse_loop+0x9f3/0x1d00 [ 858.297832][T15319] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 858.297886][T15319] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 858.297932][T15319] ? acpi_ut_create_thread_state+0x63/0x170 [ 858.297993][T15319] acpi_ps_parse_aml+0x3c1/0xcb0 [ 858.298056][T15319] acpi_ps_execute_method+0x55a/0xb30 [ 858.298095][T15319] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 858.298141][T15319] acpi_ns_evaluate+0x76c/0xca0 [ 858.298181][T15319] ? kasan_save_track+0x14/0x30 [ 858.298230][T15319] acpi_evaluate_object+0x1fa/0xa90 [ 858.298286][T15319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.298324][T15319] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 858.298389][T15319] ? __mutex_trylock_common+0xe9/0x250 [ 858.298436][T15319] acpi_evaluate_integer+0xdd/0x200 [ 858.298483][T15319] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 858.298548][T15319] ? __pfx_status_show+0x10/0x10 [ 858.298599][T15319] status_show+0xa0/0x120 [ 858.298652][T15319] ? __pfx_status_show+0x10/0x10 [ 858.298716][T15319] dev_attr_show+0x53/0xe0 [ 858.298759][T15319] ? __pfx_dev_attr_show+0x10/0x10 [ 858.298794][T15319] sysfs_kf_seq_show+0x213/0x3e0 [ 858.298842][T15319] seq_read_iter+0x506/0x12c0 [ 858.298899][T15319] kernfs_fop_read_iter+0x40f/0x5a0 [ 858.298954][T15319] ? rw_verify_area+0xcf/0x680 [ 858.298996][T15319] vfs_read+0x8bf/0xc60 [ 858.299043][T15319] ? __pfx___mutex_lock+0x10/0x10 [ 858.299093][T15319] ? __pfx_vfs_read+0x10/0x10 [ 858.299164][T15319] ksys_read+0x12a/0x250 [ 858.299205][T15319] ? __pfx_ksys_read+0x10/0x10 [ 858.299260][T15319] do_syscall_64+0xcd/0x490 [ 858.299312][T15319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.299347][T15319] RIP: 0033:0x7f7dffd8e969 [ 858.299374][T15319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 858.299415][T15319] RSP: 002b:00007f7e00bbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 858.299447][T15319] RAX: ffffffffffffffda RBX: 00007f7dfffb6080 RCX: 00007f7dffd8e969 [ 858.299471][T15319] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 858.299492][T15319] RBP: 00007f7dffe10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 858.299512][T15319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.299532][T15319] R13: 0000000000000000 R14: 00007f7dfffb6080 R15: 00007fffaca503b8 [ 858.299577][T15319] [ 858.615954][ C1] vkms_vblank_simulate: vblank timer overrun [ 858.635785][T15319] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 859.699501][T15344] netlink: 'syz.1.1665': attribute type 11 has an invalid length. [ 859.791954][T15347] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 860.110824][T15352] netlink: 'syz.0.1666': attribute type 11 has an invalid length. [ 860.195917][T15354] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 864.145725][T15404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1673'. [ 865.007760][T15418] FAULT_INJECTION: forcing a failure. [ 865.007760][T15418] name failslab, interval 1, probability 0, space 0, times 0 [ 865.071104][T15418] CPU: 0 UID: 0 PID: 15418 Comm: syz.1.1674 Tainted: G U 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 865.071161][T15418] Tainted: [U]=USER [ 865.071173][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 865.071193][T15418] Call Trace: [ 865.071203][T15418] [ 865.071216][T15418] dump_stack_lvl+0x16c/0x1f0 [ 865.071267][T15418] should_fail_ex+0x512/0x640 [ 865.071323][T15418] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 865.071373][T15418] should_failslab+0xc2/0x120 [ 865.071422][T15418] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 865.071468][T15418] ? acpi_ps_alloc_op+0x25f/0x310 [ 865.071507][T15418] acpi_ps_alloc_op+0x25f/0x310 [ 865.071537][T15418] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 865.071584][T15418] acpi_ps_create_op+0x3dc/0xc20 [ 865.071639][T15418] ? trace_kmem_cache_alloc+0x28/0xc0 [ 865.071692][T15418] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 865.071750][T15418] ? acpi_ut_push_generic_state+0x13/0x70 [ 865.071806][T15418] acpi_ps_parse_loop+0xdd8/0x1d00 [ 865.071873][T15418] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 865.071936][T15418] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 865.071983][T15418] ? acpi_ut_create_thread_state+0x63/0x170 [ 865.072043][T15418] acpi_ps_parse_aml+0x3c1/0xcb0 [ 865.072105][T15418] acpi_ps_execute_method+0x55a/0xb30 [ 865.072144][T15418] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 865.072191][T15418] acpi_ns_evaluate+0x76c/0xca0 [ 865.072229][T15418] ? kasan_save_track+0x14/0x30 [ 865.072276][T15418] acpi_evaluate_object+0x1fa/0xa90 [ 865.072332][T15418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.072370][T15418] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 865.072425][T15418] ? __mutex_trylock_common+0xe9/0x250 [ 865.072469][T15418] acpi_evaluate_integer+0xdd/0x200 [ 865.072516][T15418] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 865.072581][T15418] ? __pfx_status_show+0x10/0x10 [ 865.072634][T15418] status_show+0xa0/0x120 [ 865.072686][T15418] ? __pfx_status_show+0x10/0x10 [ 865.072753][T15418] dev_attr_show+0x53/0xe0 [ 865.072791][T15418] ? __pfx_dev_attr_show+0x10/0x10 [ 865.072825][T15418] sysfs_kf_seq_show+0x213/0x3e0 [ 865.072871][T15418] seq_read_iter+0x506/0x12c0 [ 865.072935][T15418] kernfs_fop_read_iter+0x40f/0x5a0 [ 865.072990][T15418] ? rw_verify_area+0xcf/0x680 [ 865.073033][T15418] vfs_read+0x8bf/0xc60 [ 865.073079][T15418] ? __pfx___mutex_lock+0x10/0x10 [ 865.073129][T15418] ? __pfx_vfs_read+0x10/0x10 [ 865.073200][T15418] ksys_read+0x12a/0x250 [ 865.073241][T15418] ? __pfx_ksys_read+0x10/0x10 [ 865.073296][T15418] do_syscall_64+0xcd/0x490 [ 865.073348][T15418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.073382][T15418] RIP: 0033:0x7ff0d978e969 [ 865.073409][T15418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.073443][T15418] RSP: 002b:00007ff0da672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 865.073476][T15418] RAX: ffffffffffffffda RBX: 00007ff0d99b6080 RCX: 00007ff0d978e969 [ 865.073499][T15418] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 865.073520][T15418] RBP: 00007ff0d9810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 865.073541][T15418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.073561][T15418] R13: 0000000000000000 R14: 00007ff0d99b6080 R15: 00007ffcb6b66ac8 [ 865.073606][T15418] [ 865.529881][T15418] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 867.009337][ T30] audit: type=1800 