last executing test programs: 10m3.057985433s ago: executing program 0 (id=100): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f0000000000)="632d1bfe595046ab5c40bd7563307acb6d16baef6176e669a216aae183cccafdd80500ffffffff0600000000000000000000000000ffffff", 0x38) 10m2.920233322s ago: executing program 0 (id=102): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x5, 0x20009, 0x2000004000df, 0xeb1, 0x401, 0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x37}}, 0x4044820) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x200000000000003, 0x1, 0x2c, 0x0, 0x300) futex$auto(0x0, 0x85, 0x0, 0x0, 0x0, 0x9) 10m2.197872376s ago: executing program 0 (id=104): acct$auto(&(0x7f00000000c0)='/proc/net/ipv\a\x00c\x00n\x05\x00\x00\x00\x00\x00\x00\t\x01\x05\xef\x16\x06\xd91\x00\x00\x00\x00\x00\x00\xda\x1a?\xde\xe9LJ^\xc6\x98-\xb3\x8e\xa8\xfc\x9e\xfc*\x18 \x9b\xdaq\x8b\xc9X\x9d\x06\xaf\xb6\xcf?\xa1\xd0Cadu\xf21\x96\xd0#{\x1b\x99\xe3\xe9\x00\x00\x00\x00\xf6\xfb\xbe\xf7\xa1\xbf\x89\xb2\\f\xa6J\xb6\xc5\x00\xc9\x00\x00\x8a\xcb\xe1t\xecU\x9e\x00\x00\x00\x00\x00') r0 = socket(0x25, 0x1, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) shutdown$auto(r0, 0xa) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) sendmsg$auto_IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="75f1eb14d678334371a0b1b44ea08f91b4ba825da9f07fd98b6da04cf8f1f524338202a97f3a634e278ecc1b01000000000000000599f2266d6ac5392fdaca63046bfddaf4fc711fa79442c16c33a0a7711c3be8a341bfde3d0000000000000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 10m0.687266023s ago: executing program 0 (id=110): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/usbip-vudc.0/udc/usbip-vudc.0/current_speed\x00', 0x181040, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x8, 0x7, 0x7, 0x89, 0x9a, 0x4, 0x200000000000, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x0, 0x4, 0x6, 0x401, 0x22000, 0x9, 0xfffffffc, 0x84, 0x0, 0x0, 0x0, 0x8000004, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x4, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x76, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x9, 0xd) (async) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) (async) flock$auto(0xffffffffffffffff, 0x1) (async) open(&(0x7f00000000c0)='./file0\x00', 0x185043, 0x18) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram12/queue/atomic_write_unit_max_bytes\x00', 0x102, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) statmount$auto(0x0, &(0x7f0000000180)={0xc, 0x0, 0x2000000000009, 0x3, 0x7, 0xfffffffffffff715, 0x4, 0x7fff, 0x2000000000010006, 0x0, 0x7, 0x8, 0x2, 0x9, 0xaf, 0x9, 0x2, 0x3, 0x8001, 0x6, 0x0, 0x0, 0x40000002, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa23, 0x0, 0xe9e, 0x1]}, 0x200, 0xfffffffb) socket(0x2, 0x3, 0x100) (async) mmap$auto(0x0, 0x400009, 0xfffffffffffffffa, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0303e03, r0) (async) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd04, &(0x7f00000001c0)) 10m0.529877286s ago: executing program 0 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r2], 0x24}}, 0x4000000) 10m0.156500917s ago: executing program 0 (id=114): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0x0, 0x0) write$auto(r0, 0x0, 0x7ef) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/midi2\x00', 0x200000, 0x0) (async) r2 = prctl$auto(0xb, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8000000200006, 0x4, 0x40eb1, r2, 0x300000000000) (async) madvise$auto(0x0, 0x20499d, 0x9) select$auto(0x12, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) (async) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xaa, 0x20009, 0xdf, 0xeb1, r2, 0x8002) (async) sysfs$auto(0x2, 0x10000000000048, 0x0) (async) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(r2, r0, 0x8) (async) r4 = prctl$auto(0x21, 0x1, 0x1, 0x0, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000080)=""/202, 0xca) (async) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE2(0xffffffffffffffff, 0x8010661b, &(0x7f0000000040)="cdcc7845cfd58efb7224ccf9b600") keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x2000b, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x8, 0x0) (async) read$auto(0x3, 0x0, 0x80) 9m44.902167156s ago: executing program 32 (id=114): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0x0, 0x0) write$auto(r0, 0x0, 0x7ef) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/midi2\x00', 0x200000, 0x0) (async) r2 = prctl$auto(0xb, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8000000200006, 0x4, 0x40eb1, r2, 0x300000000000) (async) madvise$auto(0x0, 0x20499d, 0x9) select$auto(0x12, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) (async) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0xaa, 0x20009, 0xdf, 0xeb1, r2, 0x8002) (async) sysfs$auto(0x2, 0x10000000000048, 0x0) (async) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(r2, r0, 0x8) (async) r4 = prctl$auto(0x21, 0x1, 0x1, 0x0, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000080)=""/202, 0xca) (async) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE2(0xffffffffffffffff, 0x8010661b, &(0x7f0000000040)="cdcc7845cfd58efb7224ccf9b600") keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x2000b, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x8, 0x0) (async) read$auto(0x3, 0x0, 0x80) 1m1.986567348s ago: executing program 1 (id=2990): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0xfffffffe) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x5, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x888) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f0000000140)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x7, 0x7b2, 0x1, @relative_id=0x2, 0x80}, 0x96) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r1, &(0x7f0000000100)={0x0, 0x82}, 0x8, 0x6, 0x5) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 59.533441995s ago: executing program 1 (id=2997): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000180)={r0, 0x40, 0x800}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa4\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0xe) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x40000000001ff, 0x10000, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xffffffffffffffff, 0x7, 0x63, 0x6, 0xffffffffffffffff, 0x7, 0x10000000d, 0x1, 0x6]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x8, 0x86, 0x101, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptywb\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045438, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) process_mrelease$auto(0xffffffffffffffff, 0x0) 56.197761821s ago: executing program 1 (id=3007): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mq_open$auto(&(0x7f0000000500)='#:\x00', 0xfffffff0, 0x831c, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clockevents/clockevent0/unbind_device\x00', 0x20001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x18b440, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/driver/nvram\x00', 0x40000, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) munmap$auto(0x8000, 0xffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r4, &(0x7f0000000180)=""/61, 0xfffffeeb) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto_sg_fops_sg(r5, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) r6 = socket(0x2b, 0x1, 0x1) ioctl$auto(r6, 0x8983, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 55.096373741s ago: executing program 1 (id=3010): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(0xffffffffffffffff, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x0, 0x7, 0xb, 0x8, 0x100, 0x2, 0x3, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x381100, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1, 0x5, 0x0) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b71, 0x2, 0x8000000000008000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x84) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x80000000000006}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 53.24285926s ago: executing program 1 (id=3011): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000000000080"}, 0x1c) 52.590920033s ago: executing program 1 (id=3014): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x200001002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x9, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sysinfo$auto(&(0x7f0000000100)={0x9, [0x7, 0xc, 0xff], 0x200, 0xd5, 0x0, 0x7, 0x5, 0x1, 0x1, 0x0, 0x100000004, 0x7, 0x219}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) execveat$auto(r1, 0x0, &(0x7f00000000c0)=&(0x7f0000000340)='/sys/kerneh/deync\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdc\xb3\"\xd4=e\x13\xb2T\xd9\xf4\xc2\\vxI\xf0\x06W\x96\xc1\xf1\xb8$\xb8(\xe2\x13\xde9d\x8c\xf8\"y\xce\xf0tB\xfd2w#\xa7\x0f\xf0\xce\x9akS\x0f]\xf7\xbdT\xe8J\x1b\x18\x03-6\x11\x16\xc14sz\xbcR\"\x83\x1eOcM%\x85\x1c@2\x81\xe2\xd3\xe6\x0e\x82\xbd\xa4\xc1\x92\xb0\x16\x11\x90@\xf2\xa8Q<\x10\x99\xfcTb\xf5\x01\x8c\xad\x85\x9b\xf1z\xa2\xa5OM\xca`#\xa6!\xb7\x12\xbd\x05f\b\xbbk\xffN\x84\x8c\xd9\xd8\x9eF;\xe2\x92\xfac\x04\x11K\x86s6eP\x03^\xd4\xc9\x11\xc29\xc5\x86F\xc9l-\x87\vV\x85\xac\xc1,\xff1[\x8fR\r\xe3\xee\x1e\x88\x1b\x00\xf0^\x91\xf8qYQ/\xb4\x06\x06\x18f', 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = socket(0x2, 0x801, 0x106) getsockopt$auto(r4, 0x6, 0x21, 0x0, 0x0) mmap$auto(0xfffffffffffffff2, 0x2020009, 0x3, 0xeb3, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000001640)="1fabd92587d1a66a634b40be54886913dead0ec9b64a09698b60eea0738fa461d926ca5864dd4179cc0c58ad986423ff7eeda5bd802c777b997e96b5dc4c5612a277a53eed10d333d0948d31a0006f5c3a102af5eb6c0d1818a6c1262e104dcf234f8b1c3a0b7a27f798fec531945aa42046466dcbef9dd9fe6430c4d88d27d05716dd4a1fef11310b40c4378ae98e0602cea1df6a336f4f86821eaff580dbddf65e9944b857fe4a0f8dccd4883f9809b431fc4f5df0fc46e50b83a32a9c0ca5fd061edd7021a384898777885126a4030ec0fe60bc43fda4ce4b2b04c55259d1a0ba4bf7df7cb4130b00ca3aa4bbe2694977e7b83c349caae3b38af7f2511a9846b166d12bc102a93b979d90ae49cf7c2af06b942dc876cfaffa9b1fe082f73195851fd87a94bb6f6ca3ce3af6182fb61a69dfde592971616aa6bbdb6f23390bc32abbcbc4c32a9dd2f01edd44db29e9c606acfcd9d009709e8a8c6396489370b509319bd5266dc87645dcf97165aa041d6e7b75dfe5c81c75cbca038502ea41449e100d3a73acb6ae641f465f85f3e13ceb0ab4a4b217f3079dcccc5c4fdb63a067e6e65c58b26173eb197b2e95feefcea13864571b93177dfa8ff279d8d7c33217eda0464e616965aa658e52a3c6e8ce91bd4146517f6928cc9159f6cc90fb226f4b14739b4af986bccecb49806b8535a3fa06a0a90ca5fb6e9c23e23248c68e61d8cfd190eb5ef6345806571563e8ab7c2ccaf7eefff51e372501183a8e109826354fb471ee8c2a075e6d5991c2883facebae724edf7c970718196b7a0aa3de9231907375c0421164cb6c5f91b141a556e94badc6c5af032ab6d5a93f734995a02b34cd7f3b6dbbdf49e1ebff5c721dc3d2e8e6de90f92965e6508816c6842be8c7e053215e9428ce796267a801682eea5c9039b1ef4635441afc93b6979559e22af7c477e6e88895cf6dcccbab1574cb5cd1526971cb073512478b7c64223e5abe7370d1438aaf7cc0c187d47df80a7985b990e42860cd966f3e1b7a731dfeacdbdc3158828baaec031c4285d293c9c44eb647e2ead07ba46cc44c255d62e3cfe8b35d9ff31b33c84224637a3bfcf88ab136c0ced7d0697ad883a264ba61eeca599dec9b73897d95c07728bd3e9dd19687f293b116bcd8560c23c0b26263428ba3ca2a2761ea7d6241bcd54ee3541ac54a6ec4101fa3f59c5cbebd7a29f7f30c27140cb06f0047a0bb651e79bb9e39003459fd444feb6757fe2963e330f1f73d9b4d7da14efc9cf79fdc68b7cde1ed0ac72109c583c93be3a9e886a1b4c492eab62053634fc13654225fd8bca05e9c05df03c8cee8847314f865b6603c611ea56631f8c032e811e42e84ac35818290bacf9e5839eeb856797f45c37115c2961a86bf2c3d9ad6c4eddccec30e5cb0090860808f484c8a2977b8606c1de973faafaaab0efa445ebb941f9a594a142c041c333fcef1b67116c2bbbcfd3b3e6e14e62af78522383c7bce082b26684c89f3ab0ba0ee6c049b560fefb743b9b8600c1dabfa8dddaa9c78a72155a32c3898063d92447437cd5d58198524ef1d1471b5f3951cfeaf6e16d84ea2b3d32062d5741fd61f030ca68d386ca2d4a0ad8953c46f50e9caebd17af3c6c557ba266b709ee2eb0e9b5c1ee604b5110b56735aab731f9a3a96c907952e0750097938e3591b7b3564e7191352eced29cb9e4c0535ffc73aad83043ba463bcf5e46512d25924f18e4c1088b95b4df734b69a72baac6b589a23bfb7ce1686cfdce6eec5da44acf3abbf711b83d01bdfea6f855ba4b593330024f87531d41ff9e5852b18335d3e5681fd157fc54b93cddcab16be6d5386c28fa411127b66edd68342907a3349e7999fbbdbad8206d2ea0c23a59a864b35cf873cf870f7af875a2c323c164c82255bd3f3dd78ad2641e46b6e7b018e1b67eff0f0e4675300259b3ee99f2b1a0cfc662955ead580d790b0d245188e8250a0cebdc2ba77962323f8e3cb91de4a5aea4b61e39be1a7a9d0ffe9850a1d89aefb42ad1635fd469b484671e6593ac77571bd8d5f4ab66dfd318ac50d83a32fd6654390421556195bf3a752484459ea3f36342037f2d2efa3fc61e559c79503c996c03e0bee5f855653edd39d6e6754a7b63279a3e8428109fa30b86288a38a6c2e6313ff23c0ddb9243e3ec32b25ba40bb7237c9f2e0f9a4e8185f9be568795202a58879be4767d630c15188e09741fe0d5660e8deffcad1df6d1c47b4a63cca636d59cbf8768447f3aeb9d032014b9054954f168544fa212740ba985025894632cf06e1ed21d669bb607fc5b9902d92379b2ebfe19ad969c3e1583b24dd992ef3275eaf772212fca699dbf9ae641775fbac6eab2ebf13ec3313af27844a3f57779546efc1457d2050f2548db142b590ec8e86214e035a9fb4ce6a61046eac7c6806da8c0eb9cc454cd43e992ee679a4f63c62944ebbe451c7957bf3f5ceadaeae861deb22c34ce269c1b9a07f3306a2ac82cfda680c458a0b64f92a10c813c7c6516c106df0d7af104b39319a6bfda5e864c7fa183612c9a64e09dd0f315ab907f51fbbce2e855d60defcc4aeb8c19d4491f2990278a3b5cd6578ecfb9a44ac56a779209fac1551a1bc530b0d8eeae9bd0e2ccbe67b469f26de1e3e2cd6b6dec455ba478cb7191a1a0cc6e6b08482c79cb3cd1c61b36d6a37970c968326e3b354c6403fd15c00c63f4723e8b6572780c892e23a5df929e4e7b3bc819435b04d4483e9671c266e9b465f45eb3dd0cc64b24a8824676e6cbf05bc60cf8e3f5d1c7fdc7e6a89a103803bf2b8098c1e7ba8e3925cc4628f915df61e1a5627b0371972b3ff1c0ce4df084aab610cd1402998fa106ab8ccca6d1de25347c3bd09e202e45a9905d8aea88ed07d4b5364d83d848554b0b7c6daed0939d558bdd5ca4162e879a6dc5131920570f9964e36f97090ed282d118ebed282bf4638c45ab282585e839de1f887cff7a3a102e6534f42fbded04b626320b51081591edcae97fb194dd10d508bc4346bdd64a14a64e7167150fb1ead28865b013279a8ac4e29d6856d252d8b64c9899d2c8920ed2ec524f109b5af1e3e9b2ee0335b8ed88ef3228aee225ddab1e1411d93a084ef82dfc504e3939a6eac174895db00f79610c617fe33b92c76463ed8272084811960bcd295b8ae9c5f05620ac662932edce7264d6ecf4241d4e7748b37f6d118c8ba3f2533c5e05e2ddb1fd1121bf9d3e6561098a12d41ff2bfe4aeabe0f36e1f8057399ce906a7ce708324e5d5c3bdf4fc11055a68b5fe0bf70921f3add786f86a44e6e389f4b0ef5983683599becec8c1de4a71e170b1450d5dba03b4378e7b8f860542fdb2d5e05ee3e11da5b9ccb13af6617094c4be0b8523bd0c65bbb8bb947ab3ce47d15cc26879e8ddbb9e742b07bbfa01e6770b7ecdcade3bce02f3d566410c71b165fbe2f04077e5702a5751c8872727b9983d64eca54ecd09c87679b6679dddf991bed4456f88167fbb2dfb1c539bd8a599dda2626c53162a2a2e7a81a938eb4b201d58d29b4a910bf2c1a053f4370265cf8ed6dbc05294a0d867be5340fa71500b27c9ece115973ebb352acfe6b8d6ab6ae477a544aba177261e510b723744aecb666669a6a09ef7a6f067038639019ab0fd505880bb3894f14456c6e3db83838e824424f01ef1659f8ce9637db68e0eb9e671ad9773ece05fdf9bdcd467ca22e81c3e11a42f8838f8a3ca5c1db623889743336b496cce258a7ef2febedeb9c5dfd03a69340440a9cb4786084890e255e24f21d5819a3fdd4503679a9ec4f8e46958145aaae2fa20318f49709e669269eb340b6b7d3ff21f9058bc96bca6e504ce4e6396f80656e29bb63153362922ab1a76b79088b635fcc9cfc4498dbab0e85774b03ac82c764dc4a4e35d1f118fbd9df8d3957b351d599e01949ca64347adc0b162c09ebe65da69c5e0ad9569995385e8d2d800f2eed146fa2d58bc46f70fd511df3919ce0961869f7f6d7ce21a804182caca572922974fc88662c0af948c7476eda6893d2151c7ef12d92bbab887a79bc0cb7db39e6e771c089d65c0e2dc14acc433aab8a59c7d8e350ce65e7aae42eadc22c050107b9708341185baaf3a3055c3b6902f3291d37f6b040409377fc3ebd7439b37b22820b3b1daff2c1ad706c198a53db733feac1dc545d510b679a5be557204be9731bead1edf85d164454fcb82ef5c9ae5abec4183a3083d4bb9c2c9d39754046c129b474abc16f460f3f7dcdf21796661d460e4d780339f9137e3d6427b18f3ea7941aa1b245990c2e5b970f9141d50b547a0ffca1bc3de0cefdb35ae081f6bb83e40d38c583b63633b126a2e3250176299ff420670e494ec80ed87743b9c3ff8238001212896682d4a9daa656604e8352568f01c8aa9c315540b5b52be091dde09b9864253c3ad1ac3bf7188a1d104e24993a1dbff463c7c5dc09c5218df4c2fcbbade99a7342b0d3614a94472d36f57c77c0e0bca5a9755502790be5471c8c433e62a365eef978cb5f21810c7629c9d41a50a272f817d3ad4cd887f30192aa783ce37fa99adaf439e95d3d009919ce79fe579092c85b969fb987326dc5c1ab0601adf403271c2031b89fd3307ab94ae375a215f934cf95a433329b250bbb933b6d7d87f76453c740a800820fd5e03242c089b2aa99afbfabe29c4ec76540f7045906d8686c2a8d2cb2e4edca60e664e53e48236b2715e1e8da1c9fab6f896043c69b38b942ba57d44059db24c58027dbcd8635e303a1615bb43614fd0ab2241c326fd8cc2ddf160e6157e2be16c7ef847dfaa33d7cd6d0090ac825989a4bfd62943c10a98363d3c416fafd57bd6d8bdb66b2a3c06995ebb4ec8ef73abac060697800270cc79ef23d9d715373781932a9c12f9036209a81f3441c2e38e7af0fb045dbd978cf074594f7181bc29e8bec725120334d0e8284d867962069059b2088e98298a8ee724e3aa515c29b70b8ebc93df85e3443bb931c7075130ce3f5dccceeb0bfc4ebf57d06114dbcef017ffa7efd49d1e5496fba619b8d57a35bbf544d2c9176aa08aff313a79bcb4391139bb5c8724109eb40e52a59501d620aa7a88e99b3f3e4db6d252065a80fb641d6a6a75114143bf23ccdd611a5818cb40428bcf56e397b7d10cfbdf3c4c756d315079e2c2e1094090dad14c1bb3763b5d24ad491b5bf26f3b309812fadac4a9911759d56b5a31ff3d22ce29d8e3db61abdf0c3db78c52c26eb69948f92e457883e12b6f87ac8d2a9f9f433f3529c340556face412655cc70f246bceb5da74b4935d4a9eb639acedb96cc219dbd39a9b66188a71f3abba690bf56e622fcde4d9ffa189849c93e3e5263c851b3b0fa09b8fcfc292ce15d4c2dbc86f33ef1828a36acc9f61d9022b8dcbfa2c9") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) 37.45734171s ago: executing program 33 (id=3014): r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x200001002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x9, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sysinfo$auto(&(0x7f0000000100)={0x9, [0x7, 0xc, 0xff], 0x200, 0xd5, 0x0, 0x7, 0x5, 0x1, 0x1, 0x0, 0x100000004, 0x7, 0x219}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) execveat$auto(r1, 0x0, &(0x7f00000000c0)=&(0x7f0000000340)='/sys/kerneh/deync\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdc\xb3\"\xd4=e\x13\xb2T\xd9\xf4\xc2\\vxI\xf0\x06W\x96\xc1\xf1\xb8$\xb8(\xe2\x13\xde9d\x8c\xf8\"y\xce\xf0tB\xfd2w#\xa7\x0f\xf0\xce\x9akS\x0f]\xf7\xbdT\xe8J\x1b\x18\x03-6\x11\x16\xc14sz\xbcR\"\x83\x1eOcM%\x85\x1c@2\x81\xe2\xd3\xe6\x0e\x82\xbd\xa4\xc1\x92\xb0\x16\x11\x90@\xf2\xa8Q<\x10\x99\xfcTb\xf5\x01\x8c\xad\x85\x9b\xf1z\xa2\xa5OM\xca`#\xa6!