last executing test programs: 12.905984466s ago: executing program 3 (id=22): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x0, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(r0, r0, 0x0, 0xa4f5) write$auto(r0, 0x0, 0xfffffde9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) madvise$auto(0x0, 0xffffffff97fb20a5, 0x10002) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon33\x00', 0x2180, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129a00, 0x0) read$auto_mISDN_fops_timerdev(r1, &(0x7f0000001a00)=""/4097, 0x1001) ioctl$auto_IMADDTIMER(r1, 0x80044940, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x2, 0x5) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40200, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x4042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) 8.490964137s ago: executing program 3 (id=28): mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, 0x0, 0x4004) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000004c0)={0x0, 0x3f00, &(0x7f0000000480)={&(0x7f0000000000)={0x1c, r4, 0x99bc9625bdb7e757, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) 7.086741472s ago: executing program 1 (id=34): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open(0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) kexec_load$auto(0x5, 0x9, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/stable_node_chains_prune_millisecs\x00', 0x400, 0x0) read$auto(r2, &(0x7f0000002440)='&\x00', 0x9) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x800) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x4, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x200, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) io_uring_setup$auto(0x85, 0x0) 6.801704091s ago: executing program 2 (id=35): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xb) madvise$auto(0x0, 0x200007, 0x19) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/17, 0x11) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x7, 0xb}, 0x800009}, 0x5, 0x20000000) sendfile$auto(0x1, r2, 0x0, 0x7ffff000) write$auto(r3, 0x0, 0xfffffde9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x2, 0xb, 0xe3, 0x2009b72, 0x2, 0x8001) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) madvise$auto(0x6, 0xffffffff97fb20a5, 0xfffe) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x40080, 0x0) listen$auto(0xffffffffffffffff, 0x5) ioctl$auto_MON_IOCQ_URB_LEN(r4, 0x9201, 0x0) socket(0x1f, 0x800, 0xffffff01) 6.248565077s ago: executing program 3 (id=36): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_history_size\x00', 0x1182, 0x0) mmap$auto(0x6, 0x9, 0x5, 0x8b72, 0x1000000002, 0x8000) io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x85, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000280)={[0x1ff, 0x7, 0xd, 0x9, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x1, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffa]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x120e2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x9, 0xfffffffffffffff9, 0x8000000008011, 0x3, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010325bd7040ffdbdf250a0000000c0002006e6c383032313100"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r6, &(0x7f00000010c0)=""/4082, 0xff2) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000001c0)=""/176, 0xb0) 5.702261695s ago: executing program 1 (id=37): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100290002006e657464696d30000000000000050003000400000005000200"/54], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715b2d0000005cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c92828"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x2c, 0x0, 0x51c, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xef}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x7f}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) io_uring_setup$auto(0x6, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.874692843s ago: executing program 0 (id=38): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) socket(0x2, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) 4.505280543s ago: executing program 2 (id=39): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto_rfkill_fops_core(r1, &(0x7f0000000040)="a5cac73806f9a7", 0x7) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r2, 0x4, &(0x7f0000000080)=':\x00', &(0x7f0000000180)="7b05860ff41e44f73195019a97564c01a44c60dadcd70b571c28909f3563776a537bcafd75199aeac3242c1312e8107cfcd85b1f48582a5020dd54f54dae9d6f1c1d9fa6", 0x4) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) socket(0x1e, 0x5, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000003080)={0x0, 0xfffffffffffffdb2, &(0x7f0000003040)={&(0x7f0000002fc0)={0x20, r4, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) waitid$auto_P_ALL(0x0, 0x8, &(0x7f0000000200)={@_si_pad}, 0x2, &(0x7f0000000280)={{0x3, 0x1}, {0x5, 0x100000000}, 0x2, 0x2, 0x8, 0x6, 0x8, 0x7, 0x80, 0x14, 0x0, 0x1, 0xf34, 0x6, 0x1000200000, 0x6}) fcntl$getown(r0, 0x9) msgctl$auto_MSG_STAT_ANY(0x5, 0xd, &(0x7f0000000380)={{0x4468ebf0, 0xee01, 0x0, 0x356, 0x6, 0x7, 0x2}, &(0x7f0000000100)=0x5, &(0x7f0000000340)=0xa, 0xfffffffffffffff8, 0x0, 0x3, 0x81, 0x3, 0x4, 0x7, 0x9, @inferred, @raw=0x5}) r6 = gettid() process_vm_readv$auto(r6, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x3, 0x0) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x4000) connect$auto(0x3, 0x0, 0x55) 4.357504054s ago: executing program 3 (id=40): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffffff00", 0x3ff, 0x8, 0x1000, 0x400004, 0x200000000040000d, 0x0}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) r2 = socket(0x11, 0xa, 0x300) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ram12\x00', 0x18000, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000900)={"a9e6855f70bb04175d8cd061c68fc9d4217b1976f6abd0e140834674f3dbee3f", 0x9, 0x3, 0x2, 0x40, 0x1000, r1}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x8, 0x0, 0x0) getsockname$auto(r2, &(0x7f0000000980)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x7fff, 0x30d}, {0x18000000000000, 0x4}}, 0x0) r5 = ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x9, 0xfffffffffffffffd}) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000a40), r5) sendmsg$auto_NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x2e0, r8, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_PEER={0x2c1, 0x28, 0x0, 0x1, [@generic="7ff31dc09821819b65d927c431367bac28a034b46e6ecc72f2cc234d75b7887d751d3d68012dd5598b97e78eab440e8cdc00ad477a0a31b7c092de6ee2bca2e4aa9fbde3e0b44a3846e751caf8ab40b465e31d53f864d29d4ac94b862cfefbe4bf68f8b2dae23a586d3a1f6e82c9", @generic="6861703e32962528bc6f0bd8383704cf9c7cd93d8c780acdd0e0beb79337a86f2d023fce2b18d1e85af3373f05bc34b47ccaec1cef2d913ecb2e618b9aa98e5038b555fae974c460bda8812168c0bd6d65c8a6b94d87bcb02ff994cb548104151634dacc69c700c5eeaae51918e4edc72bd02aee65595a9952d3ee6b560d1372b48f3224ee5433abcbddc38a09b483d890879fc8e12b32b25dbf801cecafc9908599ee", @generic="1f48e502276c17fb8e7cb3010bd00da6b5ef33f2466d55e532076b1be518571f071a2078a51667961f3cef924df9a34c97e16d1671ba6592ad1664f02263e4e3ce65359368f505fe56dfc2eba7234da4c4ee3713ce79a63540e6b63fde60f3fa5cc72793f232589acde9fd16bec14d900b63574917d022cca014223fd18010f35562f7f919d6319cf031e122441f6375d5cb14b952cb50d8c1295d0ca3793441a0061b29ebfe3db1516e2532d535f240e66b7c22929ec8157e73a7bd8c15d0f5d3d771addc2d39c83d7d23b74c7cd7959bc2ba891ff618e6d2a4922a63739af6dae2a06f0eb3ec20", @nested={0x8, 0x5f, 0x0, 0x1, [@nested={0x4, 0xae}]}, @nested={0x90, 0x8e, 0x0, 0x1, [@typed={0x14, 0x92, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @nested={0x4, 0xf5}, @generic="beaaf51f300090e5fff346db1f26a74860031d0948", @typed={0xc, 0xb6, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0xc8, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x6c, 0x0, 0x0, @fd=r5}, @generic="3640e576cd974590c9f305519e41c62cd47206763fd1051f85ca483a3cb3c1f2c517e502d34f341ba9f100bf9f179ae651c63598292110e785b38caedb258a", @typed={0x4, 0xb5}]}, @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x74, 0x0, 0x0, @pid=r4}, @nested={0x1c, 0x68, 0x0, 0x1, [@nested={0x4, 0x5b}, @typed={0x4, 0x9a}, @nested={0x4, 0xcd}, @nested={0x4, 0x146}, @nested={0x4, 0xbe}, @nested={0x4, 0x41}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x810}, 0x40014) sendmsg$auto_NL80211_CMD_DISCONNECT(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10001}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x40) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40094020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1600984e", @ANYRES16=0x0, @ANYBLOB="20002abd7000fedbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40008f9) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), r6) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r9, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0x3ff}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004800}, 0x4) r10 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000400), r6) sendmsg$auto_NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x198, r10, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x123, 0x7, 0x0, 0x1, [@generic="977961b957adfecbba320f9883fa449640fcdb5a6b3ada4952e6365eff9d88c197915a1e38bc657e5f45165037529c987690e10687af33d9072a4037ce179c89d92bea11bc6ad60b41e8e07c7bb82c3042d033b64e86a2b18da7e5c34276f452614792f2b4994bfdedd6dbd6c747d0d4a3909aef61d38ab1fc54b7a1d66136a0ba3931c2710007f3dfc174615c74ad2a346619e28c70829925ce19", @generic="49e914a4247eca4d4b99a11f50e28b08be5ed4120522f3bee44ceadf1bd5c660050df0ccc1e735fe038f6643f6ee55eb984b92b4f1af577e60a6e4cea4f799546c838fc307e5ca1837bb2d52e54195df16ad2a7c058985555803f021b361e53239961df5211db3226abe13a27a5c4a6e5136368af9103a6dbd729de518b202ab7ccfad0d"]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000000) r11 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000006c0), r5) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r11, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004801}, 0x4004000) ioctl$auto_XFS_IOC_SWAPEXT(r5, 0xc0c0586d, &(0x7f0000000800)={0x8001, @raw=0x8, @raw=0x200, 0x5, 0x10000, '\x00', {0x8, 0x3, 0xffff, 0xee00, 0xee00, 0x0, 0x1, 0x7a6d141d, {0x80000000, 0x8}, {0x3, 0x401}, {0x5, 0xdc}, 0x5, 0x8, 0x5, 0x9, 0x3, 0x420, 0x8, 0x9, 0x4, 0x9, '\x00', 0x6, 0x2de, 0x4, 0xd}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002a40)={'vxcan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r5, &(0x7f0000002d00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002a80)={0x170, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0xb, 0x129, "11b2bfda042a60"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x11e, 0x124, 0x0, 0x1, [@nested={0x15, 0x6d, 0x0, 0x1, [@generic="fcbc8311fb43b6c989fb7ebcbb4ae6c68b"]}, @generic="9be9a618b0ab3f5b72a18027", @generic="e1adfdca98c42f88e1b67785d12e736845c5595e517781f66bbd7f17fa75b23c9b0b6e8f0e67fd3af084e6cc88b045a91eff3977c72fdb0d69d975daaed0a9ad2544664e6f75455fe6fd0c320b44dfda0ffc499f6f7e2f8949f210505b597223d00c6bee4942cecebe4dee9a2f62f672397001626e561fc8425d8ad5ce35b471d45622aca69630ba48c83006716efa45c0e740ebaee913e7a06f9d09ee5209ea2a8cb80e07777bda8b970d5478ea0b6fb21e33f36e87bcbc3bbe26f0e92addd0274c23214dd68d0c6b0f75557a562510658307794412f5776f0efccb956a1634a94f269941f5c9e7068e46ac5d55c240f27e6df73d78"]}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xd4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x101}, @NL80211_ATTR_MBSSID_CONFIG={0xc, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r12}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$auto_SG_EMULATED_HOST(r5, 