audit(6043761766.011:9): pid=15438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1679" name="dbroot" dev="configfs" ino=42927 res=0 errno=0 [ 867.041213][T15438] FAULT_INJECTION: forcing a failure. [ 867.041213][T15438] name failslab, interval 1, probability 0, space 0, times 0 [ 867.058460][T15438] CPU: 0 UID: 0 PID: 15438 Comm: syz.1.1679 Tainted: G U 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 867.058530][T15438] Tainted: [U]=USER [ 867.058542][T15438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 867.058564][T15438] Call Trace: [ 867.058576][T15438] [ 867.058590][T15438] dump_stack_lvl+0x16c/0x1f0 [ 867.058644][T15438] should_fail_ex+0x512/0x640 [ 867.058698][T15438] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 867.058742][T15438] should_failslab+0xc2/0x120 [ 867.058791][T15438] __kmalloc_cache_noprof+0x6a/0x3e0 [ 867.058831][T15438] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 867.058882][T15438] snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 867.058920][T15438] ? __might_resched+0x5/0x5e0 [ 867.058981][T15438] ? trace_contention_end+0xdd/0x130 [ 867.059020][T15438] ? __mutex_lock+0x1ca/0xb90 [ 867.059073][T15438] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 867.059115][T15438] ? __pfx___mutex_lock+0x10/0x10 [ 867.059178][T15438] ? find_held_lock+0x2b/0x80 [ 867.059234][T15438] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 867.059279][T15438] snd_pcm_oss_ioctl+0x31aa/0x37a0 [ 867.059315][T15438] ? find_held_lock+0x2b/0x80 [ 867.059362][T15438] ? hook_file_ioctl_common+0x145/0x410 [ 867.059484][T15438] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 867.059525][T15438] ? __fget_files+0x20e/0x3c0 [ 867.059571][T15438] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 867.059610][T15438] __x64_sys_ioctl+0x18b/0x210 [ 867.059648][T15438] do_syscall_64+0xcd/0x490 [ 867.059765][T15438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.059814][T15438] RIP: 0033:0x7ff0d978e969 [ 867.059847][T15438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 867.059885][T15438] RSP: 002b:00007ff0da693038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 867.059921][T15438] RAX: ffffffffffffffda RBX: 00007ff0d99b5fa0 RCX: 00007ff0d978e969 [ 867.059945][T15438] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000005 [ 867.059968][T15438] RBP: 00007ff0d9810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 867.059991][T15438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 867.060013][T15438] R13: 0000000000000000 R14: 00007ff0d99b5fa0 R15: 00007ffcb6b66ac8 [ 867.060058][T15438] [ 872.443662][T15489] netlink: 'syz.1.1686': attribute type 11 has an invalid length. [ 872.543695][T15491] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 876.350885][T15541] netlink: 'syz.1.1695': attribute type 11 has an invalid length. [ 876.533990][T15543] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 878.602342][T15560] FAULT_INJECTION: forcing a failure. [ 878.602342][T15560] name fail_futex, interval 1, probability 0, space 0, times 0 [ 878.642120][T15560] CPU: 1 UID: 0 PID: 15560 Comm: syz.0.1698 Tainted: G U 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 878.642174][T15560] Tainted: [U]=USER [ 878.642184][T15560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 878.642203][T15560] Call Trace: [ 878.642214][T15560] [ 878.642226][T15560] dump_stack_lvl+0x16c/0x1f0 [ 878.642277][T15560] should_fail_ex+0x512/0x640 [ 878.642335][T15560] get_futex_key+0x293/0x1540 [ 878.642394][T15560] ? __pfx_get_futex_key+0x10/0x10 [ 878.642449][T15560] ? __mutex_trylock_common+0xe9/0x250 [ 878.642497][T15560] futex_wake+0xea/0x530 [ 878.642539][T15560] ? __pfx_futex_wake+0x10/0x10 [ 878.642575][T15560] ? __lock_acquire+0xb8a/0x1c90 [ 878.642628][T15560] do_futex+0x1e3/0x350 [ 878.642666][T15560] ? __pfx_do_futex+0x10/0x10 [ 878.642695][T15560] ? __might_fault+0xe3/0x190 [ 878.642747][T15560] mm_release+0x24e/0x300 [ 878.642799][T15560] do_exit+0x683/0x2bd0 [ 878.642843][T15560] ? __pfx_do_exit+0x10/0x10 [ 878.642878][T15560] ? do_raw_spin_lock+0x12c/0x2b0 [ 878.642918][T15560] ? find_held_lock+0x2b/0x80 [ 878.642972][T15560] do_group_exit+0xd3/0x2a0 [ 878.643012][T15560] get_signal+0x2673/0x26d0 [ 878.643072][T15560] ? find_held_lock+0x2b/0x80 [ 878.643123][T15560] ? __might_fault+0xe3/0x190 [ 878.643165][T15560] ? __pfx_get_signal+0x10/0x10 [ 878.643214][T15560] ? do_futex+0x122/0x350 [ 878.643247][T15560] ? __pfx_do_futex+0x10/0x10 [ 878.643282][T15560] arch_do_signal_or_restart+0x8f/0x790 [ 878.643336][T15560] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 878.643400][T15560] ? xfd_validate_state+0x61/0x180 [ 878.643444][T15560] exit_to_user_mode_loop+0x84/0x110 [ 878.643489][T15560] do_syscall_64+0x3f6/0x490 [ 878.643539][T15560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.643572][T15560] RIP: 0033:0x7f7dffd8e969 [ 878.643598][T15560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.643631][T15560] RSP: 002b:00007f7e00bbb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 878.643662][T15560] RAX: fffffffffffffe00 RBX: 00007f7dfffb6088 RCX: 00007f7dffd8e969 [ 878.643685][T15560] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7dfffb6088 [ 878.643706][T15560] RBP: 00007f7dfffb6080 R08: 0000000000000000 R09: 0000000000000000 [ 878.643727][T15560] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7dfffb608c [ 878.643749][T15560] R13: 0000000000000000 R14: 00007fffaca502d0 R15: 00007fffaca503b8 [ 878.643791][T15560] [ 879.172506][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.208804][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 884.217017][T15642] netlink: 'syz.0.1711': attribute type 11 has an invalid length. [ 884.306788][T15645] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 884.396232][T15643] can: request_module (can-proto-3) failed. [ 885.070092][T15649] netlink: 'syz.0.1712': attribute type 11 has an invalid length. [ 885.154308][T15652] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 885.176535][T15653] netlink: 'syz.2.1713': attribute type 11 has an invalid length. [ 885.225174][T15653] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 885.915689][T15661] netlink: 'syz.3.1715': attribute type 11 has an invalid length. [ 886.001159][T15663] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 886.108461][T15665] netlink: 'syz.0.1716': attribute type 11 has an invalid length. [ 886.200600][T15668] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 887.433764][T15682] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1720'. [ 