\xb7\x12\xbd\x05f\b\xbbk\xffN\x84\x8c\xd9\xd8\x9eF;\xe2\x92\xfac\x04\x11K\x86s6eP\x03^\xd4\xc9\x11\xc29\xc5\x86F\xc9l-\x87\vV\x85\xac\xc1,\xff1[\x8fR\r\xe3\xee\x1e\x88\x1b\x00\xf0^\x91\xf8qYQ/\xb4\x06\x06\x18f', 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = socket(0x2, 0x801, 0x106) getsockopt$auto(r4, 0x6, 0x21, 0x0, 0x0) mmap$auto(0xfffffffffffffff2, 0x2020009, 0x3, 0xeb3, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000001640)="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") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) 13.097007964s ago: executing program 4 (id=3125): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) splice$auto(r0, &(0x7f0000000000)=0x9, r0, 0x0, 0xc, 0x1) ioctl$auto(0x3, 0x541b, 0x38) unshare$auto(0x40000080) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio1\x00', 0x60342, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x8141, 0x0) readv$auto(r2, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01032ebd7000fddbdf250a0000001797c96cc63a4db4cb5515daacd2"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'nicvf0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000200), r4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0x1c}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) mremap$auto(0x0, 0x2, 0x8, 0x3, 0x7effffffb000) ioctl$auto(r3, 0xc, r2) r5 = pidfd_open$auto(0x1, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) sendfile$auto(r6, r6, 0x0, 0x200) setns(r5, 0x60020000) r7 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0xff, r7, 0x300000000000) arch_prctl$auto(0x5005, 0x200000000000006) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000001c0)={0x4, 0x408, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) 12.733743164s ago: executing program 5 (id=3128): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20005, 0xdf, 0x12, r0, 0x4) r2 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r2, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x2, 0x400008, 0xdf, 0xfffffffffffffff7, 0x2, 0x8040) r3 = geteuid() keyctl$auto(0x1e, r3, r3, 0x5, 0x8) mmap$auto(0xfffffffd, 0x8, 0xdf, 0x9b7e, 0x2, 0x8003) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x120, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x78, 0xbe, "2851deffd25c1ad8570b3ccab61efec8b5287da5740b3f69513508f66478fa0a946f3a3d7266145466ac77c9ad2c8c402858f8ff080284b3fc289fccf971e084e9b8aec596b715aec67311f3932a1379544aff4f5b730bb2779cc29c75729120f7b386758524dc5054da379991cb65bc7a3a84c6"}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffffc}, @NL80211_ATTR_SAE_PASSWORD={0x84, 0x115, "c3991eff9f839e066026e213626609002100b805414f5b112a44d6875b15c45625a1d8502d7cc067902bf55ce2c5c11d4225f128db3dec1907e02bcf361e22fa649e8610ccef1ef63d274d664ea74441c76891de999e8c4f69131d6669b8c097cab0cf92a7d0c3663de237820b905caf4c1063fc543b92853be961d81dc490ea"}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}]}, 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000027720d8c2e483f89", @ANYRES16=r5, @ANYBLOB="00012bbd7000fedbdf25090000000400670004004a01"], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x20000) unshare$auto(0x20000) bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) 11.559266163s ago: executing program 3 (id=3131): socket(0x1d, 0x2, 0x7) socket(0xa, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/drm/version\x00', 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x80045432, &(0x7f0000000880)=0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x29, 0x2, 0x0) socket(0x21, 0x2, 0x2) listen$auto(0x3, 0x81) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/etherd/flush\x00', 0x1, 0x0) recvmmsg$auto(r2, &(0x7f0000000500)={{0x0, 0x4, 0x0, 0x5, 0x0, 0x2, 0x8}, 0xd1}, 0x10a, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0xa, 0x6, 0x80000000) socket(0x2, 0x1, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) mmap$auto(0xfffffffffffffffc, 0x8, 0x8, 0x7fffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(0xffffffffffffffff, 0x80044dfe, 0x0) 11.442007431s ago: executing program 4 (id=3132): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) (async) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x9, 0x0) (async) setrlimit$auto(0x9, 0x0) mremap$auto(0x110c231000, 0x4, 0x4, 0x7, 0x100000000) (async) mremap$auto(0x110c231000, 0x4, 0x4, 0x7, 0x100000000) r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/numa_maps\x00', 0x40080, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/pcm\x00', 0x400, 0x0) lseek$auto(r0, 0x7ff, 0x1) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x22104, 0x9, 0x7, 0x7ff, 0x20010180, 0x4000000f}, 0x198) 8.982389377s ago: executing program 4 (id=3135): bind$auto(0x3, 0x0, 0x6a) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r0 = socket(0x18, 0x2, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)={0x14, r1, 0x300, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x48c3}, 0x200c0085) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x1, 0x0) 8.68597315s ago: executing program 5 (id=3136): read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) r0 = prctl$auto(0x26, 0x1, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0xb2c, r1, 0x31a, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_VHT_CAPABILITY={0xe2, 0x9d, "b20d5784c9e26e4bf992ac5b5ebc2f338a3e2c72998e5299d89a9ad2edfb94427ed095753fc42498fe1ceb130b201d320bb8f938f2ead63a3165780a600190b0501701d152e176f743149255851ded7c6eafa81d35228d68c95c6b3b64b64989f45338c2126665b14332e33af695b6dc49951c4d805bf2dcc83cf3574bfdd2b62f6bca4a0c19c9672c5a2cbb9e897341dc5d75c685faf620da72b94e3926dc02666a658fad3df3052d1b2dd7d9c425001c9cd8cc76331f456e3f845b480c7ca95e884322ba0d6b3215a7c090fe21fa0146e1897743cc47614b0a85f3094a"}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x50}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x44, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x8}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x3e}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x7c4}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x7}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x1000}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x3}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x7}]}, @NL80211_ATTR_HE_OBSS_PD={0x1a0, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x8}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xd6, 0x4, "c30fc88634c93c535900adccb743e6d1e8bba278f1ecafaf618f7564c6d6eb1f257fb19e58cd1dd79b526dc6156252ed60708b72569bf0b3ace84210695aa78debc38b8606133571ae02616341f52f8401944e495b5ebf535795f3fbdb015721af274885bdef66bc3edefab0010e22da8c65ddcc23b6c0d704dae09c8ce020d63c2408f59faf598112f0edaa25844940da981cbcbbf8678e7dd7fac6b4c6c0cfb319c74d8a69797fb4b457d901752078f9dd4b4970a78be0485b8ac47874e882a0db0db0f522646a7e186fdb59a2cb04f006"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x47}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xa9, 0x4, "0f5ab79ad7e2e43f5171ba8f869020d87324aa62c182f120c2b4e874f09f613c6e7dc940d7529d25288c8819902aee985862650fca4438b3ba233b0cc93f33b535244c4b6cdf9419b49138707971bf574b392bba186bddd13d5c8aa11611f96fa85e69a710d0def3fa09a14d916425f5f1ff117437025e527865124810fbf8d762dcb0e4dd41d304a2a3f93679af17f1a4f1f8541d06c7d34ee8c32189403da80faf5dac55"}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x3a}]}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8}, @NL80211_ATTR_BEACON_HEAD={0x83e, 0xe, "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"}]}, 0xb2c}, 0x1, 0x0, 0x0, 0x8800}, 0x40004000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.throttle.write_bps_device\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x8, &(0x7f0000000080)="c20c") (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/devices/platform/dummy_hcd.1/usb2/bmAttributes\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000002140)=""/4120, 0x1018) (async) write$auto(0x4, 0x0, 0x100082) recvfrom$auto(0x3, 0x0, 0x5106, 0x2, 0x0, 0xfffffffffffffffd) (async) setsockopt$auto(r3, 0x119, 0x1, 0x0, 0x8) 7.594704853s ago: executing program 5 (id=3140): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000180)={r0, 0x40, 0x800}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa4\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0xe) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x40000000001ff, 0x10000, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xffffffffffffffff, 0x7, 0x63, 0x6, 0xffffffffffffffff, 0x7, 0x10000000d, 0x1, 0x6]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x8, 0x86, 0x101, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptywb\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045438, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) 7.492499849s ago: executing program 3 (id=3141): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/valid_links\x00', 0x111000, 0x0) r1 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x7, 0x2, 0x0, 0x9, 0x4) close_range$auto(r0, r1, 0x1) (async) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1) (async) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(r1, 0x8004b709, &(0x7f00000000c0)=0x8) (async) r4 = semctl$auto_GETPID(0x0, 0x9, 0xb, 0x3) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000100)={0x5dc, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x728}, @NL802154_ATTR_MIN_BE={0x5}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xf037}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x5}, @NL802154_ATTR_PEER={0x3e5, 0x28, 0x0, 0x1, [@generic="004aded0b0a403c5632274ba41c185328209d10e69ea0cd9e2770fca0d12a1199e35fc2070f22395bafc27aba0bed63c5a27d56501d93c29c82955e7f8d302ef203cbb8dae6448357b910f3d7211f157fd3e2a6ec2570af4", @nested={0xaa, 0x37, 0x0, 0x1, [@nested={0x4, 0x14c}, @typed={0x8, 0xcd, 0x0, 0x0, @pid=r3}, @generic="a29de3c2a1821d332a98da791251aa64919e0773d77f268f07a5434176ec64f658cace1cb79e476e9630d184fd5c2a627696c49653c01ef5395da9bec13b87169d3e20a4d6580e9869371b5bac9ee12fc4eb205a576c6f737957e6ae0000d18123237b25ea5befc3fddf7995506ab0436575a10cb1600df94418f4456442fb1464ec0e7b23e56fe786edefbae5528ef6c02bbb48edd2bd613003"]}, @typed={0xc, 0x6c, 0x0, 0x0, @u64=0xffffffffffffffff}, @nested={0x108, 0xf6, 0x0, 0x1, [@nested={0x4, 0x82}, @nested={0x4, 0xc5}, @nested={0x4, 0xe4}, @typed={0xc, 0x129, 0x0, 0x0, @u64=0x98}, @typed={0x8, 0x105, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0xe8}, @generic="d658ab5239498d1bff88b8", @generic="12e09bf5e2e8ab61be257b1312dad13dc97c950be0bceab704943a64ddd44885cb48de3d19abc265df4c2bf19785a79b642785cc9954538dec90c5186d9b5a48e95b4914f5102c06ef5507a14aab57104ec98c24d6e9c096d0db3c42a8bb39e4a4969eeb7232571e6a369f372aa17f225d1057bd4b6b30a5f508ea9893b7f74aedafe646447a8b86d598ad706e5546e96ebf9519e57bc0a6c8ea3c458b0808cf7f23e61afbc8eaf77a773d392d820474e798fd9fe54285119a31d8828b8570607a5c0a2ff173835b85fd7a9e4a", @typed={0x7, 0x150, 0x0, 0x0, @str='}[\x00'}]}, @nested={0x24, 0x7a, 0x0, 0x1, [@nested={0x4, 0x81}, @typed={0x12, 0xcc, 0x0, 0x0, @str='$\'@],N:\'.@#$+\x00'}, @typed={0x6, 0x97, 0x0, 0x0, @str='*\x00'}]}, @typed={0xdf, 0x45, 0x0, 0x0, @binary="0f1e787c13f3238d0762d66a81f40f15222b7e9f556ed0654dd6258c28a60b5e605a81533ac67070708e8281e0cd64cd7d619e17966e007c0da6b8bb92460b3d691006e356e601a1f1196cb59984cecac6c2b55ce7177bc8e67c9227eb0db76a7663f8927d0260af4b329b3be0ecde46dfe3116e2bb1f1e549848126fe1de7fdae6adf480149f9e9d6c51152452835e6376be6cb816dfd79c934023075f2194205338c1dc45c04ee4254a7f3be53950f9fc68ce3f6cf883d229d38cc68b194cc62d3888412a50742b557117538266b6881f0b913edcd9d71cf0a1b"}, @generic="64edb7116647b990dc1b5ae09d3167dcad79dc6040c675f99f2dad2d4211d899a7ad5049d6d03fe9884d792816e6737bdd30581709d60c386821fce69406e9e65ff4fb34614f8c5005dbb9c68d84dfa6e525c93177e01b33d66eceacd265e97519c6c59c620754cf9b924880abb4a697b2f9612d6adc11cef709c2bc3bcf7a22d6107fe90bed65887c4c6d632eb672a35a078e31697592076a9dd2da171780c5014022c6e9fc5d16ef7a891197b19ef5f9578f2e488e74755c9aaa00b6", @typed={0x8, 0x7c, 0x0, 0x0, @fd=r0}]}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7fffffff}, @NL802154_ATTR_SEC_DEVKEY={0x1a0, 0x2f, 0x0, 0x1, [@nested={0x149, 0x4d, 0x0, 0x1, [@generic="69a5eb3d193cc34de48e41967ac611dc0eefd7700392eb4022983748f85f33a068fad49870185667b1ab084123840ab90888d1aef896db", @typed={0xc, 0x34, 0x0, 0x0, @u64=0xc2}, @generic="93c5c89f64ebd19ab08f9419e96ea67556c3ea1d4a453ca1579e0fcbe9748bb8324ce2299427fa3bc4fe1fefa84f35e7dcdf185a47823f6841b5f9ba8b44ea891246152dc320752986c3c5102e0d5551f8e373a5628bb6cc50f1a5a17666eeba713a3cad0975146f8c16cc24ae4155a2d9e62089eb7e9f3fe595e26419d791c7650a03ceaa0cd01cd41baffbdcae7630e97f8ee211342ece815d4de37dc0bddc6338f5cc97e9f92325f384436830b3648da4007475af0c0f3e60fb2582d9d6d27bfe4f455b35878ce9ec841c0b4f", @typed={0x8, 0x20, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x114}, @nested={0x4, 0x3f}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x66}, @nested={0x4, 0x89}, @typed={0x8, 0x13d, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @generic="40da5ca60ad41bbbc9fccf63a6eb375b9c02a1f66846172b5d314c94a14920bdb636519a9dabc73d47c1401767cf02984e33fbf1eee0b935bd0dbc8f58985004285aafa829b63a981c34a595162bb784"]}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x2}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x5dc}, 0x1, 0x0, 0x0, 0x4}, 0x4008801) (async) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000780)='/dev/usbmon39\x00', 0x210040, 0x0) bpf$auto(0xff, &(0x7f00000007c0)=@token_create={0xc, r5}, 0x2) (async) r7 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/tracing/set_event\x00', 0x400000, 0x0) mmap$auto(0xfffffffffffffff1, 0x401, 0xfffffffffffffff5, 0x7ff, r7, 0x2) (async) ioctl$auto_NS_GET_MNTNS_ID(r6, 0x8008b705, &(0x7f00000008c0)=0x7) (async) ioctl$auto_I2C_RDWR(r1, 0x707, &(0x7f0000000900)="a107c058bc2ce8f923570a0524bf96aef3a3af81929b344e7886e7eb311b8b640f") (async) fcntl$auto_F_GETOWNER_UIDS(r0, 0x11, 0x6) mmap$auto(0x8000000000000001, 0x9, 0x4, 0xb4, r6, 0x5) mlockall$auto(0x800) (async) msgsnd$auto(0xffff3fb4, &(0x7f0000000940)={0x0, 0x1}, 0x8, 0x1) (async) write$auto(r0, &(0x7f0000000980)='\'.\x00', 0x401) (async) r8 = open_by_handle_at$auto(r0, &(0x7f00000009c0)={0x88, 0x8, "a154dadac28a216a813c8b83da0faf325a2bfdce4409dcf4c01a05b7191448f4f5ccbaa5dc8808dc970a7d4533f5573ead3d3119e4471f72100a7845e3678854a68e4d077524807fbab0abaebd1b1f293129b00ed583ff5bbf976ba8bc84c9378952583bde95bcdefb9f6e23ca5a622a27c1e25b3ab279ff431453534fbb5ed306b18c9028e25ae3"}, 0x4) (async) ioctl$auto_SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0, 0x0) r9 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000a80), 0x1, 0x0) read$auto_ptdump_curusr_fops_(r9, &(0x7f0000000ac0)=""/214, 0xd6) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/snd/pcmC1D0c\x00', 0x200002, 0x0) (async) getsockopt$auto_SO_RCVBUF(r6, 0xd6e, 0x8, &(0x7f0000000c00)='/dev/usbmon39\x00', &(0x7f0000000c40)=0xf252) ioctl$auto_XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000c80)={0x9, 0x8000000000000001, 0x2, 0x4, 0x1000}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000cc0)='/proc/asound/card0/pcm0c/sub3/sw_params\x00', 0x200042, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85513, &(0x7f0000000d00)={{@inferred=r4, 0x58a, 0x2, 0x0, "31d22c181a8c84bc7bceb19f6e612e0af3a1a1f842145034c17f857429b3afbc3d7c5b79862f21f4eed91cf1", @inferred=r4}, 0x1, @integer=@value=[0x1000, 0x0, 0x4, 0x8001, 0xfb5, 0x9, 0x10, 0x1000, 0x1c000000000, 0x6, 0x1, 0x8, 0x0, 0x100, 0x8, 0x5, 0x1, 0x7, 0x6, 0x10000000, 0x400, 0x6, 0x3, 0x5, 0x1, 0x0, 0x3, 0x5, 0x2, 0x2c, 0x100000000, 0x7, 0x8000000000000001, 0x3, 0x100, 0x8000, 0xfffffffeffffffff, 0xffffffffffffff38, 0x1, 0x9, 0x0, 0x70, 0x8000000000000000, 0x80, 0x800, 0x8, 0x2, 0x0, 0x6, 0x7, 0x8000000000000001, 0xf6, 0x7, 0xfffffffffffff801, 0x1, 0x0, 0x2, 0x2, 0xfffffffffffff000, 0xdbd, 0x800, 0x3, 0xffffffffffffffff, 0x6ba5, 0x10001, 0x9, 0x8000000000000000, 0x1, 0x8, 0x97, 0x1860000, 0x8000, 0x2, 0x2, 0xffff, 0x4, 0x3, 0x1, 0x100000000, 0xf5, 0x7, 0x1, 0x3, 0x1000000000000, 0x1, 0x2, 0x10000, 0x2, 0x80000000, 0x10000, 0xffffffffffffff6c, 0x95, 0x80000001, 0x5, 0x21a, 0x9, 0x0, 0x3, 0xa, 0x3, 0x8, 0xf, 0xfffffffffffffffd, 0x7, 0x8752, 0x7, 0x5, 0xfffffffffffff982, 0xf17, 0x9, 0x876, 0x9, 0x8, 0x2a, 0xf, 0xffffffffffffffff, 0x50000, 0xa, 0x9, 0x200, 0x7fffffff, 0x8, 0x1, 0x0, 0x5, 0x2, 0x4, 0x6], "32ec85fb5dd065e9d5d44ea12ccab4547ac8f796ac2082feec1b70e43b96651a4f65c9c816c8e4d7491a41bd2b68c93564614695e18b47d273bf440fab305b88341a332ac7fa8d1caab53ba25fa1e5d5879bb96d7affda48d03a9e02a78b406352be6cffcb4f401c786a7443fa6d5719822a10f3270dbc718941562b39938453"}) (async) socket$nl_generic(0x10, 0x3, 0x10) getpgrp(r3) recvmmsg$auto(r9, &(0x7f0000001480)={{&(0x7f0000001200)="46433782d276d488c3f818fb51abf5b444033ac98059801824651b174884f77c8f7e34a164db30cc453d0c3fc8b64d9866ac6318635f337dc71294c12588334b9709637ba84445b65ac5c43b6768cf02eec23d6338142bbd3e2b103ad1286f33d3b0341b7e1b7868d71d6362937425bf04ae14f879c521", 0x7, &(0x7f0000001340)={&(0x7f0000001280)="87356ce75bf50bc19c61e107ba7153f3025e30eaf4ec45cb78b71e5d991b7f7f30fccd0ca0b9ad03151e319496ed73358be285af0d083caa78f88253d2f49afc23618d8af93aa6654273645724d7c70f08bc4bc8f374c8395000bf188088627381984cddb9234b0b0921d4a36efa25d68d0a2bbbe400aee4fb9014da7572b9015074373c9922a47608167e", 0x10}, 0x9, &(0x7f0000001380)="64dd606f6ba329d0d8ec229b3e22c91ff7474f6c182ed65445f6c29a1679f5f27d98fd915517ffc25622d6b57c742e6496c2bbb1aa28688e5d6897a19a1c5f323d3e3d62955b06527406026e7da6d731b285bf9441e234e10331730b2eab4ff054406ba69865bcb24180e47840f5c9b4222d73ac761349815fe21951df4a1bc5fddfb16c046be456bdb03b085ff45c8abd7a3f7aa79242ac0258675dbfe763888ed0d23d378cb149a9c97dd0e1fa8d3807485d6b29a6433c28ed16e105c2313c1162f663433f48ab4b9f216517583d915018e596619bca1f9fea6282411b69e1ed9569", 0x81e, 0x6}, 0x3}, 0x101, 0x7, &(0x7f00000014c0)={0x2, 0x22}) 6.914482668s ago: executing program 3 (id=3142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212dbd7000fcdbdf252100000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x6000000}, 0x4000000) 6.890875325s ago: executing program 4 (id=3144): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000180)={r0, 0x40, 0x800}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa4\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0xe) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x40000000001ff, 0x10000, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xffffffffffffffff, 0x7, 0x63, 0x6, 0xffffffffffffffff, 0x7, 0x10000000d, 0x1, 0x6]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x8, 0x86, 0x101, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptywb\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045438, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) 5.758389624s ago: executing program 3 (id=3146): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000180)={r0, 0x40, 0x800}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa4\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0xe) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x40000000001ff, 0x10000, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xffffffffffffffff, 0x7, 0x63, 0x6, 0xffffffffffffffff, 0x7, 0x10000000d, 0x1, 0x6]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x8, 0x86, 0x101, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptywb\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045438, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) 4.620347233s ago: executing program 5 (id=3148): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 3.917060598s ago: executing program 5 (id=3150): mmap$auto(0x1, 0x400008, 0x80, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x100, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/syz_tun/forwarding\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x84) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r3 = socket(0x2, 0x1, 0x106) r4 = getsockopt$auto(r3, 0x29, 0x4e, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x10002, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_TUNSETVNETLE2(r4, 0x400454dc, &(0x7f00000001c0)=0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',)'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) sendmsg$auto_HWSIM_CMD_FRAME(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000a80)={0x15c, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_CHANNELS={0x8}, @HWSIM_ATTR_ADDR_RECEIVER={0xd1, 0x1, "84b56093ca5714bb39689dda0c2f3f26db5d40a77ba03183cf19239631e5f965324b20ddaed7d37d1b689e58ffeea609debb95f36c29ac47a9225934164660d9097dd928a5dc4344b07bf96d5d042b88baba96e4c167b2ffff79d7296556fb38b4c0ff7d3b7e6e3e389a59b18825d13e2d6647e85bb4857747349c254e74a7d846363b22cc7ef6d3b56ee29492f9a6260500009ef5b1443e5eeffbce45c6d66ef85291a6c363801a293905ab485fd61e5a68f29d3330a66612fef80adf473b0813c4fcd84bad66b39d092a295f"}, @HWSIM_ATTR_FREQ={0x8}, @HWSIM_ATTR_RADIO_NAME={0x24, 0x11, '/proc/sys/kernel/random/boot_id\x00'}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x5}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x30a549bc}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x28, 0x2, "c5361f7e00e4dcb5b87408a264990d38cae8e9b3fe1fc0e159507f03cbfd1c3368aa3367"}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0xc0}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2}, 0x4048881) socket(0x2, 0x5, 0x0) write$auto(0x3, 0x0, 0x100085) unshare$auto(0x40000080) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 2.349126394s ago: executing program 4 (id=3154): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r0, 0x0, 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r2 = socket(0x10, 0x2, 0x4) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x20003, 0x15f4da0a, 0x0, 0x3, 0x5e, 0x400000080000001, 0x4, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, 0x0, 0x98c7) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r5, 0x7439) creat$auto(&(0x7f0000000280)=']\\\xe8@!^).\'\x00', 0xcc38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)=ANY=[@ANYRES16, @ANYBLOB="050027bd7000ffdbdf25100000770a00000000000000", @ANYRES32=0x0, @ANYBLOB="08000a0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80080) 2.348863942s ago: executing program 3 (id=3155): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r0, 0x0, 0x2, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r2 = socket(0x10, 0x2, 0x4) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x20003, 0x15f4da0a, 0x0, 0x3, 0x5e, 0x400000080000001, 0x4, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r4, 0x0, 0x98c7) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r5, 0x7439) creat$auto(&(0x7f0000000280)=']\\\xe8@!