last executing test programs: 26m52.6117852s ago: executing program 3 (id=952): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) rt_sigaction$auto(0x11, &(0x7f0000000040)={0x0, 0x100000001, 0x0, {0x7}}, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x20009, 0x20000000) io_uring_setup$auto(0x1, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)={0x0, 0xe, 0x95d7, 0x7f, 0x4, 0x1, 0x9, 0x3, 0x3ff, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0xfffc, 0x400, 0xb0e1, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000001c0)="0fd04d1419b5351fb8079489dc9bd4bac547297278545a89d75c1915fca58ffb3407b4382c50596f1ef1a83dae55484b65088a5f09176c44ec166f89fd8078ea9e33063e308140331807cfc162f03311f5bc840cc6aee038a591177b0339de673cd4466c5e1e284a69119c24722641cd14126ea308105b4ce8cff1c38e266d9735d3c79d817dfa442ebe4aae183560cc024fdd343163d9", 0x1000}, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) read$auto(0x3, 0x0, 0x80000001) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x8800000000000001}, 0x1) pread64$auto(r2, &(0x7f0000000340)='/dev/bus/usb/013/001\x00', 0x6f, 0xdf) close_range$auto(0x2, 0x8, 0x0) 26m51.153829644s ago: executing program 3 (id=956): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.7/usb24/remove\x00', 0x165b40, 0x0) (async, rerun: 64) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_GET(r0, 0x0, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000580)={0x18, r2, 0x601, 0x70bd24, 0x25cfdbfe, {}, [@OVS_FLOW_ATTR_PROBE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) (rerun: 64) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/can/rcvlist_inv\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, 0x0, 0x0) unshare$auto(0x40000080) r4 = socket(0xa, 0x1, 0x84) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x10000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r5 = open(0x0, 0x40, 0xa2) (async) mbind$auto(0x8, 0x2091d2, 0x4, 0x0, 0xa, 0x2) r6 = socket(0x10, 0x2, 0x4) write$auto(r6, &(0x7f0000000000)='-\x00', 0x2fb) (async) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)=@bpf_attr_4={0xa5, r5, 0xff, r4}, 0x2) (async) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x7ffe) (async) pread64$auto(r7, 0x0, 0x40000000f42c, 0x585) (async, rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) (async, rerun: 32) mbind$auto(0x2000, 0x100000004, 0xfffffffd, 0x0, 0x6, 0x2) (async) mmap$auto(0x2, 0xf0, 0x4000000000df, 0x4000000000eb1, 0x4, 0x18000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf251e00000018000180140002006e657464657673696d30000000000000040002806570658c11566b5694282e6d506805239cbc0af5d58d8fcfa73cba1926af60320725f5bcc2f91b699b4f633ffc1896d1b65377b0e24a2e062740e53544dc7a9ff0d149fbf7baf1f394f3fb64530c54f12838538cffd2db837e714fc4b73182ed726211b73cf0979d017a67d4c79f604be37a7bee0c8db4ef2a3a904f85476b88abb6c8a9f668582f0f94da62908a67e98ce8285c766045043df9daeba751d49a54d016cfe828ac0250e54bf5d52f022fa3649e1a55b57ced3b977fd7767bc9a1240daef8b08137fe50348ac5"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00) (async) read$auto(0xffffffffffffffff, 0x0, 0x80000000006) 26m49.922480008s ago: executing program 3 (id=959): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) ioperm$auto(0x2, 0x3, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x185002, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x109b80, 0x0) r0 = socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) write$auto(r2, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) ioperm$auto(0x3, 0x7, 0x45) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$auto(0x3, 0x40047452, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, 0x0, 0x5) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 26m46.791438228s ago: executing program 3 (id=967): mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4006) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r0, 0x4611, r0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x1c9802, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x8600, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x400, 0x3, 0xffffffffffffffff, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x3, 0xe988, 0x4, 0x17, 0x401, 0x4008000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty39\x00', 0x802, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/seq/drivers\x00', 0x101100, 0x0) pread64$auto(r3, 0x0, 0x40000000f42c, 0x80002) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40007, 0x1000000005, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x90a, r2) mmap$auto(0x0, 0x4020009, 0xc11, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) listxattr$auto(0x0, 0x0, 0xf) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, 0x0, 0x0) 26m41.995587944s ago: executing program 3 (id=978): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20010, 0x7, 0xeb1, 0x404, 0x10008000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x20010, 0x7, 0xeb1, 0x404, 0x10008000) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) 26m37.22509656s ago: executing program 3 (id=987): madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x19) r1 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read$auto_debug_help_fops_orangefs_debugfs(r1, 0x0, 0x0) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000005c8141f03165d5a369cfb0d408b0d3e912f4e8daafb7f8aac01c13ea0d7fa07c0ba41b984a7b10dcdac596b265bfc74787e645e73d28aa45b497d1bac3c847d81203489764b287a0", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x2, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r2, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) 26m21.983866066s ago: executing program 32 (id=987): madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x19) r1 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read$auto_debug_help_fops_orangefs_debugfs(r1, 0x0, 0x0) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000005c8141f03165d5a369cfb0d408b0d3e912f4e8daafb7f8aac01c13ea0d7fa07c0ba41b984a7b10dcdac596b265bfc74787e645e73d28aa45b497d1bac3c847d81203489764b287a0", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x2, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r2, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) 24m15.901024938s ago: executing program 4 (id=1309): sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0x2, 0x9, 0x939, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r0) shmctl$auto(0x10001, 0x4, &(0x7f0000000480)={{0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0xf8fc, 0x4, 0xc09, 0x5}, 0xe4, 0x1, 0xe1e, 0x9, @raw=0x400, @raw=0x3, 0x3, 0x0, &(0x7f0000000200)="6f6277bf811573f531bb51b2ff5a87aa05b8dee4f49ce63eee1ba1a11b14d0ee845b65c7b916de3114dce5e311d6d2cd494cebddf15dd8ff6cc4707bc800b25097fe03e13fcd771071e44125038707ec9f303188628dfa5d40bfdaa65a502d0aeddc96f2c5e2e5b85007416fbca0f9e1f06d2aa8591145642558520f29ea05c8ee531de6a0fc233a110fef17f8064b36e988915c93ee2c0bc90beee09eaa42133f27266bc220eaf5fe6eac4061bd5a2d9f26514c5732e6923a0b94b655fc23adf2f9fdd4a5bf5974b6db2aa1b6b7a18c3ac58159960413ee4f87d66f0d91d0bf712bf8f26d", &(0x7f0000000300)="dcef39efb21c28e4d6e01d609f7c18d028de082915ef21b875c78738a1d418b18e494ae636c52aabaf8911dab139b0d3729facd811271f5cfa18422831733ac277cb707350829a51710f3de8ad0fab1556100690905e46f8d516e148b66921ea53076455fea50d68f92951a5f1495c1313e14adada3ced6291af604e64a3aea7c717db48a7fe9dde2d08b1e4f2dbd010ea5796ff254666f8240e650a1bfcf87e9cc99123def33220df5b0d806d8cfb5462923306e9c2d799472af56a175f5951bda20324e12e86ab2371627394fd8e72ebbcab40d3a7a217f11a1a4c5d5bfc5bab"}) msgctl$auto_MSG_STAT(0x44c, 0xb, &(0x7f0000000540)={{0xffffffff, 0xee01, 0x0, 0x6, 0x4, 0x8, 0x6}, &(0x7f0000000140)=0x5, &(0x7f0000000500)=0x3, 0x440, 0x2, 0xe, 0x80, 0x80000000, 0xf, 0x3, 0x8, @raw=0x6, @raw=0x9}) setfsuid$auto(0xee00) setfsuid$auto(0xee01) sendmsg$auto_TIPC_NL_BEARER_GET(r1, 0x0, 0x80) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r2, 0x0, 0x39b8) sendfile$auto(r2, 0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0xa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/memory/memory11/valid_zones\x00', 0x385382, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) 24m6.87453824s ago: executing program 4 (id=1332): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x5608, 0xffffffffffffffff) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, 0x0, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x26, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, 0x0, 0x0) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) read$auto(r3, 0x0, 0x3ff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r4, 0x400, 0x1) fcntl$auto(0x3, 0x8, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x88841, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) r5 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000540)="6873f28e14dfbd5616a3d126887f") ioctl$auto_AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000000c0)=0x400) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x84) ioctl$auto_TIOCSCTTY2(r5, 0x540e, &(0x7f0000000300)="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") close_range$auto(0x2, 0xa, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) write$auto(0x1, 0x0, 0x80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c084}, 0x51) epoll_ctl$auto_EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1, 0x0) 24m4.682743401s ago: executing program 4 (id=1341): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x5608, 0xffffffffffffffff) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, 0x0, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x26, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, 0x0, 0x0) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) read$auto(r3, 0x0, 0x3ff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r4, 0x400, 0x1) fcntl$auto(0x3, 0x8, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x88841, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) r5 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000540)="6873f28e14dfbd5616a3d126887f") ioctl$auto_AUTOFS_IOC_PROTOSUBVER(r5, 0x80049367, &(0x7f00000000c0)=0x400) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x84) ioctl$auto_TIOCSCTTY2(r5, 0x540e, &(0x7f0000000300)="7908785a95f1ff4e6ae5416413f78a99a264cb2802b492c2470e4b0ad356e4d391c93a318f56c8a13cc1dc0f78847a4cb9cffac2d135977991a4a77966ec817383dabf0e2fc00524db868c07dc1ccadf9bd93cf7e60d42be5380975335c37d698067ef10d9ae7f4f4a637a4896f93a7ba6dffe0218373a1eb6b2399740adeb841c216e0915630361febd197ad6c8498edd10f3981ee8e5742688131af4a3db279cc2f1ba9ac1f8c294dc92b6fad05dd2b30808f7b5285761e6f0549f24555e8cbed2402b3478c79513b20789ec03ee43b223f3b97d501cf3bb953904c159836ac2b77885c91cf3c0ec5b820c099bc56825051a734fd906503e848a19e77e1dc6413f2af9cdef32146cf2472e15b531501c44c4f6dbecf35d33b41618717032ea12fd59f3be2ca597b3b7c9ef8490fba358dd330431094d7883ce7133f2e2db3e8d22bac51b9a3922712b545f279f48973bc425082d7406623444a369f3cf5354a1078dd46fa77125818061e15bbeeba93dba21a0b992f2fec6502318b4fb73e7d6daca5326b76b529d110412f1e18d22c07bd59cb1195740483efda9b534e750d3c7a9167b638312d68c39c23d39514be9ec5055bd948c80a0a76f85f4bd33f65f2d06f84fa88482131d1c9fa1cdf4582760cf2a94dac9c074eade13dbcfa7a6074ce452c2dd3249fc9714bef10eccdf2160021ec67665feb41cf39fbe6b3ffadcc6305053b38b879800c6b0b5c2e2bb43de2373000e2ceea5e3e53c33811f39d8ff52c75fc1aa1da258f3fd91bdb9e3349c0151f1fe55f8330824f76f027c44ca792c1874625987bf5c14f14d44015d6c51aa23ac903509dbe51750548364c2a0b41fbbf92dc3704876a8b6607d69f5b96d2f8f88026ab934cd8b343740917c7277ebb1f682332ec0a3609b9c2e472db6d09d9c88be30fdf6458a6bfe725410fc8089055cb63d33c7d545dac5801483290fbe8f24bd21d7936de06f85baa2d1b2d9fc2a043ce4d7e31af0057f2e39dad55e2f1f2f8ac73b344db45d4c8c52107a9569e48d973cc77d8e65b4db255e84b6fbe5033aa75258d210b20962cc3668a2131b9cdfbe39f9da47d2ed701c3df302e4bee678ab157278ec9feb06134fa08e840957ecc7a440a0ac6cd24021c4d25ccbb9d0187cb565b2dc5db55714287b9aad21cb6ee5be4253b5142d93346aa24ae5ec7cf27ab2970c4a76fc706b0a429c974a7813dfa4a2fc23142c0685d4800764aafaa8ed8af6245e8f192793687bf31261edbb2d991d70febc0fc433e3ea59a67c1dbb43fab6fd32d6527d786dd5507195b836c2e0a1284ba5b10a460a90d52288b67a631972786a3e38a919d4b68ab6e42d3696e3a357f44e3b2d7163df8cd479b5bdf63baa270633a400f3160fb4a0b156d69adc654c385fa53edaaf128b50311bfee5d885057a371be9c375314b60126066bdba29e50cd2f043b4172054f369d8316c3ed9a14acdc7aba3129d2009dc0d8efd2d298f948c40b8fa6c76015dae9d31b587182b7fc048a2e7c8cc1e411d7bae4ac6b1fdc79b4ec423f449dc9ccbe741d4e3735e4755d299d22f47687a3540307d024b98d2fb2bbf52274e20c00b4b8640ce4a86e26047ae25beac80592c0abc520b2d4e185c20d7e0769d17f56453eb1025cd2695f62c124178ad6386bef08014caba13122324977fd5da26fa9442496cccbc873f9bf9356e09aa44f4de82e43dd361e920219fb6120f8d23ba456c30a04f1770e328867bbfedd65778866f38f025fb4d88a2d0d34820ccdf523c3a140697d3aad7a35d1893ebac9314558ed23c19a05a4b54fd9bfd469e4109ef361e88954d96c57b58aae585caf9511d6d15154322f491504cf6e47ee7fc50280c985638617744f2d9cd0a0ae70b6b423c356e7d05a691339b6d006c7fc80445572300a398c2b0d1fd1afa8c965df739aba57acebebb3135c6efd7c6322c2660aeeb46f07a3837bd013f0ef3b5d22a17f8132b816ff6f3b4a16973f81b77392a448772b8bd09accdb334ff5c114a39c0d338aa5379833bc289617ce3c2925002b16b33acd605890e948fa1c172727172a822ed0fc8df9b6ca27f09ef100fefef86706f33f8c0783a48321e8e02a084a8019ac9bec0162df3edb95ea9467cd39541b333a7232d24da2048401e703d750b73fdf4a8c01e5088aea42223c0cf1bcbd0f1ebae910a9883fe1670b3d155253725cc012ced41e500a9c90ec5119e7206da6450c06b282735503f0cf33387ada6fea774bb849ad6e931b37d1d96373d8641210df38280deac1c5ee232b7dfdb64ab15dd2988a494a014b2321be189c6d06b18e4546f0888f9e0690174e73b0934efab186f7f0fc47875fcab85f51381c849ad9b44aceeb63b5788323f165d95b5d88f4d23b685a4fa91d7294938ae162002a71b1db2c1d80e5c5c90c44c3dc890332f6d7e44a900b5cee7b6f0e2327dbcf9e9f03895aa40e31ac73eb56f693bf9acd97b9c82101c981129a8bba6f704d89412c097e4550c59052f320c0ccc3bc315557eedbb355149729f1e1a446bd2b854dfc9b02f00ba49be1dadcd68b5ad9eaf0dc54d98b12c373a1125fdd78b9a9267c61c199cd06a6c7c68b6e51c8924e23ecb8a4c0ef3cbf8099960d9d385c4e8ba053f48665c3e3402c49f29b0aa8dcb597d3bad4dced5db481aa48173c1cf128234ab2bc04d20ec4bf937fd1432a734e5805b06490059d5f0c4e8e970386315cc45e37ae7c3029d45800693906056befdb72aa0eb3d2252a858f4b2081ba3edd8d832e5e56656a2158c64bfa630e8c1c67c75dad8e4f69efd3322c3f0729d767c791fe8b67b6602f5dcda6cc30d4a75cf246a602e895fe14d8dbf5a2da8937f801e9239a52edecfcd1186ba06e0b8d7103e653a1a1f1895bb8213f49f5dcfed2e480155f34544e5d91460908cb5dd7bda42ef9190cb6c5cc8c70cbddc57a4340e1e41bd0d10eb756a599f289d5c339b2c3184dc2fcac45826da11fc62f01f66967172ad7a32ceeb4049b7d117499037e5afadff66b6e4edd924e860f8cc755dbd452cccb8e651d3f2b8ce75d698f9f5df8460986ca64ec9b559bf499b873981993641c72f7136aa15fdb81b701ede62bc41016815bead3351c29d9ccacee797e00baaad21c9ea3eb08a8aac92e37f4e02b602bb8a7a066b5448a745496c0053d9aad1e5e361ddd608fea80afef9a78d2295e99ff87af3dcfea161cf8044d593236a68174ee5c4b76a80cdd6b7c35d6b0ece4248be4a296fa6f65abe681c01ba7f2c5c17fbf22d74f14c465f3167ed021c9cc646fef4fa12cc8f0443c30a72d664cb7a853cd1af8724067d7b271750500d8abac3ce29a8fd9f1315461fa234c7adedc869323c24c98758e71ec99db435bb145f2de3cb7b408a5e64fc3cea01e517ae60dcff20ffa30a86f15015a56a246b8292c47ee41e8ce417b5a601702a60bbfb9dfc69d712cb316c3edbd3c06a784c23834fbafa693f4375d68ba035079967fb8a67c454f2aff8f1ec4e47589a40151bb9f87bf6a53259550bfe6d61f50282aee1c309aa6651658c45bb78f0a1e6d435b11ae63c36ce9bf0e71842620e74d3060fd062fa18395c0534f230d603d34a4e0b535470386c0f5f32d6f15bb0364441b328ae15ec3ffb0ab600ef50dec737f50635fbf1912ba7140f36d2cfde697b3c857dc164f6f0efa7fcc7500d8041fbcf2ba90e9cb2fc14e460ab24bb96d16e9fc360f2acf9760e25cd1b26d87a45061327e3894ad1df4b9a4c867b988be37dbd69527228b15455ebeff1b11965dc270740f0a76b7dc86a1644cda8bada7943ac40a0d4695a88e5843f5302340c579240d8cdc72d2f38a64369a0ccf32600e9bfd1fd8189e6a989fb47eed5316cec4915faf01da941ccd3e051e41abcb6578541e871dfcdca97ea28cbe1976756d486e3464e6957741cab24d6e143b2723a1d15fde08b1ce64ccb530b583721c5cbb6d46f258e102e6afcf9a2ffc1176ee3def5fc2d1d3fafe8f79a0bc4b971a9b3ec47fc3ea2b5804187a250006defa4b87209daea96d9c89a294f1f0d2f795d01ff65db7df7b540f59151777c0c25a0a3ac64e67a8fd3531d7de2ba186e8226a59fb0e782ab1b1ba06d68e336382793f971622a23d6b6bec32b92fa7eee699ba77f440367466d3b7ee4592eb2fb23f0caa7a18c7dc256f3a1cfe8926ce4f80ae703fe700eca7d67f99cfacb5ff637fcba445ba90a09ebf6b7908d61323e8028e21549edb5c9fdca7008edf783d8d616839ba9f1fa111d4d4c53c531678a85e122da17056656fd59afaea0cecc52c2c711d024dfaf257b23a689ea00a9a1ad2abe5ea164b8dbf55c2ac2a1dfac8d3ebb2cc6403c347981bf265be847e9585b5783ff97ed7724c271093d03987925af742c61cd0a05e90907e5cdcc5ec9f10ed678ee2324c026cda7638b116862703eee30070f353d7710ef9cfac544a7520ff8ebf1b8b83bebc73f627cafb8ac731eb86be753d89698985a17aa2469d38717efcaef7897261467e166d83ac8cc4dcdd317e304c1c5cc3d5d2b26e1217fc07b65eb9ad34b9b19755307853094b7277bca7987c75e62bac3f3751e6a16f238707c02cd6c3e3254dbca4252dd14ddcbc963a69f7e9c5fde7b521f5cf7dea99d3eb23d8adb9a99668ee5b8629793d92164ff25ce1ab7dad0b0863f34eef3d0005f195a52a8f2a6dd55b4c9e9f28bcc9dc8ad147e2f9ee641c19ee525098fb4ddfa2b0441c13159debb4e9307adcd62a60eb2dcc4e709cd45ee595b3108e42fe07c84fb0fa81b735d5d26b309a3ada17c6349f48eeb04b0dd0d1a72b7966aa0843509a4057734c44ea67aec969dc505bec0f3d7e0ede5d57a9ab037fd8774721e1dd1a4b2e3927b4c19d9e2bafb24d7c22bcf62d4ca622effdd020bb6f848f846aaced27cbe81b97b0c32ee7d9d5d2da4611e124f804dda6e6d92d0ea404902394e216a2a6f4a0a7ed66361de") close_range$auto(0x2, 