887.608701][T15686] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1719'. [ 887.640780][T15686] mac80211_hwsim hwsim2 ›: renamed from wlan0 (while UP) [ 887.721226][T15692] netlink: 'syz.2.1721': attribute type 11 has an invalid length. [ 887.754578][T15692] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 888.467639][T15702] netlink: 'syz.3.1722': attribute type 11 has an invalid length. [ 888.691424][T15702] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 889.723995][T15714] netlink: 'syz.3.1725': attribute type 11 has an invalid length. [ 889.888834][T15714] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 889.942563][T15717] netlink: 'syz.1.1727': attribute type 11 has an invalid length. [ 889.963045][T15717] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 892.281836][T15739] FAULT_INJECTION: forcing a failure. [ 892.281836][T15739] name failslab, interval 1, probability 0, space 0, times 0 [ 892.321685][T15739] CPU: 0 UID: 0 PID: 15739 Comm: syz.2.1730 Tainted: G U 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 892.321743][T15739] Tainted: [U]=USER [ 892.321755][T15739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 892.321776][T15739] Call Trace: [ 892.321788][T15739] [ 892.321802][T15739] dump_stack_lvl+0x16c/0x1f0 [ 892.321864][T15739] should_fail_ex+0x512/0x640 [ 892.321919][T15739] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 892.321971][T15739] should_failslab+0xc2/0x120 [ 892.322022][T15739] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 892.322070][T15739] ? acpi_ut_create_generic_state+0x5c/0xb0 [ 892.322128][T15739] acpi_ut_create_generic_state+0x5c/0xb0 [ 892.322178][T15739] acpi_ps_push_scope+0x22/0x230 [ 892.322238][T15739] acpi_ps_parse_loop+0x9f3/0x1d00 [ 892.322303][T15739] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 892.322357][T15739] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 892.322402][T15739] ? acpi_ut_create_thread_state+0x63/0x170 [ 892.322463][T15739] acpi_ps_parse_aml+0x3c1/0xcb0 [ 892.322527][T15739] acpi_ps_execute_method+0x55a/0xb30 [ 892.322583][T15739] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 892.322629][T15739] acpi_ns_evaluate+0x76c/0xca0 [ 892.322670][T15739] ? kasan_save_track+0x14/0x30 [ 892.322719][T15739] acpi_evaluate_object+0x1fa/0xa90 [ 892.322775][T15739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.322813][T15739] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 892.322874][T15739] ? __mutex_trylock_common+0xe9/0x250 [ 892.322920][T15739] acpi_evaluate_integer+0xdd/0x200 [ 892.322966][T15739] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 892.323032][T15739] ? __pfx_status_show+0x10/0x10 [ 892.323084][T15739] status_show+0xa0/0x120 [ 892.323137][T15739] ? __pfx_status_show+0x10/0x10 [ 892.323202][T15739] dev_attr_show+0x53/0xe0 [ 892.323241][T15739] ? __pfx_dev_attr_show+0x10/0x10 [ 892.323275][T15739] sysfs_kf_seq_show+0x213/0x3e0 [ 892.323322][T15739] seq_read_iter+0x506/0x12c0 [ 892.323379][T15739] kernfs_fop_read_iter+0x40f/0x5a0 [ 892.323433][T15739] ? rw_verify_area+0xcf/0x680 [ 892.323475][T15739] vfs_read+0x8bf/0xc60 [ 892.323522][T15739] ? __pfx___mutex_lock+0x10/0x10 [ 892.323571][T15739] ? __pfx_vfs_read+0x10/0x10 [ 892.323644][T15739] ksys_read+0x12a/0x250 [ 892.323687][T15739] ? __pfx_ksys_read+0x10/0x10 [ 892.323742][T15739] do_syscall_64+0xcd/0x490 [ 892.323793][T15739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.323834][T15739] RIP: 0033:0x7fc99218e969 [ 892.323863][T15739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.323898][T15739] RSP: 002b:00007fc99305e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 892.323932][T15739] RAX: ffffffffffffffda RBX: 00007fc9923b6080 RCX: 00007fc99218e969 [ 892.323956][T15739] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 892.323978][T15739] RBP: 00007fc992210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 892.324000][T15739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 892.324022][T15739] R13: 0000000000000000 R14: 00007fc9923b6080 R15: 00007ffe67858b48 [ 892.324068][T15739] [ 892.324118][T15739] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 893.237257][T15753] ubi: mtd0 is already attached to ubi0 [ 894.057552][T15759] netlink: 'syz.1.1734': attribute type 11 has an invalid length. [ 894.941747][T15771] netlink: 'syz.1.1737': attribute type 11 has an invalid length. [ 895.006294][T15771] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 896.759184][T15791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1739'. [ 896.798845][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 896.805358][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 897.202573][T15800] netlink: 'syz.2.1741': attribute type 11 has an invalid length. [ 897.335325][T15800] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 897.363422][T15803] netlink: 'syz.1.1742': attribute type 11 has an invalid length. [ 897.378368][T15803] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 900.254295][T15814] FAULT_INJECTION: forcing a failure. [ 900.254295][T15814] name failslab, interval 1, probability 0, space 0, times 0 [ 900.321518][T15814] CPU: 0 UID: 0 PID: 15814 Comm: syz.0.1743 Tainted: G U 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 900.321579][T15814] Tainted: [U]=USER [ 900.321592][T15814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 900.321613][T15814] Call Trace: [ 900.321626][T15814] [ 900.321641][T15814] dump_stack_lvl+0x16c/0x1f0 [ 900.321708][T15814] should_fail_ex+0x512/0x640 [ 900.321764][T15814] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 900.321817][T15814] should_failslab+0xc2/0x120 [ 900.321869][T15814] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 900.321915][T15814] ? acpi_ps_alloc_op+0x25f/0x310 [ 900.321954][T15814] acpi_ps_alloc_op+0x25f/0x310 [ 900.321993][T15814] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 900.322040][T15814] acpi_ps_create_op+0x3dc/0xc20 [ 900.322098][T15814] ? trace_kmem_cache_alloc+0x28/0xc0 [ 900.322153][T15814] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 900.322215][T15814] ? acpi_ut_push_generic_state+0x13/0x70 [ 900.322272][T15814] acpi_ps_parse_loop+0xdd8/0x1d00 [ 900.322338][T15814] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 900.322393][T15814] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 900.322440][T15814] ? acpi_ut_create_thread_state+0x63/0x170 [ 900.322501][T15814] acpi_ps_parse_aml+0x3c1/0xcb0 [ 900.322561][T15814] acpi_ps_execute_method+0x55a/0xb30 [ 900.322598][T15814] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 900.322641][T15814] acpi_ns_evaluate+0x76c/0xca0 [ 900.322678][T15814] ? kasan_save_track+0x14/0x30 [ 900.322725][T15814] acpi_evaluate_object+0x1fa/0xa90 [ 900.322780][T15814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.322817][T15814] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 900.322865][T15814] ? __mutex_trylock_common+0xe9/0x250 [ 900.322907][T15814] acpi_evaluate_integer+0xdd/0x200 [ 900.322952][T15814] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 900.323023][T15814] ? __pfx_status_show+0x10/0x10 [ 900.323072][T15814] status_show+0xa0/0x120 [ 900.323125][T15814] ? __pfx_status_show+0x10/0x10 [ 900.323189][T15814] dev_attr_show+0x53/0xe0 [ 900.323228][T15814] ? __pfx_dev_attr_show+0x10/0x10 [ 900.323260][T15814] sysfs_kf_seq_show+0x213/0x3e0 [ 900.323304][T15814] seq_read_iter+0x506/0x12c0 [ 900.323359][T15814] kernfs_fop_read_iter+0x40f/0x5a0 [ 900.323413][T15814] ? rw_verify_area+0xcf/0x680 [ 900.323454][T15814] vfs_read+0x8bf/0xc60 [ 900.323502][T15814] ? __pfx___mutex_lock+0x10/0x10 [ 900.323551][T15814] ? __pfx_vfs_read+0x10/0x10 [ 900.323623][T15814] ksys_read+0x12a/0x250 [ 900.323665][T15814] ? __pfx_ksys_read+0x10/0x10 [ 900.323722][T15814] do_syscall_64+0xcd/0x490 [ 900.323777][T15814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.323812][T15814] RIP: 0033:0x7f7dffd8e969 [ 900.323842][T15814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.323877][T15814] RSP: 002b:00007f7e00bbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 900.323910][T15814] RAX: ffffffffffffffda RBX: 00007f7dfffb6080 RCX: 00007f7dffd8e969 [ 900.323934][T15814] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 900.323956][T15814] RBP: 00007f7dffe10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 900.323984][T15814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 900.324005][T15814] R13: 0000000000000000 R14: 00007f7dfffb6080 R15: 00007fffaca503b8 [ 900.324052][T15814] [ 900.324104][T15814] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 903.396362][T15869] netlink: 'syz.3.1753': attribute type 11 has an invalid length. [ 903.429923][T15869] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 905.308310][T15898] netlink: 'syz.2.1757': attribute type 11 has an invalid length. [ 905.991996][T15900] program syz.0.1756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.251966][T15877] FAULT_INJECTION: forcing a failure. [ 906.251966][T15877] name failslab, interval 1, probability 0, space 0, times 0 [ 906.298468][T15877] CPU: 1 UID: 0 PID: 15877 Comm: syz.3.1754 Tainted: G U 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 906.298526][T15877] Tainted: [U]=USER [ 906.298538][T15877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 906.298560][T15877] Call Trace: [ 906.298571][T15877] [ 906.298584][T15877] dump_stack_lvl+0x16c/0x1f0 [ 906.298637][T15877] should_fail_ex+0x512/0x640 [ 906.298692][T15877] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 906.298742][T15877] should_failslab+0xc2/0x120 [ 906.298795][T15877] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 906.298842][T15877] ? ptlock_alloc+0x1f/0x70 [ 906.298887][T15877] ptlock_alloc+0x1f/0x70 [ 906.298924][T15877] pte_alloc_one+0x82/0x3a0 [ 906.298970][T15877] __pte_alloc+0x6d/0x3c0 [ 906.299031][T15877] ? __pfx___pte_alloc+0x10/0x10 [ 906.299082][T15877] ? __pfx___might_resched+0x10/0x10 [ 906.299135][T15877] ? copy_page_range+0x1418/0x55d0 [ 906.299180][T15877] copy_page_range+0x1afe/0x55d0 [ 906.299273][T15877] ? __pfx_copy_page_range+0x10/0x10 [ 906.299314][T15877] ? mas_store+0x7a9/0x1160 [ 906.299369][T15877] ? find_held_lock+0x2b/0x80 [ 906.299420][T15877] ? __vma_enter_locked+0x163/0x3f0 [ 906.299484][T15877] dup_mmap+0xe88/0x21d0 [ 906.299535][T15877] ? __pfx_dup_mmap+0x10/0x10 [ 906.299600][T15877] copy_process+0x4081/0x76a0 [ 906.299632][T15877] ? preempt_schedule_thunk+0x16/0x30 [ 906.299692][T15877] ? __pfx_copy_process+0x10/0x10 [ 906.299723][T15877] ? plist_check_head+0xa3/0x150 [ 906.299768][T15877] ? futex_private_hash_put+0xc7/0x240 [ 906.299829][T15877] kernel_clone+0xfc/0x960 [ 906.299864][T15877] ? __pfx_futex_wake+0x10/0x10 [ 906.299904][T15877] ? __pfx_kernel_clone+0x10/0x10 [ 906.299963][T15877] __do_sys_clone+0xce/0x120 [ 906.300004][T15877] ? __pfx___do_sys_clone+0x10/0x10 [ 906.300039][T15877] ? ksys_unshare+0x687/0xa40 [ 906.300094][T15877] ? xfd_validate_state+0x61/0x180 [ 906.300146][T15877] do_syscall_64+0xcd/0x490 [ 906.300198][T15877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.300234][T15877] RIP: 0033:0x7f347f58e969 [ 906.300263][T15877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.300298][T15877] RSP: 002b:00007f348045efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 906.300331][T15877] RAX: ffffffffffffffda RBX: 00007f347f7b5fa0 RCX: 00007f347f58e969 [ 906.300355][T15877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 906.300375][T15877] RBP: 00007f347f610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 906.300396][T15877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 906.300417][T15877] R13: 0000000000000000 R14: 00007f347f7b5fa0 R15: 00007fffdc4c8f28 [ 906.300462][T15877] [ 906.906584][T15905] FAULT_INJECTION: forcing a failure. [ 906.906584][T15905] name failslab, interval 1, probability 0, space 0, times 0 [ 906.973989][T15905] CPU: 0 UID: 0 PID: 15905 Comm: syz.1.1758 Tainted: G U 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 906.974049][T15905] Tainted: [U]=USER [ 906.974063][T15905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 906.974085][T15905] Call Trace: [ 906.974098][T15905] [ 906.974113][T15905] dump_stack_lvl+0x16c/0x1f0 [ 906.974168][T15905] should_fail_ex+0x512/0x640 [ 906.974223][T15905] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 906.974274][T15905] should_failslab+0xc2/0x120 [ 906.974324][T15905] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 906.974373][T15905] ? acpi_ps_alloc_op+0x25f/0x310 [ 906.974412][T15905] acpi_ps_alloc_op+0x25f/0x310 [ 906.974442][T15905] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 906.974490][T15905] acpi_ps_create_op+0x3dc/0xc20 [ 906.974545][T15905] ? trace_kmem_cache_alloc+0x28/0xc0 [ 906.974600][T15905] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 906.974661][T15905] ? acpi_ut_push_generic_state+0x13/0x70 [ 906.974717][T15905] acpi_ps_parse_loop+0xdd8/0x1d00 [ 906.974783][T15905] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 