^).\'\x00', 0xcc38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="050027bd7000ffdbdf25100000770a00000000000000", @ANYRES32=0x0, @ANYBLOB="08000a0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80080) 2.348679301s ago: executing program 2 (id=3156): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x147602, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 64) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x2480, 0x0) (async) ioctl$auto_FBIO_CURSOR(0xffffffffffffffff, 0xc0684608, &(0x7f00000001c0)={0x6, 0x1, 0x600, &(0x7f0000000240)='!\x00', {0x1003, 0x9b72}, {0x5, 0x3, 0x2, 0x9, 0x4, 0x7f, 0x9, 0x0, {0x1fe, 0xffffff81, 0x0, 0x0, 0x0, 0x0}}}) (async) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 64) write$auto(0x3, 0x0, 0x100082) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000000000)=0x3c, 0x0, 0x2) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0xa, 0x3, 0x87) (async) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000240)={{&(0x7f0000000100)="c9a19b9bd45daf8d1e42325618d266e9b4d29346a538f4501870f63224261ea46d2048306cb48caaa96d8e74944fe4311b40ed00640d041ca43967b3a4f18b86c38c26c9df10a988d1f2c1c69262f1908a4880ba65a9fca956c49dc5990384089f8c005c64f32d9bbba6f289964068a8ced940397118c0aa87e26591cfeead8827333219be3c55", 0x10000, 0x0, 0x2, 0x0, 0x3, 0xfffff2cf}, 0x6}, 0x2319, 0x5) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="363143487854ecc1f5088d254b5deb4d651cade96b1c4d3a083f873d9651719e23cfe7ecf5ec0b8bec35aa97feffd6850392a727ce08b843e63c4b8b2b8b215e0f10eb42710d212ba37ed96a2ae4f883369380015f8ea71c9a261003b8ae6324f954b6a2bb0fa10f4050af3e5a861f67769aee6850ebf7057d4a631067cdcb1c7713a7e716f14114ac2f110dff89881f1bf3de6a21d89358fc704f31"], 0x1ac}, 0x1, 0x0, 0x0, 0x24000800}, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (rerun: 32) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f00000003c0)={0x0, 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x2, 0x6, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x1d, 0x2, 0x7) open(&(0x7f0000000140)='./file0\x00', 0x16b4c2, 0x5c) (async) socketpair$auto(0x8, 0x7, 0x1, 0x0) 2.257867539s ago: executing program 5 (id=3157): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, 0x0, 0x6b) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x1, 0x3, 0x15f4da0b, 0x3, 0x3, 0x5e, 0x8000001f, 0x7, 0x6d3e, 0x409, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b2f40700", @ANYRESOCT=r1, @ANYBLOB="080025bd7000ffdbdf25110000000800050006000000", @ANYRES32, @ANYRES16=r0, @ANYRES32, @ANYBLOB="00bc576579826533b0bf28dd4ab3bcbd8ab5ba0fef7e0cc364fe58f8dce18c9872044366c6c84580eba54f8d10371bdd8d9c3b9cd34547896c43028f757e0ebcee414737920c57bdbfeb5dac56de76bbb8958687c8e6a28f2abc7cc8b762a5d35a6adf6b86f6c64098412ef2a1137df6118438a22b93d46511faa2adbedbeb746ee2febf170ea395f95cedf50bb882f27d931c0d42c0263d9e9b4b8ce9ffac38dcd248d43d327efaa1b5753cb899958a8e58816005f1070c4b7bef97d4d6ae8b03a52cddde678d47b2330642be41e367b50a91537e5dd302dd19b6b9bd1d5cab5ea5580f2578b1485e192a2ceb5e044e4124ca2f0c1e2aea865081c49ef300000008000400040000000800060000000000300101802901048004000d80040049800400488004002600ad5d079172db3691f31015fadd64b9c931790efa342d19514b7503daebc29a40309d5c7953853d16920c55059408001e00ac1414aa0500460000000000f746e4ceb215f9ad8a0b3d3c0291e872c69279e298f2763cecc21bca1d5023aa95adcffdd1d45d17d23664c07ccd27046599633761ae38dd2d1382aff1a1163982df04f1f23275332711104e421d771ddda8fcee19e1ed3f79f52e0fe787d2f2af50f256747bd0aaa67390631906ed21ba4bfd683b69ab229223cdc1f014e2c991d7213b162d3b7c4860fb679b7e0d5cea2b70b470b6f02ceb846f607067dcdd158a0d9afebd432fe560f985b78cb61d88d2b3145a74736efee47c57ec42c7cc71dd1e4f0e47807f02e40efbd83114a8032604911d92e4df0000000800050004000000"], 0x390}, 0x1, 0x0, 0x0, 0x400c1}, 0x44040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r6, 0xab04, 0xffffffffffffffff) 2.212357766s ago: executing program 2 (id=3158): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x5, 0x20009, 0x2000004000df, 0xeb1, 0x401, 0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xfd}, 0x4044820) mmap$auto(0x0, 0x276, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x200000000000003, 0x1, 0x2c, 0x0, 0x300) futex$auto(0x0, 0x85, 0x0, 0x0, 0x0, 0x9) 1.651940414s ago: executing program 2 (id=3159): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 1.543396657s ago: executing program 2 (id=3160): close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) io_submit$auto(0xa, 0x7, &(0x7f0000000040)=&(0x7f0000000000)={0x7, 0x839a, 0x0, 0x2, 0xe7, 0xffffffffffffffff, 0x0, 0x2, 0x45, 0x0, 0x1}) bpf$auto(0x0, &(0x7f0000000000)=@raw_tracepoint={0x1a, 0xffffffffffffffff, 0x0, 0x4}, 0x7f) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x45a500, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000000)=0x3) prctl$auto(0x2, 0x8000000000000001, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b", @ANYRES32, @ANYRES32, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) bpf$auto(0x0, 0x0, 0x6f4) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r1 = socket(0x18, 0xa, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100}, 0x26) capset$auto(&(0x7f0000000100)={0x10001, 0xffffffffffffffff}, &(0x7f0000000140)={0x6291d0b4, 0xe9e, 0xffff}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x18, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @typed={0x8, 0x23, 0x0, 0x0, @uid}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8880) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0880, 0x0) ioctl$auto(r4, 0x8008563f, r4) r5 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r5, &(0x7f0000000a00)='\n', 0x1) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(r5, 0x8, &(0x7f0000000000)='/sys/kernel/tracing/uprobe_events\x00', 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1.114269638s ago: executing program 2 (id=3161): r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000002ec0), 0x80000, 0x0) read$auto(r0, 0x0, 0x10000) 10.983885ms ago: executing program 4 (id=3162): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000180)={r0, 0x40, 0x800}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa4\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0xe) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x40000000001ff, 0x10000, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xffffffffffffffff, 0x7, 0x63, 0x6, 0xffffffffffffffff, 0x7, 0x10000000d, 0x1, 0x6]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x8, 0x86, 0x101, 0x1) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptywb\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045438, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) 10.809136ms ago: executing program 2 (id=3163): r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000002ec0), 0x80000, 0x0) read$auto(r0, 0x0, 0x10000) (fail_nth: 2) 0s ago: executing program 3 (id=3164): close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) finit_module$auto(0xffffffffffffffff, 0x0, 0x6) unshare$auto(0x40000080) r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x147602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x68a80, 0x0) sendmsg$auto_NL80211_CMD_GET_KEY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="00022abd7000fedbdf25090000004600fa00052299d73696bccee5403a5285c1c7113c2d8ebaa5812320a76903d644bdc8d5b1a4521e5a023c646f59202a6faf27039dda9cbb6f9be48df066636d31182ef9b08e00000400bb00240011801800a3800400f18008004e000a010101040081800400488005002b00000000000600eb0009000000080062000018170004105b00773a2ed9931fd6ca2ad16c51d96d3e4f15873cedfb5214ebd1c968fbbe4fb95db7ff85622d20f5a5b14a4c9157849602cc25f3dc1c6b4979b5d817e5d3bac657c314d7d0d01dd87dba67982d1db974b6b985e5ba51c5de476bd0864236a6c75a2071c06ecf5b89edadb34ad66ac82b97051d5a013aa432aca71cc930a08d322c51dcd1b3fcc32a3eae7edf46ee424356c593a5c75d37cfb359baac1c2a61f601739ed5e6793fef927e8fae0ce1e711c0c24b7a685ed4337691a8ef7499f5e688bdbf26a6ea835129c111d5d32e29df96c6814636e383b97a0ad2a2ce22898798e63b641a4a6d4af72ff9f7ce6015a8caf4a39e1e513a27765cc924a37f5f3368667ce7ff16ee43a524c0c227da4804584e7dbc9bb2385276d3628f90830a26af4bd1c75713683dce9425fea86b315afef0fa9237784d56472f586e67827fd5e0a1e73caae80e3f8a24e1b5516b93d61fdf77a2cd10326587dbe5363658196ec71941996a461be6d468f0d6d60018c721476e9a31b20c4dbfa95d662ebb884cce8e8b9996a0e168023b6acd5ca10f848c8d17b13d419e709c51a40c7269ac367014c59fb4cc7fd0a6e9f0767a026a9b48873566e723a7ceaa3700b2cfb44bebe70580134f1a032651d193e554e4f21610f76de72943c41f0d985cf563c4948d4dc8deb040e671aeac0f5c9453a6041f73c8f27eb6e1f23496e5c2959db47bd70ebf5dbe5dc47fc4fd99a5bf6c61cf3c61594d296e3c1239d5252843f757def157928a0c702b348d9983c4b164c4c02a84b3dd16f457cba9f410240bb13bb73b33ec82877ae1a43485b01a9afd4e42dfd93d1e90ace8cc1feb96706be2bf12564d590e5136ede7fd905848360fa39669834f552e94bd5a07b79ed0eb9425b9767e21cdd1c752a8b2fe09f5efbdb3518a18f38268b502ea5a1ddb5350a117686647a165e8815a191b2a04e9d2292cdd62eff5fa80f179aac73b777032ad20c9c5bbba47a33643ad957b5e81d71c97dfe3f0045f814ef34cafcd6e9ac386e1161f67ecc820e3ec6e03ce8b78a2e4a607eb53e16ea60e78b5240767bc78bfb59c0693129ed9f7f5d084b32594cf7784c53b99593ac51d32f8f655a6891958614758fa217ff414f18d3bfbe6fafc72203675b7d9d9c0eff3e5af986c2593d4ed4b5910bf17f76162a1c3d8ee08f36bc6e48130d68aa0d8b4091a904ed4bd195d81aa4555241da69b2b7244ab5897462bc46ba4ca16aa036e405ed0f3e7d9ba1aca46b45516ad42fdfa289cdd9d7856c680b76679b4044914a8f0e156785d713c88312c00302d50c341757efe90a5bc34ed8746bf4332f8b3c0a0f70f3a202a439ba57c318f64c60d5f7f2f2c4d4633c5e8ea0c2a54785642906c3ed9c4b092a5e4ad727c9ef6222f5b4feb383cf7659565a2ac7f9e0661815c0a557397eb0b90dc7700188122738d485c0ef8de367b2a50e58dc87985fd9fc47abcb3d86383c370ad41196d89e020594ac7e88bdefd4a77584f6808a838d9119ad457dc5ec007ad843d968a19a761a292bef4007939d90cbe22033dcdd9539637a89b83a5a8e69ef2418d95e865587807b4350e411ee99ae303937f925ab8d500976cef50ee251c1bfd2fd786d638fcd9e195a54c9d7b454ff9926c0b040da6ef39c1e94eb40d01b3a4e8002ee6ee492da1fbf175acb41c626f4a90dc151ce32d0bef6a7364cf8a3be155107a1fe0b150f940464ac4c0ad1ff5d15f24212014161dff17e26bed3c660cd9fc1ccbfff58f7634c88163e42ffda1f4e453f80c8a782b3f89dd0fcdfcad4312671f607b9d870e3e45c118e9f3cb6dfa99729b1d5584d37e2b8b5744ef0ca0d46bafc9aa3440d83d8af5fb62a660b2a09bbc7c2cd026b862ac11bf1369df451888eb94a6dcdf264cfac004c8f20065ab3d98925d86a9f97a6dbf2ed6df9fd1c0dd35c3a9d8495d3c6afb2a6e22374c7b53b21a5d4eceae3e4f66a26641940583879384e7f4d0e792696170259ad4f5d6f0c77abbe794450728793ae8d4550e118acd6da6d17fdd41b45414988e318a2f89d9e2f009d97c76b90bd32e5e61b894683677408f27d86486b09e283a2f06f7ff14e8603e8143e11900658e0662740b7fa2211c49b0f4ba786da8eba4a3dfc0de453173f0d7e6ee923abeec165cfdd12235163a810977bbe44511fd55426c874460d3201c9497495e7004b48f6ffcfc5f5f7ffb9d84b121c45e513f2ffc37f54dc2f15a1672199cee1d9adf0f19dc5097bdecd87cbc5ff45a12a725b6165fe31fea6df1b13253be370651e13ff219e6ceb026dbba94a2d7b1e8e97fbc6c674a46dad4882494fd36a0eebf9a1c6351b90433d373a716b7391c4cb01abf91fc0d2bc06c9582c827c3f029691ea9d76b7ff098291c4da6884680625246a6f6584cdf632104de791a61e65d3bb28bcfbf1f17ee315bf8bd0f8ab7d7f46d1262f53727c2ef4c412694c7b474d5ba44385ede7dd54ce4391f16e82eb67baadd00f4e01784afc70b8272dd092d7baa9f498ce0eec5347aa091d3d7643eeeda4f85a68dad3752fa678df8e12e49159c3836977c026440847116d5dd942230b1d384415c2081809411bb84c803304b8ea63bd5331118c1e7e98ca7e21e5201cadcb00ec1a490c97651a7fbe8d269dfa3d2fa29c6037f650a78c070987f50ef44acadecb25969ce7b5f8e13cd63092dd98b5c41d3f90f8408c8fdd2882b9b5066face04ec768160a39a5f78634bdc601afa05aa85f8c0664974a9142284f5f15b1e0f83a81882f5b0c64721f606af3831e677b73682a30df94e3bb6855c11cb5eead74b12d1324c802aa6fb5ef05a3e360217e67ccbabaae31d28b9fe29259a708f3a0e4ea5f89033787f263f61689e50ffec127eae852a8147e8c326321dc60adc297816b9d1b63d541d088ce2376d4d3c071a0ec42578e12240f27e91cd724fcb3f2d9790eac47f06b4f7eedef9b13713488fc0fe429dc9440676fc36ab1cf03186fbb479438cb2becf7b391cdd3e1726d98230f6bbca4b80c863df2ee36634e53f826e27d7a0829e0f09cf0884047eb3a9aa4b12d8646bff11afd82bb4495cd5c3518f96eb6a9a7be19ac0a5c67a607fd71f9baa625add5ffa54d275f201173159e9c96f65b1177bc7674c28d5d6314e38f651583e5db045681ed2def02ff49e4ec2fd10562b328e4b7256731babe7c13c914f45a4a6f396e1e018aba175fec7ff24113d38402dac44ecaa2892434347fabaffe6cf14ded901c6a7a1b4af45475839f1e2d08908fa6249aa846ed051d99b489005eb2daffa63a7bf64d7a57fb0313f41d1b372ba08b608a7f36788b788291dab6cddcffe9f1c9d25a45aa38f380829a744ae0aa84cb7e47f2ab256bb39be66ea7aadbd2c4491a7e0780bb78e9dcd672f6748b531d978aa9229437f9f6b7dbc84d2685c129873ec9df23936d702f506cbcc926c762784d9b3087742ef98abf663a758d2532722c4b912a79057118d98c32b73d9ab845be3263c5595d4115a1fec49d57029d8ec60e79c171983df3aeb4fbb26babd3e583681dc0bc9ba50df22bb0d945ff32f61d39df1c481a6b6c62908d1a64841530f442bf40cbc6f0372841dd2a381b4d6c167709f1aee6253cba2d281dc7fda25fbf7cc57d9e695bdfe8ebb94efcad744b0e8a6bc4fccbb2925ae1ac3516c5756f6c2981aa20ea79796ae0bec7b978fe3c1b531cd8dd717f19678c3a3fd10477ec65bff8d43aaa37b4a87d72c6f2f519110de179df0bc32e4b2d420bc31ea11494c1d8a18e558f396b7dc2b55e029d772ccf73c5f9b934bde98144d6f97e762c68f62ca97a3714a2092b5050d6a5cb17d9d80105f24677375945f6fa6330a9023a35ce19651beb73193bd8f7ef6bf5974e83a1109a38a7b1394c947c4ea570f38e1bb696ba096cc2d8a86fd281f92b9ceee30613625689e7da26eb8a6772fdbd5ca2279636c24017ed562d36a2b83a73ba7e2ba1df523eec8ec3bf48383bbfd7c3e0d8f45764b3c9b491dfa10df8dc44344cdd5bc86ce84e37ffc9e12bf215823b6075bc268378ef8bb74f3bf69450339360e6e398fa1d6a6bba8eb432ca943d4cf6bddc411d11f11ab955f92b8dcea49446dfdb33c88f1fbb53b69a7b5782ab4dbbb62856d4296cd2d42d90ce9e0e575f10c8262bd650925d5f8addfc79a328e7a73eaa3e7521b75fc44812a3e96867f64b507243a33aa52493afab41813a868611dabc2b5dfa032dc7eda1d63604e22cb84d4ec4edf5c8498c325d8342899d11e7a63558942f5f8cf199baf20fcf082257faea3a27899c2345553909496b93ea8a138d9781400497405161078cb57fe99833520f4c4358e17998e4743d707031fcd1f0fb2c93549e8d985c9f3ad93eadd25aaa75efa2b778699d821cb9ccb1d79c6a9e185411f64063a0a3372b351baf754f920430fed5521c3469a07ab98137d61027af6fea4482bd97a8fc5e17f043b400bf7b37424ebb47e173c129301e54011c5d799d246f08a71d058718dbddb9c8177b152296cbb7b48052b794136dc388926257065fc9fd3e0e52977567df343ab41777bff43b2edbfe87f3b86154cdb63434acfddaff4d921666ae36aa5b94678ba9b7ee7c45306fc3a0b0875aa9a40559cb94542761360c41806020b9a65c95adaffe8d4218e0d1d88339683c37fe5f0165114ec982c773963beed461357bfb9005d40ec8994a9e4ab4a1a09eefb5a7a1a86dfabf5c94ca71884079d4bf03d30d7c29a2eddc9122f9e6f2102e675a546914b3e2b28b5fe84c1f8b4856bb94ddbfccf4924bfc1d3bee181624d881cdc70b86644448dc2b7f52e711dafe73ff5387ff89de4c791841f5dfe4ac25ebe12cb868143ef0f6e08ae8ff6c9d7d745b316ce4ca51db6c5ed2883907acab174e2f743dfe8e12127306f076f707c7a6ceaa6c2b5c6460bb847be2411d2ba2a4d5e207052489a11ef484d52a05b26cf5abad81680d3c1d9643042c91ce20e1e8074a8fe28de15b5f295e00923eceeeb9ba7c2b75a1f4e674b0c0ea3dfa0349a14d9b3fec25104491dd28f47c6ca1d022735ec155185be3ee26672ed7bd196af74756a7bb53de11e661284010faa692bb97f2f6768663b308e8c727f4caca06f6a6ba18561058f26ade2aedebe6b11850bf554e933c4d7ed5c0b5215568e6ec3145b86b475e3496d33c6e9ce594dba4c22a01190ad2a7ad3a55c453c714925b2060d154832c2d32db06a09e950abdead3be4bd73e47c6e679608e0d05a9395f4500c5df7538dc581bc00f75cf643cc84a8c8db1787efd63642eb76090f1a0890f8ceed20b9b46a8e3691c14de9f352bf668d691823c66d86c56d5f8965345c0c0f6b80afb05319b263d5009b3baaa0e9ba01eb5a50514ad0313a9b0b826523ca2325cde727bf1bed3b2cf1371a361e27dec01a2b79c194b637ddba0e824cdf6ade8a7937e52f34b31804ccddd1e6764ff5ed2f06fa9c023425624d900a8455046c0f1ce9acaadc4f9052a4788158470538c445a06e36271d34ca6be275422f916bfc0ca6fe205d0365956e10029ca2c582cd5be3f5616ddd17177133e9633bb5a69dba9870582043204c74c9430e9415f036e5d7e2609f9d3fe008780b53915452817608b110a424651ac9d884dffe4f412c092c41784c86557be179be43cce9611981415ccc7d98ed3719e827be024885304de6be9d7cfb1256efc098ac5110d23113eb5b13d5dc8e73fc56533c0ba2bf2539cc55ce09df9f8c599116065b14ccb245cb4331737200a141"], 0x1098}, 0x1, 0x0, 0x0, 0x20000002}, 0x4044) fsconfig$auto_XFS_DAX_ALWAYS(r0, 0x64cd, &(0x7f0000000180)='/dev/snd/controlC1\x00', &(0x7f00000001c0)="2ec77708fa12285c9ef68319b5f25bdeebc308f2728045f0c41232ac924556c757115e2bbd5e3f6ad883eae2984b173aec491020d680d3f09b1981de528ff534d60423ffab89aecf92cbc076e37dff8092bc47dd71874d7feebfc7e41dd99d4aa76baacc89fe002fb8301f67f2a212aac7e17e108ae6804d3e4a3bc67890ee8973aa2e6cd69f22f533748b314c7108569b797fa891cb2d661b3f406b77598cf48fa5f867c97a6be46e4456", 0x1) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000003900)='/sys/devices/virtual/mtd/mtd0/writesize\x00', 0x22400, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000440), r1) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r2, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x23}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x4}]}, 0x28}}, 0x844) r3 = socket(0x2b, 0x1, 0x1) r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x802, 0x0) (async) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x802, 0x0) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000340)={{0x7, 0xffffffffffffffff, 0xee01, 0x800, 0x8001, 0x8, 0x8}, &(0x7f00000002c0)=0xfd, &(0x7f0000000300)=0x7, 0x6, 0x5, 0xb14, 0x4, 0x8, 0x2, 0x7, 0x2, @raw=0x2ff, @inferred=0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000018c0)={0x10f0, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x108d, 0x84, 0x0, 0x1, [@typed={0x4, 0x5b}, @nested={0x1010, 0xdf, 0x0, 0x1, [@generic="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", @typed={0x8, 0x7b, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x67}]}, @generic="93be4121954b51de8c534d36411c3527f1c248765295b0b85905e720b8eaa83301b2e5a2bf6085a5", @typed={0xf, 0x5a, 0x0, 0x0, @str='/dev/tap63\x00'}, @nested={0x38, 0x10a, 0x0, 0x1, [@nested={0x4, 0xb8}, @typed={0x8, 0x1a, 0x0, 0x0, @uid=r6}, @typed={0x13, 0x11d, 0x0, 0x0, @str='-:!:-(,{}^%%^-\x00'}, @typed={0x8, 0x121, 0x0, 0x0, @fd=r4}, @typed={0xc, 0x12b, 0x0, 0x0, @u64=0xfffffffffffffff7}]}, @generic="a0f93ad89a"]}, @NL80211_ATTR_HE_CAPABILITY={0xd, 0x10d, "c21957c3ff236bf2a1"}, @NL80211_ATTR_FRAME_MATCH={0x11, 0x5b, "abd4444dbb12c8bca8f0313980"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x13, 0x9d, "c30b4b34598f52401b4275ed821271"}]}, 0x10f0}, 0x1, 0x0, 0x0, 0x20004810}, 0x6000) (async) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000018c0)={0x10f0, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x108d, 0x84, 0x0, 0x1, [@typed={0x4, 0x5b}, @nested={0x1010, 0xdf, 0x0, 0x1, [@generic="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", @typed={0x8, 0x7b, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x67}]}, @generic="93be4121954b51de8c534d36411c3527f1c248765295b0b85905e720b8eaa83301b2e5a2bf6085a5", @typed={0xf, 0x5a, 0x0, 0x0, @str='/dev/tap63\x00'}, @nested={0x38, 0x10a, 0x0, 0x1, [@nested={0x4, 0xb8}, @typed={0x8, 0x1a, 0x0, 0x0, @uid=r6}, @typed={0x13, 0x11d, 0x0, 0x0, @str='-:!:-(,{}^%%^-\x00'}, @typed={0x8, 0x121, 0x0, 0x0, @fd=r4}, @typed={0xc, 0x12b, 0x0, 0x0, @u64=0xfffffffffffffff7}]}, @generic="a0f93ad89a"]}, @NL80211_ATTR_HE_CAPABILITY={0xd, 0x10d, "c21957c3ff236bf2a1"}, @NL80211_ATTR_FRAME_MATCH={0x11, 0x5b, "abd4444dbb12c8bca8f0313980"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x100}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0x13, 0x9d, "c30b4b34598f52401b4275ed821271"}]}, 0x10f0}, 0x1, 0x0, 0x0, 0x20004810}, 0x6000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000780)={0x3, 0x2a2ac88b, 0x7f6, @raw=0x7, 0x0, "e7a6b861dcbde9deb2c11f7e019b498d171b0cd6555901db83a25536fc1f5662819ab1220e23b007fe795ca45f29f0c2a7f7"}) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000780)={0x3, 0x2a2ac88b, 0x7f6, @raw=0x7, 0x0, "e7a6b861dcbde9deb2c11f7e019b498d171b0cd6555901db83a25536fc1f5662819ab1220e23b007fe795ca45f29f0c2a7f7"}) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) (async) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) kernel console output (not intermixed with test programs): 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.965021][T11231] RSP: 002b:00007f88aa797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.965044][T11231] RAX: ffffffffffffffda RBX: 00007f88a9bb5fa0 RCX: 00007f88a998ebe9 [ 405.965060][T11231] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 405.965075][T11231] RBP: 00007f88aa797090 R08: 0000000000000000 R09: 0000000000000000 [ 405.965089][T11231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.965103][T11231] R13: 00007f88a9bb6038 R14: 00007f88a9bb5fa0 R15: 00007ffe8a66cdd8 [ 405.965136][T11231] [ 406.355102][T11241] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1197'. [ 406.895400][T11261] misc userio: No port type given on /dev/userio [ 408.614359][T11286] FAULT_INJECTION: forcing a failure. [ 408.614359][T11286] name failslab, interval 1, probability 0, space 0, times 0 [ 408.715993][T11286] CPU: 1 UID: 0 PID: 11286 Comm: syz.4.1207 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 408.716029][T11286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 408.716043][T11286] Call Trace: [ 408.716051][T11286] [ 408.716060][T11286] dump_stack_lvl+0x16c/0x1f0 [ 408.716093][T11286] should_fail_ex+0x512/0x640 [ 408.716122][T11286] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 408.716164][T11286] should_failslab+0xc2/0x120 [ 408.716194][T11286] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 408.716222][T11286] ? __alloc_skb+0x2b2/0x380 [ 408.716254][T11286] __alloc_skb+0x2b2/0x380 [ 408.716280][T11286] ? __pfx___alloc_skb+0x10/0x10 [ 408.716309][T11286] ? __pfx___might_resched+0x10/0x10 [ 408.716332][T11286] ? __lock_acquire+0xb97/0x1ce0 [ 408.716366][T11286] netlink_alloc_large_skb+0x69/0x130 [ 408.716397][T11286] netlink_sendmsg+0x6a1/0xdd0 [ 408.716432][T11286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.716465][T11286] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 408.716495][T11286] ____sys_sendmsg+0xa95/0xc70 [ 408.716531][T11286] ? copy_msghdr_from_user+0x10a/0x160 [ 408.716558][T11286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.716607][T11286] ___sys_sendmsg+0x134/0x1d0 [ 408.716637][T11286] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.716695][T11286] ? __mutex_unlock_slowpath+0x140/0x800 [ 408.716734][T11286] __sys_sendmsg+0x16d/0x220 [ 408.716762][T11286] ? __pfx___sys_sendmsg+0x10/0x10 [ 408.716813][T11286] do_syscall_64+0xcd/0x490 [ 408.716843][T11286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.716867][T11286] RIP: 0033:0x7f47c258ebe9 [ 408.716886][T11286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.716919][T11286] RSP: 002b:00007f47c34b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.716942][T11286] RAX: ffffffffffffffda RBX: 00007f47c27b5fa0 RCX: 00007f47c258ebe9 [ 408.716958][T11286] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 408.716972][T11286] RBP: 00007f47c34b5090 R08: 0000000000000000 R09: 0000000000000000 [ 408.716986][T11286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.716999][T11286] R13: 00007f47c27b6038 R14: 00007f47c27b5fa0 R15: 00007ffe05212648 [ 408.717035][T11286] [ 408.944272][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.292961][T11297] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1212'. [ 409.436076][T11294] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 410.167518][T11317] misc userio: No port type given on /dev/userio [ 410.472438][T11320] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input179 [ 410.840419][T11323] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input180 [ 412.681730][T11359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1226'. [ 413.953653][T11396] FAULT_INJECTION: forcing a failure. [ 413.953653][T11396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.008404][T11396] CPU: 0 UID: 0 PID: 11396 Comm: syz.4.1235 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 414.008440][T11396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.008454][T11396] Call Trace: [ 414.008462][T11396] [ 414.008471][T11396] dump_stack_lvl+0x16c/0x1f0 [ 414.008504][T11396] should_fail_ex+0x512/0x640 [ 414.008541][T11396] _copy_from_iter+0x29f/0x16f0 [ 414.008586][T11396] ? __alloc_skb+0x200/0x380 [ 414.008613][T11396] ? __pfx__copy_from_iter+0x10/0x10 [ 414.008647][T11396] ? __pfx___might_resched+0x10/0x10 [ 414.008670][T11396] ? __lock_acquire+0xb97/0x1ce0 [ 414.008707][T11396] netlink_sendmsg+0x829/0xdd0 [ 414.008740][T11396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.008773][T11396] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 414.008803][T11396] ____sys_sendmsg+0xa95/0xc70 [ 414.008838][T11396] ? copy_msghdr_from_user+0x10a/0x160 [ 414.008862][T11396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.008908][T11396] ___sys_sendmsg+0x134/0x1d0 [ 414.008936][T11396] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.008993][T11396] ? __mutex_unlock_slowpath+0x140/0x800 [ 414.009030][T11396] __sys_sendmsg+0x16d/0x220 [ 414.009066][T11396] ? __pfx___sys_sendmsg+0x10/0x10 [ 414.009116][T11396] do_syscall_64+0xcd/0x490 [ 414.009148][T11396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.009172][T11396] RIP: 0033:0x7f47c258ebe9 [ 414.009190][T11396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.009211][T11396] RSP: 002b:00007f47c34b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.009232][T11396] RAX: ffffffffffffffda RBX: 00007f47c27b5fa0 RCX: 00007f47c258ebe9 [ 414.009247][T11396] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 414.009261][T11396] RBP: 00007f47c34b5090 R08: 0000000000000000 R09: 0000000000000000 [ 414.009275][T11396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.009288][T11396] R13: 00007f47c27b6038 R14: 00007f47c27b5fa0 R15: 00007ffe05212648 [ 414.009320][T11396] [ 416.188335][T11437] FAULT_INJECTION: forcing a failure. [ 416.188335][T11437] name failslab, interval 1, probability 0, space 0, times 0 [ 416.213432][ T30] audit: type=1804 audit(4294967409.645:12): pid=11438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1246" name="/newroot/317/file0" dev="tmpfs" ino=1699 res=1 errno=0 [ 416.234802][T11437] CPU: 1 UID: 0 PID: 11437 Comm: syz.4.1247 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 416.234834][T11437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.234847][T11437] Call Trace: [ 416.234856][T11437] [ 416.234865][T11437] dump_stack_lvl+0x16c/0x1f0 [ 416.234898][T11437] should_fail_ex+0x512/0x640 [ 416.234932][T11437] should_failslab+0xc2/0x120 [ 416.234961][T11437] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 416.234989][T11437] ? skb_clone+0x190/0x3f0 [ 416.235023][T11437] skb_clone+0x190/0x3f0 [ 416.235053][T11437] netlink_deliver_tap+0xabd/0xd30 [ 416.235090][T11437] netlink_unicast+0x64c/0x870 [ 416.235123][T11437] ? __pfx_netlink_unicast+0x10/0x10 [ 416.235152][T11437] ? __pfx___might_resched+0x10/0x10 [ 416.235176][T11437] ? __lock_acquire+0xb97/0x1ce0 [ 416.235215][T11437] netlink_sendmsg+0x8d1/0xdd0 [ 416.235251][T11437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.235283][T11437] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 416.235314][T11437] ____sys_sendmsg+0xa95/0xc70 [ 416.235348][T11437] ? copy_msghdr_from_user+0x10a/0x160 [ 416.235377][T11437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.235427][T11437] ___sys_sendmsg+0x134/0x1d0 [ 416.235457][T11437] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.235517][T11437] ? __mutex_unlock_slowpath+0x140/0x800 [ 416.235557][T11437] __sys_sendmsg+0x16d/0x220 [ 416.235593][T11437] ? __pfx___sys_sendmsg+0x10/0x10 [ 416.235645][T11437] do_syscall_64+0xcd/0x490 [ 416.235677][T11437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.235701][T11437] RIP: 0033:0x7f47c258ebe9 [ 416.235721][T11437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.235744][T11437] RSP: 002b:00007f47c34b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.235768][T11437] RAX: ffffffffffffffda RBX: 00007f47c27b5fa0 RCX: 00007f47c258ebe9 [ 416.235784][T11437] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 416.235798][T11437] RBP: 00007f47c34b5090 R08: 0000000000000000 R09: 0000000000000000 [ 416.235813][T11437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.235826][T11437] R13: 00007f47c27b6038 R14: 00007f47c27b5fa0 R15: 00007ffe05212648 [ 416.235859][T11437] [ 417.173535][T11457] misc userio: No port type given on /dev/userio [ 417.627284][T11469] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input182 [ 418.094229][T11478] FAULT_INJECTION: forcing a failure. [ 418.094229][T11478] name failslab, interval 1, probability 0, space 0, times 0 [ 418.178685][T11478] CPU: 1 UID: 0 PID: 11478 Comm: syz.1.1257 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 418.178721][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.178735][T11478] Call Trace: [ 418.178743][T11478] [ 418.178753][T11478] dump_stack_lvl+0x16c/0x1f0 [ 418.178801][T11478] should_fail_ex+0x512/0x640 [ 418.178832][T11478] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 418.178861][T11478] should_failslab+0xc2/0x120 [ 418.178891][T11478] __kmalloc_cache_noprof+0x6a/0x3e0 [ 418.178917][T11478] ? genl_start+0x1e8/0x980 [ 418.178954][T11478] genl_start+0x1e8/0x980 [ 418.178990][T11478] __netlink_dump_start+0x60e/0x990 [ 418.179026][T11478] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 418.179063][T11478] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 418.179115][T11478] ? aa_get_newest_label+0xd2/0x250 [ 418.179141][T11478] ? __pfx_genl_start+0x10/0x10 [ 418.179171][T11478] ? __pfx_genl_dumpit+0x10/0x10 [ 418.179200][T11478] ? __pfx_genl_done+0x10/0x10 [ 418.179233][T11478] ? bpf_lsm_capable+0x9/0x10 [ 418.179254][T11478] ? security_capable+0x7e/0x260 [ 418.179280][T11478] ? ns_capable+0xd7/0x110 [ 418.179308][T11478] genl_rcv_msg+0x46e/0x800 [ 418.179345][T11478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.179380][T11478] ? __pfx_batadv_orig_dump+0x10/0x10 [ 418.179423][T11478] netlink_rcv_skb+0x158/0x420 [ 418.179453][T11478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.179491][T11478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.179533][T11478] ? netlink_deliver_tap+0x1ae/0xd30 [ 418.179564][T11478] genl_rcv+0x28/0x40 [ 418.179604][T11478] netlink_unicast+0x5a7/0x870 [ 418.179638][T11478] ? __pfx_netlink_unicast+0x10/0x10 [ 418.179666][T11478] ? __pfx___might_resched+0x10/0x10 [ 418.179686][T11478] ? __lock_acquire+0xb97/0x1ce0 [ 418.179723][T11478] netlink_sendmsg+0x8d1/0xdd0 [ 418.179759][T11478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.179795][T11478] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 418.179823][T11478] ____sys_sendmsg+0xa95/0xc70 [ 418.179857][T11478] ? copy_msghdr_from_user+0x10a/0x160 [ 418.179886][T11478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.179945][T11478] ___sys_sendmsg+0x134/0x1d0 [ 418.179976][T11478] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.180038][T11478] ? __mutex_unlock_slowpath+0x140/0x800 [ 418.180085][T11478] __sys_sendmsg+0x16d/0x220 [ 418.180116][T11478] ? __pfx___sys_sendmsg+0x10/0x10 [ 418.180169][T11478] do_syscall_64+0xcd/0x490 [ 418.180202][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.180231][T11478] RIP: 0033:0x7f4d85d8ebe9 [ 418.180251][T11478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.180279][T11478] RSP: 002b:00007f4d86cc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.180303][T11478] RAX: ffffffffffffffda RBX: 00007f4d85fb5fa0 RCX: 00007f4d85d8ebe9 [ 418.180318][T11478] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 418.180333][T11478] RBP: 00007f4d86cc2090 R08: 0000000000000000 R09: 0000000000000000 [ 418.180348][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.180361][T11478] R13: 00007f4d85fb6038 R14: 00007f4d85fb5fa0 R15: 00007ffc6723ebb8 [ 418.180396][T11478] [ 418.493916][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.999822][T11471] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input183 [ 420.659284][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1269'. [ 420.747736][ T7933] Bluetooth: hci4: unexpected event 0x03 length: 70 > 11 [ 422.040279][T11537] misc userio: No port type given on /dev/userio [ 422.355152][T11539] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input186 [ 422.652816][T11550] misc userio: No port type given on /dev/userio [ 423.304658][T11545] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input187 [ 423.758853][T11550] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input188 [ 424.256774][T11556] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input189 [ 425.055465][T11579] FAULT_INJECTION: forcing a failure. [ 425.055465][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 425.102161][T11579] CPU: 1 UID: 0 PID: 11579 Comm: syz.3.1285 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 425.102200][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.102214][T11579] Call Trace: [ 425.102222][T11579] [ 425.102233][T11579] dump_stack_lvl+0x16c/0x1f0 [ 425.102275][T11579] should_fail_ex+0x512/0x640 [ 425.102311][T11579] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 425.102342][T11579] should_failslab+0xc2/0x120 [ 425.102375][T11579] __kmalloc_cache_noprof+0x6a/0x3e0 [ 425.102402][T11579] ? alloc_super+0x52/0xbd0 [ 425.102435][T11579] alloc_super+0x52/0xbd0 [ 425.102458][T11579] ? sget_fc+0xd3/0xc20 [ 425.102498][T11579] sget_fc+0x116/0xc20 [ 425.102526][T11579] ? __pfx_set_anon_super_fc+0x10/0x10 [ 425.102555][T11579] ? __pfx_mqueue_fill_super+0x10/0x10 [ 425.102591][T11579] get_tree_nodev+0x28/0x190 [ 425.102620][T11579] mqueue_get_tree+0xf1/0x130 [ 425.102656][T11579] vfs_get_tree+0x8b/0x340 [ 425.102679][T11579] fc_mount_longterm+0x18/0x160 [ 425.102716][T11579] mq_init_ns+0x426/0x620 [ 425.102747][T11579] copy_ipcs+0x383/0x610 [ 425.102771][T11579] ? copy_utsname+0xab/0x470 [ 425.102811][T11579] create_new_namespaces+0x20a/0xa90 [ 425.102840][T11579] ? security_capable+0x7e/0x260 [ 425.102869][T11579] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 425.102900][T11579] ksys_unshare+0x45b/0xa40 [ 425.102933][T11579] ? __pfx_ksys_unshare+0x10/0x10 [ 425.102967][T11579] ? xfd_validate_state+0x61/0x180 [ 425.103011][T11579] __x64_sys_unshare+0x31/0x40 [ 425.103042][T11579] do_syscall_64+0xcd/0x490 [ 425.103076][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.103102][T11579] RIP: 0033:0x7f4bcfd8ebe9 [ 425.103123][T11579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.103148][T11579] RSP: 002b:00007f4bcdb91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 425.103174][T11579] RAX: ffffffffffffffda RBX: 00007f4bcffb6270 RCX: 00007f4bcfd8ebe9 [ 425.103192][T11579] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 425.103207][T11579] RBP: 00007f4bcfe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 425.103223][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.103238][T11579] R13: 00007f4bcffb6308 R14: 00007f4bcffb6270 R15: 00007ffdd3307498 [ 425.103274][T11579] [ 425.342371][ C1] vkms_vblank_simulate: vblank timer overrun [ 425.893205][T11586] FAULT_INJECTION: forcing a failure. [ 425.893205][T11586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.009618][T11586] CPU: 0 UID: 0 PID: 11586 Comm: syz.3.1287 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 426.009644][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.009653][T11586] Call Trace: [ 426.009659][T11586] [ 426.009665][T11586] dump_stack_lvl+0x16c/0x1f0 [ 426.009687][T11586] should_fail_ex+0x512/0x640 [ 426.009709][T11586] _copy_from_user+0x2e/0xd0 [ 426.009732][T11586] kstrtouint_from_user+0xd6/0x1d0 [ 426.009749][T11586] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 426.009765][T11586] ? __lock_acquire+0xb97/0x1ce0 [ 426.009792][T11586] proc_fail_nth_write+0x83/0x220 [ 426.009809][T11586] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 426.009829][T11586] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 426.009846][T11586] vfs_write+0x29d/0x11d0 [ 426.009865][T11586] ? __pfx___mutex_lock+0x10/0x10 [ 426.009883][T11586] ? __pfx_vfs_write+0x10/0x10 [ 426.009904][T11586] ? __fget_files+0x20e/0x3c0 [ 426.009925][T11586] ksys_write+0x12a/0x250 [ 426.009940][T11586] ? __pfx_ksys_write+0x10/0x10 [ 426.009962][T11586] do_syscall_64+0xcd/0x490 [ 426.009981][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.009995][T11586] RIP: 0033:0x7f4bcfd8d69f [ 426.010007][T11586] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 426.010021][T11586] RSP: 002b:00007f4bcdff6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 426.010035][T11586] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4bcfd8d69f [ 426.010045][T11586] RDX: 0000000000000001 RSI: 00007f4bcdff60a0 RDI: 0000000000000005 [ 426.010053][T11586] RBP: 00007f4bcdff6090 R08: 0000000000000000 R09: 0000000000000000 [ 426.010061][T11586] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 426.010069][T11586] R13: 00007f4bcffb6038 R14: 00007f4bcffb5fa0 R15: 00007ffdd3307498 [ 426.010088][T11586] [ 427.182307][T11599] FAULT_INJECTION: forcing a failure. [ 427.182307][T11599] name failslab, interval 1, probability 0, space 0, times 0 [ 427.244801][T11599] CPU: 0 UID: 0 PID: 11599 Comm: syz.3.1292 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 427.244837][T11599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 427.244851][T11599] Call Trace: [ 427.244859][T11599] [ 427.244868][T11599] dump_stack_lvl+0x16c/0x1f0 [ 427.244902][T11599] should_fail_ex+0x512/0x640 [ 427.244932][T11599] ? fs_reclaim_acquire+0xae/0x150 [ 427.244970][T11599] should_failslab+0xc2/0x120 [ 427.245001][T11599] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 427.245029][T11599] ? __lock_acquire+0xb97/0x1ce0 [ 427.245057][T11599] ? __kernfs_new_node+0xd2/0x8e0 [ 427.245093][T11599] __kernfs_new_node+0xd2/0x8e0 [ 427.245126][T11599] ? __pfx___kernfs_new_node+0x10/0x10 [ 427.245164][T11599] ? find_held_lock+0x2b/0x80 [ 427.245189][T11599] ? kernfs_root+0xee/0x2a0 [ 427.245225][T11599] kernfs_new_node+0x13c/0x1e0 [ 427.245259][T11599] ? kasan_save_stack+0x42/0x60 [ 427.245287][T11599] kernfs_create_dir_ns+0x4c/0x1a0 [ 427.245324][T11599] sysfs_create_dir_ns+0x13a/0x2b0 [ 427.245353][T11599] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 427.245384][T11599] ? rcu_is_watching+0x12/0xc0 [ 427.245408][T11599] ? kfree+0x24f/0x4d0 [ 427.245435][T11599] kobject_add_internal+0x2c4/0x9b0 [ 427.245474][T11599] kobject_add+0x16e/0x240 [ 427.245510][T11599] ? __pfx_kobject_add+0x10/0x10 [ 427.245561][T11599] kobject_create_and_add+0x7e/0xf0 [ 427.245595][T11599] __add_disk+0x709/0xf00 [ 427.245632][T11599] add_disk_fwnode+0x13f/0x5d0 [ 427.245667][T11599] loop_add+0x903/0xb70 [ 427.245696][T11599] ? __pfx_loop_add+0x10/0x10 [ 427.245746][T11599] ? find_held_lock+0x2b/0x80 [ 427.245775][T11599] loop_control_ioctl+0x13e/0x630 [ 427.245802][T11599] ? __pfx_loop_control_ioctl+0x10/0x10 [ 427.245834][T11599] ? __pfx_loop_control_ioctl+0x10/0x10 [ 427.245861][T11599] __x64_sys_ioctl+0x18e/0x210 [ 427.245899][T11599] do_syscall_64+0xcd/0x490 [ 427.245931][T11599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.245956][T11599] RIP: 0033:0x7f4bcfd8ebe9 [ 427.245974][T11599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.245997][T11599] RSP: 002b:00007f4bcdff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.246022][T11599] RAX: ffffffffffffffda RBX: 00007f4bcffb5fa0 RCX: 00007f4bcfd8ebe9 [ 427.246038][T11599] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 427.246054][T11599] RBP: 00007f4bcfe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 427.246070][T11599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.246084][T11599] R13: 00007f4bcffb6038 R14: 00007f4bcffb5fa0 R15: 00007ffdd3307498 [ 427.246119][T11599] [ 427.246130][T11599] kobject: kobject_add_internal failed for slaves (error: -12 parent: loop0) [ 427.374583][T11609] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1289'. [ 427.541795][T11599] kobject: kobject_create_and_add: kobject_add error: -12 [ 429.165017][T11629] FAULT_INJECTION: forcing a failure. [ 429.165017][T11629] name failslab, interval 1, probability 0, space 0, times 0 [ 429.269392][T11629] CPU: 1 UID: 0 PID: 11629 Comm: syz.2.1299 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 