0x2203, &(0x7f0000000180)="9f57f78e98858e1bfc38b8dc4d6dfab4e4447bf1a0a3ebb3742799e4e069081a61766f3a5392db21772b219630d027bc81c76236268c90ef5d9bffd802e2f649df08b3cf90a72d1e73380357b6d69f0632ef017fd118de0501a241729674b584a8d3b34c8cd173de7f57456d1cd3aa3da1ad5153fb9ce6cea674e1dfb2ef08d7eef87baf1af2f82c6a066609b0022ca9eeb5e88a3958e5fca6af4adcb4bb66288e80cfb1d533e6d7d1056c846febe666fb00fb6bc8b06e9246e55506ddb5913bf9be407be767fdf0eff3782fd2df867c2aba5685f98cddc9dbecddae09cdc460f1f6ac36a2d3f93d5026602d") socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), 0xffffffffffffffff) 4.17675555s ago: executing program 3 (id=41): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x400c00, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x20000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram13\x00', 0x10d440, 0x0) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x40000, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x8) ioctl$auto_EVIOCREVOKE(r2, 0x40044591, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7d, 0x2, 0x4) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0xf34) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x1, &(0x7f00000001c0)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x2}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mtd0\x00', 0x200042, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) getdents$auto(r1, 0x0, 0xa2b0) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x40044620, 0x0) getsockopt$auto(r0, 0x84, 0x80, 0x0, 0x0) 3.956203852s ago: executing program 0 (id=42): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open(0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) kexec_load$auto(0x5, 0x9, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/stable_node_chains_prune_millisecs\x00', 0x400, 0x0) read$auto(r2, &(0x7f0000002440)='&\x00', 0x9) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x800) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x4, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x22, 0x1, 0x80000000) mmap$auto(0x0, 0x7, 0x1, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x200, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) madvise$auto(0x3, 0x1ff, 0x3) 3.319723497s ago: executing program 1 (id=43): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0xe6, 0x0, 0xfffffffffffffffe, 0x9}, 0xfff}, 0x6, 0x311) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = socket(0xa, 0x2, 0x84) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) writev$auto(r2, 0x0, 0x9) fcntl$auto(0xffffffffffffffff, 0x1, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @enumerated={0x55d3, 0x7, "bf154d70dcfcea02faacb07c4222db1f207fdb681dc9b0bf2c6c9ce16d51ebc73df6a7aa16659cd5e4dc8374caf945548e604179f1f87c3bd8701d3d5c3d998c", 0x3fc7, 0x91e0}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)='-7', 0x2) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/blank\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93z', 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) 3.19057084s ago: executing program 0 (id=44): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x3, 0x100) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) r2 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x1, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) ioctl$auto_XFS_IOC_COMMIT_RANGE(0xffffffffffffffff, 0x40585883, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x2, 0x6, 0x9, 0x10001, [0x40, 0x5, 0x3, 0x8, 0x5]}) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) setfsgid$auto(0xee01) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={r0, @new_map_fd=r1, 0xa, @old_map_fd=r4}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x4}, 0x103) r6 = socket(0x23, 0x2, 0x0) socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x89e1, 0x91) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x23, 0x0, 0x0, 0x1080020}, 0x1a, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfd}, 0x28}, 0x1, 0x0, 0x0, 0x4048800}, 0x40) 2.916208957s ago: executing program 2 (id=45): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open(0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) kexec_load$auto(0x5, 0x9, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/stable_node_chains_prune_millisecs\x00', 0x400, 0x0) read$auto(r2, &(0x7f0000002440)='&\x00', 0x9) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x800) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x4, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x22, 0x1, 0x80000000) mmap$auto(0x0, 0x7, 0x1, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x200, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) madvise$auto(0x3, 0x1ff, 0x3) 2.19232891s ago: executing program 0 (id=46): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x7, 0xfffffffffffffffd, 0xd4, 0x4, 0x28c, 0x0, 0x3, 0x368e, 0x9, {0xfffffffe, 0x10000}, 0x8, 0x6, 0xfffffffffff7fffd, 0x1007ffd, 0x0, 0xfe, 0x81, 0xffffffffffff628e, 0x3d, 0xdeb1, 0x803}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(0x0, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x0) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) rename$auto(0x0, &(0x7f00000004c0)='./file1\x00') r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x0) open(&(0x7f00000003c0)='./file0\x00', 0x14d443, 0x100) mount$auto(&(0x7f0000000000), 0x0, &(0x7f00000000c0)='xfs\x00', 0x5, 0x0) shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f0000000440)={{0xffffff1b, 0x0, 0xee01, 0x5, 0x9, 0xca82857c, 0x99f8}, 0x84, 0x5, 0x8, 0x3, @inferred, @raw=0x53b, 0x2, 0x0, &(0x7f0000000280)="261061700e33c3342b7606b4a93e9e955c8d790c5b20b4a28af4e4a7f260b4d0ef32deaa08eae5b45677c68ff021acf329731f3fd7a08ff3d1bd762abb50c975f42c1ab6c6ef2e01c078af108ace089b8a8f66e49c35f2aded658dc2d02bd7451553cebe7d9780", &(0x7f00000005c0)="dae536d504bd88537506478a3326857c9d83be26e035ad1d4146ed9a5f5d01f4b322e67d724c6eea280a31ecaa0cc7344f7b08e44ec28742ecd95d73bbb1867d3347cfed11df57d53b998c4df251080e60f59d2f4bbaef735201366bb8a16fc32adf0640af92af5cc225199b6451ac4533e80bd22dc543eedb1134a03816b426"}) rt_sigqueueinfo$auto(0x0, 0x1, &(0x7f0000000680)={@siginfo_0_0={0xfffffff7, 0x5, 0x9, @_sigchld={0x0, r4, 0x400, 0xcad, 0x5}}}) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getdents$auto(r5, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, &(0x7f0000000700)={[0x1a, 0x7, 0xd3e, 0x5, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, 0x0) r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "000000000100"]}) readv$auto(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000007c0)="cbbe676ceac7b32dd5b6f5de2c45fa1b88544a278842a8575ca9834da64e742d37", 0x6}, 0x5) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') acct$auto(&(0x7f0000000000)='+}\x00') 2.143756742s ago: executing program 2 (id=47): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open(0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) kexec_load$auto(0x5, 0x9, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/stable_node_chains_prune_millisecs\x00', 0x400, 0x0) read$auto(r2, &(0x7f0000002440)='&\x00', 0x9) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x800) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x4, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x7, 0x1, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x200, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) io_uring_setup$auto(0x85, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 1.590391049s ago: executing program 3 (id=48): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x100000000, 0xffffffffffffffff, 0x3fd6, 0x3, 0x1) 1.283029886s ago: executing program 1 (id=49): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open(0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x15) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) kexec_load$auto(0x5, 0x9, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/stable_node_chains_prune_millisecs\x00', 0x400, 0x0) read$auto(r2, &(0x7f0000002440)='&\x00', 0x9) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x800) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x4, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x7, 0x1, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x200, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) io_uring_setup$auto(0x85, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 529.15704ms ago: executing program 2 (id=50): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) socket(0x2, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) 504.356743ms ago: executing program 0 (id=51): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000540)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffffff00", 0x3ff, 0x8, 0x1000, 0x400004, 0x200000000040000d, 0x0}) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) r2 = socket(0x11, 0xa, 0x300) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ram12\x00', 0x18000, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000900)={"a9e6855f70bb04175d8cd061c68fc9d4217b1976f6abd0e140834674f3dbee3f", 0x9, 0x3, 0x2, 0x40, 0x1000, r1}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x8, 0x0, 0x0) getsockname$auto(r2, &(0x7f0000000980)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x7fff, 0x30d}, {0x18000000000000, 0x4}}, 0x0) r5 = ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x9, 0xfffffffffffffffd}) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000a40), r5) sendmsg$auto_NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000a80)={0x2e0, r8, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_PEER={0x2c1, 0x28, 0x0, 0x1, [@generic="7ff31dc09821819b65d927c431367bac28a034b46e6ecc72f2cc234d75b7887d751d3d68012dd5598b97e78eab440e8cdc00ad477a0a31b7c092de6ee2bca2e4aa9fbde3e0b44a3846e751caf8ab40b465e31d53f864d29d4ac94b862cfefbe4bf68f8b2dae23a586d3a1f6e82c9", @generic="6861703e32962528bc6f0bd8383704cf9c7cd93d8c780acdd0e0beb79337a86f2d023fce2b18d1e85af3373f05bc34b47ccaec1cef2d913ecb2e618b9aa98e5038b555fae974c460bda8812168c0bd6d65c8a6b94d87bcb02ff994cb548104151634dacc69c700c5eeaae51918e4edc72bd02aee65595a9952d3ee6b560d1372b48f3224ee5433abcbddc38a09b483d890879fc8e12b32b25dbf801cecafc9908599ee", @generic="1f48e502276c17fb8e7cb3010bd00da6b5ef33f2466d55e532076b1be518571f071a2078a51667961f3cef924df9a34c97e16d1671ba6592ad1664f02263e4e3ce65359368f505fe56dfc2eba7234da4c4ee3713ce79a63540e6b63fde60f3fa5cc72793f232589acde9fd16bec14d900b63574917d022cca014223fd18010f35562f7f919d6319cf031e122441f6375d5cb14b952cb50d8c1295d0ca3793441a0061b29ebfe3db1516e2532d535f240e66b7c22929ec8157e73a7bd8c15d0f5d3d771addc2d39c83d7d23b74c7cd7959bc2ba891ff618e6d2a4922a63739af6dae2a06f0eb3ec20", @nested={0x8, 0x5f, 0x0, 0x1, [@nested={0x4, 0xae}]}, @nested={0x90, 0x8e, 0x0, 0x1, [@typed={0x14, 0x92, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x39}}, @nested={0x4, 