906.974837][T15905] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 906.974884][T15905] ? acpi_ut_create_thread_state+0x63/0x170 [ 906.974954][T15905] acpi_ps_parse_aml+0x3c1/0xcb0 [ 906.975018][T15905] acpi_ps_execute_method+0x55a/0xb30 [ 906.975058][T15905] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 906.975105][T15905] acpi_ns_evaluate+0x76c/0xca0 [ 906.975146][T15905] ? kasan_save_track+0x14/0x30 [ 906.975194][T15905] acpi_evaluate_object+0x1fa/0xa90 [ 906.975251][T15905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.975289][T15905] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 906.975344][T15905] ? __mutex_trylock_common+0xe9/0x250 [ 906.975390][T15905] acpi_evaluate_integer+0xdd/0x200 [ 906.975437][T15905] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 906.975502][T15905] ? __pfx_status_show+0x10/0x10 [ 906.975555][T15905] status_show+0xa0/0x120 [ 906.975607][T15905] ? __pfx_status_show+0x10/0x10 [ 906.975671][T15905] dev_attr_show+0x53/0xe0 [ 906.975710][T15905] ? __pfx_dev_attr_show+0x10/0x10 [ 906.975745][T15905] sysfs_kf_seq_show+0x213/0x3e0 [ 906.975793][T15905] seq_read_iter+0x506/0x12c0 [ 906.975849][T15905] kernfs_fop_read_iter+0x40f/0x5a0 [ 906.975904][T15905] ? rw_verify_area+0xcf/0x680 [ 906.975953][T15905] vfs_read+0x8bf/0xc60 [ 906.976001][T15905] ? __pfx___mutex_lock+0x10/0x10 [ 906.976050][T15905] ? __pfx_vfs_read+0x10/0x10 [ 906.976120][T15905] ksys_read+0x12a/0x250 [ 906.976167][T15905] ? __pfx_ksys_read+0x10/0x10 [ 906.976226][T15905] do_syscall_64+0xcd/0x490 [ 906.976278][T15905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.976313][T15905] RIP: 0033:0x7ff0d978e969 [ 906.976342][T15905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.976378][T15905] RSP: 002b:00007ff0da672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 906.976411][T15905] RAX: ffffffffffffffda RBX: 00007ff0d99b6080 RCX: 00007ff0d978e969 [ 906.976435][T15905] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 906.976457][T15905] RBP: 00007ff0d9810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 906.976479][T15905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.976501][T15905] R13: 0000000000000000 R14: 00007ff0d99b6080 R15: 00007ffcb6b66ac8 [ 906.976546][T15905] [ 907.381793][T15905] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250404/psparse-529) [ 909.631418][ T30] audit: type=1800 audit(6043761808.873:10): pid=15947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1764" name="dbroot" dev="configfs" ino=44840 res=0 errno=0 [ 909.683733][T15947] FAULT_INJECTION: forcing a failure. [ 909.683733][T15947] name failslab, interval 1, probability 0, space 0, times 0 [ 909.713359][T15947] CPU: 0 UID: 0 PID: 15947 Comm: syz.0.1764 Tainted: G U 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 909.713412][T15947] Tainted: [U]=USER [ 909.713420][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 909.713435][T15947] Call Trace: [ 909.713443][T15947] [ 909.713453][T15947] dump_stack_lvl+0x16c/0x1f0 [ 909.713489][T15947] should_fail_ex+0x512/0x640 [ 909.713528][T15947] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 909.713559][T15947] should_failslab+0xc2/0x120 [ 909.713595][T15947] __kmalloc_cache_noprof+0x6a/0x3e0 [ 909.713623][T15947] ? snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 909.713657][T15947] snd_pcm_oss_change_params_locked+0x211/0x3a30 [ 909.713696][T15947] ? __might_resched+0x5/0x5e0 [ 909.713735][T15947] ? trace_contention_end+0xdd/0x130 [ 909.713763][T15947] ? __mutex_lock+0x1ca/0xb90 [ 909.713797][T15947] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 909.713825][T15947] ? __pfx___mutex_lock+0x10/0x10 [ 909.713867][T15947] ? find_held_lock+0x2b/0x80 [ 909.713916][T15947] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 909.713946][T15947] snd_pcm_oss_ioctl+0x31aa/0x37a0 [ 909.713970][T15947] ? find_held_lock+0x2b/0x80 [ 909.714003][T15947] ? hook_file_ioctl_common+0x145/0x410 [ 909.714032][T15947] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 909.714059][T15947] ? __fget_files+0x20e/0x3c0 [ 909.714091][T15947] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 909.714117][T15947] __x64_sys_ioctl+0x18b/0x210 [ 909.714142][T15947] do_syscall_64+0xcd/0x490 [ 909.714177][T15947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.714200][T15947] RIP: 0033:0x7f7dffd8e969 [ 909.714219][T15947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 909.714242][T15947] RSP: 002b:00007f7e00bdc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 909.714263][T15947] RAX: ffffffffffffffda RBX: 00007f7dfffb5fa0 RCX: 00007f7dffd8e969 [ 909.714279][T15947] RDX: 0000000000000000 RSI: 00000000c0045005 RDI: 0000000000000005 [ 909.714293][T15947] RBP: 00007f7dffe10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 909.714308][T15947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.714322][T15947] R13: 0000000000000000 R14: 00007f7dfffb5fa0 R15: 00007fffaca503b8 [ 909.714351][T15947] [ 912.937202][T15998] netlink: zone id is out of range [ 912.953568][T15998] netlink: zone id is out of range [ 912.958845][T15998] netlink: zone id is out of range [ 912.964564][T15998] netlink: zone id is out of range [ 912.969837][T15998] netlink: zone id is out of range [ 912.975311][T15998] netlink: zone id is out of range [ 912.980647][T15998] netlink: zone id is out of range [ 912.988834][T15998] netlink: zone id is out of range [ 912.994129][T15998] netlink: zone id is out of range [ 912.999519][T15998] netlink: zone id is out of range [ 913.967791][T16007] netlink: 'syz.1.1774': attribute type 11 has an invalid length. [ 914.041009][T16009] netlink: 'syz.3.1775': attribute type 11 has an invalid length. [ 914.116264][T16015] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 915.938642][T16043] netlink: 'syz.0.1780': attribute type 11 has an invalid length. [ 918.040329][T16070] bridge0: port 3(hsr_slave_1) entered blocking state [ 918.117505][T16070] bridge0: port 3(hsr_slave_1) entered disabled state [ 918.147300][T16070] hsr_slave_1: entered allmulticast mode [ 918.174609][T16070] hsr_slave_1: left allmulticast mode [ 918.473077][T16082] netlink: 'syz.2.1787': attribute type 11 has an invalid length. [ 918.598778][T16083] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 919.742715][T16104] can: request_module (can-proto-3) failed. [ 921.086609][T16129] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1793'. [ 921.445981][T16134] netlink: 'syz.0.1796': attribute type 11 has an invalid length. [ 921.508076][T16129] mac80211_hwsim