429.269433][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.269449][T11629] Call Trace: [ 429.269458][T11629] [ 429.269468][T11629] dump_stack_lvl+0x16c/0x1f0 [ 429.269507][T11629] should_fail_ex+0x512/0x640 [ 429.269540][T11629] ? __kmalloc_noprof+0xbf/0x510 [ 429.269572][T11629] ? __register_sysctl_table+0xb3/0x1900 [ 429.269606][T11629] should_failslab+0xc2/0x120 [ 429.269639][T11629] __kmalloc_noprof+0xd2/0x510 [ 429.269677][T11629] __register_sysctl_table+0xb3/0x1900 [ 429.269713][T11629] ? is_module_address+0x5f/0xf0 [ 429.269752][T11629] ? __pfx___register_sysctl_table+0x10/0x10 [ 429.269786][T11629] ? is_module_address+0x69/0xf0 [ 429.269818][T11629] ? register_net_sysctl_sz+0x228/0x3e0 [ 429.269860][T11629] brnf_init_net+0x289/0x450 [ 429.269892][T11629] ? __pfx_brnf_init_net+0x10/0x10 [ 429.269918][T11629] ops_init+0x1e2/0x5f0 [ 429.269953][T11629] setup_net+0x10f/0x380 [ 429.269981][T11629] ? lockdep_init_map_type+0x5c/0x280 [ 429.270013][T11629] ? __pfx_setup_net+0x10/0x10 [ 429.270045][T11629] ? debug_mutex_init+0x37/0x70 [ 429.270074][T11629] copy_net_ns+0x2a6/0x5f0 [ 429.270110][T11629] create_new_namespaces+0x3ea/0xa90 [ 429.270148][T11629] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 429.270180][T11629] ksys_unshare+0x45b/0xa40 [ 429.270224][T11629] ? __pfx_ksys_unshare+0x10/0x10 [ 429.270258][T11629] ? xfd_validate_state+0x61/0x180 [ 429.270304][T11629] __x64_sys_unshare+0x31/0x40 [ 429.270335][T11629] do_syscall_64+0xcd/0x490 [ 429.270364][T11629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.270388][T11629] RIP: 0033:0x7f88a998ebe9 [ 429.270408][T11629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.270433][T11629] RSP: 002b:00007f88aa776038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 429.270458][T11629] RAX: ffffffffffffffda RBX: 00007f88a9bb6090 RCX: 00007f88a998ebe9 [ 429.270476][T11629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 429.270491][T11629] RBP: 00007f88a9a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 429.270504][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.270519][T11629] R13: 00007f88a9bb6128 R14: 00007f88a9bb6090 R15: 00007ffe8a66cdd8 [ 429.270552][T11629] [ 430.087832][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'. [ 431.060742][T11661] i2c i2c-0: delete_device: Extra parameters [ 431.563195][T11682] misc userio: No port type given on /dev/userio [ 431.657575][T11687] misc userio: No port type given on /dev/userio [ 431.776402][T11692] FAULT_INJECTION: forcing a failure. [ 431.776402][T11692] name failslab, interval 1, probability 0, space 0, times 0 [ 431.818036][T11692] CPU: 0 UID: 0 PID: 11692 Comm: syz.4.1313 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 431.818073][T11692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.818086][T11692] Call Trace: [ 431.818096][T11692] [ 431.818106][T11692] dump_stack_lvl+0x16c/0x1f0 [ 431.818138][T11692] should_fail_ex+0x512/0x640 [ 431.818168][T11692] ? fs_reclaim_acquire+0xae/0x150 [ 431.818203][T11692] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 431.818234][T11692] should_failslab+0xc2/0x120 [ 431.818263][T11692] __kmalloc_noprof+0xd2/0x510 [ 431.818299][T11692] tomoyo_realpath_from_path+0xc2/0x6e0 [ 431.818333][T11692] ? tomoyo_profile+0x47/0x60 [ 431.818369][T11692] tomoyo_path_number_perm+0x245/0x580 [ 431.818396][T11692] ? tomoyo_path_number_perm+0x237/0x580 [ 431.818426][T11692] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 431.818455][T11692] ? find_held_lock+0x2b/0x80 [ 431.818510][T11692] ? find_held_lock+0x2b/0x80 [ 431.818532][T11692] ? hook_file_ioctl_common+0x145/0x410 [ 431.818569][T11692] ? __fget_files+0x20e/0x3c0 [ 431.818601][T11692] security_file_ioctl+0x9b/0x240 [ 431.818631][T11692] __x64_sys_ioctl+0xb7/0x210 [ 431.818667][T11692] do_syscall_64+0xcd/0x490 [ 431.818699][T11692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.818723][T11692] RIP: 0033:0x7f47c258ebe9 [ 431.818746][T11692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.818767][T11692] RSP: 002b:00007f47c34b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 431.818791][T11692] RAX: ffffffffffffffda RBX: 00007f47c27b5fa0 RCX: 00007f47c258ebe9 [ 431.818808][T11692] RDX: 0000200000001800 RSI: 00000000405c5503 RDI: 0000000000000003 [ 431.818823][T11692] RBP: 00007f47c34b5090 R08: 0000000000000000 R09: 0000000000000000 [ 431.818837][T11692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.818851][T11692] R13: 00007f47c27b6038 R14: 00007f47c27b5fa0 R15: 00007ffe05212648 [ 431.818885][T11692] [ 431.818895][T11692] ERROR: Out of memory at tomoyo_realpath_from_path. [ 431.971485][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.154700][T11690] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input192 [ 432.497296][T11694] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input193 [ 432.899302][T11704] misc userio: No port type given on /dev/userio [ 433.249909][T11707] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input194 [ 433.741375][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1318'. [ 433.826999][T11704] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input195 [ 435.522596][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 437.202758][T11763] FAULT_INJECTION: forcing a failure. [ 437.202758][T11763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.228895][T11763] CPU: 0 UID: 0 PID: 11763 Comm: syz.2.1329 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 437.228934][T11763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 437.228949][T11763] Call Trace: [ 437.228957][T11763] [ 437.228968][T11763] dump_stack_lvl+0x16c/0x1f0 [ 437.229002][T11763] should_fail_ex+0x512/0x640 [ 437.229038][T11763] _copy_from_user+0x2e/0xd0 [ 437.229074][T11763] copy_msghdr_from_user+0x98/0x160 [ 437.229104][T11763] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 437.229151][T11763] ___sys_sendmsg+0xfe/0x1d0 [ 437.229187][T11763] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.229248][T11763] ? __mutex_unlock_slowpath+0x140/0x800 [ 437.229288][T11763] __sys_sendmsg+0x16d/0x220 [ 437.229319][T11763] ? __pfx___sys_sendmsg+0x10/0x10 [ 437.229371][T11763] do_syscall_64+0xcd/0x490 [ 437.229404][T11763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.229429][T11763] RIP: 0033:0x7f88a998ebe9 [ 437.229448][T11763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.229471][T11763] RSP: 002b:00007f88aa797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.229496][T11763] RAX: ffffffffffffffda RBX: 00007f88a9bb5fa0 RCX: 00007f88a998ebe9 [ 437.229510][T11763] RDX: 000000000000c840 RSI: 0000200000000100 RDI: 0000000000000003 [ 437.229525][T11763] RBP: 00007f88aa797090 R08: 0000000000000000 R09: 0000000000000000 [ 437.229538][T11763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.229549][T11763] R13: 00007f88a9bb6038 R14: 00007f88a9bb5fa0 R15: 00007ffe8a66cdd8 [ 437.229589][T11763] [ 437.394290][ C0] vkms_vblank_simulate: vblank timer overrun [ 438.057888][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 438.257294][T11795] misc userio: No port type given on /dev/userio [ 438.636965][T11795] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input197 [ 438.973388][T11810] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input198 [ 439.712375][T11822] FAULT_INJECTION: forcing a failure. [ 439.712375][T11822] name failslab, interval 1, probability 0, space 0, times 0 [ 439.755640][T11822] CPU: 1 UID: 0 PID: 11822 Comm: syz.4.1344 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 439.755679][T11822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 439.755692][T11822] Call Trace: [ 439.755701][T11822] [ 439.755711][T11822] dump_stack_lvl+0x16c/0x1f0 [ 439.755744][T11822] should_fail_ex+0x512/0x640 [ 439.755773][T11822] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 439.755805][T11822] should_failslab+0xc2/0x120 [ 439.755835][T11822] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 439.755863][T11822] ? __alloc_skb+0x2b2/0x380 [ 439.755895][T11822] __alloc_skb+0x2b2/0x380 [ 439.755920][T11822] ? __pfx___alloc_skb+0x10/0x10 [ 439.755949][T11822] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 439.755977][T11822] ? __lock_acquire+0xb97/0x1ce0 [ 439.756012][T11822] netlink_alloc_large_skb+0x69/0x130 [ 439.756043][T11822] netlink_sendmsg+0x6a1/0xdd0 [ 439.756078][T11822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 439.756111][T11822] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 439.756143][T11822] ____sys_sendmsg+0xa95/0xc70 [ 439.756178][T11822] ? copy_msghdr_from_user+0x10a/0x160 [ 439.756214][T11822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.756263][T11822] ___sys_sendmsg+0x134/0x1d0 [ 439.756293][T11822] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.756352][T11822] ? __mutex_unlock_slowpath+0x140/0x800 [ 439.756391][T11822] __sys_sendmsg+0x16d/0x220 [ 439.756420][T11822] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.756471][T11822] do_syscall_64+0xcd/0x490 [ 439.756501][T11822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.756525][T11822] RIP: 0033:0x7f47c258ebe9 [ 439.756544][T11822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.756566][T11822] RSP: 002b:00007f47c34b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.756590][T11822] RAX: ffffffffffffffda RBX: 00007f47c27b5fa0 RCX: 00007f47c258ebe9 [ 439.756606][T11822] RDX: 000000000000c840 RSI: 0000200000000100 RDI: 0000000000000003 [ 439.756621][T11822] RBP: 00007f47c34b5090 R08: 0000000000000000 R09: 0000000000000000 [ 439.756636][T11822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.756650][T11822] R13: 00007f47c27b6038 R14: 00007f47c27b5fa0 R15: 00007ffe05212648 [ 439.756683][T11822] [ 439.986112][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.099206][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.105610][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.282052][T11825] warning: `syz.4.1345' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 440.512680][T11839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1349'. [ 441.105865][T11855] __vm_enough_memory: pid: 11855, comm: syz.1.1354, bytes: 4398046511104 not enough memory for the allocation [ 441.931001][T11876] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input199 [ 442.394899][T11885] ERROR: Out of memory at tomoyo_memory_ok. [ 442.424055][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1358'. [ 444.062551][T11902] ovs_ÿþ: entered promiscuous mode [ 445.839362][T11965] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 446.297867][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1381'. [ 446.938719][T11985] random: crng reseeded on system resumption [ 446.961063][ T6368] ERROR: Out of memory at tomoyo_memory_ok. [ 446.978429][T10858] ERROR: Out of memory at tomoyo_memory_ok. [ 447.014542][T11985] Restarting kernel threads ... [ 447.055730][T11985] Done restarting kernel threads. [ 449.242367][T12034] FAULT_INJECTION: forcing a failure. [ 449.242367][T12034] name failslab, interval 1, probability 0, space 0, times 0 [ 449.263503][T12034] CPU: 0 UID: 0 PID: 12034 Comm: syz.2.1404 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 449.263538][T12034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.263551][T12034] Call Trace: [ 449.263559][T12034] [ 449.263567][T12034] dump_stack_lvl+0x16c/0x1f0 [ 449.263601][T12034] should_fail_ex+0x512/0x640 [ 449.263632][T12034] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 449.263661][T12034] should_failslab+0xc2/0x120 [ 449.263692][T12034] __kmalloc_cache_noprof+0x6a/0x3e0 [ 449.263718][T12034] ? genl_start+0x1e8/0x980 [ 449.263756][T12034] genl_start+0x1e8/0x980 [ 449.263793][T12034] __netlink_dump_start+0x60e/0x990 [ 449.263829][T12034] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 449.263865][T12034] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 449.263907][T12034] ? aa_get_newest_label+0xd2/0x250 [ 449.263933][T12034] ? __pfx_genl_start+0x10/0x10 [ 449.263962][T12034] ? __pfx_genl_dumpit+0x10/0x10 [ 449.264004][T12034] ? __pfx_genl_done+0x10/0x10 [ 449.264039][T12034] ? bpf_lsm_capable+0x9/0x10 [ 449.264060][T12034] ? security_capable+0x7e/0x260 [ 449.264092][T12034] genl_rcv_msg+0x46e/0x800 [ 449.264129][T12034] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.264163][T12034] ? __pfx_ioam6_genl_dumpns_start+0x10/0x10 [ 449.264199][T12034] ? __pfx_ioam6_genl_dumpns+0x10/0x10 [ 449.264221][T12034] ? __pfx_ioam6_genl_dumpns_done+0x10/0x10 [ 449.264272][T12034] netlink_rcv_skb+0x158/0x420 [ 449.264301][T12034] ? __pfx_genl_rcv_msg+0x10/0x10 [ 449.264333][T12034] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 449.264376][T12034] ? netlink_deliver_tap+0x1ae/0xd30 [ 449.264410][T12034] genl_rcv+0x28/0x40 [ 449.264440][T12034] netlink_unicast+0x5a7/0x870 [ 449.264476][T12034] ? __pfx_netlink_unicast+0x10/0x10 [ 449.264505][T12034] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 449.264533][T12034] ? __lock_acquire+0xb97/0x1ce0 [ 449.264574][T12034] netlink_sendmsg+0x8d1/0xdd0 [ 449.264610][T12034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.264645][T12034] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 449.264677][T12034] ____sys_sendmsg+0xa95/0xc70 [ 449.264713][T12034] ? copy_msghdr_from_user+0x10a/0x160 [ 449.264742][T12034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.264794][T12034] ___sys_sendmsg+0x134/0x1d0 [ 449.264826][T12034] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.264890][T12034] ? __mutex_unlock_slowpath+0x140/0x800 [ 449.264931][T12034] __sys_sendmsg+0x16d/0x220 [ 449.264961][T12034] ? __pfx___sys_sendmsg+0x10/0x10 [ 449.265021][T12034] do_syscall_64+0xcd/0x490 [ 449.265053][T12034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.265078][T12034] RIP: 0033:0x7f88a998ebe9 [ 449.265098][T12034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.265121][T12034] RSP: 002b:00007f88aa797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.265145][T12034] RAX: ffffffffffffffda RBX: 00007f88a9bb5fa0 RCX: 00007f88a998ebe9 [ 449.265161][T12034] RDX: 000000000000c840 RSI: 0000200000000100 RDI: 0000000000000003 [ 449.265177][T12034] RBP: 00007f88aa797090 R08: 0000000000000000 R09: 0000000000000000 [ 449.265192][T12034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.265206][T12034] R13: 00007f88a9bb6038 R14: 00007f88a9bb5fa0 R15: 00007ffe8a66cdd8 [ 449.265241][T12034] [ 450.680677][T12054] ICMPv6: process `syz.2.1408' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 452.670373][T12090] FAULT_INJECTION: forcing a failure. [ 452.670373][T12090] name failslab, interval 1, probability 0, space 0, times 0 [ 452.716381][T12090] CPU: 1 UID: 0 PID: 12090 Comm: syz.3.1414 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 452.716422][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 452.716437][T12090] Call Trace: [ 452.716446][T12090] [ 452.716456][T12090] dump_stack_lvl+0x16c/0x1f0 [ 452.716492][T12090] should_fail_ex+0x512/0x640 [ 452.716525][T12090] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 452.716560][T12090] should_failslab+0xc2/0x120 [ 452.716591][T12090] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 452.716629][T12090] ? sk_prot_alloc+0x60/0x2a0 [ 452.716671][T12090] sk_prot_alloc+0x60/0x2a0 [ 452.716710][T12090] sk_alloc+0x36/0xc20 [ 452.716742][T12090] tipc_sk_create+0xcf/0x21a0 [ 452.716786][T12090] ? find_held_lock+0x2b/0x80 [ 452.716813][T12090] ? __sock_create+0x2f2/0x8d0 [ 452.716854][T12090] __sock_create+0x335/0x8d0 [ 452.716897][T12090] __sys_socket+0x14d/0x260 [ 452.716922][T12090] ? __pfx___sys_socket+0x10/0x10 [ 452.716946][T12090] ? xfd_validate_state+0x61/0x180 [ 452.716990][T12090] __x64_sys_socket+0x72/0xb0 [ 452.717012][T12090] ? lockdep_hardirqs_on+0x7c/0x110 [ 452.717041][T12090] do_syscall_64+0xcd/0x490 [ 452.717074][T12090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.717099][T12090] RIP: 0033:0x7f4bcfd8ebe9 [ 452.717120][T12090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.717144][T12090] RSP: 002b:00007f4bcdfb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 452.717170][T12090] RAX: ffffffffffffffda RBX: 00007f4bcffb6180 RCX: 00007f4bcfd8ebe9 [ 452.717191][T12090] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 452.717205][T12090] RBP: 00007f4bcfe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 452.717220][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.717233][T12090] R13: 00007f4bcffb6218 R14: 00007f4bcffb6180 R15: 00007ffdd3307498 [ 452.717268][T12090] [ 453.133136][T12088] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 453.469246][T12105] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1416'. [ 453.559761][T12084] bond0: option all_slaves_active: invalid value () [ 456.047420][T12157] __vm_enough_memory: pid: 12157, comm: syz.2.1424, bytes: 4398046511104 not enough memory for the allocation [ 458.956890][T12208] misc userio: No port type given on /dev/userio [ 459.178161][T12197] ovs_ÿþ: entered promiscuous mode [ 459.222704][T12214] vcan0: tx drop: invalid da for name 0x000000000000003f [ 459.448081][T12215] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input201 [ 460.184674][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1442'. [ 460.234368][T12233] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1442'. [ 461.340003][T12254] ICMPv6: process `syz.3.1447' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 461.885677][T12270] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input202 [ 461.924800][T12271] openvswitch: netlink: Flow key attribute not present in set flow. [ 462.816840][T12272] ovs_ÿþ: entered promiscuous mode [ 465.924985][T12317] netlink: 'syz.2.1464': attribute type 1 has an invalid length. [ 466.282545][T12325] ICMPv6: process `syz.1.1467' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 467.532792][ T7933] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 468.433259][T12349] FAULT_INJECTION: forcing a failure. [ 468.433259][T12349] name failslab, interval 1, probability 0, space 0, times 0 [ 468.449699][T12349] CPU: 1 UID: 0 PID: 12349 Comm: syz.2.1474 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 468.449727][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.449737][T12349] Call Trace: [ 468.449743][T12349] [ 468.449749][T12349] dump_stack_lvl+0x16c/0x1f0 [ 468.449772][T12349] should_fail_ex+0x512/0x640 [ 468.449795][T12349] should_failslab+0xc2/0x120 [ 468.449820][T12349] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 468.449838][T12349] ? skb_clone+0x190/0x3f0 [ 468.449859][T12349] skb_clone+0x190/0x3f0 [ 468.449877][T12349] netlink_deliver_tap+0xabd/0xd30 [ 468.449900][T12349] netlink_dump+0x881/0xd30 [ 468.449918][T12349] ? __pfx_netlink_dump+0x10/0x10 [ 468.449945][T12349] ? genl_start+0x67f/0x980 [ 468.449974][T12349] __netlink_dump_start+0x6d6/0x990 [ 468.449995][T12349] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 468.450020][T12349] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 468.450045][T12349] ? aa_get_newest_label+0xd2/0x250 [ 468.450060][T12349] ? __pfx_genl_start+0x10/0x10 [ 468.450078][T12349] ? __pfx_genl_dumpit+0x10/0x10 [ 468.450096][T12349] ? __pfx_genl_done+0x10/0x10 [ 468.450117][T12349] ? bpf_lsm_capable+0x9/0x10 [ 468.450130][T12349] ? security_capable+0x7e/0x260 [ 468.450148][T12349] genl_rcv_msg+0x46e/0x800 [ 468.450170][T12349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.450191][T12349] ? __pfx_ioam6_genl_dumpns_start+0x10/0x10 [ 468.450213][T12349] ? __pfx_ioam6_genl_dumpns+0x10/0x10 [ 468.450226][T12349] ? __pfx_ioam6_genl_dumpns_done+0x10/0x10 [ 468.450263][T12349] netlink_rcv_skb+0x158/0x420 [ 468.450281][T12349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 468.450303][T12349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 468.450328][T12349] ? netlink_deliver_tap+0x1ae/0xd30 [ 468.450348][T12349] genl_rcv+0x28/0x40 [ 468.450366][T12349] netlink_unicast+0x5a7/0x870 [ 468.450387][T12349] ? __pfx_netlink_unicast+0x10/0x10 [ 468.450405][T12349] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 468.450421][T12349] ? __lock_acquire+0xb97/0x1ce0 [ 468.450445][T12349] netlink_sendmsg+0x8d1/0xdd0 [ 