0xa, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) write$auto(0x1, 0x0, 0x80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c084}, 0x51) epoll_ctl$auto_EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1, 0x0) 24m3.018482114s ago: executing program 4 (id=1343): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) rt_sigaction$auto(0x11, &(0x7f0000000040)={0x0, 0x100000001, 0x0, {0x7}}, 0x0, 0x8) r0 = socketpair$auto(0x1e, 0x5, 0x200000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x39}}, 0x6e) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x20009, 0x20000000) io_uring_setup$auto(0x1, 0x0) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r0, 0x806c4120, &(0x7f0000000100)={0x0, 0xe, 0x95d7, 0x7f, 0x4, 0x1, 0x9, 0x3, 0x3ff, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0xfffc, 0x400, 0xb0e1, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) futex$auto(0x0, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) read$auto(0x3, 0x0, 0x80000001) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(r2, &(0x7f0000000a80)={0x0, 0x8800000000000001}, 0x1) pread64$auto(r3, &(0x7f0000000340)='/dev/bus/usb/013/001\x00', 0x6f, 0xdf) close_range$auto(0x2, 0x8, 0x0) 24m0.548862759s ago: executing program 4 (id=1352): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f00000000c0)={"67b005c1c2760bd1eeb6eb479d03912acfb5074ad05689c042577e4d145c43b5", 0x4, 0xfff, 0x7fffffff, 0x9, 0xa00}) io_uring_setup$auto(0x6, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto(0xffffffffffffffff, 0x4b3a, 0x1) socket(0x2, 0x2, 0x73) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x20001, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) r3 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r3, 0x6a, 0x3, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/lapb0/mtu\x00', 0x88282, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x191203, 0x0) open(0x0, 0xcd1e23e41b02d660, 0x154) 23m57.808350937s ago: executing program 4 (id=1358): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0ro\x00', 0x13d082, 0x0) socket(0x2, 0x3, 0x1) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/state\x00', 0x189e42, 0x0) write$auto(r2, 0x0, 0x80000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd0000fcdbdf25040000000800090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) mmap$auto(0x0, 0x400000004, 0x4000000000df, 0x1000000000040eb1, 0x401, 0x300000000000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r5 = syz_clone(0x7185c100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x4, 0x7ff) ptrace$auto_PTRACE_GETREGS(0xc, r5, 0x80000000, 0x1) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7fb) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7ff) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) setitimer$auto_ITIMER_REAL(0x0, &(0x7f00000001c0)={{0x1, 0x10001}, {0x7fffffffffffffff, 0x7}}, 0x0) r6 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r6, &(0x7f00000000c0)='.', 0x1) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x20055) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) setsockopt$auto(0x3, 0xffffffff, 0x2, 0xfffffffffffffffc, 0x70) readv$auto(0x10, &(0x7f0000000040)={&(0x7f0000000000), 0xf}, 0xbb) ioctl$auto_PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x8001) write$auto_mtd_fops_mtdchar(r0, &(0x7f0000000440)="df", 0x1) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/gem_names\x00', 0x101402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D1\x00', 0x420981, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 23m42.667791052s ago: executing program 33 (id=1358): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtd0ro\x00', 0x13d082, 0x0) socket(0x2, 0x3, 0x1) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd10/state\x00', 0x189e42, 0x0) write$auto(r2, 0x0, 0x80000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd0000fcdbdf25040000000800090000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) mmap$auto(0x0, 0x400000004, 0x4000000000df, 0x1000000000040eb1, 0x401, 0x300000000000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0xf92e, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r5 = syz_clone(0x7185c100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r5, 0x4, 0x7ff) ptrace$auto_PTRACE_GETREGS(0xc, r5, 0x80000000, 0x1) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7fb) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7ff) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) setitimer$auto_ITIMER_REAL(0x0, &(0x7f00000001c0)={{0x1, 0x10001}, {0x7fffffffffffffff, 0x7}}, 0x0) r6 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r6, &(0x7f00000000c0)='.', 0x1) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x20055) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) setsockopt$auto(0x3, 0xffffffff, 0x2, 0xfffffffffffffffc, 0x70) readv$auto(0x10, &(0x7f0000000040)={&(0x7f0000000000), 0xf}, 0xbb) ioctl$auto_PPPIOCSFLAGS(0xffffffffffffffff, 0x40047459, &(0x7f0000000200)=0x8001) write$auto_mtd_fops_mtdchar(r0, &(0x7f0000000440)="df", 0x1) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/gem_names\x00', 0x101402, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D1\x00', 0x420981, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 22m46.655777404s ago: executing program 1 (id=1516): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x0, 0x7d, &(0x7f0000000040)={0xfffffffffffffffd, 0x6, 0xffffffffffffffc0, 0x800000000000006}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) mlock$auto(0xffffffff, 0xe) statmount$auto(0x0, &(0x7f0000000380)={0x5, 0x1, 0x8, 0x7, 0x5, 0x1ff, 0x8, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x7, 0x10000000000, 0x0, 0x3, 0x22000, 0x203, 0x8, 0x84, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, [0x0, 0x5, 0x9, 0x7fffffff, 0x0, 0xbb, 0x6, 0x2, 0x8, 0xfffffffffffffffd, 0x2, 0x3, 0x10000, 0x8000000000000001, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x537, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x10000000000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x4, 0x5, 0x1, 0x0, 0x9, 0x0, 0x1], "024128b4655138607d04696fa0903d4be5ae3cfc78eec62dfea09d894e2f78f16f15d16158a8aea0a7a3e6fd380fd4e72d3cae636e6a7e0d1e8886fd4132970eea800f9061509f9b375fe2419c6c61b1ba57c7bcd3090e22c2b9b8d14cdc8c0770c83198f11924a0c7348c8d66aa9603e10f9031cfd4b960966d07148b8b8b7dfda1c267c4dc75dff514bd42a94930b7a4"}, 0x81, 0x968c) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) mmap$auto(0x0, 0x9, 0x5, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) close_range$auto(0x2, 0x8, 0x0) socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000180)=0xe69) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) socket(0x2, 0x80805, 0x0) r3 = eventfd$auto(0x7) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000200)=""/36, 0x24) 22m44.943389641s ago: executing program 1 (id=1519): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/virtual/block/zram0/comp_algorithm\x00', 0x20b42, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x0, 0x7d, &(0x7f0000000040)={0xfffffffffffffffd, 0x6, 0xffffffffffffffc0, 0x800000000000006}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) mlock$auto(0xffffffff, 0xe) statmount$auto(0x0, &(0x7f0000000380)={0x5, 0x1, 0x8, 0x7, 0x5, 0x1ff, 0x8, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x7, 0x10000000000, 0x0, 0x3, 0x22000, 0x203, 0x8, 0x84, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, [0x0, 0x5, 0x9, 0x7fffffff, 0x0, 0xbb, 0x6, 0x2, 0x8, 0xfffffffffffffffd, 0x2, 0x3, 0x10000, 0x8000000000000001, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x537, 0x0, 0xfffffffffffffffb, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x10000000000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe, 0x4, 0x5, 0x1, 0x0, 0x9, 0x0, 0x1], "024128b4655138607d04696fa0903d4be5ae3cfc78eec62dfea09d894e2f78f16f15d16158a8aea0a7a3e6fd380fd4e72d3cae636e6a7e0d1e8886fd4132970eea800f9061509f9b375fe2419c6c61b1ba57c7bcd3090e22c2b9b8d14cdc8c0770c83198f11924a0c7348c8d66aa9603e10f9031cfd4b960966d07148b8b8b7dfda1c267c4dc75dff514bd42a94930b7a4"}, 0x81, 0x968c) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) mmap$auto(0x0, 0x9, 0x5, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) close_range$auto(0x2, 0x8, 0x0) socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000180)=0xe69) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(0x3, 0x0, 0x80) eventfd$auto(0x7) 22m43.359005369s ago: executing program 1 (id=1523): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x103040, 0x0) r1 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyy4\x00', 0x1039c0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory0/state\x00', 0x1e1842, 0x0) write$auto(r3, &(0x7f0000000000)='/sys/devices/system/memory/memory0/state\x00', 0xea) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) write$auto(0x3, 0x0, 0x5c8) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) keyctl$auto(0x5, 0xfffffffd, 0x101, 0x1, 0x4000000000b8c) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x6) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x8000000000000d3e, 0x2, 0x948f, 0x3, 0x9, 0xffffffffffffffff, 0x6, 0x62, 0x80000000, 0x0, 0x6d40, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r1) msgctl$auto_MSG_STAT(0x7, 0xb, &(0x7f0000000200)={{0x0, 0xee01, 0xee00, 0x0, 0x8, 0x5, 0x4}, &(0x7f0000000180)=0xc8, &(0x7f00000001c0)=0x5d, 0x3, 0xbb3, 0x6, 0x1, 0x8000000000000001, 0xda5, 0x1, 0x7, @raw=0x9}) sendmsg$auto_OVS_FLOW_CMD_DEL(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="7c000000e3d986b56526ecdecd52b6cd5045638eb4442a9763589fcb96e88be66d08a9208d270b5e82dbc61026b0bf19ff8e3c1f384420940bc2e83d9f5b961f2325fa8ee2a4cfe9c5a885576916210b540518933bb70720edd17a3a2530956ad2c53adff5979f0a826e87749a445c0178e977d92a94931b4e3e1bdfb4993986c64748574b41cfb441da40b922ca0ec9b31572a27feb46e7e97e20a18570fc0d29d17b45734c712682d8de4c241401351c555a5948f2674a5a2b3573e228d1da53", @ANYRES16=r5, @ANYBLOB="00082bbd7000fddbdf250200000008000a00040000005e00078008008a00", @ANYRES32=r6, @ANYBLOB="cc3622c41ecb338d3e2f191c49ef2bfba1d4558c025967e940f6f15dda658fe928983123474147254156"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x40) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, &(0x7f00000002c0)={[0x400000000001ff, 0xa, 0xa, 0x1, 0x4, 0x40000003, 0xa199, 0x5, 0x3, 0x61c83e06, 0x1000000, 0x79d, 0x6d3e, 0x8, 0x6, 0x200000008]}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sigaltstack$auto(0x0, 0x0) 22m42.231216878s ago: executing program 1 (id=1527): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/objects\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000008c0)=""/61, 0x3d) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) write$auto(r1, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) open(0x0, 0x0, 0x408) r2 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, 0x0, 0x22202, 0x0) mmap$auto(0x0, 0x6, 0x7, 0xefb3, 0x401, 0x8200) rseq$auto(0x0, 0x6, 0x3, 0xff) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x4000000f, 0x550, 0x501, 0x81, 0x101, 0x6, 0x2}, {0x1000, 0x1, 0x52, 0x8, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) io_uring_register$auto(0x2, 0x12, 0x0, 0x0) read$auto(r2, 0x0, 0x8) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop4\x00', 0x0, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) mmap$auto(0xfffffffffffffffa, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') lseek$auto(0xffffffffffffffff, 0x5, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x3) 22m41.673675627s ago: executing program 1 (id=1528): mmap$auto(0x5, 0x10, 0xe2, 0x19, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x5602, 0x1) 22m41.554493827s ago: executing program 1 (id=1529): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(r0, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2585, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mtd/mtd0/ecc_strength\x00', 0x0, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x89e1, 0x91) read$auto(r1, 0x0, 0x8000) 22m26.298714606s ago: executing program 34 (id=1529): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(r0, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/tracing/uprobe_events\x00', 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x2585, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mtd/mtd0/ecc_strength\x00', 0x0, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x89e1, 0x91) read$auto(r1, 0x0, 0x8000) 11.188501788s ago: executing program 5 (id=4955): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0xff0f) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f00000000c0)={"67b005c1c2760bd1eeb6eb479d03912acfb5074ad05689c042577e4d145c43b5", 0x4, 0xfff, 0x7fffffff, 0x9, 0xa00}) io_uring_setup$auto(0x6, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto(0xffffffffffffffff, 0x4b3a, 0x1) socket(0x2, 0x2, 0x73) socket(0xa, 0x1, 0x84) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x20001, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) r3 = socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r3, 0x6a, 0x3, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88282, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x191203, 0x0) open(0x0, 0xcd1e23e41b02d660, 0x154) 10.116453532s ago: executing program 5 (id=4961): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f00000000c0)={"67b005c1c2760bd1eeb6eb479d03912acfb5074ad05689c042577e4d145c43b5", 0x4, 0xfff, 0x7fffffff, 0x9, 0xa00}) io_uring_setup$auto(0x6, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x20a, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto(0xffffffffffffffff, 0x4b3a, 0x1) socket(0x2, 0x2, 0x73) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x20001, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) r3 = socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r3, 0x6a, 0x3, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/lapb0/mtu\x00', 0x88282, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x191203, 0x0) open(0x0, 0xcd1e23e41b02d660, 0x154) 8.027867018s ago: executing program 5 (id=4966): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = socket(0x10, 0x2, 0x6) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x242a82, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000200), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'vlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYRES64=r4, @ANYRESOCT=r4, @ANYRES64=r6, @ANYRESOCT=r3, @ANYBLOB="e8c308000300020000020800", @ANYBLOB="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", @ANYRESDEC=r2], 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x20000004) r7 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r7, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) lstat$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) eventfd2$auto(0xa0, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r8 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r1) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x5) socket(0x11, 0x1, 0x1000000) socketpair$auto(0xffd, 0x84, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x10000, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 5.483412284s ago: executing program 2 (id=4974): unshare$auto(0xad2) semget$auto(0x0, 0x2e4a, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/ep_00/direction\x00', 0x20400, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)="000004") close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(0x3, 0x8926, 0x10000000000402) r2 = socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/pcspkr/driver_override\x00', 0x24a381, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r3) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x81e, 0x2, 0x3, 0x0) write$auto(r2, &(0x7f00000001c0)='nl80211\x00', 0x1fff8) shutdown$auto(0x200000003, 0x2) 5.380236631s ago: executing program 6 (id=4975): select$auto(0x3, 0x0, 0x0, 0x0, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) r1 = bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=@bpf_attr_7={@btf_id=0x6, 0x101, 0x100, r0}, 0x6) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x10840, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40000, 0x188) (async) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r1, 0x44, 0x10000000000402) (async, rerun: 64) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) (async, rerun: 64) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r4 = io_uring_setup$auto(0x1002f, 0x0) close_range$auto(0x2, r1, 0x0) (async, rerun: 64) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) (async, rerun: 64) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000400)='/dev/binderfs/binder0\x00', 0x40, 0x0) ioctl$auto_BINDER_GET_EXTENDED_ERROR(r5, 0xc00c6211, 0x0) (async) ioctl$auto_BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000000)="fc1c4959f721a2458364a2b1590d19513f344e1b39cecffdd8") (async, rerun: 64) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/gid_map\x00', 0x802, 0x0) mmap$auto(0x3, 0x40000b, 0x3, 0x10010, r3, 0x80) (async) r6 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) syz_clone3(&(0x7f0000000280)={0x12000, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x51) ioctl$auto_IMADDTIMER(r6, 0x80044940, 0x0) setsockopt$auto_SO_REUSEPORT(r4, 0xf, 0xf, &(0x7f0000000140)='/\xde,{\x00', 0xfffffffd) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) madvise$auto(0x0, 0x7fffffffffffffff, 0xe) (async) r7 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) syz_clone3(&(0x7f0000000180)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 5.153681095s ago: executing program 6 (id=4976): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6_vti0\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) remap_file_pages$auto(0x0, 0xf3a4, 0x0, 0x5, 0x15) bind$auto(r3, &(0x7f0000000000)=@can={0x1d, r5}, 0x6a) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="13002ebd7000fbdbdf250a00000008000300", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="84060000", @ANYRES16=r1, @ANYBLOB="100027bd7000ffdbdf250600000008000100", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="67b97b3da11dfeff0100", @ANYRES32=r8, @ANYBLOB], 0x684}, 0x1, 0x0, 0x0, 0x20000c00}, 0x0) read$auto(r0, 0x0, 0x1) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/24/smp_affinity_list\x00', 0x480c1, 0x0) write$auto(r9, 0x0, 0x2) 4.992761068s ago: executing program 5 (id=4977): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mmap$auto(0x0, 0xfffffffffffff8f2, 0xdf, 0x9b72, r1, 0x800008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/mtd0\x00', 0x480200, 0x0) ioctl$auto_MEMREADOOB64(r3, 0xc0184d16, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x21a841, 0x0) ioctl$auto(r5, 0x4004550c, r5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) mmap$auto(0x3, 0x40000b, 0xdf, 0x10000009b72, 0x2, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x0, 0x22, 0xa) move_pages$auto(r4, 0x1002, 0x0, 0x0, 0x0, 0xffffffff) madvise$auto(0x0, 0x2003f0, 0x11) personality$auto(0xfffffffc) statx$auto(r0, 0x0, 0x9, 0x5, &(0x7f0000000180)={0x5, 0x101, 0xfffffffffffffff0, 0x8b, 0xee00, 0x0, 0x4, 0xbd49, 0x8, 0x2, 0x100, 0x4, {0xffffffffffffffb1, 0xfffffffc}, {0x80000001, 0x5}, {0x100000000, 0x3}, {0xe}, 0x9, 0x4, 0xbf, 0x0, 0x9, 0x3, 0x2, 0x3, 0x481000, 0x6, 0x3, 0x6, [0x0, 0x2, 0x8f, 0xb, 0x3, 0x2, 0x8000000000cd1, 0x3d7d, 0x2]}) open_tree_attr$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10, &(0x7f0000000080)={0xa4ce, 0x7fff, 0x4}, 0xfff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/ptyra\x00', 0x4400, 0x0) 4.663338952s ago: executing program 6 (id=4978): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r0, &(0x7f0000000040)='.G+*@sys\x00', 0x2) mmap$auto(0x7fff, 0x800040009, 0x4, 0x19, r0, 0x28000) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto(r1, 0x4611, r1) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x8600, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x3, 0xe988, 0x4, 0x17, 0x401, 0x4008000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty39\x00', 0x802, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x80085610, r4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r5, 0x0, 0x40000000f42c, 0x80002) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40007, 0x1000000005, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(r4, &(0x7f0000000100)={0x0, 0x8}, 0x0) 4.554775212s ago: executing program 2 (id=4979): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty60\x00', 0x42880, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_tw_reuse\x00', 0x80400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0) read$auto(r0, 0x0, 0x1ff) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x3) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2) getrandom$auto(&(0x7f0000000040)='/proc/sys/net/ipv4/tcp_tw_reuse\x00', 0x3, 0x7) landlock_create_ruleset$auto(&(0x7f0000000140)={0x5, 0x3, 0x9}, 0x9, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f00000000c0)={0x3, 0x81, 0x5b, 0x5, &(0x7f00000001c0)="9a848dbfa75829730a622f577b5123b3578716b4ab6cd0dda7c0c01cfdbd4164ada990cdcdc4487bbb3c2c6d14b1df6377d3f207cf641d4fb4f660d737817a28c9ee39022795130b4d5911a77ccd7c66948400"/97, 0xd22ff64, 0xeb90, 0x2, @stream_id=0x100, 0x7, 0x476, 0x0}) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0xc0000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto(r3, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0x0) 4.0330735s ago: executing program 0 (id=4980): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000300), 0x101102, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) openat2$auto(r2, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x4, 0x9, 0x401}, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x4, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0xc800) r4 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r4, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyd4\x00', 0x400, 0x0) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r5) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) lsetxattr$auto(0x0, 0x0, 0x0, 0xd843, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000000)="ceb2dff9a9fedbea2a2b4877edf832e4aac8b260b4a5066b4e3ee8efb93be72a0a8e1fc43fc36707fc6ed75642e796506300358ea14931e30662a45add") 3.372133752s ago: executing program 2 (id=4981): mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd9/range\x00', 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) pwrite64$auto(r3, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/forwarding\x00', 0x1, 0x2) writev$auto(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x7}, 0x3) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/fail-nth\x00', 0x802, 0x0) fcntl$auto_F_SETLEASE(r4, 0x400, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r1) fstat$auto(r2, &(0x7f0000000100)={0x0, 0x4, 0xa6, 0x1, 0xee00, 0xee01, 0x0, 0x2, 0x3, 0xd, 0x7, 0x7, 0x0, 0xc64c, 0x5, 0x3, 0x5}) sendmsg$auto_NFC_CMD_VENDOR(r1, 0x0, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000040), 0x0) r6 = seccomp$auto(0x2, 0x10, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r6, 0x3, &(0x7f00000003c0)="07ed6e5ddb74b73e1e7e29e15fbc97d768", 0x5) r7 = ioctl$auto_TUNDETACHFILTER(r6, 0x401054d6, &(0x7f0000000080)={0x9, &(0x7f0000000040)={0x10, 0x6, 0x8, @inferred=r6}}) r8 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000240), r1) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r7, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES8, @ANYRES16=r8, @ANYBLOB="00082abd7000ffdbdf2503000000080011000700000006130300f8ff000005001400de00000008001900030000000c030000010000000000000008000c000500000005001500060000054a7f9c00080000001400080073797a6b616c6c657231000000000000060003000a00000010d07ff0842b5e97ceea79282fc47391d37a246e120ae86d4a076123b3d40fae89a916ad1ee5ff94559392ea6778a0540befc6ce769f380f6794f0a163e7669fde7bacfe31c22867ea532e7b6c514763205f450feafc70acdab2bf1585d66cde02004f881e6200fc82f47057b67bed4607e23a8eca22bf9d80828e6a3b4ae159415562100dc1093056ef4c4c08fb96e9c48038f8a3fbe05a77ee8a25c575bf22c691d62343a4f904a21e2ad9056544adce6958301e714f583da794de8a4a75b88a6b521f4a9b17dcdec966fddd348b2839cb4e2819cb91601437627bf0e4a63a6a23", @ANYRESHEX=r2], 0x74}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x4000005, 0x20009, 0x7c50, 0x59, 0x7f, 0x8000) rseq$auto(0x0, 0x1c, 0x5d7, 0x9) sysfs$auto(0x2, 0x10000000000002a, 0x0) mmap$auto(0x0, 0x4000d, 0x7, 0xcc75, 0x7, 0x28000) socketpair$auto(0x6, 0x5, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0xffffffffffffffff, 0x9) 3.298550363s ago: executing program 6 (id=4982): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) mmap$auto(0x2, 0x80000000, 0x8, 0x14, r0, 0x9) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) (async) r2 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r2, 0x0, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (async) lseek$auto(0x3, 0x8, 0x1) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000000)='//\xf2\x00', 0x80000000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) msync$auto(0x3, 0x1, 0x5) (async) madvise$auto(0x0, 0x401, 0x15) (async) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x1, 0x0, 0x0, &(0x7f0000000200)={[0xf, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x2, 0x8000000010000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x4, 0xfffffffffffffffe]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x12, 0x401, 0x8000) (async) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto(r5, 0x40045431, r4) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) 2.391350157s ago: executing program 5 (id=4983): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x27) bpf$auto_BPF_ENABLE_STATS(0x20, 0x0, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x309502, 0x0) set_tid_address$auto(0x0) read$auto(0xffffffffffffffff, 0x0, 0xea) madvise$auto(0xfffffffffffffffe, 0x100000, 0x17) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x6, 0x0, 0x2, 0xb}, 0x800008}, 0x1ff, 0x1ffffff8) semget$auto(0x0, 0x13c, 0x1ff) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) unshare$auto(0x40000080) mmap$auto(0x2, 0x400008, 0xdf, 0x11, 0xffffffffffffffff, 0xd821) fsopen$auto(0x0, 0x1) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x105001, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) write$auto(0xffffffffffffffff, 0x0, 0xfdef) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r1) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x5) socket(0x11, 0x1, 0x1000000) socketpair$auto(0xffd, 0x84, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x10000, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.128950588s ago: executing program 2 (id=4984): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x25, 0x80000b, 0x2000eb1, r0, 0x7fff) sysfs$auto(0x2, 0x3, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x8, 0x2020009, 0x3, 0x216, r0, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/dummy0/forwarding\x00', 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0045405, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) getxattrat$auto(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xeb, &(0x7f0000000340)='/sys/kernel/debug/check_wx_pages\x00', 0x0, 0xffffffff) mmap$auto(0x200, 0x400008, 0x53, 0x9b72, 0xffffffffffffffff, 0x6) r5 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r5, &(0x7f0000000080)=""/228, 0xe4) unlinkat$auto(r1, &(0x7f0000000180)='./file1/file0\x00', 0x400) close_range$auto(0x2, 0x8, 0x0) 1.629633521s ago: executing program 0 (id=4985): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0xa, 0x3, 0x3) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x501080, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='[)\'@A|\x81\x02\x9c\xb5\xf9\xcd\x10\xa2u|\x89\x1c\x8f\x00\xb1Q\xd1\x84\x88\xab\x9b]\x1eC\xbc\xe8=\xd7i\xa2\xd5\xb2k\xe7\xe8:\xb7I\x862\xeeY\xf7P-v\xe0\xb6G\xbd\xb3\xe2&&\xff\xb6\xf2\xb9f~\xb5)\xcc\xc6\xed\x87\xf1\xd1\xedc\xe9XH\x06\x99\xac.\rh\xd3ow \xfc', 0x2) ioctl$auto_MON_IOCX_GET(r1, 0x40189206, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) lsm_set_self_attr$auto(0x8, &(0x7f0000000040)={0x6, 0xc7b, 0x2, 0x9b, "6da549af92b3c797f14b68f1871bdf2bca524a178d5f78de92a8f31de38aac23b34814d7bdb8c3755bc2b5a80a3564254ead5cd661a41d16e32f6d7e6465fd9a74b830b8fe880245564bb67a4d0ecfb78b9905af2a2f2de8677e181a3371cabc34f497b122263e2ba86a87a7e76ed0bbe08e08b6f0f3b25364fb6f9f33d5342ed76cc5453f8e8634458e6bf54825f7be456def0174640630a68b45"}, 0x6, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) close_range$auto(0x2, 0x8, 0x0) 633.249795ms ago: executing program 6 (id=4986): mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x7fffffffffffffff, r0, 0x6) (async) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x3, 0x3, 0x0, 0x0, 0x4) socket(0x1d, 0x2, 0x6) mmap$auto(0x93, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0xb, 0x1, 0x0, 0x9, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) (async, rerun: 64) socket(0xa, 0x3, 0x100) (async, rerun: 64) socket(0x9, 0x0, 0x80000001) (async, rerun: 64) socket(0x2c, 0x3, 0x9) (rerun: 64) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) (async) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/blk_cgname\x00', 0x68c002, 0x0) preadv$auto(r3, &(0x7f0000000180)={0x0, 0x6873}, 0x2, 0x7, 0x10) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) (async, rerun: 32) setns(r0, 0x60020000) (async, rerun: 32) umount2$auto(&(0x7f00000005c0)='W\xc1\x87\xf2|R\xe5\xa87\xc6\xd9x\xbd\xe9WyU\xd0\xaa.\xbb\xcd\xae\xcf$0c\x95\xe7S`h\x12\xdf\x04\xe9f+\xfa\x98a\x8d\xe2\b\xc8\x85\x84\xcd\xbb\xee\xd2R\xb4\x9c\xf5gCPA\xa9V\xe3r3j\xf2.\x98\x06\xb4\r\xd8X\xe1\x98\xfd\xe6\xb0\x16H]\xe2Z(\xa1\rB\xb7\xc3\x8c\xe0\xe6\x92Q\xe0\xd9\xdc\xc5\xde\xf7k\xc3L\xfe.\xbb\f\x1a\xaf*~\x05n\xc0G<\x8d\xfb\xb9\x12\x0f\n\r~\x0f\x01[\xee\xe1%U\x11\xfc5\xf6.\xb0\xa9/mLme\xd6d\r\x9d\xcbsO\x0e\xe9\x9c\x10Q\xedw\xa4O9[\xfa\x8f\xbd3<\x866\b\xe9\xf6C\x1e\xe6~\xdbf\x16_\xa0\xaf^\x967!