hwsim10 ›: renamed from wlan0 [ 923.998967][T16154] netlink: 'syz.3.1799': attribute type 11 has an invalid length. [ 924.064351][T16155] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 926.155842][T16179] netlink: 'syz.1.1803': attribute type 11 has an invalid length. [ 927.441657][T16192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1805'. [ 928.800098][T16203] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1806'. [ 929.296503][T16213] netlink: 'syz.1.1810': attribute type 11 has an invalid length. [ 929.395200][T16217] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 930.470454][T16230] netlink: 'syz.1.1812': attribute type 11 has an invalid length. [ 930.573776][T16226] can: request_module (can-proto-3) failed. [ 930.592998][T16231] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 931.751348][T16236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1814'. [ 931.886380][ C1] vcan0: j1939_xtp_rx_dat: no rx connection found [ 931.892969][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 931.900859][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 931.908979][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 931.916886][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 931.924973][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 931.932793][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 931.940739][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 931.948581][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 931.956500][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 931.964353][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 931.972293][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 931.980141][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 931.988070][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 931.995906][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.003852][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.011671][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.019597][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.027452][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.035387][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.043206][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.051137][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.059064][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.067072][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.074927][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.082921][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.090783][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.098797][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.106784][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.114830][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.122684][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.130698][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.138729][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.146667][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.154513][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.162511][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.170385][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.178323][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.186182][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.194119][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.202029][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.209950][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.217791][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.225716][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.233570][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.241531][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.249400][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.257425][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.265276][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.273209][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.281129][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.289056][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.296923][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.304850][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.312931][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.320833][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.328690][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.336645][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.344528][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.352446][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.360354][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.368298][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.376144][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.384266][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.392112][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.400004][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.407885][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.416010][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.423860][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.431805][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.439639][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.447579][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.455611][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.463541][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.471503][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.479544][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.487420][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.495435][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.503278][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.511245][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.519064][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.526988][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.534832][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.542747][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.550560][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.558474][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.566335][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.574372][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.582260][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.590240][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