468.450466][T12349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.450487][T12349] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 468.450504][T12349] ____sys_sendmsg+0xa95/0xc70 [ 468.450527][T12349] ? copy_msghdr_from_user+0x10a/0x160 [ 468.450544][T12349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.450575][T12349] ___sys_sendmsg+0x134/0x1d0 [ 468.450593][T12349] ? __pfx____sys_sendmsg+0x10/0x10 [ 468.450628][T12349] ? __mutex_unlock_slowpath+0x140/0x800 [ 468.450652][T12349] __sys_sendmsg+0x16d/0x220 [ 468.450669][T12349] ? __pfx___sys_sendmsg+0x10/0x10 [ 468.450699][T12349] do_syscall_64+0xcd/0x490 [ 468.450719][T12349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.450734][T12349] RIP: 0033:0x7f88a998ebe9 [ 468.450746][T12349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.450760][T12349] RSP: 002b:00007f88aa797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 468.450774][T12349] RAX: ffffffffffffffda RBX: 00007f88a9bb5fa0 RCX: 00007f88a998ebe9 [ 468.450784][T12349] RDX: 000000000000c840 RSI: 0000200000000100 RDI: 0000000000000003 [ 468.450793][T12349] RBP: 00007f88aa797090 R08: 0000000000000000 R09: 0000000000000000 [ 468.450801][T12349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.450810][T12349] R13: 00007f88a9bb6038 R14: 00007f88a9bb5fa0 R15: 00007ffe8a66cdd8 [ 468.450847][T12349] [ 469.229120][T12359] misc userio: No port type given on /dev/userio [ 469.403735][T12365] FAULT_INJECTION: forcing a failure. [ 469.403735][T12365] name failslab, interval 1, probability 0, space 0, times 0 [ 469.439094][T12366] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input205 [ 469.459289][T12365] CPU: 1 UID: 0 PID: 12365 Comm: syz.2.1475 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 469.459328][T12365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 469.459343][T12365] Call Trace: [ 469.459351][T12365] [ 469.459361][T12365] dump_stack_lvl+0x16c/0x1f0 [ 469.459398][T12365] should_fail_ex+0x512/0x640 [ 469.459430][T12365] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 469.459465][T12365] should_failslab+0xc2/0x120 [ 469.459494][T12365] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 469.459521][T12365] ? sk_prot_alloc+0x60/0x2a0 [ 469.459559][T12365] sk_prot_alloc+0x60/0x2a0 [ 469.459598][T12365] sk_alloc+0x36/0xc20 [ 469.459628][T12365] tipc_sk_create+0xcf/0x21a0 [ 469.459673][T12365] ? find_held_lock+0x2b/0x80 [ 469.459699][T12365] ? __sock_create+0x2f2/0x8d0 [ 469.459740][T12365] __sock_create+0x335/0x8d0 [ 469.459783][T12365] __sys_socket+0x14d/0x260 [ 469.459806][T12365] ? __pfx___sys_socket+0x10/0x10 [ 469.459830][T12365] ? xfd_validate_state+0x61/0x180 [ 469.459870][T12365] __x64_sys_socket+0x72/0xb0 [ 469.459892][T12365] ? lockdep_hardirqs_on+0x7c/0x110 [ 469.459921][T12365] do_syscall_64+0xcd/0x490 [ 469.459962][T12365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.459988][T12365] RIP: 0033:0x7f88a998ebe9 [ 469.460009][T12365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.460032][T12365] RSP: 002b:00007f88aa755038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 469.460054][T12365] RAX: ffffffffffffffda RBX: 00007f88a9bb6180 RCX: 00007f88a998ebe9 [ 469.460070][T12365] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 469.460084][T12365] RBP: 00007f88a9a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 469.460099][T12365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 469.460114][T12365] R13: 00007f88a9bb6218 R14: 00007f88a9bb6180 R15: 00007ffe8a66cdd8 [ 469.460147][T12365] [ 470.911769][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1480'. [ 473.478798][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1492'. [ 475.240905][T12476] misc userio: No port type given on /dev/userio [ 475.437655][T12480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 475.573896][T12478] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input206 [ 475.627532][T12484] netlink: 'syz.3.1502': attribute type 1 has an invalid length. [ 476.170148][T12487] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input207 [ 478.917101][T12536] Process accounting resumed [ 479.234063][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 480.028766][T12560] misc userio: No port type given on /dev/userio [ 480.112548][T12557] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 480.401302][T12564] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input209 [ 481.024893][T12565] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input210 [ 481.775740][T12579] rnbd_client L213: map_device: Parameters missing [ 482.608912][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 483.200086][ T6726] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 483.705461][T12613] netlink: Unknown conntrack attr (type=146, max=9) [ 485.497634][T12648] misc userio: No port type given on /dev/userio [ 486.000867][T12651] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input211 [ 486.673025][T12663] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 486.860622][T12657] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input212 [ 490.154112][T12697] Process accounting resumed [ 490.482681][T12706] misc userio: No port type given on /dev/userio [ 490.954528][T12706] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input214 [ 491.731059][T12727] serio: Serial port pty6 [ 491.748352][T12712] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input216 [ 496.449716][T12784] misc userio: No port type given on /dev/userio [ 497.057701][T12788] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input217 [ 497.598250][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 498.499005][T12815] serio: Serial port pty6 [ 499.117942][T12795] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input218 [ 500.930606][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1580'. [ 501.498379][T12854] ERROR: Out of memory at tomoyo_memory_ok. [ 501.519178][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.525762][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.541802][T12851] ERROR: Out of memory at tomoyo_memory_ok. [ 503.261752][T12877] FAULT_INJECTION: forcing a failure. [ 503.261752][T12877] name failslab, interval 1, probability 0, space 0, times 0 [ 503.277836][T12877] CPU: 0 UID: 0 PID: 12877 Comm: syz.1.1588 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 503.277862][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 503.277872][T12877] Call Trace: [ 503.277881][T12877] [ 503.277888][T12877] dump_stack_lvl+0x16c/0x1f0 [ 503.277912][T12877] should_fail_ex+0x512/0x640 [ 503.277932][T12877] ? fs_reclaim_acquire+0xae/0x150 [ 503.277955][T12877] ? tomoyo_encode2+0x100/0x3e0 [ 503.277974][T12877] should_failslab+0xc2/0x120 [ 503.277993][T12877] __kmalloc_noprof+0xd2/0x510 [ 503.278009][T12877] ? d_absolute_path+0x136/0x1a0 [ 503.278032][T12877] tomoyo_encode2+0x100/0x3e0 [ 503.278053][T12877] tomoyo_encode+0x29/0x50 [ 503.278071][T12877] tomoyo_realpath_from_path+0x18f/0x6e0 [ 503.278096][T12877] tomoyo_check_open_permission+0x2ab/0x3c0 [ 503.278114][T12877] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 503.278158][T12877] ? do_raw_spin_lock+0x12c/0x2b0 [ 503.278185][T12877] tomoyo_file_open+0x6b/0x90 [ 503.278199][T12877] security_file_open+0x84/0x1e0 [ 503.278219][T12877] do_dentry_open+0x596/0x1530 [ 503.278242][T12877] vfs_open+0x82/0x3f0 [ 503.278264][T12877] path_openat+0x1de4/0x2cb0 [ 503.278287][T12877] ? __pfx_path_openat+0x10/0x10 [ 503.278308][T12877] do_filp_open+0x20b/0x470 [ 503.278325][T12877] ? __pfx_do_filp_open+0x10/0x10 [ 503.278354][T12877] ? alloc_fd+0x471/0x7d0 [ 503.278375][T12877] do_sys_openat2+0x11b/0x1d0 [ 503.278395][T12877] ? __pfx_do_sys_openat2+0x10/0x10 [ 503.278417][T12877] ? do_fcntl+0x1eb/0x15a0 [ 503.278443][T12877] __x64_sys_openat+0x174/0x210 [ 503.278463][T12877] ? __pfx___x64_sys_openat+0x10/0x10 [ 503.278492][T12877] do_syscall_64+0xcd/0x490 [ 503.278511][T12877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.278526][T12877] RIP: 0033:0x7f4d85d8ebe9 [ 503.278538][T12877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.278553][T12877] RSP: 002b:00007f4d86cc2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 503.278568][T12877] RAX: ffffffffffffffda RBX: 00007f4d85fb5fa0 RCX: 00007f4d85d8ebe9 [ 503.278577][T12877] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 503.278586][T12877] RBP: 00007f4d85e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 503.278595][T12877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.278603][T12877] R13: 00007f4d85fb6038 R14: 00007f4d85fb5fa0 R15: 00007ffc6723ebb8 [ 503.278622][T12877] [ 503.278645][T12877] ERROR: Out of memory at tomoyo_realpath_from_path. [ 503.871163][T12885] misc userio: No port type given on /dev/userio [ 504.182864][T12890] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input219 [ 504.704841][T12892] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input220 [ 506.062466][T12921] misc userio: No port type given on /dev/userio [ 506.389525][T12921] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input222 [ 506.586987][T12936] misc userio: No port type given on /dev/userio [ 507.003640][T12941] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input223 [ 509.563153][T12988] ptrace attach of "./syz-executor exec"[5860] was attempted by ""[12988] [ 509.746571][T12982] Process accounting paused [ 509.801151][T12994] misc userio: No port type given on /dev/userio [ 509.879646][T12999] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input224 [ 510.188549][T12994] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input225 [ 511.728361][T13019] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1621'. [ 513.509204][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 513.703302][ T30] audit: type=1807 audit(4294967507.125:13): UNKNOWN=DÚ>3ዾ¦H° res=0 [ 513.772872][T13057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1632'. [ 513.791565][ T30] audit: type=1802 audit(4294967507.145:14): pid=13055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1632" res=0 errno=0 [ 514.331681][T13054] ima: policy update failed [ 514.359219][ T30] audit: type=1802 audit(4294967507.765:15): pid=13054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1632" res=0 errno=0 [ 515.014962][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 520.190251][T13163] Process accounting paused [ 521.330877][T13185] misc userio: No port type given on /dev/userio [ 521.747759][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1667'. [ 523.308260][T13208] misc userio: No port type given on /dev/userio [ 523.949977][T13208] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input229 [ 524.491973][T13221] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1678'. [ 524.517250][T13221] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1678'. [ 524.955887][T13234] misc userio: No port type given on /dev/userio [ 525.100749][T13209] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input230 [ 526.795732][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 526.857050][T13271] netlink: 354 bytes leftover after parsing attributes in process `syz.4.1688'. [ 527.330403][T13280] misc userio: No port type given on /dev/userio [ 527.442552][T13280] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input231 [ 527.496624][T13284] misc userio: No port type given on /dev/userio [ 527.676282][T13285] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input232 [ 528.495512][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'. [ 528.708986][T13306] misc userio: No port type given on /dev/userio [ 529.284273][T13320] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input233 [ 529.843683][T13321] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input234 [ 531.827499][ T6726] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 532.723195][T13387] __vm_enough_memory: pid: 13387, comm: syz.1.1715, bytes: 4398046511104 not enough memory for the allocation [ 533.597572][T13410] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1719'. [ 533.668054][T13410] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1719'. [ 533.849065][T13415] Invalid ELF header magic: != ELF [ 534.000350][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1722'. [ 534.090622][T13423] misc userio: No port type given on /dev/userio [ 534.314161][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'. [ 535.831611][ T6726] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 535.841273][ T6726] Bluetooth: hci2: Injecting HCI hardware error event [ 535.850886][ T6726] Bluetooth: hci2: hardware error 0x00 [ 536.137963][T13453] block nbd7: not configured, cannot reconfigure [ 536.252327][T13456] blktrace: Concurrent blktraces are not allowed on loop2 [ 537.885104][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 537.909714][ T6726] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 540.358734][T13494] Process accounting resumed [ 540.368002][T13501] misc userio: No port type given on /dev/userio [ 543.170701][ T6726] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 543.917822][T13549] syz.4.1753 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 544.513648][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'. [ 544.600331][T13563] misc userio: No port type given on /dev/userio [ 544.937805][T13566] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input235 [ 545.356418][T13577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1762'. [ 545.432207][T13577] veth0_macvtap: left promiscuous mode [ 547.200137][ T6726] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 547.208761][ T6726] Bluetooth: hci1: Injecting HCI hardware error event [ 547.216995][T13454] Bluetooth: hci1: hardware error 0x00 [ 547.814109][T13614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 549.269659][T13454] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 549.300554][T13627] misc userio: No port type given on /dev/userio [ 550.433175][T13626] Process accounting resumed [ 551.390094][T13649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'. [ 551.440938][T13651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1779'. [ 551.457557][T13651] veth1_macvtap: left promiscuous mode [ 552.756929][T13675] misc userio: No port type given on /dev/userio [ 555.960241][T13737] misc userio: No port type given on /dev/userio [ 557.205355][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 557.394507][T13783] binder: 13781:13783 ioctl 5380 2000000000c0 returned -22 [ 557.434751][T13782] sd 0:0:1:0: PR command failed: 1026 [ 557.467070][T13782] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 557.481288][T13782] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 557.900170][T13808] openvswitch: netlink: IP tunnel dst address not specified [ 558.391426][T13811] misc userio: No port type given on /dev/userio [ 558.501649][T13815] FAULT_INJECTION: forcing a failure. [ 558.501649][T13815] name failslab, interval 1, probability 0, space 0, times 0 [ 558.501694][T13815] CPU: 0 UID: 0 PID: 13815 Comm: syz.3.1814 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 558.501713][T13815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.501722][T13815] Call Trace: [ 558.501727][T13815] [ 558.501733][T13815] dump_stack_lvl+0x16c/0x1f0 [ 558.501754][T13815] should_fail_ex+0x512/0x640 [ 558.501774][T13815] ? __kmalloc_noprof+0xbf/0x510 [ 558.501791][T13815] ? realloc_user_queue+0x288/0x320 [ 558.501812][T13815] should_failslab+0xc2/0x120 [ 558.501831][T13815] __kmalloc_noprof+0xd2/0x510 [ 558.501850][T13815] realloc_user_queue+0x288/0x320 [ 558.501872][T13815] ? __pfx_snd_timer_user_open+0x10/0x10 [ 558.501894][T13815] snd_timer_user_open+0xfc/0x180 [ 558.501916][T13815] snd_open+0x22a/0x4c0 [ 558.501935][T13815] ? __pfx_snd_open+0x10/0x10 [ 558.501953][T13815] chrdev_open+0x231/0x6a0 [ 558.501971][T13815] ? __pfx_apparmor_file_open+0x10/0x10 [ 558.501987][T13815] ? __pfx_chrdev_open+0x10/0x10 [ 558.502005][T13815] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 558.502024][T13815] do_dentry_open+0x97f/0x1530 [ 558.502041][T13815] ? __pfx_chrdev_open+0x10/0x10 [ 558.502062][T13815] vfs_open+0x82/0x3f0 [ 558.502098][T13815] path_openat+0x1de4/0x2cb0 [ 558.502133][T13815] ? __pfx_path_openat+0x10/0x10 [ 558.502158][T13815] do_filp_open+0x20b/0x470 [ 558.502174][T13815] ? __pfx_do_filp_open+0x10/0x10 [ 558.502203][T13815] ? alloc_fd+0x471/0x7d0 [ 558.502223][T13815] do_sys_openat2+0x11b/0x1d0 [ 558.502243][T13815] ? __pfx_do_sys_openat2+0x10/0x10 [ 558.502271][T13815] __x64_sys_openat+0x174/0x210 [ 558.502292][T13815] ? __pfx___x64_sys_openat+0x10/0x10 [ 558.502320][T13815] do_syscall_64+0xcd/0x490 [ 558.502339][T13815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.502354][T13815] RIP: 0033:0x7f4bcfd8ebe9 [ 558.502365][T13815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.502379][T13815] RSP: 002b:00007f4bcdfd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 558.502393][T13815] RAX: ffffffffffffffda RBX: 00007f4bcffb6090 RCX: 00007f4bcfd8ebe9 [ 558.502402][T13815] RDX: 0000000000101440 RSI: 0000200000001cc0 RDI: ffffffffffffff9c [ 558.502411][T13815] RBP: 00007f4bcfe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 558.502420][T13815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.502428][T13815] R13: 00007f4bcffb6128 R14: 00007f4bcffb6090 R15: 00007ffdd3307498 [ 558.502446][T13815] [ 559.270410][T13838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 559.434320][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1819'. [ 561.283928][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 561.534529][T13894] misc userio: No port type given on /dev/userio [ 561.615801][T13896] ERROR: Out of memory at tomoyo_memory_ok. [ 562.957008][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.964596][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.531053][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1842'. [ 564.663426][T13970] misc userio: No port type given on /dev/userio [ 565.441177][ T6368] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:1: bg 2: bad block bitmap checksum [ 565.542737][ T6368] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 20 with max blocks 9 with error 74 [ 565.622983][ T6368] EXT4-fs (sda1): This should not happen!! Data will be lost [ 565.622983][ T6368] [ 566.280444][ T30] audit: type=1800 audit(4294968586.693:16): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1852" name="features" dev="configfs" ino=46145 res=0 errno=0 [ 566.760014][T14032] misc userio: No port type given on /dev/userio [ 566.791805][T14024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1855'. [ 567.647755][T14045] random: crng reseeded on system resumption [ 567.672044][T10858] ERROR: Out of memory at tomoyo_memory_ok. [ 567.707643][T10868] ERROR: Out of memory at tomoyo_memory_ok. [ 570.441076][T14256] Process accounting paused [ 575.189539][T14683] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 575.238376][T14683] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 575.277534][T14683] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 575.430491][T14699] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 576.173357][T10868] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.356369][T10868] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.415038][ T6726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 576.433697][ T6726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 576.452614][ T6726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 576.471811][ T6726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 576.481449][ T6726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 576.546879][T10868] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.657311][T10868] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.248321][T10868] bridge_slave_1: left allmulticast mode [ 577.279714][T10868] bridge_slave_1: left promiscuous mode [ 577.287224][T10868] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.360687][T10868] bridge_slave_0: left allmulticast mode [ 577.381992][T10868] bridge_slave_0: left promiscuous mode [ 