0xf5}, @generic="beaaf51f300090e5fff346db1f26a74860031d0948", @typed={0xc, 0xb6, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0xc8, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x6c, 0x0, 0x0, @fd=r5}, @generic="3640e576cd974590c9f305519e41c62cd47206763fd1051f85ca483a3cb3c1f2c517e502d34f341ba9f100bf9f179ae651c63598292110e785b38caedb258a", @typed={0x4, 0xb5}]}, @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x74, 0x0, 0x0, @pid=r4}, @nested={0x1c, 0x68, 0x0, 0x1, [@nested={0x4, 0x5b}, @typed={0x4, 0x9a}, @nested={0x4, 0xcd}, @nested={0x4, 0x146}, @nested={0x4, 0xbe}, @nested={0x4, 0x41}]}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x810}, 0x40014) sendmsg$auto_NL80211_CMD_DISCONNECT(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r7, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10001}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x40) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40094020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1600984e", @ANYRES16=0x0, @ANYBLOB="20002abd7000fedbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40008f9) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), r6) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r9, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0x3ff}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004800}, 0x4) r10 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000400), r6) sendmsg$auto_NBD_CMD_RECONFIGURE(r5, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x198, r10, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x123, 0x7, 0x0, 0x1, [@generic="977961b957adfecbba320f9883fa449640fcdb5a6b3ada4952e6365eff9d88c197915a1e38bc657e5f45165037529c987690e10687af33d9072a4037ce179c89d92bea11bc6ad60b41e8e07c7bb82c3042d033b64e86a2b18da7e5c34276f452614792f2b4994bfdedd6dbd6c747d0d4a3909aef61d38ab1fc54b7a1d66136a0ba3931c2710007f3dfc174615c74ad2a346619e28c70829925ce19", @generic="49e914a4247eca4d4b99a11f50e28b08be5ed4120522f3bee44ceadf1bd5c660050df0ccc1e735fe038f6643f6ee55eb984b92b4f1af577e60a6e4cea4f799546c838fc307e5ca1837bb2d52e54195df16ad2a7c058985555803f021b361e53239961df5211db3226abe13a27a5c4a6e5136368af9103a6dbd729de518b202ab7ccfad0d"]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000000) r11 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000006c0), r5) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r11, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004801}, 0x4004000) ioctl$auto_XFS_IOC_SWAPEXT(r5, 0xc0c0586d, &(0x7f0000000800)={0x8001, @raw=0x8, @raw=0x200, 0x5, 0x10000, '\x00', {0x8, 0x3, 0xffff, 0xee00, 0xee00, 0x0, 0x1, 0x7a6d141d, {0x80000000, 0x8}, {0x3, 0x401}, {0x5, 0xdc}, 0x5, 0x8, 0x5, 0x9, 0x3, 0x420, 0x8, 0x9, 0x4, 0x9, '\x00', 0x6, 0x2de, 0x4, 0xd}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002a40)={'vxcan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r5, &(0x7f0000002d00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002a80)={0x170, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_S1G_CAPABILITY_MASK={0xb, 0x129, "11b2bfda042a60"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x11e, 0x124, 0x0, 0x1, [@nested={0x15, 0x6d, 0x0, 0x1, [@generic="fcbc8311fb43b6c989fb7ebcbb4ae6c68b"]}, @generic="9be9a618b0ab3f5b72a18027", @generic="e1adfdca98c42f88e1b67785d12e736845c5595e517781f66bbd7f17fa75b23c9b0b6e8f0e67fd3af084e6cc88b045a91eff3977c72fdb0d69d975daaed0a9ad2544664e6f75455fe6fd0c320b44dfda0ffc499f6f7e2f8949f210505b597223d00c6bee4942cecebe4dee9a2f62f672397001626e561fc8425d8ad5ce35b471d45622aca69630ba48c83006716efa45c0e740ebaee913e7a06f9d09ee5209ea2a8cb80e07777bda8b970d5478ea0b6fb21e33f36e87bcbc3bbe26f0e92addd0274c23214dd68d0c6b0f75557a562510658307794412f5776f0efccb956a1634a94f269941f5c9e7068e46ac5d55c240f27e6df73d78"]}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xd4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x101}, @NL80211_ATTR_MBSSID_CONFIG={0xc, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r12}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$auto_SG_EMULATED_HOST(r5, 0x2203, &(0x7f0000000180)="9f57f78e98858e1bfc38b8dc4d6dfab4e4447bf1a0a3ebb3742799e4e069081a61766f3a5392db21772b219630d027bc81c76236268c90ef5d9bffd802e2f649df08b3cf90a72d1e73380357b6d69f0632ef017fd118de0501a241729674b584a8d3b34c8cd173de7f57456d1cd3aa3da1ad5153fb9ce6cea674e1dfb2ef08d7eef87baf1af2f82c6a066609b0022ca9eeb5e88a3958e5fca6af4adcb4bb66288e80cfb1d533e6d7d1056c846febe666fb00fb6bc8b06e9246e55506ddb5913bf9be407be767fdf0eff3782fd2df867c2aba5685f98cddc9dbecddae09cdc460f1f6ac36a2d3f93d5026602d") socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), 0xffffffffffffffff) 273.067342ms ago: executing program 1 (id=52): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="93ab2cbd7000fbdbdf250800000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0xc811}, 0x0) 272.411152ms ago: executing program 2 (id=53): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x567300, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1ff, 0x1) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r1 = io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) setresuid$auto(0x0, 0x0, 0xee00) setresuid$auto(0xffffffffffffffff, 0xffffffff, 0x0) mmap$auto(0x0, 0x402000a, 0xdf, 0x10000000000eb1, 0xffffffffffffffff, 0x8000) capset$auto(0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) recvmmsg$auto(0x3, 0x0, 0x7bf, 0x7bd6, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x3, 0x4010]) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/addr_prefs\x00', 0x102, 0x0) 1.703652ms ago: executing program 1 (id=54): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fb0\x00', 0x8100, 0x0) r1 = socket(0x2, 0x801, 0x84) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(r2, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(r1, 0x84, 0x6d, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x5, 0x8, 0xe3, 0x9b7f, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto_PR_GET_TIMING(0xd, 0x0, 0x0, 0x757, 0xfffffffffffffffa) copy_file_range$auto(r5, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x10000, 0x2) r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce7009002ce100", '\x00', "0201ccb7", '\x00', ["00000f0008b330ac007abfc1", "70d900001100", "0800000000000000000000ec", "00deff1000"]}) syz_clone(0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r7, 0x0, 0x400000, 0xc) writev$auto(r4, &(0x7f0000000200)={0x0, 0x6}, 0x2000000003) futex$auto(0x0, 0x6, 0x9, 0x0, 0x0, 0x6) ioctl$auto_FBIOPUTCMAP(r0, 0x4605, &(0x7f00000002c0)="aa9c42301b3d7a7ec6") r8 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000380)='/dev/etherd/revalidate\x00', 0x183440, 0x0) pread64$auto(r8, 0x0, 0x8, 0x2aa00b6e) 0s ago: executing program 0 (id=62): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x22, 0x1, 0x80000000) mmap$auto(0x0, 0x7, 0x1, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x200, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) madvise$auto(0x3, 0x1ff, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. [ 90.967428][ T5816] cgroup: Unknown subsys name 'net' [ 91.117146][ T5816] cgroup: Unknown subsys name 'cpuset' [ 91.127273][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.082650][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.544917][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.585776][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.594079][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.600607][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.609743][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.618064][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.624341][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.625828][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.634275][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.640131][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.647628][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.654148][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.661619][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.668872][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.676495][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.681460][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.696303][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.704862][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.714121][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.722524][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.203520][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 96.414200][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 96.459255][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 96.538401][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.546182][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.554130][ T5828] bridge_slave_0: entered allmulticast mode [ 96.561568][ T5828] bridge_slave_0: entered promiscuous mode [ 96.619595][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.626889][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.634592][ T5828] bridge_slave_1: entered allmulticast mode [ 96.641893][ T5828] bridge_slave_1: entered promiscuous mode [ 96.680519][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 96.744523][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.757904][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.819040][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.826391][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.834227][ T5827] bridge_slave_0: entered allmulticast mode [ 96.841616][ T5827] bridge_slave_0: entered promiscuous mode [ 96.849363][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.856956][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.864243][ T5825] bridge_slave_0: entered allmulticast mode [ 96.871542][ T5825] bridge_slave_0: entered promiscuous mode [ 96.907604][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.915208][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.923184][ T5827] bridge_slave_1: entered allmulticast mode [ 96.931257][ T5827] bridge_slave_1: entered promiscuous mode [ 96.938353][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.945862][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.953135][ T5825] bridge_slave_1: entered allmulticast mode [ 96.960489][ T5825] bridge_slave_1: entered promiscuous mode [ 96.978654][ T5828] team0: Port device team_slave_0 added [ 97.000608][ T43] cfg80211: failed to load regulatory.db [ 97.041696][ T5828] team0: Port device team_slave_1 added [ 97.064108][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.077110][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.136155][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.150375][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.174101][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.181092][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.208093][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.277336][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.285365][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.311830][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.326931][ T5827] team0: Port device team_slave_0 added [ 97.336586][ T5825] team0: Port device team_slave_0 added [ 97.342801][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.350049][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.357489][ T5826] bridge_slave_0: entered allmulticast mode [ 97.365055][ T5826] bridge_slave_0: entered promiscuous mode [ 97.373854][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.381019][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.388305][ T5826] bridge_slave_1: entered allmulticast mode [ 97.398357][ T5826] bridge_slave_1: entered promiscuous mode [ 97.415006][ T5827] team0: Port device team_slave_1 added [ 97.439475][ T5825] team0: Port device team_slave_1 added [ 97.543483][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.550655][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.576743][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.594996][ T5828] hsr_slave_0: entered promiscuous mode [ 97.602521][ T5828] hsr_slave_1: entered promiscuous mode [ 97.610077][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.617649][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.643684][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.656540][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.663618][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.689694][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.704004][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.713552][ T5841] Bluetooth: hci2: command tx timeout [ 97.720448][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.730726][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.737782][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.763881][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.793271][ T5831] Bluetooth: hci3: command tx timeout [ 97.799470][ T5841] Bluetooth: hci0: command tx timeout [ 97.802969][ T5831] Bluetooth: hci1: command tx timeout [ 97.864299][ T5826] team0: Port device team_slave_0 added [ 97.893134][ T5827] hsr_slave_0: entered promiscuous mode [ 97.899761][ T5827] hsr_slave_1: entered promiscuous mode [ 97.906184][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.914130][ T5827] Cannot create hsr debugfs directory [ 97.928977][ T5826] team0: Port device team_slave_1 added [ 98.013335][ T5825] hsr_slave_0: entered promiscuous mode [ 98.019799][ T5825] hsr_slave_1: entered promiscuous mode [ 98.026850][ T5825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.035138][ T5825] Cannot create hsr debugfs directory [ 98.061270][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.068566][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.094933][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.107699][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.114995][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.141260][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.340239][ T5826] hsr_slave_0: entered promiscuous mode [ 98.346827][ T5826] hsr_slave_1: entered promiscuous mode [ 98.353966][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.361575][ T5826] Cannot create hsr debugfs directory [ 98.691472][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.721006][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.749482][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.775539][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.838592][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.851621][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.880503][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.892045][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.969829][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.994818][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.017653][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.043343][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.168425][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.193881][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.205342][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.219488][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.266740][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.339778][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.356245][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.363622][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.404667][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.440857][ T3060] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.448069][ T3060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.468095][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.517717][ T3060] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.525073][ T3060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.555880][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.563142][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.609182][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.695087][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.744796][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.752067][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.780534][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.797250][ T5831] Bluetooth: hci2: command tx timeout [ 99.800011][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.809883][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.854871][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.873266][ T5831] Bluetooth: hci1: command tx timeout [ 99.877304][ T5841] Bluetooth: hci0: command tx timeout [ 99.878732][ T5831] Bluetooth: hci3: command tx timeout [ 99.901185][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.908493][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.000701][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 100.014862][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.039777][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.047021][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.332143][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.455626][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.520557][ T5828] veth0_vlan: entered promiscuous mode [ 100.561826][ T5828] veth1_vlan: entered promiscuous mode [ 100.606897][ T5827] veth0_vlan: entered promiscuous mode [ 100.675562][ T5827] veth1_vlan: entered promiscuous mode [ 100.699979][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.737725][ T5828] veth0_macvtap: entered promiscuous mode [ 100.749945][ T5828] veth1_macvtap: entered promiscuous mode [ 100.801626][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.835851][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.867217][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.876942][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.886781][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.896324][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.911053][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.927656][ T5827] veth0_macvtap: entered promiscuous mode [ 100.935115][ T5825] veth0_vlan: entered promiscuous mode [ 100.952306][ T5827] veth1_macvtap: entered promiscuous mode [ 100.997230][ T5825] veth1_vlan: entered promiscuous mode [ 101.011569][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.049693][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.081702][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.091789][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.104268][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.113827][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.159576][ T3060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.177380][ T3060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.250924][ T5825] veth0_macvtap: entered promiscuous mode [ 101.259216][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.260440][ T5826] veth0_vlan: entered promiscuous mode [ 101.275964][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.291456][ T5825] veth1_macvtap: entered promiscuous mode [ 101.359582][ T5826] veth1_vlan: entered promiscuous mode [ 101.419714][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.426052][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.470198][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.547647][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.566967][ T5825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.575183][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.586811][ T5825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.595933][ T5825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.605255][ T5825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.640674][ T5826] veth0_macvtap: entered promiscuous mode [ 101.692519][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.694544][ T5826] veth1_macvtap: entered promiscuous mode [ 101.713293][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.778319][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.807178][ T5921] random: crng reseeded on system resumption [ 101.831364][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.869619][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.874195][ T51] Bluetooth: hci2: command tx timeout [ 101.909214][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.938532][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.951803][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.961777][ T51] Bluetooth: hci3: command tx timeout [ 101.964902][ T5831] Bluetooth: hci0: command tx timeout [ 101.967317][ T51] Bluetooth: hci1: command tx timeout [ 102.079323][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.102713][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.206381][ T5926] zswap: compressor not available [ 102.319076][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.336669][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.523436][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.531421][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.670607][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.708537][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.788202][ T5937] FAULT_INJECTION: forcing a failure. [ 102.788202][ T5937] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 102.852514][ T5937] CPU: 1 UID: 0 PID: 5937 Comm: syz.0.6 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 102.852558][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 102.852580][ T5937] Call Trace: [ 102.852590][ T5937] [ 102.852605][ T5937] dump_stack_lvl+0x16c/0x1f0 [ 102.852663][ T5937] should_fail_ex+0x512/0x640 [ 102.852715][ T5937] should_fail_alloc_page+0xe7/0x130 [ 102.852749][ T5937] prepare_alloc_pages+0x3c2/0x610 [ 102.852787][ T5937] ? rcu_is_watching+0x12/0xc0 [ 102.852832][ T5937] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 102.852882][ T5937] ? kasan_save_stack+0x42/0x60 [ 102.852937][ T5937] ? __lock_acquire+0x622/0x1c90 [ 102.852981][ T5937] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 102.853026][ T5937] ? __lock_acquire+0x622/0x1c90 [ 102.853081][ T5937] ? __lock_acquire+0x622/0x1c90 [ 102.853126][ T5937] ? __lock_acquire+0x622/0x1c90 [ 102.853174][ T5937] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.853224][ T5937] ? policy_nodemask+0xea/0x4e0 [ 102.853278][ T5937] alloc_pages_mpol+0x1fb/0x550 [ 102.853310][ T5937] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 102.853372][ T5937] folio_alloc_mpol_noprof+0x36/0x2f0 [ 102.853412][ T5937] vma_alloc_folio_noprof+0xed/0x1e0 [ 102.853448][ T5937] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 102.853483][ T5937] ? find_held_lock+0x2b/0x80 [ 102.853515][ T5937] ? __handle_mm_fault+0x1092/0x5490 [ 102.853565][ T5937] __handle_mm_fault+0x2f21/0x5490 [ 102.853619][ T5937] ? __pfx___handle_mm_fault+0x10/0x10 [ 102.853666][ T5937] ? __pte_offset_map_lock+0x174/0x310 [ 102.853699][ T5937] ? find_held_lock+0x2b/0x80 [ 102.853728][ T5937] ? find_held_lock+0x2b/0x80 [ 102.853770][ T5937] ? follow_page_pte+0x3af/0x14c0 [ 102.853826][ T5937] handle_mm_fault+0x589/0xd10 [ 102.853879][ T5937] __get_user_pages+0x589/0x3b80 [ 102.853928][ T5937] ? __pfx_mt_find+0x10/0x10 [ 102.853959][ T5937] ? __pfx___get_user_pages+0x10/0x10 [ 102.854012][ T5937] populate_vma_page_range+0x278/0x3a0 [ 102.854061][ T5937] ? __pfx_populate_vma_page_range+0x10/0x10 [ 102.854100][ T5937] ? __pfx_find_vma_intersection+0x10/0x10 [ 102.854141][ T5937] ? do_mmap+0x69c/0x1210 [ 102.854181][ T5937] __mm_populate+0x1d8/0x380 [ 102.854224][ T5937] ? __pfx___mm_populate+0x10/0x10 [ 102.854267][ T5937] ? up_write+0x1b2/0x520 [ 102.854320][ T5937] vm_mmap_pgoff+0x362/0x450 [ 102.854357][ T5937] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 102.854390][ T5937] ? __pfx_get_nodes+0x10/0x10 [ 102.854445][ T5937] ? __x64_sys_futex+0x1e0/0x4c0 [ 102.854482][ T5937] ? __x64_sys_futex+0x1e9/0x4c0 [ 102.854540][ T5937] ksys_mmap_pgoff+0x7d/0x5c0 [ 102.854572][ T5937] ? xfd_validate_state+0x61/0x180 [ 102.854610][ T5937] ? __pfx_kernel_mbind+0x10/0x10 [ 102.854649][ T5937] __x64_sys_mmap+0x125/0x190 [ 102.854697][ T5937] do_syscall_64+0xcd/0x490 [ 102.854749][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.854781][ T5937] RIP: 0033:0x7f0e6698e929 [ 102.854821][ T5937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.854850][ T5937] RSP: 002b:00007f0e677c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 102.854879][ T5937] RAX: ffffffffffffffda RBX: 00007f0e66bb5fa0 RCX: 00007f0e6698e929 [ 102.854898][ T5937] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 102.854916][ T5937] RBP: 00007f0e66a10b39 R08: 0000000000000007 R09: 0000000000028000 [ 102.854934][ T5937] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 102.854951][ T5937] R13: 0000000000000000 R14: 00007f0e66bb5fa0 R15: 00007ffc662c02a8 [ 102.854991][ T5937] [ 103.398392][ T5943] FAULT_INJECTION: forcing a failure. [ 103.398392][ T5943] name failslab, interval 1, probability 0, space 0, times 1 [ 103.453517][ T5943] CPU: 1 UID: 0 PID: 5943 Comm: syz.0.6 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 103.453557][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.453573][ T5943] Call Trace: [ 103.453583][ T5943] [ 103.453594][ T5943] dump_stack_lvl+0x16c/0x1f0 [ 103.453643][ T5943] should_fail_ex+0x512/0x640 [ 103.453684][ T5943] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 103.453729][ T5943] should_failslab+0xc2/0x120 [ 103.453767][ T5943] __kmalloc_cache_noprof+0x6a/0x3e0 [ 103.453804][ T5943] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.453845][ T5943] ? snd_seq_fifo_new+0x42/0x260 [ 103.453882][ T5943] ? seq_create_client1+0x420/0x5e0 [ 103.453928][ T5943] ? __pfx_snd_seq_open+0x10/0x10 [ 103.453974][ T5943] snd_seq_fifo_new+0x42/0x260 [ 103.454011][ T5943] snd_seq_open+0x15c/0x550 [ 103.454057][ T5943] ? __pfx_snd_seq_open+0x10/0x10 [ 103.454100][ T5943] snd_open+0x1fe/0x450 [ 103.454146][ T5943] ? __pfx_snd_open+0x10/0x10 [ 103.454190][ T5943] chrdev_open+0x231/0x6a0 [ 103.454237][ T5943] ? __pfx_chrdev_open+0x10/0x10 [ 103.454285][ T5943] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 103.454350][ T5943] do_dentry_open+0x744/0x1c10 [ 103.454398][ T5943] ? __pfx_chrdev_open+0x10/0x10 [ 103.454482][ T5943] vfs_open+0x82/0x3f0 [ 103.454521][ T5943] path_openat+0x1de4/0x2cb0 [ 103.454579][ T5943] ? __pfx_path_openat+0x10/0x10 [ 103.454625][ T5943] ? __lock_acquire+0xb8a/0x1c90 [ 103.454671][ T5943] do_filp_open+0x20b/0x470 [ 103.454716][ T5943] ? __pfx_do_filp_open+0x10/0x10 [ 103.454796][ T5943] ? alloc_fd+0x471/0x7d0 [ 103.454850][ T5943] do_sys_openat2+0x11b/0x1d0 [ 103.454883][ T5943] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.454935][ T5943] __x64_sys_openat+0x174/0x210 [ 103.454971][ T5943] ? __pfx___x64_sys_openat+0x10/0x10 [ 103.455026][ T5943] do_syscall_64+0xcd/0x490 [ 103.455076][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.455108][ T5943] RIP: 0033:0x7f0e6698e929 [ 103.455134][ T5943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.455165][ T5943] RSP: 002b:00007f0e677a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 103.455195][ T5943] RAX: ffffffffffffffda RBX: 00007f0e66bb6080 RCX: 00007f0e6698e929 [ 103.455214][ T5943] RDX: 0000000000040a40 RSI: 0000200000001d40 RDI: ffffffffffffff9c [ 103.455233][ T5943] RBP: 00007f0e66a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 103.455250][ T5943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.455268][ T5943] R13: 0000000000000000 R14: 00007f0e66bb6080 R15: 00007ffc662c02a8 [ 103.455307][ T5943] [ 103.980034][ T51] Bluetooth: hci2: command tx timeout [ 104.035534][ T51] Bluetooth: hci1: command tx timeout [ 104.045683][ T51] Bluetooth: hci0: command tx timeout [ 104.051205][ T5831] Bluetooth: hci3: command tx timeout [ 104.145013][ T5950] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 104.705452][ T5954] mmap: syz.3.7 (5954) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.806961][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.201475][ T5958] netlink: 338 bytes leftover after parsing attributes in process `syz.0.10'. [ 105.226280][ T5964] process 'syz.1.12' launched '/dev/fd/4' with NULL argv: empty string added [ 105.269136][ T5958] netlink: 338 bytes leftover after parsing attributes in process `syz.0.10'. [ 105.272683][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12'. [ 105.300565][ T5958] netlink: 290 bytes leftover after parsing attributes in process `syz.0.10'. [ 105.324578][ T5958] veth0_macvtap: left promiscuous mode [ 105.425281][ T5958] netlink: 290 bytes leftover after parsing attributes in process `syz.0.10'. [ 105.451048][ T5958] veth0_macvtap: entered promiscuous mode [ 106.243714][ T5949] syz.3.7 (5949) used greatest stack depth: 17976 bytes left [ 106.264067][ T5971] zswap: compressor not available [ 106.662728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.694819][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.719782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.032843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.253360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.261702][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.302659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.311255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.319911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.328553][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.390209][ T6022] netlink: 'syz.1.24': attribute type 11 has an invalid length. [ 110.722711][ T6026] Zero length message leads to an empty skb [ 112.262487][ T6033] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.302727][ T6033] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.365837][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.543244][ T6033] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.688910][ T6033] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.714030][ T6033] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.773091][ T6033] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.912784][ T6033] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.975929][ T6033] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.999837][ T6033] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.099916][ T6033] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.154155][ T6033] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.341561][ T6033] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.146487][ T6067] FAULT_INJECTION: forcing a failure. [ 114.146487][ T6067] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 114.217923][ T6067] CPU: 1 UID: 0 PID: 6067 Comm: syz.1.34 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 114.217966][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.217995][ T6067] Call Trace: [ 114.218005][ T6067] [ 114.218015][ T6067] dump_stack_lvl+0x16c/0x1f0 [ 114.218066][ T6067] should_fail_ex+0x512/0x640 [ 114.218115][ T6067] should_fail_alloc_page+0xe7/0x130 [ 114.218147][ T6067] prepare_alloc_pages+0x3c2/0x610 [ 114.218183][ T6067] ? rcu_is_watching+0x12/0xc0 [ 114.218217][ T6067] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 114.218267][ T6067] ? find_held_lock+0x2b/0x80 [ 114.218295][ T6067] ? css_rstat_updated+0x9d/0xd30 [ 114.218341][ T6067] ? free_unref_folios+0x118b/0x1800 [ 114.218394][ T6067] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 114.218442][ T6067] ? __lock_acquire+0x622/0x1c90 [ 114.218496][ T6067] ? __lock_acquire+0x622/0x1c90 [ 114.218540][ T6067] ? __lock_acquire+0x622/0x1c90 [ 114.218579][ T6067] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.218649][ T6067] ? policy_nodemask+0xea/0x4e0 [ 114.218704][ T6067] alloc_pages_mpol+0x1fb/0x550 [ 114.218738][ T6067] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 114.218781][ T6067] folio_alloc_mpol_noprof+0x36/0x2f0 [ 114.218833][ T6067] vma_alloc_folio_noprof+0xed/0x1e0 [ 114.218871][ T6067] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 114.218906][ T6067] ? find_held_lock+0x2b/0x80 [ 114.218938][ T6067] ? __handle_mm_fault+0x1092/0x5490 [ 114.218987][ T6067] __handle_mm_fault+0x2f21/0x5490 [ 114.219046][ T6067] ? __pfx___handle_mm_fault+0x10/0x10 [ 114.219091][ T6067] ? __pte_offset_map_lock+0x174/0x310 [ 114.219124][ T6067] ? find_held_lock+0x2b/0x80 [ 114.219153][ T6067] ? find_held_lock+0x2b/0x80 [ 114.219195][ T6067] ? follow_page_pte+0x3af/0x14c0 [ 114.219242][ T6067] handle_mm_fault+0x589/0xd10 [ 114.219293][ T6067] __get_user_pages+0x589/0x3b80 [ 114.219343][ T6067] ? __pfx_mt_find+0x10/0x10 [ 114.219373][ T6067] ? __pfx___get_user_pages+0x10/0x10 [ 114.219427][ T6067] populate_vma_page_range+0x278/0x3a0 [ 114.219470][ T6067] ? __pfx_populate_vma_page_range+0x10/0x10 [ 114.219509][ T6067] ? __pfx_find_vma_intersection+0x10/0x10 [ 114.219548][ T6067] ? do_mmap+0x69c/0x1210 [ 114.219587][ T6067] __mm_populate+0x1d8/0x380 [ 114.219628][ T6067] ? __pfx___mm_populate+0x10/0x10 [ 114.219672][ T6067] ? up_write+0x1b2/0x520 [ 114.219723][ T6067] vm_mmap_pgoff+0x362/0x450 [ 114.219760][ T6067] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 114.219793][ T6067] ? __pfx_get_nodes+0x10/0x10 [ 114.219853][ T6067] ? __x64_sys_futex+0x1e0/0x4c0 [ 114.219891][ T6067] ? __x64_sys_futex+0x1e9/0x4c0 [ 114.219938][ T6067] ksys_mmap_pgoff+0x7d/0x5c0 [ 114.219971][ T6067] ? xfd_validate_state+0x61/0x180 [ 114.220011][ T6067] ? __pfx_kernel_mbind+0x10/0x10 [ 114.220053][ T6067] __x64_sys_mmap+0x125/0x190 [ 114.220104][ T6067] do_syscall_64+0xcd/0x490 [ 114.220157][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.220190][ T6067] RIP: 0033:0x7f21a1d8e929 [ 114.220216][ T6067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.220259][ T6067] RSP: 002b:00007f21a2c9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 114.220289][ T6067] RAX: ffffffffffffffda RBX: 00007f21a1fb5fa0 RCX: 00007f21a1d8e929 [ 114.220309][ T6067] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 114.220326][ T6067] RBP: 00007f21a1e10b39 R08: 0000000000000007 R09: 0000000000028000 [ 114.220345][ T6067] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 114.220375][ T6067] R13: 0000000000000000 R14: 00007f21a1fb5fa0 R15: 00007fff4e37dbe8 [ 114.220416][ T6067] [ 114.580036][ C1] vkms_vblank_simulate: vblank timer overrun [ 114.592608][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.752817][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.818602][ T6072] zswap: compressor not available [ 114.859597][ T6067] FAULT_INJECTION: forcing a failure. [ 114.859597][ T6067] name failslab, interval 1, probability 0, space 0, times 0 [ 114.875133][ T6067] CPU: 1 UID: 0 PID: 6067 Comm: syz.1.34 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 114.875176][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.875194][ T6067] Call Trace: [ 114.875205][ T6067] [ 114.875216][ T6067] dump_stack_lvl+0x16c/0x1f0 [ 114.875269][ T6067] should_fail_ex+0x512/0x640 [ 114.875312][ T6067] ? __kvmalloc_node_noprof+0x124/0x620 [ 114.875361][ T6067] should_failslab+0xc2/0x120 [ 114.875390][ T6067] __kvmalloc_node_noprof+0x137/0x620 [ 114.875435][ T6067] ? io_alloc_cache_init+0x33/0x170 [ 114.875490][ T6067] ? io_alloc_cache_init+0x33/0x170 [ 114.875532][ T6067] io_alloc_cache_init+0x33/0x170 [ 114.875579][ T6067] io_uring_setup+0x63b/0x2080 [ 114.875622][ T6067] ? __pfx_io_uring_setup+0x10/0x10 [ 114.875660][ T6067] ? do_futex+0x122/0x350 [ 114.875698][ T6067] ? __pfx_do_futex+0x10/0x10 [ 114.875744][ T6067] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 114.875817][ T6067] ? xfd_validate_state+0x61/0x180 [ 114.875853][ T6067] ? __pfx_do_writev+0x10/0x10 [ 114.875897][ T6067] __x64_sys_io_uring_setup+0xc2/0x170 [ 114.875938][ T6067] do_syscall_64+0xcd/0x490 [ 114.875984][ T6067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.876013][ T6067] RIP: 0033:0x7f21a1d8e929 [ 114.876034][ T6067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.876060][ T6067] RSP: 002b:00007f21a2c9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 114.876084][ T6067] RAX: ffffffffffffffda RBX: 00007f21a1fb5fa0 RCX: 00007f21a1d8e929 [ 114.876099][ T6067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000085 [ 114.876114][ T6067] RBP: 00007f21a1e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 114.876129][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.876143][ T6067] R13: 0000000000000000 R14: 00007f21a1fb5fa0 R15: 00007fff4e37dbe8 [ 114.876172][ T6067] [ 114.994730][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.995735][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.089156][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.095163][ C1] hrtimer: interrupt took 212803768 ns [ 115.195180][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.362602][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.680735][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.839000][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.074169][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.140729][ T6104] FAULT_INJECTION: forcing a failure. [ 117.140729][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 117.163084][ T6104] CPU: 0 UID: 0 PID: 6104 Comm: syz.0.42 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 117.163126][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.163143][ T6104] Call Trace: [ 117.163153][ T6104] [ 117.163164][ T6104] dump_stack_lvl+0x16c/0x1f0 [ 117.163214][ T6104] should_fail_ex+0x512/0x640 [ 117.163257][ T6104] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 117.163301][ T6104] should_failslab+0xc2/0x120 [ 117.163330][ T6104] __kmalloc_cache_noprof+0x6a/0x3e0 [ 117.163369][ T6104] ? kernfs_fop_open+0xa3a/0xda0 [ 117.163427][ T6104] kernfs_fop_open+0xa3a/0xda0 [ 117.163480][ T6104] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 117.163529][ T6104] do_dentry_open+0x744/0x1c10 [ 117.163583][ T6104] ? __pfx_kernfs_fop_open+0x10/0x10 [ 117.163623][ T6104] vfs_open+0x82/0x3f0 [ 117.163661][ T6104] path_openat+0x1de4/0x2cb0 [ 117.163720][ T6104] ? __pfx_path_openat+0x10/0x10 [ 117.163768][ T6104] ? __lock_acquire+0xb8a/0x1c90 [ 117.163814][ T6104] do_filp_open+0x20b/0x470 [ 117.163861][ T6104] ? __pfx_do_filp_open+0x10/0x10 [ 117.163938][ T6104] ? alloc_fd+0x471/0x7d0 [ 117.163993][ T6104] do_sys_openat2+0x11b/0x1d0 [ 117.164028][ T6104] ? __pfx_do_sys_openat2+0x10/0x10 [ 117.164065][ T6104] ? __pfx___might_resched+0x10/0x10 [ 117.164111][ T6104] __x64_sys_openat+0x174/0x210 [ 117.164147][ T6104] ? __pfx___x64_sys_openat+0x10/0x10 [ 117.164202][ T6104] do_syscall_64+0xcd/0x490 [ 117.164256][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.164288][ T6104] RIP: 0033:0x7f0e6698e929 [ 117.164313][ T6104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.164342][ T6104] RSP: 002b:00007f0e677c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.164371][ T6104] RAX: ffffffffffffffda RBX: 00007f0e66bb5fa0 RCX: 00007f0e6698e929 [ 117.164390][ T6104] RDX: 0000000000000200 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 117.164409][ T6104] RBP: 00007f0e66a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 117.164427][ T6104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.164445][ T6104] R13: 0000000000000000 R14: 00007f0e66bb5fa0 R15: 00007ffc662c02a8 [ 117.164485][ T6104] [ 117.575209][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.146296][ T6116] FAULT_INJECTION: forcing a failure. [ 118.146296][ T6116] name failslab, interval 1, probability 0, space 0, times 0 [ 118.175439][ T6110] FAULT_INJECTION: forcing a failure. [ 118.175439][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 118.192614][ T6110] CPU: 0 UID: 0 PID: 6110 Comm: syz.0.44 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 118.192653][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.192668][ T6110] Call Trace: [ 118.192676][ T6110] [ 118.192686][ T6110] dump_stack_lvl+0x16c/0x1f0 [ 118.192728][ T6110] should_fail_ex+0x512/0x640 [ 118.192763][ T6110] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 118.192804][ T6110] should_failslab+0xc2/0x120 [ 118.192828][ T6110] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 118.192864][ T6110] ? __pfx_map_id_range_down+0x10/0x10 [ 118.192900][ T6110] ? prepare_creds+0x2c/0x7d0 [ 118.192940][ T6110] prepare_creds+0x2c/0x7d0 [ 118.192977][ T6110] __sys_setfsgid+0xe3/0x380 [ 118.193003][ T6110] ? rcu_is_watching+0x12/0xc0 [ 118.193030][ T6110] do_syscall_64+0xcd/0x490 [ 118.193078][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.193102][ T6110] RIP: 0033:0x7f0e6698e929 [ 118.193120][ T6110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.193141][ T6110] RSP: 002b:00007f0e677a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 118.193163][ T6110] RAX: ffffffffffffffda RBX: 00007f0e66bb6080 RCX: 00007f0e6698e929 [ 118.193177][ T6110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 118.193190][ T6110] RBP: 00007f0e66a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.193204][ T6110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.193217][ T6110] R13: 0000000000000000 R14: 00007f0e66bb6080 R15: 00007ffc662c02a8 [ 118.193244][ T6110] [ 118.373032][ T6116] CPU: 0 UID: 0 PID: 6116 Comm: syz.2.45 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 118.373073][ T6116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.373089][ T6116] Call Trace: [ 118.373098][ T6116] [ 118.373109][ T6116] dump_stack_lvl+0x16c/0x1f0 [ 118.373156][ T6116] should_fail_ex+0x512/0x640 [ 118.373195][ T6116] ? fs_reclaim_acquire+0xae/0x150 [ 118.373230][ T6116] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 118.373269][ T6116] should_failslab+0xc2/0x120 [ 118.373296][ T6116] __kmalloc_noprof+0xd2/0x510 [ 118.373345][ T6116] tomoyo_realpath_from_path+0xc2/0x6e0 [ 118.373393][ T6116] tomoyo_check_open_permission+0x2ab/0x3c0 [ 118.373426][ T6116] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 118.373458][ T6116] ? __lock_acquire+0xb8a/0x1c90 [ 118.373536][ T6116] ? do_raw_spin_lock+0x12c/0x2b0 [ 118.373590][ T6116] tomoyo_file_open+0x6b/0x90 [ 118.373636][ T6116] security_file_open+0x84/0x1e0 [ 118.373674][ T6116] do_dentry_open+0x596/0x1c10 [ 118.373726][ T6116] vfs_open+0x82/0x3f0 [ 118.373760][ T6116] path_openat+0x1de4/0x2cb0 [ 118.373812][ T6116] ? __pfx_path_openat+0x10/0x10 [ 118.373854][ T6116] ? __lock_acquire+0xb8a/0x1c90 [ 118.373895][ T6116] do_filp_open+0x20b/0x470 [ 118.373934][ T6116] ? __pfx_do_filp_open+0x10/0x10 [ 118.374001][ T6116] ? alloc_fd+0x471/0x7d0 [ 118.374048][ T6116] do_sys_openat2+0x11b/0x1d0 [ 118.374079][ T6116] ? __pfx_do_sys_openat2+0x10/0x10 [ 118.374113][ T6116] ? __pfx___might_resched+0x10/0x10 [ 118.374150][ T6116] __x64_sys_openat+0x174/0x210 [ 118.374182][ T6116] ? __pfx___x64_sys_openat+0x10/0x10 [ 118.374248][ T6116] do_syscall_64+0xcd/0x490 [ 118.374316][ T6116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.374348][ T6116] RIP: 0033:0x7f0f3518e929 [ 118.374373][ T6116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.374403][ T6116] RSP: 002b:00007f0f360b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 118.374432][ T6116] RAX: ffffffffffffffda RBX: 00007f0f353b5fa0 RCX: 00007f0f3518e929 [ 118.374452][ T6116] RDX: 0000000000000200 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 118.374470][ T6116] RBP: 00007f0f35210b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.374487][ T6116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.374504][ T6116] R13: 0000000000000000 R14: 00007f0f353b5fa0 R15: 00007ffd2e692458 [ 118.374552][ T6116] [ 118.375534][ T6116] ERROR: Out of memory at tomoyo_realpath_from_path. [ 118.908015][ T6125] FAULT_INJECTION: forcing a failure. [ 118.908015][ T6125] name failslab, interval 1, probability 0, space 0, times 0 [ 118.921104][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.984036][ T6125] CPU: 0 UID: 0 PID: 6125 Comm: syz.2.47 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 118.984083][ T6125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.984106][ T6125] Call Trace: [ 118.984118][ T6125] [ 118.984130][ T6125] dump_stack_lvl+0x16c/0x1f0 [ 118.984186][ T6125] should_fail_ex+0x512/0x640 [ 118.984233][ T6125] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 118.984292][ T6125] should_failslab+0xc2/0x120 [ 118.984324][ T6125] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 118.984378][ T6125] ? devinet_init_net+0x9c/0x910 [ 118.984428][ T6125] ? __pfx_devinet_init_net+0x10/0x10 [ 118.984481][ T6125] kmemdup_noprof+0x29/0x60 [ 118.984529][ T6125] devinet_init_net+0x9c/0x910 [ 118.984570][ T6125] ? __pfx_devinet_init_net+0x10/0x10 [ 118.984608][ T6125] ops_init+0x1df/0x5f0 [ 118.984664][ T6125] setup_net+0x1ff/0x510 [ 118.984690][ T6125] ? lockdep_init_map_type+0x5c/0x280 [ 118.984744][ T6125] ? __pfx_setup_net+0x10/0x10 [ 118.984774][ T6125] ? debug_mutex_init+0x37/0x70 [ 118.984806][ T6125] copy_net_ns+0x2a6/0x5f0 [ 118.984840][ T6125] create_new_namespaces+0x3ea/0xa90 [ 118.984882][ T6125] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 118.984917][ T6125] ksys_unshare+0x45b/0xa40 [ 118.984957][ T6125] ? __pfx_ksys_unshare+0x10/0x10 [ 118.984996][ T6125] ? xfd_validate_state+0x61/0x180 [ 118.985047][ T6125] __x64_sys_unshare+0x31/0x40 [ 118.985086][ T6125] do_syscall_64+0xcd/0x490 [ 118.985133][ T6125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.985164][ T6125] RIP: 0033:0x7f0f3518e929 [ 118.985188][ T6125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.985217][ T6125] RSP: 002b:00007f0f360b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 118.985250][ T6125] RAX: ffffffffffffffda RBX: 00007f0f353b5fa0 RCX: 00007f0f3518e929 [ 118.985269][ T6125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 118.985286][ T6125] RBP: 00007f0f35210b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.985303][ T6125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.985319][ T6125] R13: 0000000000000000 R14: 00007f0f353b5fa0 R15: 00007ffd2e692458 [ 118.985357][ T6125] [ 119.217500][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.334193][ T6130] FAULT_INJECTION: forcing a failure. [ 119.334193][ T6130] name failslab, interval 1, probability 0, space 0, times 0 [ 119.347340][ T6130] CPU: 1 UID: 0 PID: 6130 Comm: syz.2.47 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 119.347384][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.347403][ T6130] Call Trace: [ 119.347413][ T6130] [ 119.347424][ T6130] dump_stack_lvl+0x16c/0x1f0 [ 119.347485][ T6130] should_fail_ex+0x512/0x640 [ 119.347526][ T6130] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 119.347569][ T6130] should_failslab+0xc2/0x120 [ 119.347596][ T6130] __kmalloc_cache_noprof+0x6a/0x3e0 [ 119.347643][ T6130] ? snd_seq_pool_new+0x44/0x230 [ 119.347678][ T6130] ? __pfx_snd_seq_open+0x10/0x10 [ 119.347727][ T6130] snd_seq_pool_new+0x44/0x230 [ 119.347760][ T6130] seq_create_client1+0x66/0x5e0 [ 119.347811][ T6130] ? __pfx_snd_seq_open+0x10/0x10 [ 119.347857][ T6130] snd_seq_open+0x59/0x550 [ 119.347904][ T6130] ? __pfx_snd_seq_open+0x10/0x10 [ 119.347947][ T6130] snd_open+0x1fe/0x450 [ 119.347994][ T6130] ? __pfx_snd_open+0x10/0x10 [ 119.348038][ T6130] chrdev_open+0x231/0x6a0 [ 119.348081][ T6130] ? __pfx_apparmor_file_open+0x10/0x10 [ 119.348119][ T6130] ? __pfx_chrdev_open+0x10/0x10 [ 119.348168][ T6130] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 119.348214][ T6130] do_dentry_open+0x744/0x1c10 [ 119.348257][ T6130] ? __pfx_chrdev_open+0x10/0x10 [ 119.348310][ T6130] vfs_open+0x82/0x3f0 [ 119.348345][ T6130] path_openat+0x1de4/0x2cb0 [ 119.348401][ T6130] ? __pfx_path_openat+0x10/0x10 [ 119.348444][ T6130] ? __lock_acquire+0xb8a/0x1c90 [ 119.348487][ T6130] do_filp_open+0x20b/0x470 [ 119.348528][ T6130] ? __pfx_do_filp_open+0x10/0x10 [ 119.348600][ T6130] ? alloc_fd+0x471/0x7d0 [ 119.348654][ T6130] do_sys_openat2+0x11b/0x1d0 [ 119.348686][ T6130] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.348734][ T6130] __x64_sys_openat+0x174/0x210 [ 119.348767][ T6130] ? __pfx___x64_sys_openat+0x10/0x10 [ 119.348818][ T6130] do_syscall_64+0xcd/0x490 [ 119.348866][ T6130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.348896][ T6130] RIP: 0033:0x7f0f3518e929 [ 119.348920][ T6130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.348949][ T6130] RSP: 002b:00007f0f36095038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.348977][ T6130] RAX: ffffffffffffffda RBX: 00007f0f353b6080 RCX: 00007f0f3518e929 [ 119.348996][ T6130] RDX: 0000000000040a40 RSI: 0000200000001d40 RDI: ffffffffffffff9c [ 119.349014][ T6130] RBP: 00007f0f35210b39 R08: 0000000000000000 R09: 0000000000000000 [ 119.349031][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.349052][ T6130] R13: 0000000000000000 R14: 00007f0f353b6080 R15: 00007ffd2e692458 [ 119.349108][ T6130] [ 119.671445][ T6133] FAULT_INJECTION: forcing a failure. [ 119.671445][ T6133] name failslab, interval 1, probability 0, space 0, times 0 [ 119.684218][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz.1.49 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 119.684262][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.684280][ T6133] Call Trace: [ 119.684290][ T6133] [ 119.684302][ T6133] dump_stack_lvl+0x16c/0x1f0 [ 119.684374][ T6133] should_fail_ex+0x512/0x640 [ 119.684417][ T6133] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 119.684472][ T6133] should_failslab+0xc2/0x120 [ 119.684500][ T6133] __kmalloc_cache_noprof+0x6a/0x3e0 [ 119.684538][ T6133] ? nexthop_net_init+0x73/0x140 [ 119.684583][ T6133] ? __pfx_nexthop_net_init+0x10/0x10 [ 119.684629][ T6133] nexthop_net_init+0x73/0x140 [ 119.684669][ T6133] ? tcf_net_init+0x55/0x150 [ 119.684713][ T6133] ops_init+0x1df/0x5f0 [ 119.684762][ T6133] setup_net+0x1ff/0x510 [ 119.684787][ T6133] ? lockdep_init_map_type+0x5c/0x280 [ 119.684828][ T6133] ? __pfx_setup_net+0x10/0x10 [ 119.684857][ T6133] ? debug_mutex_init+0x37/0x70 [ 119.684889][ T6133] copy_net_ns+0x2a6/0x5f0 [ 119.684923][ T6133] create_new_namespaces+0x3ea/0xa90 [ 119.684963][ T6133] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 119.684998][ T6133] ksys_unshare+0x45b/0xa40 [ 119.685037][ T6133] ? __pfx_ksys_unshare+0x10/0x10 [ 119.685077][ T6133] ? xfd_validate_state+0x61/0x180 [ 119.685145][ T6133] __x64_sys_unshare+0x31/0x40 [ 119.685185][ T6133] do_syscall_64+0xcd/0x490 [ 119.685235][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.685276][ T6133] RIP: 0033:0x7f21a1d8e929 [ 119.685300][ T6133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.685336][ T6133] RSP: 002b:00007f21a2c9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 119.685365][ T6133] RAX: ffffffffffffffda RBX: 00007f21a1fb5fa0 RCX: 00007f21a1d8e929 [ 119.685383][ T6133] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 119.685400][ T6133] RBP: 00007f21a1e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 119.685416][ T6133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.685431][ T6133] R13: 0000000000000000 R14: 00007f21a1fb5fa0 R15: 00007fff4e37dbe8 [ 119.685469][ T6133] [ 119.934097][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.961649][ T6134] FAULT_INJECTION: forcing a failure. [ 119.961649][ T6134] name failslab, interval 1, probability 0, space 0, times 0 [ 119.999801][ T6127] Process accounting resumed [ 120.068463][ T6134] CPU: 0 UID: 0 PID: 6134 Comm: syz.1.49 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 120.068504][ T6134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.068521][ T6134] Call Trace: [ 120.068531][ T6134] [ 120.068541][ T6134] dump_stack_lvl+0x16c/0x1f0 [ 120.068597][ T6134] should_fail_ex+0x512/0x640 [ 120.068636][ T6134] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 120.068677][ T6134] should_failslab+0xc2/0x120 [ 120.068704][ T6134] __kmalloc_cache_noprof+0x6a/0x3e0 [ 120.068742][ T6134] ? snd_seq_pool_new+0x44/0x230 [ 120.068774][ T6134] ? __pfx_snd_seq_open+0x10/0x10 [ 120.068821][ T6134] snd_seq_pool_new+0x44/0x230 [ 120.068852][ T6134] seq_create_client1+0x66/0x5e0 [ 120.068899][ T6134] ? __pfx_snd_seq_open+0x10/0x10 [ 120.068943][ T6134] snd_seq_open+0x59/0x550 [ 120.068989][ T6134] ? __pfx_snd_seq_open+0x10/0x10 [ 120.069031][ T6134] snd_open+0x1fe/0x450 [ 120.069078][ T6134] ? __pfx_snd_open+0x10/0x10 [ 120.069147][ T6134] chrdev_open+0x231/0x6a0 [ 120.069196][ T6134] ? __pfx_apparmor_file_open+0x10/0x10 [ 120.069237][ T6134] ? __pfx_chrdev_open+0x10/0x10 [ 120.069292][ T6134] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 120.069346][ T6134] do_dentry_open+0x744/0x1c10 [ 120.069394][ T6134] ? __pfx_chrdev_open+0x10/0x10 [ 120.069453][ T6134] vfs_open+0x82/0x3f0 [ 120.069494][ T6134] path_openat+0x1de4/0x2cb0 [ 120.069564][ T6134] ? __pfx_path_openat+0x10/0x10 [ 120.069615][ T6134] ? __lock_acquire+0xb8a/0x1c90 [ 120.069664][ T6134] do_filp_open+0x20b/0x470 [ 120.069715][ T6134] ? __pfx_do_filp_open+0x10/0x10 [ 120.069794][ T6134] ? alloc_fd+0x471/0x7d0 [ 120.069851][ T6134] do_sys_openat2+0x11b/0x1d0 [ 120.069889][ T6134] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.069943][ T6134] __x64_sys_openat+0x174/0x210 [ 120.069981][ T6134] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.070038][ T6134] do_syscall_64+0xcd/0x490 [ 120.070093][ T6134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.070126][ T6134] RIP: 0033:0x7f21a1d8e929 [ 120.070153][ T6134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.070184][ T6134] RSP: 002b:00007f21a2c7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.070216][ T6134] RAX: ffffffffffffffda RBX: 00007f21a1fb6080 RCX: 00007f21a1d8e929 [ 120.070237][ T6134] RDX: 0000000000040a40 RSI: 0000200000001d40 RDI: ffffffffffffff9c [ 120.070258][ T6134] RBP: 00007f21a1e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 120.070277][ T6134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.070316][ T6134] R13: 0000000000000000 R14: 00007f21a1fb6080 R15: 00007fff4e37dbe8 [ 120.070357][ T6134] [ 121.074120][ T6151] FAULT_INJECTION: forcing a failure. [ 121.074120][ T6151] name failslab, interval 1, probability 0, space 0, times 0 [ 121.177760][ T6151] CPU: 1 UID: 0 PID: 6151 Comm: syz.0.62 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 121.177804][ T6151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.177821][ T6151] Call Trace: [ 121.177831][ T6151] [ 121.177842][ T6151] dump_stack_lvl+0x16c/0x1f0 [ 121.177903][ T6151] should_fail_ex+0x512/0x640 [ 121.177943][ T6151] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 121.177983][ T6151] should_failslab+0xc2/0x120 [ 121.178027][ T6151] __kmalloc_cache_noprof+0x6a/0x3e0 [ 121.178068][ T6151] ? snd_seq_pool_new+0x44/0x230 [ 121.178121][ T6151] ? __pfx_snd_seq_open+0x10/0x10 [ 121.178172][ T6151] snd_seq_pool_new+0x44/0x230 [ 121.178216][ T6151] seq_create_client1+0x66/0x5e0 [ 121.178269][ T6151] ? __pfx_snd_seq_open+0x10/0x10 [ 121.178316][ T6151] snd_seq_open+0x59/0x550 [ 121.178368][ T6151] ? __pfx_snd_seq_open+0x10/0x10 [ 121.178414][ T6151] snd_open+0x1fe/0x450 [ 121.178467][ T6151] ? __pfx_snd_open+0x10/0x10 [ 121.178527][ T6151] chrdev_open+0x231/0x6a0 [ 121.178566][ T6151] ? __pfx_apparmor_file_open+0x10/0x10 [ 121.178598][ T6151] ? __pfx_chrdev_open+0x10/0x10 [ 121.178638][ T6151] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 121.178677][ T6151] do_dentry_open+0x744/0x1c10 [ 121.178715][ T6151] ? __pfx_chrdev_open+0x10/0x10 [ 121.178760][ T6151] vfs_open+0x82/0x3f0 [ 121.178789][ T6151] path_openat+0x1de4/0x2cb0 [ 121.178836][ T6151] ? __pfx_path_openat+0x10/0x10 [ 121.178873][ T6151] ? __lock_acquire+0xb8a/0x1c90 [ 121.178910][ T6151] do_filp_open+0x20b/0x470 [ 121.178947][ T6151] ? __pfx_do_filp_open+0x10/0x10 [ 121.179006][ T6151] ? alloc_fd+0x471/0x7d0 [ 121.179055][ T6151] do_sys_openat2+0x11b/0x1d0 [ 121.179103][ T6151] ? __pfx_do_sys_openat2+0x10/0x10 [ 121.179148][ T6151] __x64_sys_openat+0x174/0x210 [ 121.179180][ T6151] ? __pfx___x64_sys_openat+0x10/0x10 [ 121.179238][ T6151] do_syscall_64+0xcd/0x490 [ 121.179294][ T6151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.179329][ T6151] RIP: 0033:0x7f0e6698e929 [ 121.179358][ T6151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.179391][ T6151] RSP: 002b:00007f0e677c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.179423][ T6151] RAX: ffffffffffffffda RBX: 00007f0e66bb5fa0 RCX: 00007f0e6698e929 [ 121.179444][ T6151] RDX: 0000000000040a40 RSI: 0000200000001d40 RDI: ffffffffffffff9c [ 121.179464][ T6151] RBP: 00007f0e66a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.179483][ T6151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.179501][ T6151] R13: 0000000000000000 R14: 00007f0e66bb5fa0 R15: 00007ffc662c02a8 [ 121.179542][ T6151] [ 121.592005][ T6149] FAULT_INJECTION: forcing a failure. [ 121.592005][ T6149] name failslab, interval 1, probability 0, space 0, times 0 [ 121.634427][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.1.54 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 121.634471][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.634488][ T6149] Call Trace: [ 121.634498][ T6149] [ 121.634511][ T6149] dump_stack_lvl+0x16c/0x1f0 [ 121.634562][ T6149] should_fail_ex+0x512/0x640 [ 121.634605][ T6149] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 121.634657][ T6149] should_failslab+0xc2/0x120 [ 121.634687][ T6149] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 121.634731][ T6149] ? __proc_create+0xc3/0x8c0 [ 121.634780][ T6149] ? __proc_create+0x2ce/0x8c0 [ 121.634833][ T6149] __proc_create+0x2ce/0x8c0 [ 121.634885][ T6149] ? __pfx___proc_create+0x10/0x10 [ 121.634943][ T6149] ? _raw_write_unlock+0x28/0x50 [ 121.634988][ T6149] ? proc_register+0x314/0x5f0 [ 121.635041][ T6149] proc_create_reg+0x7d/0x180 [ 121.635075][ T6149] proc_create_net_data+0x8e/0x1b0 [ 121.635129][ T6149] ? __pfx_proc_create_net_data+0x10/0x10 [ 121.635196][ T6149] nfs_fs_proc_net_init+0x141/0x1e0 [ 121.635252][ T6149] nfs_net_init+0x130/0x300 [ 121.635290][ T6149] ? __pfx_nfs_net_init+0x10/0x10 [ 121.635323][ T6149] ops_init+0x1df/0x5f0 [ 121.635385][ T6149] setup_net+0x1ff/0x510 [ 121.635414][ T6149] ? lockdep_init_map_type+0x5c/0x280 [ 121.635458][ T6149] ? __pfx_setup_net+0x10/0x10 [ 121.635486][ T6149] ? debug_mutex_init+0x37/0x70 [ 121.635516][ T6149] copy_net_ns+0x2a6/0x5f0 [ 121.635548][ T6149] create_new_namespaces+0x3ea/0xa90 [ 121.635607][ T6149] copy_namespaces+0x468/0x560 [ 121.635640][ T6149] copy_process+0x2822/0x76a0 [ 121.635705][ T6149] ? __pfx_copy_process+0x10/0x10 [ 121.635756][ T6149] kernel_clone+0xfc/0x960 [ 121.635793][ T6149] ? __pfx_kernel_clone+0x10/0x10 [ 121.635847][ T6149] __do_sys_clone+0xce/0x120 [ 121.635881][ T6149] ? __pfx___do_sys_clone+0x10/0x10 [ 121.635934][ T6149] ? xfd_validate_state+0x61/0x180 [ 121.635983][ T6149] do_syscall_64+0xcd/0x490 [ 121.636030][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.636058][ T6149] RIP: 0033:0x7f21a1d8e929 [ 121.636079][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.636105][ T6149] RSP: 002b:00007f21a2c9efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 121.636130][ T6149] RAX: ffffffffffffffda RBX: 00007f21a1fb5fa0 RCX: 00007f21a1d8e929 [ 121.636148][ T6149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068000000 [ 121.636163][ T6149] RBP: 00007f21a1e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 121.636179][ T6149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 121.636193][ T6149] R13: 0000000000000000 R14: 00007f21a1fb5fa0 R15: 00007fff4e37dbe8 [ 121.636227][ T6149] [ 121.920987][ T6149] ------------[ cut here ]------------ [ 121.926607][ T6149] remove_proc_entry: removing non-empty directory 'net/rpc', leaking at least 'nfs' [ 121.936477][ T6149] WARNING: CPU: 0 PID: 6149 at fs/proc/generic.c:727 remove_proc_entry+0x45e/0x530 [ 121.945906][ T6149] Modules linked in: [ 121.950094][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.1.54 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 121.962831][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.973386][ T6149] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 121.979179][ T6149] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 00 bc c2 8b 48 c7 c7 20 bb c2 8b e8 63 67 1d ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 14 54 5e ff 90 48 b8 00 00 00 00 00 [ 121.998930][ T6149] RSP: 0018:ffffc90004b877e8 EFLAGS: 00010282 [ 122.005306][ T6149] RAX: 0000000000000000 RBX: ffff888030c21640 RCX: ffffc9000c01a000 [ 122.013423][ T6149] RDX: 0000000000080000 RSI: ffffffff817aa1b5 RDI: 0000000000000001 [ 122.021457][ T6149] RBP: ffff88805d16e340 R08: 0000000000000001 R09: 0000000000000000 [ 122.029543][ T6149] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88805d16e280 [ 122.037807][ T6149] R13: ffff88805d16e364 R14: ffff88805d16eea4 R15: dffffc0000000000 [ 122.045888][ T6149] FS: 00007f21a2c9f6c0(0000) GS:ffff888124760000(0000) knlGS:0000000000000000 [ 122.055456][ T6149] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.062547][ T6149] CR2: 00007fdf3505144e CR3: 000000003314a000 CR4: 00000000003526f0 [ 122.070693][ T6149] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 122.078787][ T6149] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 122.086865][ T6149] Call Trace: [ 122.090194][ T6149] [ 122.093231][ T6149] ? __pfx_remove_proc_entry+0x10/0x10 [ 122.098753][ T6149] ? cache_destroy_net+0x31/0x50 [ 122.103815][ T6149] ? sunrpc_exit_net+0x37/0x90 [ 122.108664][ T6149] sunrpc_exit_net+0x46/0x90 [ 122.113375][ T6149] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 122.118753][ T6149] ops_undo_list+0x2eb/0xab0 [ 122.123479][ T6149] ? __pfx_ops_undo_list+0x10/0x10 [ 122.128657][ T6149] ? ops_init+0x2fa/0x5f0 [ 122.133133][ T6149] setup_net+0x2e1/0x510 [ 122.137427][ T6149] ? __pfx_setup_net+0x10/0x10 [ 122.142244][ T6149] ? debug_mutex_init+0x37/0x70 [ 122.147197][ T6149] copy_net_ns+0x2a6/0x5f0 [ 122.151681][ T6149] create_new_namespaces+0x3ea/0xa90 [ 122.157617][ T6149] copy_namespaces+0x468/0x560 [ 122.162847][ T6149] copy_process+0x2822/0x76a0 [ 122.167610][ T6149] ? __pfx_copy_process+0x10/0x10 [ 122.172752][ T6149] kernel_clone+0xfc/0x960 [ 122.177232][ T6149] ? __pfx_kernel_clone+0x10/0x10 [ 122.182456][ T6149] __do_sys_clone+0xce/0x120 [ 122.187120][ T6149] ? __pfx___do_sys_clone+0x10/0x10 [ 122.192438][ T6149] ? xfd_validate_state+0x61/0x180 [ 122.197631][ T6149] do_syscall_64+0xcd/0x490 [ 122.202212][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.208221][ T6149] RIP: 0033:0x7f21a1d8e929 [ 122.212743][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.232463][ T6149] RSP: 002b:00007f21a2c9efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 122.240928][ T6149] RAX: ffffffffffffffda RBX: 00007f21a1fb5fa0 RCX: 00007f21a1d8e929 [ 122.249002][ T6149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068000000 [ 122.257063][ T6149] RBP: 00007f21a1e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 122.265766][ T6149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 122.274207][ T6149] R13: 0000000000000000 R14: 00007f21a1fb5fa0 R15: 00007fff4e37dbe8 [ 122.282259][ T6149] [ 122.285534][ T6149] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 122.292863][ T6149] CPU: 0 UID: 0 PID: 6149 Comm: syz.1.54 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 122.304748][ T6149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 122.314841][ T6149] Call Trace: [ 122.318154][ T6149] [ 122.321121][ T6149] dump_stack_lvl+0x3d/0x1f0 [ 122.325795][ T6149] panic+0x71c/0x800 [ 122.329763][ T6149] ? __pfx_panic+0x10/0x10 [ 122.334257][ T6149] ? show_trace_log_lvl+0x29b/0x3e0 [ 122.339545][ T6149] ? remove_proc_entry+0x45e/0x530 [ 122.344707][ T6149] check_panic_on_warn+0xab/0xb0 [ 122.349714][ T6149] __warn+0xf6/0x3c0 [ 122.353690][ T6149] ? remove_proc_entry+0x45e/0x530 [ 122.358860][ T6149] report_bug+0x3c3/0x580 [ 122.363261][ T6149] ? remove_proc_entry+0x45e/0x530 [ 122.368438][ T6149] handle_bug+0x184/0x210 [ 122.372833][ T6149] exc_invalid_op+0x17/0x50 [ 122.377386][ T6149] asm_exc_invalid_op+0x1a/0x20 [ 122.382284][ T6149] RIP: 0010:remove_proc_entry+0x45e/0x530 [ 122.388073][ T6149] Code: 3c 02 00 0f 85 85 00 00 00 48 8b 93 d8 00 00 00 4d 89 f0 4c 89 e9 48 c7 c6 00 bc c2 8b 48 c7 c7 20 bb c2 8b e8 63 67 1d ff 90 <0f> 0b 90 90 e9 5f fe ff ff e8 14 54 5e ff 90 48 b8 00 00 00 00 00 [ 122.407733][ T6149] RSP: 0018:ffffc90004b877e8 EFLAGS: 00010282 [ 122.413839][ T6149] RAX: 0000000000000000 RBX: ffff888030c21640 RCX: ffffc9000c01a000 [ 122.421832][ T6149] RDX: 0000000000080000 RSI: ffffffff817aa1b5 RDI: 0000000000000001 [ 122.429849][ T6149] RBP: ffff88805d16e340 R08: 0000000000000001 R09: 0000000000000000 [ 122.437844][ T6149] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88805d16e280 [ 122.445860][ T6149] R13: ffff88805d16e364 R14: ffff88805d16eea4 R15: dffffc0000000000 [ 122.453865][ T6149] ? __warn_printk+0x1a5/0x350 [ 122.458680][ T6149] ? remove_proc_entry+0x45d/0x530 [ 122.463833][ T6149] ? __pfx_remove_proc_entry+0x10/0x10 [ 122.469342][ T6149] ? cache_destroy_net+0x31/0x50 [ 122.474332][ T6149] ? sunrpc_exit_net+0x37/0x90 [ 122.479165][ T6149] sunrpc_exit_net+0x46/0x90 [ 122.483799][ T6149] ? __pfx_sunrpc_exit_net+0x10/0x10 [ 122.489154][ T6149] ops_undo_list+0x2eb/0xab0 [ 122.493782][ T6149] ? __pfx_ops_undo_list+0x10/0x10 [ 122.498923][ T6149] ? ops_init+0x2fa/0x5f0 [ 122.503316][ T6149] setup_net+0x2e1/0x510 [ 122.507601][ T6149] ? __pfx_setup_net+0x10/0x10 [ 122.512395][ T6149] ? debug_mutex_init+0x37/0x70 [ 122.517278][ T6149] copy_net_ns+0x2a6/0x5f0 [ 122.521736][ T6149] create_new_namespaces+0x3ea/0xa90 [ 122.527068][ T6149] copy_namespaces+0x468/0x560 [ 122.532479][ T6149] copy_process+0x2822/0x76a0 [ 122.537211][ T6149] ? __pfx_copy_process+0x10/0x10 [ 122.542313][ T6149] kernel_clone+0xfc/0x960 [ 122.546781][ T6149] ? __pfx_kernel_clone+0x10/0x10 [ 122.551861][ T6149] __do_sys_clone+0xce/0x120 [ 122.556490][ T6149] ? __pfx___do_sys_clone+0x10/0x10 [ 122.561743][ T6149] ? xfd_validate_state+0x61/0x180 [ 122.566915][ T6149] do_syscall_64+0xcd/0x490 [ 122.571466][ T6149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.577393][ T6149] RIP: 0033:0x7f21a1d8e929 [ 122.581861][ T6149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.601505][ T6149] RSP: 002b:00007f21a2c9efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 122.609964][ T6149] RAX: ffffffffffffffda RBX: 00007f21a1fb5fa0 RCX: 00007f21a1d8e929 [ 122.617962][ T6149] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068000000 [ 122.625969][ T6149] RBP: 00007f21a1e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 122.633969][ T6149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 122.641975][ T6149] R13: 0000000000000000 R14: 00007f21a1fb5fa0 R15: 00007fff4e37dbe8 [ 122.649996][ T6149] [ 122.653429][ T6149] Kernel Offset: disabled [ 122.657778][ T6149] Rebooting in 86400 seconds..