.598173][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.606114][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.613964][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.621886][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.629794][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.637719][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.645669][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.653591][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.661431][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.669348][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.677184][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.685119][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.693056][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.701065][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.708942][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.716879][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.724814][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.732742][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.740673][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.748574][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.756482][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.764540][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.772398][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.780362][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.788187][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.796119][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.804175][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.812221][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.820072][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.827994][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.835849][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.843785][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.851654][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.859660][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.867481][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 932.875410][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 932.883254][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 940.264853][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 940.271226][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.258927][T16346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1829'. [ 941.452311][T16346] veth0_macvtap: left promiscuous mode [ 942.953304][T16363] netlink: 'syz.2.1832': attribute type 11 has an invalid length. [ 943.063837][T16365] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 946.995813][T16407] netlink: 'syz.2.1842': attribute type 11 has an invalid length. [ 947.082224][T16411] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 947.198167][T16415] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1841'. [ 947.808445][T16421] netlink: 'syz.3.1844': attribute type 11 has an invalid length. [ 947.874290][T16423] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 950.245684][T16451] netlink: 'syz.0.1849': attribute type 11 has an invalid length. [ 950.415267][T16453] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 950.518372][T16443] netlink: 'syz.3.1848': attribute type 10 has an invalid length. [ 950.538717][T16443] netlink: 230 bytes leftover after parsing attributes in process `syz.3.1848'. [ 950.664929][T16443] team0: Port device team_slave_1 removed [ 953.090426][T16479] [ 953.092916][T16479] ====================================================== [ 953.099975][T16479] WARNING: possible circular locking dependency detected [ 953.107222][T16479] 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 Tainted: G U [ 953.115686][T16479] ------------------------------------------------------ [ 953.122767][T16479] syz.2.1853/16479 is trying to acquire lock: [ 953.128982][T16479] ffff888025ea4a58 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x103/0x400 [ 953.138492][T16479] [ 953.138492][T16479] but task is already holding lock: [ 953.145877][T16479] ffff888025ea4520 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 953.157181][T16479] [ 953.157181][T16479] which lock already depends on the new lock. [ 953.157181][T16479] [ 953.167612][T16479] [ 953.167612][T16479] the existing dependency chain (in reverse order) is: [ 953.176748][T16479] [ 953.176748][T16479] -> #3 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 953.185491][T16479] blk_alloc_queue+0x619/0x760 [ 953.190815][T16479] blk_mq_alloc_queue+0x175/0x290 [ 953.196403][T16479] __blk_mq_alloc_disk+0x29/0x120 [ 953.201991][T16479] loop_add+0x49c/0xb70 [ 953.206732][T16479] loop_init+0x164/0x270 [ 953.211538][T16479] do_one_initcall+0x120/0x6e0 [ 953.216849][T16479] kernel_init_freeable+0x5c2/0x900 [ 953.222611][T16479] kernel_init+0x1c/0x2b0 [ 953.227486][T16479] ret_from_fork+0x5d4/0x6f0 [ 953.232622][T16479] ret_from_fork_asm+0x1a/0x30 [ 953.238012][T16479] [ 953.238012][T16479] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 953.245270][T16479] fs_reclaim_acquire+0x102/0x150 [ 953.250841][T16479] prepare_alloc_pages+0x162/0x610 [ 953.256502][T16479] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 953.263041][T16479] __alloc_pages_noprof+0xb/0x1b0 [ 953.268621][T16479] pcpu_populate_chunk+0x110/0xb00 [ 953.274306][T16479] pcpu_alloc_noprof+0x86a/0x1470 [ 953.279879][T16479] xt_percpu_counter_alloc+0x13e/0x1b0 [ 953.285891][T16479] find_check_entry.constprop.0+0xbf/0xa20 [ 953.292286][T16479] translate_table+0xd0b/0x17b0 [ 953.297683][T16479] ip6t_register_table+0x102/0x430 [ 953.303344][T16479] ip6table_filter_table_init+0x75/0xa0 [ 953.309448][T16479] xt_find_table_lock+0x2e1/0x520 [ 953.315029][T16479] xt_request_find_table_lock+0x28/0xf0 [ 953.321126][T16479] get_info+0x190/0x620 [ 953.325830][T16479] do_ip6t_get_ctl+0x169/0xa50 [ 953.331139][T16479] nf_getsockopt+0x7c/0xe0 [ 953.336097][T16479] ipv6_getsockopt+0x1f7/0x280 [ 953.341408][T16479] tcp_getsockopt+0x9e/0x100 [ 953.346552][T16479] do_sock_getsockopt+0x3fc/0x800 [ 953.352136][T16479] __sys_getsockopt+0x123/0x1b0 [ 953.357553][T16479] __x64_sys_getsockopt+0xbd/0x160 [ 953.363238][T16479] do_syscall_64+0xcd/0x490 [ 953.368309][T16479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.374755][T16479] [ 953.374755][T16479] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 953.382553][T16479] __mutex_lock+0x199/0xb90 [ 