577.388637][T10868] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.549727][ T6726] Bluetooth: hci3: command tx timeout [ 579.010242][T10868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.050357][T10868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.074425][T10868] bond0 (unregistering): Released all slaves [ 579.182508][T14770] chnl_net:caif_netlink_parms(): no params data found [ 579.338639][T10868] ovs_ÿþ: left promiscuous mode [ 579.794737][T14770] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.813254][T14770] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.837037][T14770] bridge_slave_0: entered allmulticast mode [ 579.868395][T14770] bridge_slave_0: entered promiscuous mode [ 579.960717][T14770] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.972809][T14770] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.009766][T14770] bridge_slave_1: entered allmulticast mode [ 580.039920][T14770] bridge_slave_1: entered promiscuous mode [ 580.258043][T14770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.327505][T14770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.586875][T14770] team0: Port device team_slave_0 added [ 580.632165][ T6726] Bluetooth: hci3: command tx timeout [ 580.659930][T14770] team0: Port device team_slave_1 added [ 580.903540][T14770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.929491][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.009480][T14770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.090862][T14770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.129480][T14770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 581.193841][T14770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.509120][T14770] hsr_slave_0: entered promiscuous mode [ 581.538421][T14770] hsr_slave_1: entered promiscuous mode [ 581.559047][T14770] debugfs: 'hsr0' already exists in 'hsr' [ 581.579611][T14770] Cannot create hsr debugfs directory [ 582.712505][ T6726] Bluetooth: hci3: command tx timeout [ 583.629309][T14770] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 583.646185][T14770] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 583.685732][T14770] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 583.717842][T14770] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 583.953060][T14770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.018372][T14770] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.064407][T10868] hsr_slave_0: left promiscuous mode [ 584.084685][T10868] hsr_slave_1: left promiscuous mode [ 584.091563][T10868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 584.109901][T10868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.130936][T10868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 584.138342][T10868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 584.201223][T10868] veth0_macvtap: left promiscuous mode [ 584.207191][T10868] veth1_vlan: left promiscuous mode [ 584.229833][T10868] veth0_vlan: left promiscuous mode [ 584.792686][ T6726] Bluetooth: hci3: command tx timeout [ 585.291352][T10868] team0 (unregistering): Port device team_slave_1 removed [ 585.392664][T10868] team0 (unregistering): Port device team_slave_0 removed [ 586.481227][ T6365] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.488407][ T6365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.532307][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.539548][ T6365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.967915][T14770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.027954][T14770] veth0_vlan: entered promiscuous mode [ 587.056422][T14770] veth1_vlan: entered promiscuous mode [ 587.102249][T14770] veth0_macvtap: entered promiscuous mode [ 587.115094][T14770] veth1_macvtap: entered promiscuous mode [ 587.137740][T14770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.155048][T14770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.180890][T10868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.201945][T10868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.235659][T10868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.258077][T10868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.327261][T10868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.350516][T10868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.385559][T10858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.399551][T10858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.899136][T15309] misc userio: No port type given on /dev/userio [ 588.088584][T13454] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 588.097350][T13454] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 588.105211][T13454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 588.114579][T13454] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 588.133350][T13454] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 588.233457][T10868] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.402749][T10868] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.514504][T10868] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.662369][T10868] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.063753][T15310] chnl_net:caif_netlink_parms(): no params data found [ 589.394433][T10868] bridge_slave_1: left allmulticast mode [ 589.473053][T10868] bridge_slave_1: left promiscuous mode [ 589.604546][T10868] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.712841][T10868] bridge_slave_0: left allmulticast mode [ 589.745976][T10868] bridge_slave_0: left promiscuous mode [ 589.772490][T10868] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.235663][T13454] Bluetooth: hci4: command tx timeout [ 590.433370][T10868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.447712][T10868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.461390][T10868] bond0 (unregistering): Released all slaves [ 590.622208][T10868] ovs_ÿþ: left promiscuous mode [ 590.658668][T15310] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.666349][T15310] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.673625][T15310] bridge_slave_0: entered allmulticast mode [ 590.686569][T15310] bridge_slave_0: entered promiscuous mode [ 590.744194][T15310] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.759555][T15310] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.766826][T15310] bridge_slave_1: entered allmulticast mode [ 590.774993][T15310] bridge_slave_1: entered promiscuous mode [ 590.872221][T15310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.914962][T15310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.096005][T15310] team0: Port device team_slave_0 added [ 591.110379][T15310] team0: Port device team_slave_1 added [ 591.217584][T15310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.239785][T15310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.265698][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.287667][T15310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.312005][T15310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.318969][T15310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.344880][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.394920][T15310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.651594][T15310] hsr_slave_0: entered promiscuous mode [ 591.658228][T15310] hsr_slave_1: entered promiscuous mode [ 591.665179][T15310] debugfs: 'hsr0' already exists in 'hsr' [ 591.674400][T15310] Cannot create hsr debugfs directory [ 592.323272][T13454] Bluetooth: hci4: command tx timeout [ 593.071888][T15310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 593.084310][T15310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 593.098222][T15310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 593.115657][T15310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 593.162327][T10868] hsr_slave_1: left promiscuous mode [ 593.168415][T10868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 593.179011][T10868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 593.187281][T10868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 593.195767][T10868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.220380][T10868] veth1_macvtap: left promiscuous mode [ 593.231134][T10868] veth0_macvtap: left promiscuous mode [ 593.238628][T10868] veth1_vlan: left promiscuous mode [ 593.244800][T10868] veth0_vlan: left promiscuous mode [ 593.789317][T10868] team0 (unregistering): Port device team_slave_1 removed [ 593.837486][T10868] team0 (unregistering): Port device team_slave_0 removed [ 594.389870][T13454] Bluetooth: hci4: command tx timeout [ 594.555907][T15310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.594731][T15310] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.627916][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.635134][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.667127][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.674335][ T6452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.147393][T15310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.753946][T15310] veth0_vlan: entered promiscuous mode [ 595.787141][T15310] veth1_vlan: entered promiscuous mode [ 595.854008][T15310] veth0_macvtap: entered promiscuous mode [ 595.890176][T15310] veth1_macvtap: entered promiscuous mode [ 595.937454][T15310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.977226][T15310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.004630][ T6452] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.041655][ T6452] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.063619][ T6452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.099997][ T6452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.298982][ T6370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.332368][ T6370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.385260][ T6452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.419763][ T6452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.470492][T13454] Bluetooth: hci4: command tx timeout [ 596.611509][T15454] sctp: [Deprecated]: syz.1.2781 (pid 15454) Use of int in max_burst socket option. [ 596.611509][T15454] Use struct sctp_assoc_value instead [ 596.685126][T15454] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2781'. [ 597.497043][ T6726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 597.506993][ T6726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 597.518736][ T7933] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 597.527647][ T7933] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 597.559629][ T7933] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 598.883916][T15467] chnl_net:caif_netlink_parms(): no params data found [ 599.595211][ T7933] Bluetooth: hci2: command tx timeout [ 599.721156][T15467] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.729661][T15467] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.770711][T15467] bridge_slave_0: entered allmulticast mode [ 599.778604][T15467] bridge_slave_0: entered promiscuous mode [ 599.864065][T15467] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.886764][T15467] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.910121][T15467] bridge_slave_1: entered allmulticast mode [ 599.929694][T15467] bridge_slave_1: entered promiscuous mode [ 600.045309][T15467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.091331][T15467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.252239][T15467] team0: Port device team_slave_0 added [ 600.316243][T15467] team0: Port device team_slave_1 added [ 600.411088][T15467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.418057][T15467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.473368][T15467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.521660][T15467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.528715][T15467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.557924][T15467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.882523][T15544] ERROR: Out of memory at tomoyo_memory_ok. [ 601.032353][T15467] hsr_slave_0: entered promiscuous mode [ 601.038945][T15467] hsr_slave_1: entered promiscuous mode [ 601.045745][T15467] debugfs: 'hsr0' already exists in 'hsr' [ 601.079545][T15467] Cannot create hsr debugfs directory [ 601.658853][T15467] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.684795][ T7933] Bluetooth: hci2: command tx timeout [ 601.862599][T15467] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.977697][T15467] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.082579][T15467] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.338920][T15467] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 602.351330][T15467] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 602.362612][T15467] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 602.377287][T15467] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 602.493657][T15467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 602.517321][T15467] 8021q: adding VLAN 0 to HW filter on device team0 [ 602.536456][ T6452] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.543644][ T6452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.570907][ T6452] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.578058][ T6452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.884152][T15467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.946591][T15467] veth0_vlan: entered promiscuous mode [ 602.966575][T15467] veth1_vlan: entered promiscuous mode [ 603.015594][T15467] veth0_macvtap: entered promiscuous mode [ 603.027424][T15467] veth1_macvtap: entered promiscuous mode [ 603.058532][T15467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 603.080026][T15467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 603.098103][ T6452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.121576][ T6452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.137510][ T6452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.152898][ T6452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.251191][ T6368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.259036][ T6368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.304184][ T6452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.313356][ T6452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.755504][ T7933] Bluetooth: hci2: command tx timeout [ 604.201279][T13454] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 604.219836][T13454] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 604.231095][T13454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 604.255974][T13454] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 604.273269][T13454] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 604.592193][T15579] chnl_net:caif_netlink_parms(): no params data found [ 605.373304][T15579] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.427468][T15579] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.427680][T15579] bridge_slave_0: entered allmulticast mode [ 605.429646][T15579] bridge_slave_0: entered promiscuous mode [ 605.551351][T15579] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.568832][T15579] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.576680][T15579] bridge_slave_1: entered allmulticast mode [ 605.591258][T15579] bridge_slave_1: entered promiscuous mode [ 605.716647][T15579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.794685][T15579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.838769][T13454] Bluetooth: hci2: command tx timeout [ 606.018159][T15579] team0: Port device team_slave_0 added [ 606.053958][T15579] team0: Port device team_slave_1 added [ 606.207203][T15579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.214934][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.240869][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.309627][T13454] Bluetooth: hci5: command tx timeout [ 606.333033][T15579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.451014][T15579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.461492][T15579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.503807][T15579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.868668][T15618] misc userio: No port type given on /dev/userio [ 607.040447][T15579] hsr_slave_0: entered promiscuous mode [ 607.041478][T15579] hsr_slave_1: entered promiscuous mode [ 607.042161][T15579] debugfs: 'hsr0' already exists in 'hsr' [ 607.042181][T15579] Cannot create hsr debugfs directory [ 608.090741][T15579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.350885][T15579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.403990][T13454] Bluetooth: hci5: command tx timeout [ 608.581978][T15579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.795025][T15579] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.303872][T15579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 609.335760][T15579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 609.348996][T15579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 609.398439][T15579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 609.731459][T15579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.827017][T15579] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.048753][T15673] misc userio: No port type given on /dev/userio [ 610.108849][T10858] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.108967][T10858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.198939][ T6365] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.199009][ T6365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.470014][T13454] Bluetooth: hci5: command tx timeout [ 611.301221][T15579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.452110][T15692] Invalid ELF header magic: != ELF [ 611.506730][T15579] veth0_vlan: entered promiscuous mode [ 611.533311][T15579] veth1_vlan: entered promiscuous mode [ 611.855102][T15579] veth0_macvtap: entered promiscuous mode [ 611.972731][T15579] veth1_macvtap: entered promiscuous mode [ 612.045099][T15579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.104680][T15579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.161075][ T6365] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.180191][ T6365] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.221034][ T6365] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.242138][ T6365] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.374871][ T6370] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.403930][ T6370] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.501686][ T6368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.515086][ T6368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.562927][T13454] Bluetooth: hci5: command tx timeout [ 613.179680][T15725] misc userio: No port type given on /dev/userio [ 614.890861][T15756] Invalid ELF header magic: != ELF [ 615.039076][T15763] ERROR: Out of memory at tomoyo_memory_ok. [ 615.855853][T15786] misc userio: No port type given on /dev/userio [ 617.120631][T15806] random: crng reseeded on system resumption [ 617.132327][ T6370] ERROR: Out of memory at tomoyo_memory_ok. [ 617.139991][T10858] ERROR: Out of memory at tomoyo_memory_ok. [ 617.828430][T15824] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2850'. [ 618.962925][T15849] Invalid ELF header magic: != ELF [ 620.020208][T15877] ERROR: Out of memory at tomoyo_memory_ok. [ 622.882673][T15917] Invalid ELF header magic: != ELF [ 623.399602][T15927] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 624.397322][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.403948][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.157119][T15952] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 626.601832][T15985] misc userio: No port type given on /dev/userio [ 627.664027][T15990] netlink: 'syz.2.2890': attribute type 1 has an invalid length. [ 628.517620][T16016] ACPI: Can not change Invalid GPE/Fixed Event status [ 630.369936][T16041] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'. [ 630.925790][T16057] ERROR: Out of memory at tomoyo_memory_ok. [ 