\xcc\xb2\xf9\x84\xfc;q\xbeaf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x700000000000000) socket(0x2, 0x1, 0x84) ioctl$auto_BLKBSZSET(r3, 0x40081271, &(0x7f0000000380)=0x800) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.5/usb19/power/wakeup_max_time_ms\x00', 0x8000, 0x0) unshare$auto(0x40000080) 299.033652ms ago: executing program 2 (id=4988): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x25, 0x80000b, 0x2000eb1, r0, 0x7fff) sysfs$auto(0x2, 0x3, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x8, 0x2020009, 0x3, 0x216, r0, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/dummy0/forwarding\x00', 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0xc0045405, 0x3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) getxattrat$auto(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xeb, &(0x7f0000000340)='/sys/kernel/debug/check_wx_pages\x00', 0x0, 0xffffffff) mmap$auto(0x200, 0x400008, 0x53, 0x9b72, 0xffffffffffffffff, 0x6) r5 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r5, &(0x7f0000000080)=""/228, 0xe4) unlinkat$auto(r1, &(0x7f0000000180)='./file1/file0\x00', 0x400) close_range$auto(0x2, 0x8, 0x0) 117.56127ms ago: executing program 5 (id=4989): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r1 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) read$auto_debug_help_fops_orangefs_debugfs(r1, 0x0, 0x0) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="000000005c8141f03165d5a369cfb0d408b0d3e912f4e8daafb7f8aac01c13ea0d7fa07c0ba41b984a7b10dcdac596b265bfc74787e645e73d28aa45b497d1bac3c847d81203489764b287a0", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x2, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200001f, 0x13, r2, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) select$auto(0x4, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=4990): rseq$auto(&(0x7f00000002c0)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0xfffffff4, 0x0, 0x7) ioperm$auto(0x3, 0xe, 0x2000000000000149) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000380), 0x101100, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000088}, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x2, 0x1000000000001) close_range$auto(0x0, 0xfffffffffffff000, 0x2) read$auto_regulator_summary_fops_(r2, &(0x7f0000000200)=""/166, 0xa6) bpf$auto(0x40000000, 0x0, 0x2000096) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) r4 = getpid() mincore$auto(0x1000, 0x20000000008005, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) kcmp$auto(r4, 0x100000001, 0xfffffff8, r2, r0) unshare$auto(0x40000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x74, r7, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_TSINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_TSINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1e}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'veth1\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x2006c0c0) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         syzkaller syzkaller login: [ 1897.131117][T27745] random: crng reseeded on system resumption [ 1897.185670][T24011] Bluetooth: hci6: unexpected event 0x3d length: 726 > 14 [ 1899.156796][T27779] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4418'. [ 1901.693924][T27803] random: crng reseeded on system resumption [ 1901.822229][T24011] Bluetooth: hci6: unexpected event 0x3d length: 726 > 14 [ 1903.091523][T27821] mkiss: ax0: crc mode is auto. [ 1903.957040][T27831] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0xffff888000000000 pfn:0x78001 [ 1904.013697][T27831] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1904.089124][T27831] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1904.118211][T27831] raw: ffff888000000000 0000000000000000 0000000400000002 0000000000000000 [ 1904.129319][T27831] page dumped because: unmovable page [ 1904.141509][T27831] page_owner tracks the page as allocated [ 1904.154175][T27838] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1904.154790][T27831] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 25291, tgid 25291 (syz-executor), ts 1659580220599, free_ts 1652703678485 [ 1904.188820][T27831] post_alloc_hook+0x1c0/0x230 [ 1904.195496][T27831] get_page_from_freelist+0x10a3/0x3a30 [ 1904.201313][T27831] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1904.210222][T27831] alloc_pages_mpol+0x1fb/0x550 [ 1904.221365][T27831] alloc_pages_noprof+0x131/0x390 [ 1904.228351][T27831] __vmalloc_node_range_noprof+0x6f8/0x1480 [ 1904.236047][T27831] vmalloc_user_noprof+0x9e/0xe0 [ 1904.241681][T27831] kcov_ioctl+0x4c/0x730 [ 1904.266923][T27831] __x64_sys_ioctl+0x18e/0x210 [ 1904.316897][T27831] do_syscall_64+0xcd/0x4b0 [ 1904.388843][T27831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.427803][T27831] page last free pid 15 tgid 15 stack trace: [ 1904.449816][T27831] __free_frozen_pages+0x7df/0x1160 [ 1904.486581][T27831] tlb_remove_table_rcu+0x121/0x320 [ 1904.505663][T27831] rcu_core+0x79c/0x1530 [ 1904.514105][T27831] handle_softirqs+0x216/0x8e0 [ 1904.532308][T27831] run_ksoftirqd+0x3a/0x60 [ 1904.551286][T27831] smpboot_thread_fn+0x3f7/0xae0 [ 1904.561389][T27831] kthread+0x3c5/0x780 [ 1904.584642][T27831] ret_from_fork+0x56a/0x730 [ 1904.591768][T27831] ret_from_fork_asm+0x1a/0x30 [ 1906.180532][T27859] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(424206980.290643515.64131978), cmd(3) [ 1906.220226][ T917] Process accounting resumed [ 1906.588603][T27872] mkiss: ax0: crc mode is auto. [ 1906.760397][T27853] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1910.041804][T27929] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(424206980.290643515.64131978), cmd(3) [ 1910.081186][T25368] Process accounting resumed [ 1910.237245][T27929] FAULT_INJECTION: forcing a failure. [ 1910.237245][T27929] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.310372][T27929] CPU: 1 UID: 0 PID: 27929 Comm: syz.0.4456 Not tainted syzkaller #0 PREEMPT(full) [ 1910.310414][T27929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1910.310434][T27929] Call Trace: [ 1910.310444][T27929] [ 1910.310457][T27929] dump_stack_lvl+0x16c/0x1f0 [ 1910.310500][T27929] should_fail_ex+0x512/0x640 [ 1910.310544][T27929] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1910.310584][T27929] should_failslab+0xc2/0x120 [ 1910.310628][T27929] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1910.310664][T27929] ? alloc_empty_file+0x55/0x1e0 [ 1910.310723][T27929] ? alloc_empty_file+0x55/0x1e0 [ 1910.310769][T27929] alloc_empty_file+0x55/0x1e0 [ 1910.310820][T27929] dentry_open+0x46/0xd0 [ 1910.310870][T27929] acct_on+0x1a5/0xa00 [ 1910.310903][T27929] ? __pfx_acct_on+0x10/0x10 [ 1910.310936][T27929] ? bpf_lsm_capable+0x9/0x10 [ 1910.310986][T27929] __x64_sys_acct+0x81/0x1e0 [ 1910.311017][T27929] ? lockdep_hardirqs_on+0x7c/0x110 [ 1910.311065][T27929] do_syscall_64+0xcd/0x4b0 [ 1910.311108][T27929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.311141][T27929] RIP: 0033:0x7f1e4698eec9 [ 1910.311167][T27929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1910.311196][T27929] RSP: 002b:00007f1e478ba038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1910.311227][T27929] RAX: ffffffffffffffda RBX: 00007f1e46be5fa0 RCX: 00007f1e4698eec9 [ 1910.311248][T27929] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1910.311269][T27929] RBP: 00007f1e478ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1910.311290][T27929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1910.311309][T27929] R13: 00007f1e46be6038 R14: 00007f1e46be5fa0 R15: 00007ffe9613c478 [ 1910.311351][T27929] [ 1910.873658][T27941] mkiss: ax0: crc mode is auto. [ 1912.769011][T27969] FAULT_INJECTION: forcing a failure. [ 1912.769011][T27969] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.782036][T27969] CPU: 0 UID: 0 PID: 27969 Comm: syz.6.4466 Not tainted syzkaller #0 PREEMPT(full) [ 1912.782081][T27969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1912.782133][T27969] Call Trace: [ 1912.782145][T27969] [ 1912.782159][T27969] dump_stack_lvl+0x16c/0x1f0 [ 1912.782209][T27969] should_fail_ex+0x512/0x640 [ 1912.782265][T27969] should_failslab+0xc2/0x120 [ 1912.782317][T27969] __kmalloc_cache_noprof+0x72/0x780 [ 1912.782357][T27969] ? __task_pid_nr_ns+0x1f5/0x500 [ 1912.782410][T27969] ? proc_self_get_link+0x1a9/0x230 [ 1912.782463][T27969] ? proc_self_get_link+0x1a9/0x230 [ 1912.782510][T27969] proc_self_get_link+0x1a9/0x230 [ 1912.782558][T27969] ? __pfx_proc_self_get_link+0x10/0x10 [ 1912.782604][T27969] step_into+0x189e/0x21a0 [ 1912.782650][T27969] ? __pfx_step_into+0x10/0x10 [ 1912.782693][T27969] ? lookup_fast+0x156/0x610 [ 1912.782735][T27969] walk_component+0xfc/0x5b0 [ 1912.782775][T27969] link_path_walk+0x627/0xe20 [ 1912.782828][T27969] path_openat+0x1b0/0x2cb0 [ 1912.782877][T27969] ? __pfx_path_openat+0x10/0x10 [ 1912.782925][T27969] do_filp_open+0x20b/0x470 [ 1912.782968][T27969] ? __pfx_do_filp_open+0x10/0x10 [ 1912.783052][T27969] ? alloc_fd+0x471/0x7d0 [ 1912.783110][T27969] do_sys_openat2+0x11b/0x1d0 [ 1912.783167][T27969] ? __pfx_do_sys_openat2+0x10/0x10 [ 1912.783236][T27969] __x64_sys_openat+0x174/0x210 [ 1912.783292][T27969] ? __pfx___x64_sys_openat+0x10/0x10 [ 1912.783366][T27969] do_syscall_64+0xcd/0x4b0 [ 1912.783414][T27969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.783449][T27969] RIP: 0033:0x7f027cd8eec9 [ 1912.783478][T27969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1912.783512][T27969] RSP: 002b:00007f027dcd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1912.783545][T27969] RAX: ffffffffffffffda RBX: 00007f027cfe6090 RCX: 00007f027cd8eec9 [ 1912.783568][T27969] RDX: 0000000000002100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1912.783590][T27969] RBP: 00007f027ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1912.783611][T27969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1912.783633][T27969] R13: 00007f027cfe6128 R14: 00007f027cfe6090 R15: 00007fff83f7ea98 [ 1912.783679][T27969] [ 1913.251250][T27969] random: crng reseeded on system resumption [ 1913.932764][T27986] FAULT_INJECTION: forcing a failure. [ 1913.932764][T27986] name failslab, interval 1, probability 0, space 0, times 0 [ 1914.003915][T27986] CPU: 1 UID: 0 PID: 27986 Comm: syz.5.4469 Not tainted syzkaller #0 PREEMPT(full) [ 1914.003948][T27986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1914.003965][T27986] Call Trace: [ 1914.003973][T27986] [ 1914.003982][T27986] dump_stack_lvl+0x16c/0x1f0 [ 1914.004015][T27986] should_fail_ex+0x512/0x640 [ 1914.004048][T27986] ? fs_reclaim_acquire+0xae/0x150 [ 1914.004083][T27986] should_failslab+0xc2/0x120 [ 1914.004115][T27986] __kmalloc_noprof+0xdd/0x880 [ 1914.004138][T27986] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1914.004171][T27986] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1914.004195][T27986] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1914.004224][T27986] ? tomoyo_profile+0x47/0x60 [ 1914.004255][T27986] tomoyo_path_number_perm+0x245/0x580 [ 1914.004290][T27986] ? tomoyo_path_number_perm+0x237/0x580 [ 1914.004328][T27986] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1914.004366][T27986] ? find_held_lock+0x2b/0x80 [ 1914.004419][T27986] ? find_held_lock+0x2b/0x80 [ 1914.004445][T27986] ? hook_file_ioctl_common+0x145/0x410 [ 1914.004475][T27986] ? __fget_files+0x20e/0x3c0 [ 1914.004504][T27986] security_file_ioctl+0x9b/0x240 [ 1914.004536][T27986] __x64_sys_ioctl+0xb7/0x210 [ 1914.004575][T27986] do_syscall_64+0xcd/0x4b0 [ 1914.004606][T27986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.004630][T27986] RIP: 0033:0x7f6618f8eec9 [ 1914.004647][T27986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1914.004670][T27986] RSP: 002b:00007f6619dc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1914.004693][T27986] RAX: ffffffffffffffda RBX: 00007f66191e5fa0 RCX: 00007f6618f8eec9 [ 1914.004714][T27986] RDX: 0000200000000000 RSI: 000000008008af83 RDI: 0000000000000003 [ 1914.004729][T27986] RBP: 00007f6619dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1914.004744][T27986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1914.004758][T27986] R13: 00007f66191e6038 R14: 00007f66191e5fa0 R15: 00007ffd49fe3578 [ 1914.004788][T27986] [ 1914.004798][T27986] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1916.619220][T28021] FAULT_INJECTION: forcing a failure. [ 1916.619220][T28021] name failslab, interval 1, probability 0, space 0, times 0 [ 1916.636694][T28014] random: crng reseeded on system resumption [ 1916.685392][T28021] CPU: 1 UID: 0 PID: 28021 Comm: syz.5.4478 Not tainted syzkaller #0 PREEMPT(full) [ 1916.685434][T28021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1916.685449][T28021] Call Trace: [ 1916.685457][T28021] [ 1916.685467][T28021] dump_stack_lvl+0x16c/0x1f0 [ 1916.685505][T28021] should_fail_ex+0x512/0x640 [ 1916.685541][T28021] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1916.685574][T28021] should_failslab+0xc2/0x120 [ 1916.685609][T28021] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1916.685636][T28021] ? d_lookup+0xe7/0x190 [ 1916.685678][T28021] ? alloc_inode+0x64/0x240 [ 1916.685717][T28021] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1916.685764][T28021] ? alloc_inode+0x64/0x240 [ 1916.685797][T28021] alloc_inode+0x64/0x240 [ 1916.685832][T28021] new_inode+0x22/0x1c0 [ 1916.685870][T28021] __debugfs_create_file+0x11c/0x6b0 [ 1916.685898][T28021] debugfs_create_file_full+0x41/0x60 [ 1916.685925][T28021] ref_tracker_dir_debugfs+0x19d/0x290 [ 1916.685964][T28021] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1916.686030][T28021] ? lockdep_init_map_type+0x5c/0x280 [ 1916.686075][T28021] preinit_net.part.0+0x24e/0x8a0 [ 1916.686116][T28021] copy_net_ns+0x3ba/0x690 [ 1916.686144][T28021] create_new_namespaces+0x3ea/0xa90 [ 1916.686183][T28021] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1916.686219][T28021] ksys_unshare+0x45b/0xa40 [ 1916.686256][T28021] ? __pfx_ksys_unshare+0x10/0x10 [ 1916.686297][T28021] ? syscall_user_dispatch+0x78/0x140 [ 1916.686332][T28021] __x64_sys_unshare+0x31/0x40 [ 1916.686368][T28021] do_syscall_64+0xcd/0x4b0 [ 1916.686401][T28021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1916.686427][T28021] RIP: 0033:0x7f6618f8eec9 [ 1916.686446][T28021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1916.686470][T28021] RSP: 002b:00007f6619da8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1916.686492][T28021] RAX: ffffffffffffffda RBX: 00007f66191e6090 RCX: 00007f6618f8eec9 [ 1916.686509][T28021] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1916.686524][T28021] RBP: 00007f6619011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1916.686539][T28021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1916.686554][T28021] R13: 00007f66191e6128 R14: 00007f66191e6090 R15: 00007ffd49fe3578 [ 1916.686585][T28021] [ 1916.972538][T28021] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880328681a8' [ 1917.804715][T28027] netlink: 206 bytes leftover after parsing attributes in process `syz.2.4480'. [ 1918.524482][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e5cc000: rx timeout, send abort [ 1919.034729][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e5cc000: abort rx timeout. Force session deactivation [ 1919.799894][T28064] FAULT_INJECTION: forcing a failure. [ 1919.799894][T28064] name failslab, interval 1, probability 0, space 0, times 0 [ 1919.843063][T28064] CPU: 0 UID: 0 PID: 28064 Comm: syz.6.4490 Not tainted syzkaller #0 PREEMPT(full) [ 1919.843106][T28064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1919.843126][T28064] Call Trace: [ 1919.843137][T28064] [ 1919.843151][T28064] dump_stack_lvl+0x16c/0x1f0 [ 1919.843196][T28064] should_fail_ex+0x512/0x640 [ 1919.843244][T28064] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 1919.843292][T28064] should_failslab+0xc2/0x120 [ 1919.843340][T28064] __kvmalloc_node_noprof+0x141/0x9c0 [ 1919.843387][T28064] ? seq_read_iter+0x830/0x12d0 [ 1919.843425][T28064] ? seq_read_iter+0x830/0x12d0 [ 1919.843455][T28064] seq_read_iter+0x830/0x12d0 [ 1919.843514][T28064] seq_read+0x3a3/0x570 [ 1919.843545][T28064] ? __pfx_seq_read+0x10/0x10 [ 1919.843605][T28064] ? __pfx_seq_read+0x10/0x10 [ 1919.843635][T28064] proc_reg_read+0x240/0x330 [ 1919.843682][T28064] ? __pfx_proc_reg_read+0x10/0x10 [ 1919.843733][T28064] vfs_read+0x1e1/0xcf0 [ 1919.843778][T28064] ? __pfx___mutex_lock+0x10/0x10 [ 1919.843820][T28064] ? __pfx_vfs_read+0x10/0x10 [ 1919.843871][T28064] ? __fget_files+0x20e/0x3c0 [ 1919.843920][T28064] ksys_read+0x12a/0x250 [ 1919.843958][T28064] ? __pfx_ksys_read+0x10/0x10 [ 1919.844010][T28064] do_syscall_64+0xcd/0x4b0 [ 1919.844057][T28064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1919.844090][T28064] RIP: 0033:0x7f027cd8eec9 [ 1919.844116][T28064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1919.844148][T28064] RSP: 002b:00007f027dcf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1919.844179][T28064] RAX: ffffffffffffffda RBX: 00007f027cfe5fa0 RCX: 00007f027cd8eec9 [ 1919.844201][T28064] RDX: 00000000262dc938 RSI: 0000000000000000 RDI: 0000000000000003 [ 1919.844220][T28064] RBP: 00007f027dcf4090 R08: 0000000000000000 R09: 0000000000000000 [ 1919.844236][T28064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1919.844252][T28064] R13: 00007f027cfe6038 R14: 00007f027cfe5fa0 R15: 00007fff83f7ea98 [ 1919.844290][T28064] [ 1922.766597][T28110] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4501'. [ 1922.853591][T28108] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4501'. [ 1922.866230][T28108] FAULT_INJECTION: forcing a failure. [ 1922.866230][T28108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1922.879592][T28108] CPU: 