953.387617][T16479] pcpu_alloc_noprof+0xb4a/0x1470 [ 953.393195][T16479] sbitmap_init_node+0x2fd/0x770 [ 953.398682][T16479] sbitmap_queue_init_node+0x41/0x560 [ 953.404608][T16479] blk_mq_init_tags+0x12d/0x2b0 [ 953.410012][T16479] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 953.416124][T16479] blk_mq_init_sched+0x30c/0x610 [ 953.421611][T16479] elevator_switch+0x1e1/0x7f0 [ 953.426922][T16479] elevator_change+0x2ac/0x400 [ 953.432242][T16479] elevator_set_default+0x292/0x320 [ 953.437994][T16479] blk_register_queue+0x393/0x4f0 [ 953.443563][T16479] __add_disk+0x74a/0xf00 [ 953.448450][T16479] add_disk_fwnode+0x13f/0x5d0 [ 953.453773][T16479] nbd_dev_add+0x791/0xbc0 [ 953.458769][T16479] nbd_init+0x181/0x320 [ 953.463484][T16479] do_one_initcall+0x120/0x6e0 [ 953.468791][T16479] kernel_init_freeable+0x5c2/0x900 [ 953.474548][T16479] kernel_init+0x1c/0x2b0 [ 953.479420][T16479] ret_from_fork+0x5d4/0x6f0 [ 953.484559][T16479] ret_from_fork_asm+0x1a/0x30 [ 953.489869][T16479] [ 953.489869][T16479] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 953.497756][T16479] __lock_acquire+0x126f/0x1c90 [ 953.503163][T16479] lock_acquire+0x179/0x350 [ 953.508216][T16479] __mutex_lock+0x199/0xb90 [ 953.513397][T16479] elevator_change+0x103/0x400 [ 953.518723][T16479] elv_iosched_store+0x2eb/0x3a0 [ 953.524338][T16479] queue_attr_store+0x276/0x320 [ 953.529846][T16479] sysfs_kf_write+0xef/0x150 [ 953.534992][T16479] kernfs_fop_write_iter+0x354/0x510 [ 953.540888][T16479] vfs_write+0x6c7/0x1150 [ 953.545775][T16479] ksys_write+0x12a/0x250 [ 953.550662][T16479] do_syscall_64+0xcd/0x490 [ 953.555739][T16479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.562267][T16479] [ 953.562267][T16479] other info that might help us debug this: [ 953.562267][T16479] [ 953.572540][T16479] Chain exists of: [ 953.572540][T16479] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 953.572540][T16479] [ 953.586332][T16479] Possible unsafe locking scenario: [ 953.586332][T16479] [ 953.593796][T16479] CPU0 CPU1 [ 953.599175][T16479] ---- ---- [ 953.604551][T16479] lock(&q->q_usage_counter(io)#22); [ 953.609965][T16479] lock(fs_reclaim); [ 953.616495][T16479] lock(&q->q_usage_counter(io)#22); [ 953.624423][T16479] lock(&q->elevator_lock); [ 953.629045][T16479] [ 953.629045][T16479] *** DEADLOCK *** [ 953.629045][T16479] [ 953.637201][T16479] 7 locks held by syz.2.1853/16479: [ 953.642414][T16479] #0: ffff888034aa09b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 953.651533][T16479] #1: ffff888032936428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 953.660568][T16479] #2: ffff88803202e088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 953.670397][T16479] #3: ffff8881405ce3c8 (kn->active#145){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 953.680613][T16479] #4: ffff8881423ce368 (&set->update_nr_hwq_lock){.+.+}-{4:4}, at: elv_iosched_store+0x337/0x3a0 [ 953.691390][T16479] #5: ffff888025ea4520 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 953.703121][T16479] #6: ffff888025ea4558 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 953.715115][T16479] [ 953.715115][T16479] stack backtrace: [ 953.721119][T16479] CPU: 0 UID: 0 PID: 16479 Comm: syz.2.1853 Tainted: G U 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 953.721164][T16479] Tainted: [U]=USER [ 953.721174][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 953.721193][T16479] Call Trace: [ 953.721204][T16479] [ 953.721216][T16479] dump_stack_lvl+0x116/0x1f0 [ 953.721258][T16479] print_circular_bug+0x275/0x350 [ 953.721289][T16479] check_noncircular+0x14c/0x170 [ 953.721322][T16479] __lock_acquire+0x126f/0x1c90 [ 953.721357][T16479] lock_acquire+0x179/0x350 [ 953.721385][T16479] ? elevator_change+0x103/0x400 [ 953.721424][T16479] ? __pfx___might_resched+0x10/0x10 [ 953.721470][T16479] __mutex_lock+0x199/0xb90 [ 953.721509][T16479] ? elevator_change+0x103/0x400 [ 953.721546][T16479] ? elevator_change+0x103/0x400 [ 953.721584][T16479] ? __pfx___mutex_lock+0x10/0x10 [ 953.721628][T16479] ? blk_mq_cancel_work_sync+0xd8/0x110 [ 953.721674][T16479] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 953.721762][T16479] ? elevator_change+0x103/0x400 [ 953.721797][T16479] elevator_change+0x103/0x400 [ 953.721835][T16479] elv_iosched_store+0x2eb/0x3a0 [ 953.721876][T16479] ? __pfx_elv_iosched_store+0x10/0x10 [ 953.721921][T16479] ? __mutex_trylock_common+0xe9/0x250 [ 953.721953][T16479] ? __pfx_elv_iosched_store+0x10/0x10 [ 953.721994][T16479] queue_attr_store+0x276/0x320 [ 953.722023][T16479] ? __pfx_queue_attr_store+0x10/0x10 [ 953.722049][T16479] ? __lock_acquire+0x622/0x1c90 [ 953.722086][T16479] ? find_held_lock+0x2b/0x80 [ 953.722126][T16479] ? sysfs_file_kobj+0xe4/0x290 [ 953.722156][T16479] ? __pfx_queue_attr_store+0x10/0x10 [ 953.722184][T16479] sysfs_kf_write+0xef/0x150 [ 953.722214][T16479] kernfs_fop_write_iter+0x354/0x510 [ 953.722260][T16479] ? __pfx_sysfs_kf_write+0x10/0x10 [ 953.722291][T16479] vfs_write+0x6c7/0x1150 [ 953.722325][T16479] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 953.722373][T16479] ? __pfx___mutex_lock+0x10/0x10 [ 953.722411][T16479] ? __pfx_vfs_write+0x10/0x10 [ 953.722456][T16479] ksys_write+0x12a/0x250 [ 953.722489][T16479] ? __pfx_ksys_write+0x10/0x10 [ 953.722528][T16479] do_syscall_64+0xcd/0x490 [ 953.722568][T16479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.722597][T16479] RIP: 0033:0x7fc99218e969 [ 953.722619][T16479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 953.722648][T16479] RSP: 002b:00007fc99307f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 953.722674][T16479] RAX: ffffffffffffffda RBX: 00007fc9923b5fa0 RCX: 00007fc99218e969 [ 953.722694][T16479] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 953.722711][T16479] RBP: 00007fc992210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 953.722736][T16479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 953.722754][T16479] R13: 0000000000000000 R14: 00007fc9923b5fa0 R15: 00007ffe67858b48 [ 953.722781][T16479] [ 955.009509][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.015962][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 955.024300][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.030645][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 955.038919][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.046903][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 955.055391][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 955.061726][ T1303] ieee802154 phy1 wpan1: encryption failed: -22