0 UID: 0 PID: 28108 Comm: syz.6.4501 Not tainted syzkaller #0 PREEMPT(full) [ 1922.879635][T28108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1922.879655][T28108] Call Trace: [ 1922.879667][T28108] [ 1922.879680][T28108] dump_stack_lvl+0x16c/0x1f0 [ 1922.879727][T28108] should_fail_ex+0x512/0x640 [ 1922.879783][T28108] _copy_from_user+0x2e/0xd0 [ 1922.879836][T28108] copy_msghdr_from_user+0x98/0x160 [ 1922.879888][T28108] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1922.879946][T28108] ? __pfx__kstrtoull+0x10/0x10 [ 1922.880001][T28108] ___sys_sendmsg+0xfe/0x1d0 [ 1922.880055][T28108] ? __pfx____sys_sendmsg+0x10/0x10 [ 1922.880126][T28108] ? find_held_lock+0x2b/0x80 [ 1922.880195][T28108] __sys_sendmmsg+0x200/0x420 [ 1922.880251][T28108] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1922.880314][T28108] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1922.880375][T28108] ? fput+0x9b/0xd0 [ 1922.880423][T28108] ? ksys_write+0x1ac/0x250 [ 1922.880462][T28108] ? __pfx_ksys_write+0x10/0x10 [ 1922.880507][T28108] __x64_sys_sendmmsg+0x9c/0x100 [ 1922.880557][T28108] ? lockdep_hardirqs_on+0x7c/0x110 [ 1922.880595][T28108] do_syscall_64+0xcd/0x4b0 [ 1922.880651][T28108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1922.880686][T28108] RIP: 0033:0x7f027cd8eec9 [ 1922.880712][T28108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1922.880745][T28108] RSP: 002b:00007f027dcf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1922.880777][T28108] RAX: ffffffffffffffda RBX: 00007f027cfe5fa0 RCX: 00007f027cd8eec9 [ 1922.880799][T28108] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1922.880819][T28108] RBP: 00007f027dcf4090 R08: 0000000000000000 R09: 0000000000000000 [ 1922.880838][T28108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1922.880858][T28108] R13: 00007f027cfe6038 R14: 00007f027cfe5fa0 R15: 00007fff83f7ea98 [ 1922.880901][T28108] [ 1922.881412][T28108] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4501'. [ 1923.240074][T28116] FAULT_INJECTION: forcing a failure. [ 1923.240074][T28116] name failslab, interval 1, probability 0, space 0, times 0 [ 1923.260136][T28116] CPU: 1 UID: 0 PID: 28116 Comm: syz.5.4503 Not tainted syzkaller #0 PREEMPT(full) [ 1923.260180][T28116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1923.260201][T28116] Call Trace: [ 1923.260213][T28116] [ 1923.260227][T28116] dump_stack_lvl+0x16c/0x1f0 [ 1923.260275][T28116] should_fail_ex+0x512/0x640 [ 1923.260328][T28116] should_failslab+0xc2/0x120 [ 1923.260364][T28116] __kmalloc_cache_noprof+0x72/0x780 [ 1923.260389][T28116] ? __task_pid_nr_ns+0x1f5/0x500 [ 1923.260429][T28116] ? proc_self_get_link+0x1a9/0x230 [ 1923.260467][T28116] ? proc_self_get_link+0x1a9/0x230 [ 1923.260500][T28116] proc_self_get_link+0x1a9/0x230 [ 1923.260533][T28116] ? __pfx_proc_self_get_link+0x10/0x10 [ 1923.260566][T28116] step_into+0x189e/0x21a0 [ 1923.260598][T28116] ? __pfx_step_into+0x10/0x10 [ 1923.260627][T28116] ? lookup_fast+0x156/0x610 [ 1923.260656][T28116] walk_component+0xfc/0x5b0 [ 1923.260683][T28116] link_path_walk+0x627/0xe20 [ 1923.260719][T28116] path_openat+0x1b0/0x2cb0 [ 1923.260757][T28116] ? __pfx_path_openat+0x10/0x10 [ 1923.260795][T28116] do_filp_open+0x20b/0x470 [ 1923.260824][T28116] ? __pfx_do_filp_open+0x10/0x10 [ 1923.260876][T28116] ? alloc_fd+0x471/0x7d0 [ 1923.260910][T28116] do_sys_openat2+0x11b/0x1d0 [ 1923.260948][T28116] ? __pfx_do_sys_openat2+0x10/0x10 [ 1923.261002][T28116] __x64_sys_openat+0x174/0x210 [ 1923.261043][T28116] ? __pfx___x64_sys_openat+0x10/0x10 [ 1923.261095][T28116] do_syscall_64+0xcd/0x4b0 [ 1923.261129][T28116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.261154][T28116] RIP: 0033:0x7f6618f8eec9 [ 1923.261173][T28116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1923.261197][T28116] RSP: 002b:00007f6619da8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1923.261220][T28116] RAX: ffffffffffffffda RBX: 00007f66191e6090 RCX: 00007f6618f8eec9 [ 1923.261237][T28116] RDX: 0000000000002100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1923.261253][T28116] RBP: 00007f6619011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1923.261268][T28116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1923.261290][T28116] R13: 00007f66191e6128 R14: 00007f66191e6090 R15: 00007ffd49fe3578 [ 1923.261320][T28116] [ 1923.579646][T28121] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1923.686659][T28116] random: crng reseeded on system resumption [ 1924.726701][T28133] tipc: Started in network mode [ 1924.731779][T28133] tipc: Node identity ee00, cluster identity 4711 [ 1924.747432][T28135] FAULT_INJECTION: forcing a failure. [ 1924.747432][T28135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1924.760715][T28135] CPU: 1 UID: 0 PID: 28135 Comm: syz.6.4507 Not tainted syzkaller #0 PREEMPT(full) [ 1924.760756][T28135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1924.760775][T28135] Call Trace: [ 1924.760785][T28135] [ 1924.760798][T28135] dump_stack_lvl+0x16c/0x1f0 [ 1924.760852][T28135] should_fail_ex+0x512/0x640 [ 1924.760904][T28135] _copy_from_user+0x2e/0xd0 [ 1924.760956][T28135] __sys_bpf+0x248/0x4980 [ 1924.760999][T28135] ? __pfx___sys_bpf+0x10/0x10 [ 1924.761034][T28135] ? find_held_lock+0x2b/0x80 [ 1924.761083][T28135] ? vfs_write+0x15d/0x11d0 [ 1924.761124][T28135] ? __pfx_css_rstat_updated+0x10/0x10 [ 1924.761164][T28135] ? __pfx_vfs_write+0x10/0x10 [ 1924.761226][T28135] ? ksys_write+0x1ac/0x250 [ 1924.761262][T28135] ? __pfx_ksys_write+0x10/0x10 [ 1924.761306][T28135] __x64_sys_bpf+0x78/0xc0 [ 1924.761340][T28135] ? lockdep_hardirqs_on+0x7c/0x110 [ 1924.761376][T28135] do_syscall_64+0xcd/0x4b0 [ 1924.761417][T28135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.761448][T28135] RIP: 0033:0x7f027cd8eec9 [ 1924.761473][T28135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1924.761504][T28135] RSP: 002b:00007f027dcf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1924.761534][T28135] RAX: ffffffffffffffda RBX: 00007f027cfe5fa0 RCX: 00007f027cd8eec9 [ 1924.761556][T28135] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000000 [ 1924.761574][T28135] RBP: 00007f027dcf4090 R08: 0000000000000000 R09: 0000000000000000 [ 1924.761594][T28135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1924.761614][T28135] R13: 00007f027cfe6038 R14: 00007f027cfe5fa0 R15: 00007fff83f7ea98 [ 1924.761656][T28135] [ 1924.763963][T28133] tipc: Node number set to 60928 [ 1924.987903][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.994675][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1925.092288][T28140] mkiss: ax0: crc mode is auto. [ 1925.817043][T28155] FAULT_INJECTION: forcing a failure. [ 1925.817043][T28155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1925.833086][T28155] CPU: 0 UID: 0 PID: 28155 Comm: syz.2.4513 Not tainted syzkaller #0 PREEMPT(full) [ 1925.833129][T28155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1925.833149][T28155] Call Trace: [ 1925.833161][T28155] [ 1925.833173][T28155] dump_stack_lvl+0x16c/0x1f0 [ 1925.833219][T28155] should_fail_ex+0x512/0x640 [ 1925.833270][T28155] _copy_from_user+0x2e/0xd0 [ 1925.833321][T28155] ucma_write+0x128/0x330 [ 1925.833367][T28155] ? __pfx_ucma_write+0x10/0x10 [ 1925.833408][T28155] ? bpf_lsm_file_permission+0x9/0x10 [ 1925.833450][T28155] ? security_file_permission+0x71/0x210 [ 1925.833486][T28155] ? rw_verify_area+0xcf/0x6c0 [ 1925.833522][T28155] ? __pfx_ucma_write+0x10/0x10 [ 1925.833562][T28155] vfs_write+0x29d/0x11d0 [ 1925.833610][T28155] ? __pfx_vfs_write+0x10/0x10 [ 1925.833643][T28155] ? find_held_lock+0x2b/0x80 [ 1925.833685][T28155] ? __fget_files+0x204/0x3c0 [ 1925.833725][T28155] ? __fget_files+0x20e/0x3c0 [ 1925.833780][T28155] ksys_write+0x1f8/0x250 [ 1925.833817][T28155] ? __pfx_ksys_write+0x10/0x10 [ 1925.833869][T28155] do_syscall_64+0xcd/0x4b0 [ 1925.833913][T28155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1925.833947][T28155] RIP: 0033:0x7f1df258eec9 [ 1925.833973][T28155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1925.834006][T28155] RSP: 002b:00007f1df07f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1925.834036][T28155] RAX: ffffffffffffffda RBX: 00007f1df27e5fa0 RCX: 00007f1df258eec9 [ 1925.834057][T28155] RDX: 00000000000000c3 RSI: 0000000000000000 RDI: 0000000000000012 [ 1925.834078][T28155] RBP: 00007f1df07f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1925.834098][T28155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1925.834118][T28155] R13: 00007f1df27e6038 R14: 00007f1df27e5fa0 R15: 00007ffc0cffa788 [ 1925.834161][T28155] [ 1928.223201][T28202] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4526'. [ 1929.495802][T28227] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1930.655089][T28245] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1930.655811][T28243] FAULT_INJECTION: forcing a failure. [ 1930.655811][T28243] name failslab, interval 1, probability 0, space 0, times 0 [ 1930.683829][T28243] CPU: 1 UID: 0 PID: 28243 Comm: syz.6.4534 Not tainted syzkaller #0 PREEMPT(full) [ 1930.683876][T28243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1930.683898][T28243] Call Trace: [ 1930.683910][T28243] [ 1930.683922][T28243] dump_stack_lvl+0x16c/0x1f0 [ 1930.683964][T28243] should_fail_ex+0x512/0x640 [ 1930.684005][T28243] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1930.684061][T28243] should_failslab+0xc2/0x120 [ 1930.684104][T28243] __kmalloc_cache_noprof+0x72/0x780 [ 1930.684135][T28243] ? file_f_owner_allocate+0x84/0x130 [ 1930.684182][T28243] ? file_f_owner_allocate+0x84/0x130 [ 1930.684220][T28243] file_f_owner_allocate+0x84/0x130 [ 1930.684261][T28243] __tty_fasync+0xab/0x300 [ 1930.684302][T28243] ? __pfx_tty_fasync+0x10/0x10 [ 1930.684343][T28243] tty_fasync+0x9e/0xe0 [ 1930.684383][T28243] do_fcntl+0xa3a/0x15a0 [ 1930.684423][T28243] ? __pfx_do_fcntl+0x10/0x10 [ 1930.684472][T28243] ? tomoyo_file_fcntl+0xa5/0xc0 [ 1930.684515][T28243] __x64_sys_fcntl+0x163/0x200 [ 1930.684560][T28243] do_syscall_64+0xcd/0x4b0 [ 1930.684605][T28243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1930.684635][T28243] RIP: 0033:0x7f027cd8eec9 [ 1930.684659][T28243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1930.684688][T28243] RSP: 002b:00007f027dcd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 1930.684716][T28243] RAX: ffffffffffffffda RBX: 00007f027cfe6090 RCX: 00007f027cd8eec9 [ 1930.684736][T28243] RDX: 000000000000a553 RSI: 0000000000000004 RDI: 0000000000000003 [ 1930.684754][T28243] RBP: 00007f027ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1930.684771][T28243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1930.684788][T28243] R13: 00007f027cfe6128 R14: 00007f027cfe6090 R15: 00007fff83f7ea98 [ 1930.684825][T28243] [ 1931.906242][T28261] mkiss: ax0: crc mode is auto. [ 1933.999271][T28288] netlink: 342 bytes leftover after parsing attributes in process `syz.6.4545'. [ 1936.219834][T28313] mkiss: ax0: crc mode is auto. [ 1936.346903][T28298] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1936.821196][T28322] FAULT_INJECTION: forcing a failure. [ 1936.821196][T28322] name failslab, interval 1, probability 0, space 0, times 0 [ 1936.834157][T28322] CPU: 0 UID: 0 PID: 28322 Comm: syz.2.4551 Not tainted syzkaller #0 PREEMPT(full) [ 1936.834190][T28322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1936.834205][T28322] Call Trace: [ 1936.834213][T28322] [ 1936.834222][T28322] dump_stack_lvl+0x16c/0x1f0 [ 1936.834258][T28322] should_fail_ex+0x512/0x640 [ 1936.834298][T28322] should_failslab+0xc2/0x120 [ 1936.834333][T28322] __kmalloc_cache_noprof+0x72/0x780 [ 1936.834359][T28322] ? __task_pid_nr_ns+0x1f5/0x500 [ 1936.834397][T28322] ? proc_self_get_link+0x1a9/0x230 [ 1936.834435][T28322] ? proc_self_get_link+0x1a9/0x230 [ 1936.834467][T28322] proc_self_get_link+0x1a9/0x230 [ 1936.834501][T28322] ? __pfx_proc_self_get_link+0x10/0x10 [ 1936.834532][T28322] step_into+0x189e/0x21a0 [ 1936.834562][T28322] ? __pfx_step_into+0x10/0x10 [ 1936.834591][T28322] ? lookup_fast+0x156/0x610 [ 1936.834618][T28322] walk_component+0xfc/0x5b0 [ 1936.834645][T28322] link_path_walk+0x627/0xe20 [ 1936.834681][T28322] path_openat+0x1b0/0x2cb0 [ 1936.834719][T28322] ? __pfx_path_openat+0x10/0x10 [ 1936.834755][T28322] do_filp_open+0x20b/0x470 [ 1936.834784][T28322] ? __pfx_do_filp_open+0x10/0x10 [ 1936.834834][T28322] ? alloc_fd+0x471/0x7d0 [ 1936.834877][T28322] do_sys_openat2+0x11b/0x1d0 [ 1936.834916][T28322] ? __pfx_do_sys_openat2+0x10/0x10 [ 1936.834967][T28322] __x64_sys_openat+0x174/0x210 [ 1936.835007][T28322] ? __pfx___x64_sys_openat+0x10/0x10 [ 1936.835058][T28322] do_syscall_64+0xcd/0x4b0 [ 1936.835098][T28322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1936.835125][T28322] RIP: 0033:0x7f1df258eec9 [ 1936.835144][T28322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1936.835167][T28322] RSP: 002b:00007f1df07d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1936.835190][T28322] RAX: ffffffffffffffda RBX: 00007f1df27e6090 RCX: 00007f1df258eec9 [ 1936.835206][T28322] RDX: 0000000000002100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1936.835222][T28322] RBP: 00007f1df2611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1936.835237][T28322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1936.835251][T28322] R13: 00007f1df27e6128 R14: 00007f1df27e6090 R15: 00007ffc0cffa788 [ 1936.835282][T28322] [ 1937.241129][T28325] random: crng reseeded on system resumption [ 1939.007328][T28305] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1940.500866][T28363] FAULT_INJECTION: forcing a failure. [ 1940.500866][T28363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1940.532617][T28363] CPU: 1 UID: 0 PID: 28363 Comm: syz.0.4564 Not tainted syzkaller #0 PREEMPT(full) [ 1940.532659][T28363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1940.532680][T28363] Call Trace: [ 1940.532691][T28363] [ 1940.532704][T28363] dump_stack_lvl+0x16c/0x1f0 [ 1940.532750][T28363] should_fail_ex+0x512/0x640 [ 1940.532802][T28363] _copy_to_user+0x32/0xd0 [ 1940.532855][T28363] simple_read_from_buffer+0xcb/0x170 [ 1940.532912][T28363] proc_fail_nth_read+0x197/0x240 [ 1940.532951][T28363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1940.532991][T28363] ? rw_verify_area+0xcf/0x6c0 [ 1940.533024][T28363] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1940.533064][T28363] vfs_read+0x1e1/0xcf0 [ 1940.533107][T28363] ? __pfx___mutex_lock+0x10/0x10 [ 1940.533147][T28363] ? __pfx_vfs_read+0x10/0x10 [ 1940.533197][T28363] ? __fget_files+0x20e/0x3c0 [ 1940.533245][T28363] ksys_read+0x12a/0x250 [ 1940.533282][T28363] ? __pfx_ksys_read+0x10/0x10 [ 1940.533333][T28363] do_syscall_64+0xcd/0x4b0 [ 1940.533378][T28363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.533411][T28363] RIP: 0033:0x7f1e4698d8dc [ 1940.533438][T28363] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1940.533490][T28363] RSP: 002b:00007f1e478ba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1940.533521][T28363] RAX: ffffffffffffffda RBX: 00007f1e46be5fa0 RCX: 00007f1e4698d8dc [ 1940.533543][T28363] RDX: 000000000000000f RSI: 00007f1e478ba0a0 RDI: 0000000000000003 [ 1940.533562][T28363] RBP: 00007f1e478ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1940.533589][T28363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1940.533610][T28363] R13: 00007f1e46be6038 R14: 00007f1e46be5fa0 R15: 00007ffe9613c478 [ 1940.533653][T28363] [ 1942.740131][ T30] audit: type=1804 audit(4294967348.960:12): pid=28384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4566" name="/newroot/sys/kernel/tracing/per_cpu/cpu1/trace" dev="tracefs" ino=195 res=1 errno=0 [ 1944.826488][T28405] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4569'. [ 1945.442569][T28408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4570'. [ 1951.029008][T28458] cougar: G6 mapped to space [ 1952.953804][T28482] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1954.229209][T28480] usb usb36: usbfs: process 28480 (syz.6.4584) did not claim interface 0 before use [ 1955.089719][T28498] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1958.034321][T28532] FAULT_INJECTION: forcing a failure. [ 1958.034321][T28532] name failslab, interval 1, probability 0, space 0, times 0 [ 1958.047157][T28532] CPU: 1 UID: 0 PID: 28532 Comm: syz.0.4596 Not tainted syzkaller #0 PREEMPT(full) [ 1958.047204][T28532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1958.047226][T28532] Call Trace: [ 1958.047238][T28532] [ 1958.047253][T28532] dump_stack_lvl+0x16c/0x1f0 [ 1958.047302][T28532] should_fail_ex+0x512/0x640 [ 1958.047354][T28532] ? __kmalloc_noprof+0xca/0x880 [ 1958.047393][T28532] should_failslab+0xc2/0x120 [ 1958.047444][T28532] __kmalloc_noprof+0xdd/0x880 [ 1958.047477][T28532] ? __register_sysctl_table+0xea2/0x1900 [ 1958.047541][T28532] ? __register_sysctl_table+0xea2/0x1900 [ 1958.047594][T28532] __register_sysctl_table+0xea2/0x1900 [ 1958.047659][T28532] ? __pfx___register_sysctl_table+0x10/0x10 [ 1958.047723][T28532] ? __asan_memcpy+0x3c/0x60 [ 1958.047767][T28532] register_pidns_sysctls+0x119/0x1b0 [ 1958.047803][T28532] ? __ns_common_init+0x2a4/0x3b0 [ 1958.047854][T28532] copy_pid_ns+0x548/0xca0 [ 1958.047903][T28532] ? __pfx_copy_pid_ns+0x10/0x10 [ 1958.047951][T28532] ? rcu_is_watching+0x12/0xc0 [ 1958.048011][T28532] ? copy_mnt_ns+0xac/0xac0 [ 1958.048052][T28532] ? rcu_is_watching+0x12/0xc0 [ 1958.048099][T28532] ? copy_ipcs+0xb6/0x550 [ 1958.048154][T28532] create_new_namespaces+0x2aa/0xa90 [ 1958.048209][T28532] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1958.048266][T28532] ksys_unshare+0x45b/0xa40 [ 1958.048317][T28532] ? __pfx_ksys_unshare+0x10/0x10 [ 1958.048370][T28532] ? syscall_user_dispatch+0x78/0x140 [ 1958.048417][T28532] __x64_sys_unshare+0x31/0x40 [ 1958.048467][T28532] do_syscall_64+0xcd/0x4b0 [ 1958.048514][T28532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.048550][T28532] RIP: 0033:0x7f1e4698eec9 [ 1958.048577][T28532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1958.048610][T28532] RSP: 002b:00007f1e478ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1958.048643][T28532] RAX: ffffffffffffffda RBX: 00007f1e46be5fa0 RCX: 00007f1e4698eec9 [ 1958.048664][T28532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 1958.048686][T28532] RBP: 00007f1e46a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1958.048706][T28532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1958.048727][T28532] R13: 00007f1e46be6038 R14: 00007f1e46be5fa0 R15: 00007ffe9613c478 [ 1958.048770][T28532] [ 1958.048784][T28532] sysctl could not get directory: /kernel -12 [ 1959.999203][T28570] mkiss: ax0: crc mode is auto. [ 1960.569944][T28587] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1961.768090][T28601] mkiss: ax0: crc mode is auto. [ 1963.115510][T28621] netlink: 302 bytes leftover after parsing attributes in process `syz.0.4618'. [ 1963.412724][T28633] mkiss: ax0: crc mode is auto. [ 1964.383822][T28651] mkiss: ax0: crc mode is auto. [ 1965.701263][T28675] mkiss: ax0: crc mode is auto. [ 1966.228124][T15124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1966.238239][T15124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1966.249912][T15124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1966.259136][T15124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1966.268255][T15124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1966.596407][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1966.805095][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.145931][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.151942][T28722] mkiss: ax0: crc mode is auto. [ 1968.333656][T15124] Bluetooth: hci3: command tx timeout [ 1968.388336][T28687] chnl_net:caif_netlink_parms(): no params data found [ 1968.535390][ T36] bridge_slave_1: left allmulticast mode [ 1968.541440][ T36] bridge_slave_1: left promiscuous mode [ 1968.548919][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.564402][ T36] bridge_slave_0: left allmulticast mode [ 1968.570253][ T36] bridge_slave_0: left promiscuous mode [ 1968.578896][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1969.269421][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1969.283286][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1969.294567][ T36] bond0 (unregistering): Released all slaves [ 1969.457101][ T36] HfR: left promiscuous mode [ 1969.469973][T28687] bridge0: port 1(bridge_slave_0) entered blocking state [ 1969.477564][T28687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1969.486589][T28687] bridge_slave_0: entered allmulticast mode [ 1969.494381][T28687] bridge_slave_0: entered promiscuous mode [ 1969.514192][T28687] bridge0: port 2(bridge_slave_1) entered blocking state [ 1969.524670][T28687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1969.532295][T28687] bridge_slave_1: entered allmulticast mode [ 1969.541025][T28687] bridge_slave_1: entered promiscuous mode [ 1969.685569][T28687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1969.741704][T28687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1969.811210][T28741] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1969.935272][T28687] team0: Port device team_slave_0 added [ 1969.953186][T28687] team0: Port device team_slave_1 added [ 1970.165144][T28687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1970.203849][T28687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1970.282447][T28687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1970.320551][T28687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1970.347996][T28687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1970.434071][T15124] Bluetooth: hci3: command tx timeout [ 1970.462727][T28687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1970.780811][T28771] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1970.933618][T28687] hsr_slave_0: entered promiscuous mode [ 1970.946776][T28687] hsr_slave_1: entered promiscuous mode [ 1970.973833][T28687] debugfs: 'hsr0' already exists in 'hsr' [ 1970.985200][T28687] Cannot create hsr debugfs directory [ 1971.958811][ T36] hsr_slave_0: left promiscuous mode [ 1972.045647][ T36] hsr_slave_1: left promiscuous mode [ 1972.052188][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1972.078625][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1972.089890][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1972.102151][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1972.248918][ T36] veth1_macvtap: left promiscuous mode [ 1972.292784][ T36] veth0_macvtap: left promiscuous mode [ 1972.298528][ T36] veth1_vlan: left promiscuous mode [ 1972.319112][ T36] veth0_vlan: left promiscuous mode [ 1972.493177][T15124] Bluetooth: hci3: command tx timeout [ 1973.291290][T28805] FAULT_INJECTION: forcing a failure. [ 1973.291290][T28805] name failslab, interval 1, probability 0, space 0, times 0 [ 1973.322986][T28805] CPU: 0 UID: 0 PID: 28805 Comm: syz.5.4649 Not tainted syzkaller #0 PREEMPT(full) [ 1973.323027][T28805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1973.323055][T28805] Call Trace: [ 1973.323065][T28805] [ 1973.323076][T28805] dump_stack_lvl+0x16c/0x1f0 [ 1973.323117][T28805] should_fail_ex+0x512/0x640 [ 1973.323159][T28805] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1973.323194][T28805] should_failslab+0xc2/0x120 [ 1973.323235][T28805] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1973.323267][T28805] ? alloc_empty_file+0x55/0x1e0 [ 1973.323317][T28805] ? alloc_empty_file+0x55/0x1e0 [ 1973.323356][T28805] ? _raw_spin_unlock+0x28/0x50 [ 1973.323382][T28805] alloc_empty_file+0x55/0x1e0 [ 1973.323426][T28805] alloc_file_pseudo+0x13a/0x230 [ 1973.323472][T28805] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1973.323525][T28805] dma_buf_export+0x325/0xa90 [ 1973.323569][T28805] ? sg_alloc_table+0x4c/0x1c0 [ 1973.323607][T28805] system_heap_allocate+0xb03/0x10a0 [ 1973.323660][T28805] ? __pfx_system_heap_allocate+0x10/0x10 [ 1973.323716][T28805] ? rep_movs_alternative+0x4a/0x90 [ 1973.323766][T28805] dma_heap_ioctl+0x382/0x610 [ 1973.323812][T28805] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1973.323850][T28805] ? find_held_lock+0x2b/0x80 [ 1973.323900][T28805] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1973.323940][T28805] __x64_sys_ioctl+0x18e/0x210 [ 1973.323986][T28805] do_syscall_64+0xcd/0x4b0 [ 1973.324028][T28805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1973.324069][T28805] RIP: 0033:0x7f6618f8eec9 [ 1973.324095][T28805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1973.324127][T28805] RSP: 002b:00007f6619dc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1973.324157][T28805] RAX: ffffffffffffffda RBX: 00007f66191e5fa0 RCX: 00007f6618f8eec9 [ 1973.324178][T28805] RDX: 0000200000000400 RSI: ffffffff5fdffe00 RDI: 0000000000000003 [ 1973.324198][T28805] RBP: 00007f6619dc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1973.324218][T28805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1973.324237][T28805] R13: 00007f66191e6038 R14: 00007f66191e5fa0 R15: 00007ffd49fe3578 [ 1973.324278][T28805] [ 1973.554853][ C0] vkms_vblank_simulate: vblank timer overrun [ 1973.851780][T28807] queue_state_write: operation too long [ 1973.857643][T28807] queue_state_write: use 'run', 'start' or 'kick' [ 1974.004900][T28810] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1974.279973][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1974.367012][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1974.572533][T15124] Bluetooth: hci3: command tx timeout [ 1975.492123][T28817] mkiss: ax0: crc mode is auto. [ 1977.063601][T28687] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1977.145185][T28687] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1977.285708][T28687] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1977.424122][T28687] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1977.838178][T28687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1977.896769][T28687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1977.957872][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1977.965353][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1978.074416][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1978.082571][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1978.163729][ T30] audit: type=1400 audit(4294967384.370:13): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=28855 comm="syz.6.4657" [ 1978.233311][T28876] random: crng reseeded on system resumption [ 1979.553811][T28895] mkiss: ax0: crc mode is auto. [ 1980.165111][T28687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1980.657215][T28687] veth0_vlan: entered promiscuous mode [ 1980.717814][T28687] veth1_vlan: entered promiscuous mode [ 1980.786171][T28687] veth0_macvtap: entered promiscuous mode [ 1980.835469][T28687] veth1_macvtap: entered promiscuous mode [ 1980.926796][T28687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1980.957982][T28687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1981.012114][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.037066][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.066185][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.077627][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.269994][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.279342][T28931] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4665'. [ 1981.295391][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.451618][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.492383][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1982.466519][T28957] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1983.802610][T28966] mkiss: ax0: crc mode is auto. [ 1985.188443][T28979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4674'. [ 1985.467261][T28987] usb usb36: usbfs: process 28987 (syz.2.4675) did not claim interface 0 before use [ 1986.334293][T29000] FAULT_INJECTION: forcing a failure. [ 1986.334293][T29000] name failslab, interval 1, probability 0, space 0, times 0 [ 1986.375045][T29000] CPU: 1 UID: 0 PID: 29000 Comm: syz.5.4680 Not tainted syzkaller #0 PREEMPT(full) [ 1986.375088][T29000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1986.375109][T29000] Call Trace: [ 1986.375120][T29000] [ 1986.375133][T29000] dump_stack_lvl+0x16c/0x1f0 [ 1986.375180][T29000] should_fail_ex+0x512/0x640 [ 1986.375227][T29000] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1986.375268][T29000] should_failslab+0xc2/0x120 [ 1986.375316][T29000] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1986.375352][T29000] ? taskstats_exit+0x654/0xbe0 [ 1986.375394][T29000] ? taskstats_exit+0x654/0xbe0 [ 1986.375424][T29000] ? acct_update_integrals+0x2ce/0x4a0 [ 1986.375457][T29000] taskstats_exit+0x654/0xbe0 [ 1986.375494][T29000] ? __pfx_taskstats_exit+0x10/0x10 [ 1986.375535][T29000] ? exit_signals+0x38e/0xb40 [ 1986.375585][T29000] do_exit+0x5dc/0x2bf0 [ 1986.375622][T29000] ? __pfx_do_exit+0x10/0x10 [ 1986.375651][T29000] ? do_raw_spin_lock+0x12c/0x2b0 [ 1986.375685][T29000] ? find_held_lock+0x2b/0x80 [ 1986.375732][T29000] do_group_exit+0xd3/0x2a0 [ 1986.375766][T29000] get_signal+0x2671/0x26d0 [ 1986.375822][T29000] ? __pfx_get_signal+0x10/0x10 [ 1986.375865][T29000] ? do_futex+0x122/0x350 [ 1986.375919][T29000] ? __pfx_do_futex+0x10/0x10 [ 1986.375971][T29000] arch_do_signal_or_restart+0x8f/0x790 [ 1986.376019][T29000] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1986.376069][T29000] ? __pfx_do_writev+0x10/0x10 [ 1986.376106][T29000] exit_to_user_mode_loop+0x85/0x130 [ 1986.376135][T29000] do_syscall_64+0x419/0x4b0 [ 1986.376173][T29000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1986.376202][T29000] RIP: 0033:0x7f6618f8eec9 [ 1986.376224][T29000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1986.376251][T29000] RSP: 002b:00007f6619dc90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1986.376277][T29000] RAX: fffffffffffffe00 RBX: 00007f66191e5fa8 RCX: 00007f6618f8eec9 [ 1986.376295][T29000] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f66191e5fa8 [ 1986.376313][T29000] RBP: 00007f66191e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1986.376330][T29000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1986.376346][T29000] R13: 00007f66191e6038 R14: 00007ffd49fe3490 R15: 00007ffd49fe3578 [ 1986.376381][T29000] [ 1986.379438][T28996] mkiss: ax0: crc mode is auto. [ 1986.432111][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.634199][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.913067][T28998] usb usb36: usbfs: process 28998 (syz.6.4678) did not claim interface 0 before use [ 1988.622854][T29025] FAULT_INJECTION: forcing a failure. [ 1988.622854][T29025] name failslab, interval 1, probability 0, space 0, times 0 [ 1988.653900][T29025] CPU: 1 UID: 0 PID: 29025 Comm: syz.2.4684 Not tainted syzkaller #0 PREEMPT(full) [ 1988.653943][T29025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1988.653964][T29025] Call Trace: [ 1988.653975][T29025] [ 1988.653989][T29025] dump_stack_lvl+0x16c/0x1f0 [ 1988.654037][T29025] should_fail_ex+0x512/0x640 [ 1988.654085][T29025] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1988.654131][T29025] should_failslab+0xc2/0x120 [ 1988.654183][T29025] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1988.654227][T29025] ? __d_alloc+0x32/0xae0 [ 1988.654277][T29025] ? __d_alloc+0x32/0xae0 [ 1988.654315][T29025] __d_alloc+0x32/0xae0 [ 1988.654363][T29025] d_alloc_parallel+0x111/0x1480 [ 1988.654440][T29025] ? find_held_lock+0x2b/0x80 [ 1988.654486][T29025] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1988.654547][T29025] ? __d_lookup+0x266/0x4a0 [ 1988.654594][T29025] lookup_open.isra.0+0x665/0x1580 [ 1988.654625][T29025] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1988.654668][T29025] ? lookup_fast+0x156/0x610 [ 1988.654695][T29025] path_openat+0x893/0x2cb0 [ 1988.654733][T29025] ? __pfx_path_openat+0x10/0x10 [ 1988.654770][T29025] do_filp_open+0x20b/0x470 [ 1988.654799][T29025] ? __pfx_do_filp_open+0x10/0x10 [ 1988.654838][T29025] ? __pfx_kfree_link+0x10/0x10 [ 1988.654883][T29025] ? alloc_fd+0x471/0x7d0 [ 1988.654917][T29025] do_sys_openat2+0x11b/0x1d0 [ 1988.654954][T29025] ? __pfx_do_sys_openat2+0x10/0x10 [ 1988.655004][T29025] __x64_sys_openat+0x174/0x210 [ 1988.655043][T29025] ? __pfx___x64_sys_openat+0x10/0x10 [ 1988.655094][T29025] do_syscall_64+0xcd/0x4b0 [ 1988.655126][T29025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1988.655151][T29025] RIP: 0033:0x7f1df258eec9 [ 1988.655170][T29025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1988.655194][T29025] RSP: 002b:00007f1df07d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1988.655216][T29025] RAX: ffffffffffffffda RBX: 00007f1df27e6090 RCX: 00007f1df258eec9 [ 1988.655233][T29025] RDX: 0000000000002100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1988.655249][T29025] RBP: 00007f1df2611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1988.655264][T29025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1988.655278][T29025] R13: 00007f1df27e6128 R14: 00007f1df27e6090 R15: 00007ffc0cffa788 [ 1988.655309][T29025] [ 1989.050523][T29025] random: crng reseeded on system resumption [ 1990.223140][T29031] usb usb36: usbfs: process 29031 (syz.0.4686) did not claim interface 0 before use [ 1990.916642][T29048] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1994.104495][T29088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4698'. [ 1994.535678][T29101] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1994.810577][T29105] FAULT_INJECTION: forcing a failure. [ 1994.810577][T29105] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.836675][T29105] CPU: 0 UID: 0 PID: 29105 Comm: syz.5.4701 Not tainted syzkaller #0 PREEMPT(full) [ 1994.836718][T29105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1994.836741][T29105] Call Trace: [ 1994.836752][T29105] [ 1994.836765][T29105] dump_stack_lvl+0x16c/0x1f0 [ 1994.836815][T29105] should_fail_ex+0x512/0x640 [ 1994.836863][T29105] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1994.836907][T29105] should_failslab+0xc2/0x120 [ 1994.836957][T29105] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1994.837000][T29105] ? __d_alloc+0x32/0xae0 [ 1994.837049][T29105] ? __d_alloc+0x32/0xae0 [ 1994.837087][T29105] __d_alloc+0x32/0xae0 [ 1994.837134][T29105] d_alloc_parallel+0x111/0x1480 [ 1994.837212][T29105] ? find_held_lock+0x2b/0x80 [ 1994.837259][T29105] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1994.837320][T29105] ? __d_lookup+0x266/0x4a0 [ 1994.837386][T29105] lookup_open.isra.0+0x665/0x1580 [ 1994.837436][T29105] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1994.837499][T29105] ? lookup_fast+0x156/0x610 [ 1994.837540][T29105] path_openat+0x893/0x2cb0 [ 1994.837596][T29105] ? __pfx_path_openat+0x10/0x10 [ 1994.837648][T29105] do_filp_open+0x20b/0x470 [ 1994.837679][T29105] ? __pfx_do_filp_open+0x10/0x10 [ 1994.837719][T29105] ? __pfx_kfree_link+0x10/0x10 [ 1994.837764][T29105] ? alloc_fd+0x471/0x7d0 [ 1994.837798][T29105] do_sys_openat2+0x11b/0x1d0 [ 1994.837835][T29105] ? __pfx_do_sys_openat2+0x10/0x10 [ 1994.837885][T29105] __x64_sys_openat+0x174/0x210 [ 1994.837924][T29105] ? __pfx___x64_sys_openat+0x10/0x10 [ 1994.837974][T29105] do_syscall_64+0xcd/0x4b0 [ 1994.838006][T29105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.838031][T29105] RIP: 0033:0x7f6618f8eec9 [ 1994.838050][T29105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1994.838074][T29105] RSP: 002b:00007f6619da8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1994.838097][T29105] RAX: ffffffffffffffda RBX: 00007f66191e6090 RCX: 00007f6618f8eec9 [ 1994.838114][T29105] RDX: 0000000000002100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1994.838130][T29105] RBP: 00007f6619011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1994.838146][T29105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1994.838161][T29105] R13: 00007f66191e6128 R14: 00007f66191e6090 R15: 00007ffd49fe3578 [ 1994.838201][T29105] [ 1995.428999][T29105] random: crng reseeded on system resumption [ 1996.398703][T29125] mkiss: ax0: crc mode is auto. [ 2001.353825][T29145] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 2001.370662][T29178] FAULT_INJECTION: forcing a failure. [ 2001.370662][T29178] name failslab, interval 1, probability 0, space 0, times 0 [ 2001.384220][T29178] CPU: 0 UID: 0 PID: 29178 Comm: syz.5.4714 Not tainted syzkaller #0 PREEMPT(full) [ 2001.384253][T29178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2001.384268][T29178] Call Trace: [ 2001.384276][T29178] [ 2001.384285][T29178] dump_stack_lvl+0x16c/0x1f0 [ 2001.384320][T29178] should_fail_ex+0x512/0x640 [ 2001.384360][T29178] should_failslab+0xc2/0x120 [ 2001.384396][T29178] __kmalloc_cache_noprof+0x72/0x780 [ 2001.384421][T29178] ? tipc_dest_push+0x148/0x310 [ 2001.384461][T29178] ? tipc_dest_push+0x148/0x310 [ 2001.384493][T29178] tipc_dest_push+0x148/0x310 [ 2001.384530][T29178] tipc_nametbl_lookup_mcast_sockets+0x2b8/0x500 [ 2001.384576][T29178] tipc_sk_mcast_rcv+0x4e6/0xfa0 [ 2001.384611][T29178] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 2001.384659][T29178] ? find_held_lock+0x2b/0x80 [ 2001.384690][T29178] ? tipc_mcast_xmit+0x6d5/0xfe0 [ 2001.384726][T29178] tipc_mcast_xmit+0x711/0xfe0 [ 2001.384748][T29178] ? __pfx__copy_from_iter+0x10/0x10 [ 2001.384783][T29178] ? __pfx___alloc_skb+0x10/0x10 [ 2001.384820][T29178] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 2001.384842][T29178] ? __lock_acquire+0x62e/0x1ce0 [ 2001.384909][T29178] ? tipc_send_group_bcast+0x803/0xa50 [ 2001.384942][T29178] tipc_send_group_bcast+0x803/0xa50 [ 2001.384987][T29178] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 2001.385020][T29178] ? css_rstat_updated+0x1c2/0x510 [ 2001.385051][T29178] ? kvm_sched_clock_read+0x11/0x20 [ 2001.385084][T29178] ? sched_clock+0x38/0x60 [ 2001.385120][T29178] ? __pfx_woken_wake_function+0x10/0x10 [ 2001.385161][T29178] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2001.385193][T29178] __tipc_sendmsg+0x4ab/0x19a0 [ 2001.385215][T29178] ? lock_acquire+0x179/0x350 [ 2001.385260][T29178] ? __pfx___tipc_sendmsg+0x10/0x10 [ 2001.385283][T29178] ? __lock_acquire+0xb97/0x1ce0 [ 2001.385346][T29178] ? __local_bh_enable_ip+0xa4/0x120 [ 2001.385388][T29178] tipc_sendmsg+0x4f/0x70 [ 2001.385411][T29178] sock_write_iter+0x563/0x610 [ 2001.385439][T29178] ? __pfx_sock_write_iter+0x10/0x10 [ 2001.385478][T29178] ? __futex_wait+0x24b/0x2f0 [ 2001.385503][T29178] ? copy_iovec_from_user+0x131/0x170 [ 2001.385541][T29178] do_iter_readv_writev+0x662/0x9e0 [ 2001.385570][T29178] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2001.385602][T29178] ? bpf_lsm_file_permission+0x9/0x10 [ 2001.385633][T29178] ? security_file_permission+0x71/0x210 [ 2001.385659][T29178] ? rw_verify_area+0xcf/0x6c0 [ 2001.385686][T29178] vfs_writev+0x35f/0xde0 [ 2001.385720][T29178] ? __lock_acquire+0x62e/0x1ce0 [ 2001.385761][T29178] ? __pfx_vfs_writev+0x10/0x10 [ 2001.385809][T29178] ? __fget_files+0x20e/0x3c0 [ 2001.385844][T29178] ? do_writev+0x28c/0x340 [ 2001.385867][T29178] do_writev+0x28c/0x340 [ 2001.385893][T29178] ? __pfx_do_writev+0x10/0x10 [ 2001.385928][T29178] do_syscall_64+0xcd/0x4b0 [ 2001.385960][T29178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2001.385989][T29178] RIP: 0033:0x7f6618f8eec9 [ 2001.386009][T29178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2001.386033][T29178] RSP: 002b:00007f6619dc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2001.386056][T29178] RAX: ffffffffffffffda RBX: 00007f66191e5fa0 RCX: 00007f6618f8eec9 [ 2001.386072][T29178] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 2001.386087][T29178] RBP: 00007f6619011f91 R08: 0000000000000000 R09: 0000000000000000 [ 2001.386102][T29178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2001.386117][T29178] R13: 00007f66191e6038 R14: 00007f66191e5fa0 R15: 00007ffd49fe3578 [ 2001.386148][T29178] [ 2002.809377][T29193] FAULT_INJECTION: forcing a failure. [ 2002.809377][T29193] name failslab, interval 1, probability 0, space 0, times 0 [ 2002.916791][T29193] CPU: 1 UID: 0 PID: 29193 Comm: syz.6.4719 Not tainted syzkaller #0 PREEMPT(full) [ 2002.916837][T29193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2002.916858][T29193] Call Trace: [ 2002.916870][T29193] [ 2002.916883][T29193] dump_stack_lvl+0x16c/0x1f0 [ 2002.916932][T29193] should_fail_ex+0x512/0x640 [ 2002.916986][T29193] should_failslab+0xc2/0x120 [ 2002.917034][T29193] kmem_cache_alloc_node_noprof+0x78/0x770 [ 2002.917073][T29193] ? __alloc_skb+0x2b2/0x380 [ 2002.917130][T29193] ? __alloc_skb+0x2b2/0x380 [ 2002.917173][T29193] __alloc_skb+0x2b2/0x380 [ 2002.917221][T29193] ? __pfx___alloc_skb+0x10/0x10 [ 2002.917270][T29193] ? kasan_quarantine_put+0x40/0x240 [ 2002.917327][T29193] __pskb_copy_fclone+0xef/0xb50 [ 2002.917372][T29193] tipc_sk_mcast_rcv+0x52d/0xfa0 [ 2002.917441][T29193] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 2002.917509][T29193] ? find_held_lock+0x2b/0x80 [ 2002.917552][T29193] ? tipc_mcast_xmit+0x6d5/0xfe0 [ 2002.917592][T29193] tipc_mcast_xmit+0x711/0xfe0 [ 2002.917623][T29193] ? __pfx__copy_from_iter+0x10/0x10 [ 2002.917671][T29193] ? __pfx___alloc_skb+0x10/0x10 [ 2002.917724][T29193] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 2002.917756][T29193] ? __lock_acquire+0x62e/0x1ce0 [ 2002.917853][T29193] ? tipc_send_group_bcast+0x803/0xa50 [ 2002.917900][T29193] tipc_send_group_bcast+0x803/0xa50 [ 2002.917968][T29193] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 2002.918016][T29193] ? css_rstat_updated+0x1c2/0x510 [ 2002.918061][T29193] ? __pfx_css_rstat_updated+0x10/0x10 [ 2002.918105][T29193] ? __pfx_woken_wake_function+0x10/0x10 [ 2002.918162][T29193] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2002.918209][T29193] __tipc_sendmsg+0x4ab/0x19a0 [ 2002.918241][T29193] ? lock_acquire+0x179/0x350 [ 2002.918305][T29193] ? __pfx___tipc_sendmsg+0x10/0x10 [ 2002.918336][T29193] ? __lock_acquire+0xb97/0x1ce0 [ 2002.918428][T29193] ? __local_bh_enable_ip+0xa4/0x120 [ 2002.918480][T29193] tipc_sendmsg+0x4f/0x70 [ 2002.918525][T29193] sock_write_iter+0x563/0x610 [ 2002.918566][T29193] ? __pfx_sock_write_iter+0x10/0x10 [ 2002.918622][T29193] ? __futex_wait+0x24b/0x2f0 [ 2002.918659][T29193] ? copy_iovec_from_user+0x131/0x170 [ 2002.918715][T29193] do_iter_readv_writev+0x662/0x9e0 [ 2002.918758][T29193] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2002.918803][T29193] ? bpf_lsm_file_permission+0x9/0x10 [ 2002.918847][T29193] ? security_file_permission+0x71/0x210 [ 2002.918885][T29193] ? rw_verify_area+0xcf/0x6c0 [ 2002.918925][T29193] vfs_writev+0x35f/0xde0 [ 2002.918968][T29193] ? __lock_acquire+0x62e/0x1ce0 [ 2002.919021][T29193] ? __pfx_vfs_writev+0x10/0x10 [ 2002.919084][T29193] ? __fget_files+0x20e/0x3c0 [ 2002.919119][T29193] ? do_writev+0x28c/0x340 [ 2002.919142][T29193] do_writev+0x28c/0x340 [ 2002.919168][T29193] ? __pfx_do_writev+0x10/0x10 [ 2002.919202][T29193] do_syscall_64+0xcd/0x4b0 [ 2002.919235][T29193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2002.919261][T29193] RIP: 0033:0x7f027cd8eec9 [ 2002.919280][T29193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2002.919304][T29193] RSP: 002b:00007f027dcf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2002.919327][T29193] RAX: ffffffffffffffda RBX: 00007f027cfe5fa0 RCX: 00007f027cd8eec9 [ 2002.919343][T29193] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 2002.919358][T29193] RBP: 00007f027ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2002.919373][T29193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2002.919388][T29193] R13: 00007f027cfe6038 R14: 00007f027cfe5fa0 R15: 00007fff83f7ea98 [ 2002.919418][T29193] [ 2003.004658][T29193] tipc: Failed to clone mcast rcv buffer [ 2004.746692][T29216] mkiss: ax0: crc mode is auto. [ 2005.273914][T29220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4725'. [ 2007.154449][T29252] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 2009.147703][T29273] netlink: 'syz.0.4737': attribute type 2 has an invalid length. [ 2009.173857][T29273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4737'. [ 2009.370241][T24011] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2009.399704][T24011] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2009.410408][T24011] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2009.423507][T24011] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2009.445747][T24011] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2009.487731][T29281] input: ÿÿÿÿ as /devices/virtual/input/input14 [ 2011.325091][T29298] mkiss: ax0: crc mode is auto. [ 2011.532437][T15124] Bluetooth: hci2: command tx timeout [ 2011.761366][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2011.788699][T29277] chnl_net:caif_netlink_parms(): no params data found [ 2011.986699][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.248776][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.344068][T29318] mkiss: ax0: crc mode is auto. [ 2012.526089][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.907578][T29330] blktrace: Concurrent blktraces are not allowed on sg0 [ 2013.060300][T29277] bridge0: port 1(bridge_slave_0) entered blocking state [ 2013.068853][T29277] bridge0: port 1(bridge_slave_0) entered disabled state [ 2013.081400][T29277] bridge_slave_0: entered allmulticast mode [ 2013.138143][T29277] bridge_slave_0: entered promiscuous mode [ 2013.191390][T29277] bridge0: port 2(bridge_slave_1) entered blocking state [ 2013.201309][T29277] bridge0: port 2(bridge_slave_1) entered disabled state [ 2013.214257][T29277] bridge_slave_1: entered allmulticast mode [ 2013.232184][T29277] bridge_slave_1: entered promiscuous mode [ 2013.407702][T29277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2013.473322][T29277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2013.613896][T15124] Bluetooth: hci2: command tx timeout [ 2013.771128][T29277] team0: Port device team_slave_0 added [ 2013.797968][ T36] bridge_slave_1: left allmulticast mode [ 2013.804927][ T36] bridge_slave_1: left promiscuous mode [ 2013.810681][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 2013.884350][ T36] bridge_slave_0: left allmulticast mode [ 2013.890031][ T36] bridge_slave_0: left promiscuous mode [ 2013.911344][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 2014.404929][T29345] openvswitch: netlink: VXLAN extension 64 out of range max 1 [ 2014.545810][T29347] FAULT_INJECTION: forcing a failure. [ 2014.545810][T29347] name failslab, interval 1, probability 0, space 0, times 0 [ 2014.566597][T29347] CPU: 1 UID: 0 PID: 29347 Comm: syz.5.4750 Not tainted syzkaller #0 PREEMPT(full) [ 2014.566645][T29347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2014.566661][T29347] Call Trace: [ 2014.566670][T29347] [ 2014.566679][T29347] dump_stack_lvl+0x16c/0x1f0 [ 2014.566715][T29347] should_fail_ex+0x512/0x640 [ 2014.566756][T29347] should_failslab+0xc2/0x120 [ 2014.566792][T29347] __kmalloc_cache_noprof+0x72/0x780 [ 2014.566817][T29347] ? __task_pid_nr_ns+0x1f5/0x500 [ 2014.566856][T29347] ? proc_self_get_link+0x1a9/0x230 [ 2014.566895][T29347] ? proc_self_get_link+0x1a9/0x230 [ 2014.566928][T29347] proc_self_get_link+0x1a9/0x230 [ 2014.566963][T29347] ? __pfx_proc_self_get_link+0x10/0x10 [ 2014.566996][T29347] step_into+0x189e/0x21a0 [ 2014.567027][T29347] ? __pfx_step_into+0x10/0x10 [ 2014.567057][T29347] ? lookup_fast+0x156/0x610 [ 2014.567085][T29347] walk_component+0xfc/0x5b0 [ 2014.567112][T29347] link_path_walk+0x627/0xe20 [ 2014.567148][T29347] path_openat+0x1b0/0x2cb0 [ 2014.567187][T29347] ? __pfx_path_openat+0x10/0x10 [ 2014.567249][T29347] do_filp_open+0x20b/0x470 [ 2014.567279][T29347] ? __pfx_do_filp_open+0x10/0x10 [ 2014.567329][T29347] ? alloc_fd+0x471/0x7d0 [ 2014.567363][T29347] do_sys_openat2+0x11b/0x1d0 [ 2014.567402][T29347] ? __pfx_do_sys_openat2+0x10/0x10 [ 2014.567452][T29347] __x64_sys_openat+0x174/0x210 [ 2014.567490][T29347] ? __pfx___x64_sys_openat+0x10/0x10 [ 2014.567541][T29347] do_syscall_64+0xcd/0x4b0 [ 2014.567574][T29347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2014.567599][T29347] RIP: 0033:0x7f6618f8eec9 [ 2014.567618][T29347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2014.567642][T29347] RSP: 002b:00007f6619dc9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2014.567665][T29347] RAX: ffffffffffffffda RBX: 00007f66191e5fa0 RCX: 00007f6618f8eec9 [ 2014.567681][T29347] RDX: 0000000000002100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 2014.567697][T29347] RBP: 00007f6619011f91 R08: 0000000000000000 R09: 0000000000000000 [ 2014.567712][T29347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2014.567726][T29347] R13: 00007f66191e6038 R14: 00007f66191e5fa0 R15: 00007ffd49fe3578 [ 2014.567757][T29347] [ 2014.887146][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2014.924036][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2014.939597][ T36] bond0 (unregistering): Released all slaves [ 2014.988266][T29277] team0: Port device team_slave_1 added [ 2015.186651][ T36] : left promiscuous mode [ 2015.306336][T29277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2015.339235][T29277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2015.403190][T29277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2015.421905][T29277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2015.429014][T29277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2015.455173][T29277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2015.481923][ T36] tipc: Left network mode [ 2015.692805][T15124] Bluetooth: hci2: command tx timeout [ 2015.709548][T29277] hsr_slave_0: entered promiscuous mode [ 2015.718502][T29277] hsr_slave_1: entered promiscuous mode [ 2015.736788][T29277] debugfs: 'hsr0' already exists in 'hsr' [ 2015.750071][T29277] Cannot create hsr debugfs directory [ 2016.068543][T29362] mkiss: ax0: crc mode is auto. [ 2016.776814][T29380] FAULT_INJECTION: forcing a failure. [ 2016.776814][T29380] name failslab, interval 1, probability 0, space 0, times 0 [ 2016.792722][T29380] CPU: 0 UID: 0 PID: 29380 Comm: syz.6.4755 Not tainted syzkaller #0 PREEMPT(full) [ 2016.792766][T29380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2016.792787][T29380] Call Trace: [ 2016.792798][T29380] [ 2016.792811][T29380] dump_stack_lvl+0x16c/0x1f0 [ 2016.792859][T29380] should_fail_ex+0x512/0x640 [ 2016.792908][T29380] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2016.792953][T29380] should_failslab+0xc2/0x120 [ 2016.793003][T29380] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2016.793042][T29380] ? security_file_alloc+0x34/0x2b0 [ 2016.793087][T29380] ? security_file_alloc+0x34/0x2b0 [ 2016.793132][T29380] security_file_alloc+0x34/0x2b0 [ 2016.793170][T29380] init_file+0x93/0x4c0 [ 2016.793222][T29380] alloc_empty_file+0x73/0x1e0 [ 2016.793277][T29380] path_openat+0xda/0x2cb0 [ 2016.793332][T29380] ? __pfx_path_openat+0x10/0x10 [ 2016.793372][T29380] do_filp_open+0x20b/0x470 [ 2016.793401][T29380] ? __pfx_do_filp_open+0x10/0x10 [ 2016.793450][T29380] ? alloc_fd+0x471/0x7d0 [ 2016.793484][T29380] do_sys_openat2+0x11b/0x1d0 [ 2016.793522][T29380] ? __pfx_do_sys_openat2+0x10/0x10 [ 2016.793571][T29380] __x64_sys_openat+0x174/0x210 [ 2016.793610][T29380] ? __pfx___x64_sys_openat+0x10/0x10 [ 2016.793660][T29380] do_syscall_64+0xcd/0x4b0 [ 2016.793699][T29380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2016.793734][T29380] RIP: 0033:0x7f027cd8eec9 [ 2016.793763][T29380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2016.793788][T29380] RSP: 002b:00007f027dcd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2016.793811][T29380] RAX: ffffffffffffffda RBX: 00007f027cfe6090 RCX: 00007f027cd8eec9 [ 2016.793828][T29380] RDX: 0000000000002100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 2016.793845][T29380] RBP: 00007f027ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2016.793860][T29380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2016.793875][T29380] R13: 00007f027cfe6128 R14: 00007f027cfe6090 R15: 00007fff83f7ea98 [ 2016.793905][T29380] [ 2017.120232][T29380] random: crng reseeded on system resumption [ 2017.324390][T29382] usb usb36: usbfs: process 29382 (syz.0.4754) did not claim interface 0 before use [ 2017.561238][T29386] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(424206980.290643515.64131978), cmd(3) [ 2017.638793][ T917] Process accounting resumed [ 2017.703859][ T36] hsr_slave_0: left promiscuous mode [ 2017.742511][ T36] hsr_slave_1: left promiscuous mode [ 2017.759010][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2017.772942][T15124] Bluetooth: hci2: command tx timeout [ 2017.775842][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2017.824223][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2017.831667][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2017.887764][ T36] veth1_macvtap: left promiscuous mode [ 2017.894391][ T36] veth0_macvtap: left promiscuous mode [ 2017.900085][ T36] veth1_vlan: left allmulticast mode [ 2017.911569][ T36] veth1_vlan: left promiscuous mode [ 2017.917180][ T36] veth0_vlan: left promiscuous mode [ 2017.970197][T29393] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 2019.237735][ T36] team0 (unregistering): Port device team_slave_1 removed [ 2019.352865][ T36] team0 (unregistering): Port device team_slave_0 removed [ 2020.268165][T29412] FAULT_INJECTION: forcing a failure. [ 2020.268165][T29412] name failslab, interval 1, probability 0, space 0, times 0 [ 2020.282260][T29412] CPU: 1 UID: 0 PID: 29412 Comm: syz.0.4761 Not tainted syzkaller #0 PREEMPT(full) [ 2020.282309][T29412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2020.282330][T29412] Call Trace: [ 2020.282341][T29412] [ 2020.282355][T29412] dump_stack_lvl+0x16c/0x1f0 [ 2020.282403][T29412] should_fail_ex+0x512/0x640 [ 2020.282458][T29412] should_failslab+0xc2/0x120 [ 2020.282509][T29412] __kmalloc_cache_noprof+0x72/0x780 [ 2020.282546][T29412] ? __task_pid_nr_ns+0x1f5/0x500 [ 2020.282601][T29412] ? proc_self_get_link+0x1a9/0x230 [ 2020.282656][T29412] ? proc_self_get_link+0x1a9/0x230 [ 2020.282704][T29412] proc_self_get_link+0x1a9/0x230 [ 2020.282754][T29412] ? __pfx_proc_self_get_link+0x10/0x10 [ 2020.282799][T29412] step_into+0x189e/0x21a0 [ 2020.282845][T29412] ? __pfx_step_into+0x10/0x10 [ 2020.282889][T29412] ? lookup_fast+0x156/0x610 [ 2020.282930][T29412] walk_component+0xfc/0x5b0 [ 2020.282969][T29412] link_path_walk+0x627/0xe20 [ 2020.283022][T29412] path_openat+0x1b0/0x2cb0 [ 2020.283088][T29412] ? __pfx_path_openat+0x10/0x10 [ 2020.283143][T29412] do_filp_open+0x20b/0x470 [ 2020.283187][T29412] ? __pfx_do_filp_open+0x10/0x10 [ 2020.283261][T29412] ? alloc_fd+0x471/0x7d0 [ 2020.283311][T29412] do_sys_openat2+0x11b/0x1d0 [ 2020.283365][T29412] ? __pfx_do_sys_openat2+0x10/0x10 [ 2020.283435][T29412] __x64_sys_openat+0x174/0x210 [ 2020.283491][T29412] ? __pfx___x64_sys_openat+0x10/0x10 [ 2020.283566][T29412] do_syscall_64+0xcd/0x4b0 [ 2020.283613][T29412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2020.283666][T29412] RIP: 0033:0x7f2dded8eec9 [ 2020.283701][T29412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2020.283759][T29412] RSP: 002b:00007f2ddfc62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2020.283793][T29412] RAX: ffffffffffffffda RBX: 00007f2ddefe6090 RCX: 00007f2dded8eec9 [ 2020.283821][T29412] RDX: 0000000000002100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 2020.283843][T29412] RBP: 00007f2ddee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2020.283865][T29412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2020.283885][T29412] R13: 00007f2ddefe6128 R14: 00007f2ddefe6090 R15: 00007ffd6dfca2f8 [ 2020.283930][T29412] [ 2020.787775][T29412] random: crng reseeded on system resumption [ 2021.413812][T29277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2021.601817][T29277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2021.630040][T29277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2021.783172][T29426] FAULT_INJECTION: forcing a failure. [ 2021.783172][T29426] name failslab, interval 1, probability 0, space 0, times 0 [ 2021.795933][T29426] CPU: 1 UID: 0 PID: 29426 Comm: syz.0.4764 Not tainted syzkaller #0 PREEMPT(full) [ 2021.795976][T29426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2021.795997][T29426] Call Trace: [ 2021.796009][T29426] [ 2021.796023][T29426] dump_stack_lvl+0x16c/0x1f0 [ 2021.796072][T29426] should_fail_ex+0x512/0x640 [ 2021.796132][T29426] should_failslab+0xc2/0x120 [ 2021.796184][T29426] __kmalloc_cache_noprof+0x72/0x780 [ 2021.796224][T29426] ? tipc_dest_push+0x148/0x310 [ 2021.796282][T29426] ? tipc_dest_push+0x148/0x310 [ 2021.796329][T29426] tipc_dest_push+0x148/0x310 [ 2021.796391][T29426] tipc_nametbl_lookup_mcast_sockets+0x2b8/0x500 [ 2021.796462][T29426] tipc_sk_mcast_rcv+0x4e6/0xfa0 [ 2021.796514][T29426] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 2021.796576][T29426] ? find_held_lock+0x2b/0x80 [ 2021.796630][T29426] ? tipc_mcast_xmit+0x6d5/0xfe0 [ 2021.796671][T29426] tipc_mcast_xmit+0x711/0xfe0 [ 2021.796704][T29426] ? __pfx__copy_from_iter+0x10/0x10 [ 2021.796753][T29426] ? __pfx___alloc_skb+0x10/0x10 [ 2021.796807][T29426] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 2021.796838][T29426] ? __lock_acquire+0x62e/0x1ce0 [ 2021.796931][T29426] ? tipc_send_group_bcast+0x803/0xa50 [ 2021.796978][T29426] tipc_send_group_bcast+0x803/0xa50 [ 2021.797055][T29426] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 2021.797101][T29426] ? css_rstat_updated+0x1c2/0x510 [ 2021.797147][T29426] ? __pfx_css_rstat_updated+0x10/0x10 [ 2021.797192][T29426] ? __pfx_woken_wake_function+0x10/0x10 [ 2021.797252][T29426] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2021.797298][T29426] __tipc_sendmsg+0x4ab/0x19a0 [ 2021.797327][T29426] ? lock_acquire+0x179/0x350 [ 2021.797390][T29426] ? __pfx___tipc_sendmsg+0x10/0x10 [ 2021.797422][T29426] ? __lock_acquire+0xb97/0x1ce0 [ 2021.797513][T29426] ? __local_bh_enable_ip+0xa4/0x120 [ 2021.797565][T29426] tipc_sendmsg+0x4f/0x70 [ 2021.797598][T29426] sock_write_iter+0x563/0x610 [ 2021.797654][T29426] ? __pfx_sock_write_iter+0x10/0x10 [ 2021.797711][T29426] ? __futex_wait+0x24b/0x2f0 [ 2021.797747][T29426] ? copy_iovec_from_user+0x131/0x170 [ 2021.797803][T29426] do_iter_readv_writev+0x662/0x9e0 [ 2021.797844][T29426] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2021.797891][T29426] ? bpf_lsm_file_permission+0x9/0x10 [ 2021.797935][T29426] ? security_file_permission+0x71/0x210 [ 2021.797973][T29426] ? rw_verify_area+0xcf/0x6c0 [ 2021.798013][T29426] vfs_writev+0x35f/0xde0 [ 2021.798055][T29426] ? __lock_acquire+0x62e/0x1ce0 [ 2021.798111][T29426] ? __pfx_vfs_writev+0x10/0x10 [ 2021.798177][T29426] ? __fget_files+0x20e/0x3c0 [ 2021.798227][T29426] ? do_writev+0x28c/0x340 [ 2021.798261][T29426] do_writev+0x28c/0x340 [ 2021.798299][T29426] ? __pfx_do_writev+0x10/0x10 [ 2021.798350][T29426] do_syscall_64+0xcd/0x4b0 [ 2021.798396][T29426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2021.798431][T29426] RIP: 0033:0x7f2dded8eec9 [ 2021.798459][T29426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2021.798494][T29426] RSP: 002b:00007f2ddfc83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2021.798527][T29426] RAX: ffffffffffffffda RBX: 00007f2ddefe5fa0 RCX: 00007f2dded8eec9 [ 2021.798550][T29426] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 2021.798572][T29426] RBP: 00007f2ddee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2021.798593][T29426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2021.798622][T29426] R13: 00007f2ddefe6038 R14: 00007f2ddefe5fa0 R15: 00007ffd6dfca2f8 [ 2021.798667][T29426] [ 2022.412296][T29277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2022.887654][T29445] random: crng reseeded on system resumption [ 2023.707446][T29277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2023.832863][T29471] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 2023.924282][T29277] 8021q: adding VLAN 0 to HW filter on device team0 [ 2024.001316][T11043] bridge0: port 1(bridge_slave_0) entered blocking state [ 2024.008527][T11043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2024.129284][T11043] bridge0: port 2(bridge_slave_1) entered blocking state [ 2024.136557][T11043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2024.807543][T29479] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 2025.281324][T29277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2025.479037][T29277] veth0_vlan: entered promiscuous mode [ 2025.516636][T29277] veth1_vlan: entered promiscuous mode [ 2025.638372][T29277] veth0_macvtap: entered promiscuous mode [ 2025.648536][T29277] veth1_macvtap: entered promiscuous mode [ 2025.698478][T29277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2025.808860][T29277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2025.965793][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2025.985801][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2025.996975][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.007533][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2026.325017][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2026.373168][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2026.395233][T29476] ima: policy update failed [ 2026.399989][ T30] audit: type=1802 audit(4294967318.090:14): pid=29476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4773" res=0 errno=0 [ 2026.559685][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2026.591067][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2026.826367][T29479] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 2027.325374][T29513] FAULT_INJECTION: forcing a failure. [ 2027.325374][T29513] name failslab, interval 1, probability 0, space 0, times 0 [ 2027.380592][T29513] CPU: 1 UID: 0 PID: 29513 Comm: syz.0.4779 Not tainted syzkaller #0 PREEMPT(full) [ 2027.380637][T29513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2027.380658][T29513] Call Trace: [ 2027.380670][T29513] [ 2027.380684][T29513] dump_stack_lvl+0x16c/0x1f0 [ 2027.380728][T29513] should_fail_ex+0x512/0x640 [ 2027.380768][T29513] should_failslab+0xc2/0x120 [ 2027.380803][T29513] __kmalloc_cache_noprof+0x72/0x780 [ 2027.380828][T29513] ? __task_pid_nr_ns+0x1f5/0x500 [ 2027.380866][T29513] ? proc_self_get_link+0x1a9/0x230 [ 2027.380904][T29513] ? proc_self_get_link+0x1a9/0x230 [ 2027.380936][T29513] proc_self_get_link+0x1a9/0x230 [ 2027.380969][T29513] ? __pfx_proc_self_get_link+0x10/0x10 [ 2027.381001][T29513] step_into+0x189e/0x21a0 [ 2027.381032][T29513] ? __pfx_step_into+0x10/0x10 [ 2027.381061][T29513] ? lookup_fast+0x156/0x610 [ 2027.381088][T29513] walk_component+0xfc/0x5b0 [ 2027.381115][T29513] link_path_walk+0x627/0xe20 [ 2027.381150][T29513] path_openat+0x1b0/0x2cb0 [ 2027.381190][T29513] ? __pfx_path_openat+0x10/0x10 [ 2027.381227][T29513] do_filp_open+0x20b/0x470 [ 2027.381256][T29513] ? __pfx_do_filp_open+0x10/0x10 [ 2027.381306][T29513] ? alloc_fd+0x471/0x7d0 [ 2027.381340][T29513] do_sys_openat2+0x11b/0x1d0 [ 2027.381377][T29513] ? __pfx_do_sys_openat2+0x10/0x10 [ 2027.381436][T29513] __x64_sys_openat+0x174/0x210 [ 2027.381475][T29513] ? __pfx___x64_sys_openat+0x10/0x10 [ 2027.381526][T29513] do_syscall_64+0xcd/0x4b0 [ 2027.381559][T29513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2027.381584][T29513] RIP: 0033:0x7f2dded8eec9 [ 2027.381604][T29513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2027.381628][T29513] RSP: 002b:00007f2ddfc62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2027.381651][T29513] RAX: ffffffffffffffda RBX: 00007f2ddefe6090 RCX: 00007f2dded8eec9 [ 2027.381667][T29513] RDX: 0000000000002100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 2027.381683][T29513] RBP: 00007f2ddee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2027.381699][T29513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2027.381714][T29513] R13: 00007f2ddefe6128 R14: 00007f2ddefe6090 R15: 00007ffd6dfca2f8 [ 2027.381744][T29513] [ 2027.609833][ C1] vkms_vblank_simulate: vblank timer overrun [ 2027.903148][T29513] random: crng reseeded on system resumption [ 2028.582078][T29523] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 2028.840043][T29490] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 2029.388392][T29528] zswap: compressor not available [ 2031.030450][T29559] openvswitch: netlink: IP tunnel dst address not specified