630.961260][T16057] netlink: 302 bytes leftover after parsing attributes in process `syz.3.2904'. [ 633.375228][T16113] vivid-007: ================= START STATUS ================= [ 633.400762][T16104] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2914'. [ 633.419540][T16113] vivid-007: Generate PTS: true [ 633.424601][T16113] vivid-007: Generate SCR: true [ 633.443266][T16113] tpg source WxH: 320x240 (Y'CbCr) [ 633.448438][T16113] tpg field: 1 [ 633.453676][T16104] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2914'. [ 633.467853][T16106] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2913'. [ 633.499771][T16113] tpg crop: (0,0)/320x240 [ 633.508904][T16113] tpg compose: (0,0)/320x240 [ 633.519606][T16113] tpg colorspace: 8 [ 633.523477][T16113] tpg transfer function: 0/0 [ 633.528065][T16113] tpg Y'CbCr encoding: 0/0 [ 633.619845][T16113] tpg quantization: 0/0 [ 633.624049][T16113] tpg RGB range: 0/2 [ 633.627949][T16113] vivid-007: ================== END STATUS ================== [ 634.037159][T16119] can: request_module (can-proto-3) failed. [ 634.275757][T16126] misc userio: No port type given on /dev/userio [ 634.280291][T16128] misc userio: No port type given on /dev/userio [ 635.375946][T16145] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2922'. [ 635.577661][T16151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2922'. [ 635.597220][T16151] veth1_macvtap: left promiscuous mode [ 637.536204][T16191] misc userio: No port type given on /dev/userio [ 638.597103][T16206] misc userio: No port type given on /dev/userio [ 641.074950][T16251] misc userio: No port type given on /dev/userio [ 642.393429][T16272] misc userio: No port type given on /dev/userio [ 642.681789][T16283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2955'. [ 644.880500][T16315] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2963'. [ 645.699196][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2966'. [ 646.211921][ T30] audit: type=1800 audit(4294976474.649:17): pid=16335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2968" name="dbroot" dev="configfs" ino=60621 res=0 errno=0 [ 646.448927][T16341] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2970'. [ 646.685920][T16339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2970'. [ 646.860942][T16339] veth1_macvtap: left promiscuous mode [ 648.894793][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2977'. [ 649.331445][T16391] misc userio: No port type given on /dev/userio [ 650.317525][T16402] misc userio: No port type given on /dev/userio [ 651.890341][T16422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2989'. [ 652.493685][T16431] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 652.567637][T16434] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 652.580294][T16433] misc userio: No port type given on /dev/userio [ 652.632978][ T30] audit: type=1800 audit(4294976481.069:18): pid=16437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2994" name="features" dev="configfs" ino=60850 res=0 errno=0 [ 656.487970][T16469] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3003'. [ 656.688524][T16473] FAULT_INJECTION: forcing a failure. [ 656.688524][T16473] name failslab, interval 1, probability 0, space 0, times 0 [ 656.702076][T16473] CPU: 0 UID: 0 PID: 16473 Comm: syz.2.3004 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 656.702100][T16473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 656.702110][T16473] Call Trace: [ 656.702115][T16473] [ 656.702122][T16473] dump_stack_lvl+0x16c/0x1f0 [ 656.702146][T16473] should_fail_ex+0x512/0x640 [ 656.702175][T16473] ? __kmalloc_noprof+0xbf/0x510 [ 656.702195][T16473] ? realloc_user_queue+0x288/0x320 [ 656.702217][T16473] should_failslab+0xc2/0x120 [ 656.702235][T16473] __kmalloc_noprof+0xd2/0x510 [ 656.702255][T16473] realloc_user_queue+0x288/0x320 [ 656.702277][T16473] ? __pfx_snd_timer_user_open+0x10/0x10 [ 656.702298][T16473] snd_timer_user_open+0xfc/0x180 [ 656.702319][T16473] snd_open+0x22a/0x4c0 [ 656.702338][T16473] ? __pfx_snd_open+0x10/0x10 [ 656.702356][T16473] chrdev_open+0x231/0x6a0 [ 656.702373][T16473] ? __pfx_apparmor_file_open+0x10/0x10 [ 656.702388][T16473] ? __pfx_chrdev_open+0x10/0x10 [ 656.702407][T16473] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 656.702426][T16473] do_dentry_open+0x97f/0x1530 [ 656.702443][T16473] ? __pfx_chrdev_open+0x10/0x10 [ 656.702464][T16473] vfs_open+0x82/0x3f0 [ 656.702486][T16473] path_openat+0x1de4/0x2cb0 [ 656.702508][T16473] ? __pfx_path_openat+0x10/0x10 [ 656.702528][T16473] do_filp_open+0x20b/0x470 [ 656.702544][T16473] ? __pfx_do_filp_open+0x10/0x10 [ 656.702573][T16473] ? alloc_fd+0x471/0x7d0 [ 656.702592][T16473] do_sys_openat2+0x11b/0x1d0 [ 656.702612][T16473] ? __pfx_do_sys_openat2+0x10/0x10 [ 656.702639][T16473] __x64_sys_openat+0x174/0x210 [ 656.702660][T16473] ? __pfx___x64_sys_openat+0x10/0x10 [ 656.702688][T16473] do_syscall_64+0xcd/0x490 [ 656.702707][T16473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.702721][T16473] RIP: 0033:0x7fde8738ebe9 [ 656.702733][T16473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.702747][T16473] RSP: 002b:00007fde88240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 656.702763][T16473] RAX: ffffffffffffffda RBX: 00007fde875b5fa0 RCX: 00007fde8738ebe9 [ 656.702772][T16473] RDX: 0000000000101440 RSI: 0000200000001cc0 RDI: ffffffffffffff9c [ 656.702781][T16473] RBP: 00007fde87411e19 R08: 0000000000000000 R09: 0000000000000000 [ 656.702790][T16473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.702798][T16473] R13: 00007fde875b6038 R14: 00007fde875b5fa0 R15: 00007fffa7c86538 [ 656.702817][T16473] [ 656.953840][ C0] vkms_vblank_simulate: vblank timer overrun [ 656.976159][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3001'. [ 657.030301][T16475] bridge0: port 3(macvlan0) entered blocking state [ 657.036945][T16475] bridge0: port 3(macvlan0) entered disabled state [ 657.046860][T16475] macvlan0: entered allmulticast mode [ 657.052435][T16475] veth1_vlan: entered allmulticast mode [ 657.060337][T16475] macvlan0: entered promiscuous mode [ 657.067258][T16475] bridge0: port 3(macvlan0) entered blocking state [ 657.074184][T16475] bridge0: port 3(macvlan0) entered forwarding state [ 658.223724][T16487] misc userio: No port type given on /dev/userio [ 658.562782][T16489] misc userio: No port type given on /dev/userio [ 660.749888][T16528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3012'. [ 661.961423][T16543] FAULT_INJECTION: forcing a failure. [ 661.961423][T16543] name failslab, interval 1, probability 0, space 0, times 0 [ 662.079878][T16543] CPU: 0 UID: 0 PID: 16543 Comm: syz.1.3014 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 662.079915][T16543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 662.079930][T16543] Call Trace: [ 662.079939][T16543] [ 662.079949][T16543] dump_stack_lvl+0x16c/0x1f0 [ 662.079985][T16543] should_fail_ex+0x512/0x640 [ 662.080019][T16543] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 662.080053][T16543] should_failslab+0xc2/0x120 [ 662.080083][T16543] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 662.080114][T16543] ? sk_prot_alloc+0x60/0x2a0 [ 662.080155][T16543] sk_prot_alloc+0x60/0x2a0 [ 662.080192][T16543] sk_alloc+0x36/0xc20 [ 662.080222][T16543] inet_create+0x3a1/0x1040 [ 662.080247][T16543] ? inet_create+0x93/0x1040 [ 662.080276][T16543] __sock_create+0x335/0x8d0 [ 662.080320][T16543] mptcp_subflow_create_socket+0xf5/0xed0 [ 662.080371][T16543] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 662.080420][T16543] __mptcp_nmpc_sk+0x182/0x7d0 [ 662.080456][T16543] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 662.080496][T16543] ? __local_bh_enable_ip+0xa4/0x120 [ 662.080530][T16543] mptcp_getsockopt+0xcf8/0xe20 [ 662.080564][T16543] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 662.080597][T16543] ? find_held_lock+0x2b/0x80 [ 662.080619][T16543] ? __might_fault+0xe3/0x190 [ 662.080645][T16543] ? __might_fault+0xe3/0x190 [ 662.080670][T16543] ? __might_fault+0x13b/0x190 [ 662.080710][T16543] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 662.080744][T16543] do_sock_getsockopt+0x34a/0x440 [ 662.080780][T16543] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 662.080813][T16543] ? __fget_files+0x204/0x3c0 [ 662.080858][T16543] __sys_getsockopt+0x123/0x1b0 [ 662.080896][T16543] __x64_sys_getsockopt+0xbd/0x160 [ 662.080923][T16543] ? do_syscall_64+0x91/0x490 [ 662.080952][T16543] ? lockdep_hardirqs_on+0x7c/0x110 [ 662.080980][T16543] do_syscall_64+0xcd/0x490 [ 662.081013][T16543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.081038][T16543] RIP: 0033:0x7f0ddb38ebe9 [ 662.081059][T16543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.081085][T16543] RSP: 002b:00007f0ddc24b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 662.081110][T16543] RAX: ffffffffffffffda RBX: 00007f0ddb5b6090 RCX: 00007f0ddb38ebe9 [ 662.081127][T16543] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000006 [ 662.081142][T16543] RBP: 00007f0ddb411e19 R08: 0000000000000000 R09: 0000000000000000 [ 662.081158][T16543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 662.081173][T16543] R13: 00007f0ddb5b6128 R14: 00007f0ddb5b6090 R15: 00007ffe2bcb9b38 [ 662.081209][T16543] [ 663.915862][T16556] delete_channel: no stack [ 664.647290][T16587] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 664.765389][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'. [ 665.437703][T16592] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3026'. [ 665.575636][T16596] FAULT_INJECTION: forcing a failure. [ 665.575636][T16596] name failslab, interval 1, probability 0, space 0, times 0 [ 665.612833][T16596] CPU: 0 UID: 2054 PID: 16596 Comm: syz.2.3027 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 665.612875][T16596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 665.612891][T16596] Call Trace: [ 665.612901][T16596] [ 665.612912][T16596] dump_stack_lvl+0x16c/0x1f0 [ 665.612949][T16596] should_fail_ex+0x512/0x640 [ 665.612985][T16596] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 665.613016][T16596] should_failslab+0xc2/0x120 [ 665.613050][T16596] __kmalloc_cache_noprof+0x6a/0x3e0 [ 665.613074][T16596] ? key_user_lookup+0x169/0x560 [ 665.613106][T16596] ? key_user_lookup+0x195/0x560 [ 665.613142][T16596] key_user_lookup+0x195/0x560 [ 665.613185][T16596] ? __pfx_key_user_lookup+0x10/0x10 [ 665.613217][T16596] ? security_key_permission+0x79/0x240 [ 665.613256][T16596] key_alloc+0x18b/0x1330 [ 665.613298][T16596] ? __pfx_keyring_search+0x10/0x10 [ 665.613335][T16596] ? __pfx_key_alloc+0x10/0x10 [ 665.613364][T16596] ? __pfx_key_default_cmp+0x10/0x10 [ 665.613399][T16596] ? __pfx_keyring_search_iterator+0x10/0x10 [ 665.613439][T16596] keyring_alloc+0x44/0xc0 [ 665.613476][T16596] look_up_user_keyrings+0x46d/0x760 [ 665.613511][T16596] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 665.613555][T16596] lookup_user_key+0x1a3/0x1300 [ 665.613590][T16596] ? __pfx_lookup_user_key+0x10/0x10 [ 665.613616][T16596] ? do_futex+0x122/0x350 [ 665.613657][T16596] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 665.613695][T16596] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 665.613730][T16596] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 665.613770][T16596] keyctl_keyring_clear+0x24/0x1a0 [ 665.613797][T16596] __do_sys_keyctl+0x355/0x590 [ 665.613827][T16596] do_syscall_64+0xcd/0x490 [ 665.613861][T16596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.613887][T16596] RIP: 0033:0x7fde8738ebe9 [ 665.613908][T16596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.613935][T16596] RSP: 002b:00007fde88240038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 665.613961][T16596] RAX: ffffffffffffffda RBX: 00007fde875b5fa0 RCX: 00007fde8738ebe9 [ 665.613979][T16596] RDX: 0000000000000002 RSI: 00000000fffffffb RDI: 0000000000000007 [ 665.613995][T16596] RBP: 00007fde87411e19 R08: 0000000000000008 R09: 0000000000000000 [ 665.614012][T16596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.614027][T16596] R13: 00007fde875b6038 R14: 00007fde875b5fa0 R15: 00007fffa7c86538 [ 665.614064][T16596] [ 666.263215][T16605] misc userio: No port type given on /dev/userio [ 667.257693][T16612] program syz.2.3032 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 668.285965][T13454] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 669.110364][T16637] misc userio: No port type given on /dev/userio [ 669.489666][T16643] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3040'. [ 670.208401][T16649] FAULT_INJECTION: forcing a failure. [ 670.208401][T16649] name failslab, interval 1, probability 0, space 0, times 0 [ 670.223137][T16649] CPU: 1 UID: 0 PID: 16649 Comm: syz.2.3041 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 670.223171][T16649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 670.223185][T16649] Call Trace: [ 670.223193][T16649] [ 670.223202][T16649] dump_stack_lvl+0x16c/0x1f0 [ 670.223235][T16649] should_fail_ex+0x512/0x640 [ 670.223267][T16649] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 670.223298][T16649] should_failslab+0xc2/0x120 [ 670.223329][T16649] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 670.223357][T16649] ? security_file_alloc+0x34/0x2b0 [ 670.223394][T16649] security_file_alloc+0x34/0x2b0 [ 670.223424][T16649] init_file+0x93/0x4c0 [ 670.223470][T16649] alloc_empty_file+0x73/0x1e0 [ 670.223505][T16649] path_openat+0xda/0x2cb0 [ 670.223530][T16649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.223568][T16649] ? __pfx_path_openat+0x10/0x10 [ 670.223605][T16649] do_filp_open+0x20b/0x470 [ 670.223633][T16649] ? __pfx_do_filp_open+0x10/0x10 [ 670.223687][T16649] ? alloc_fd+0x471/0x7d0 [ 670.223722][T16649] do_sys_openat2+0x11b/0x1d0 [ 670.223755][T16649] ? __pfx_do_sys_openat2+0x10/0x10 [ 670.223803][T16649] __x64_sys_openat+0x174/0x210 [ 670.223837][T16649] ? __pfx___x64_sys_openat+0x10/0x10 [ 670.223887][T16649] do_syscall_64+0xcd/0x490 [ 670.223919][T16649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.223943][T16649] RIP: 0033:0x7fde8738ebe9 [ 670.223962][T16649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.223986][T16649] RSP: 002b:00007fde881fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 670.224009][T16649] RAX: ffffffffffffffda RBX: 00007fde875b6180 RCX: 00007fde8738ebe9 [ 670.224026][T16649] RDX: 00000000000a0302 RSI: 0000200000001240 RDI: ffffffffffffff9c [ 670.224041][T16649] RBP: 00007fde87411e19 R08: 0000000000000000 R09: 0000000000000000 [ 670.224056][T16649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.224070][T16649] R13: 00007fde875b6218 R14: 00007fde875b6180 R15: 00007fffa7c86538 [ 670.224104][T16649] [ 670.435631][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.997812][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3045'. [ 671.635793][T16672] misc userio: No port type given on /dev/userio [ 672.461713][T16681] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3050'. [ 673.440936][T16687] FAULT_INJECTION: forcing a failure. [ 673.440936][T16687] name failslab, interval 1, probability 0, space 0, times 0 [ 673.506787][T16687] CPU: 0 UID: 2054 PID: 16687 Comm: syz.4.3051 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 673.506827][T16687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 673.506842][T16687] Call Trace: [ 673.506850][T16687] [ 673.506861][T16687] dump_stack_lvl+0x16c/0x1f0 [ 673.506902][T16687] should_fail_ex+0x512/0x640 [ 673.506936][T16687] ? fs_reclaim_acquire+0xae/0x150 [ 673.506978][T16687] should_failslab+0xc2/0x120 [ 673.507010][T16687] __kmalloc_cache_noprof+0x6a/0x3e0 [ 673.507039][T16687] ? tomoyo_write_log2+0x33d/0xc10 [ 673.507077][T16687] tomoyo_write_log2+0x33d/0xc10 [ 673.507117][T16687] tomoyo_supervisor+0x15e/0x13b0 [ 673.507161][T16687] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 673.507203][T16687] ? __pfx_vsnprintf+0x10/0x10 [ 673.507250][T16687] ? tomoyo_encode2+0x329/0x3e0 [ 673.507289][T16687] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 673.507331][T16687] tomoyo_path_number_perm+0x448/0x580 [ 673.507366][T16687] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 673.507432][T16687] ? find_held_lock+0x2b/0x80 [ 673.507457][T16687] ? hook_file_ioctl_common+0x145/0x410 [ 673.507496][T16687] ? __fget_files+0x20e/0x3c0 [ 673.507531][T16687] security_file_ioctl+0x9b/0x240 [ 673.507564][T16687] __x64_sys_ioctl+0xb7/0x210 [ 673.507604][T16687] do_syscall_64+0xcd/0x490 [ 673.507637][T16687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.507669][T16687] RIP: 0033:0x7f2625b8ebe9 [ 673.507689][T16687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.507714][T16687] RSP: 002b:00007f2623df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 673.507740][T16687] RAX: ffffffffffffffda RBX: 00007f2625db5fa0 RCX: 00007f2625b8ebe9 [ 673.507757][T16687] RDX: 00002000000000c0 RSI: 000000004018aee3 RDI: 0000000000000000 [ 673.507773][T16687] RBP: 00007f2625c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 673.507789][T16687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.507804][T16687] R13: 00007f2625db6038 R14: 00007f2625db5fa0 R15: 00007ffd318dfad8 [ 673.507839][T16687] [ 675.401430][T16719] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3061'. [ 675.596658][T10867] ERROR: Out of memory at tomoyo_memory_ok. [ 675.624497][ T6452] ERROR: Out of memory at tomoyo_memory_ok. [ 675.889990][T16710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 675.896460][T16710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 675.919768][T16710] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 675.973263][T16710] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 676.198396][T16710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 676.230207][T16710] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 676.461305][T16710] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 676.649914][T16710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 676.669588][T16710] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 677.032894][T16710] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 677.142104][T16710] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 677.293700][T16710] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 677.299951][T16710] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 677.343997][T16710] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 677.437922][T13454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 677.447284][T13454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 677.459514][T13454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 677.498623][T13454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 677.513583][T13454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 677.656854][T16753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3068'. [ 677.916293][ T6726] Bluetooth: hci3: command 0x0c1a tx timeout [ 677.926813][T16754] Bluetooth: hci0: command 0x0406 tx timeout [ 678.235138][T16754] Bluetooth: hci4: command 0x0c1a tx timeout [ 678.556193][T16772] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3074'. [ 678.715498][T16754] Bluetooth: hci2: command 0x0c1a tx timeout [ 678.821458][T16778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3076'. [ 679.323995][T16787] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3071'. [ 679.350477][T16754] Bluetooth: hci5: command 0x0c1a tx timeout [ 679.431395][T16750] chnl_net:caif_netlink_parms(): no params data found [ 679.643047][T16754] Bluetooth: hci1: command tx timeout [ 679.989789][T16754] Bluetooth: hci3: command 0x0c1a tx timeout [ 680.318235][T16754] Bluetooth: hci4: command 0x0c1a tx timeout [ 680.361928][ T30] audit: type=1800 audit(4294976508.769:19): pid=16807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3080" name="members" dev="configfs" ino=62312 res=0 errno=0 [ 680.648876][T16750] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.720391][T16750] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.799440][T16754] Bluetooth: hci2: command 0x0c1a tx timeout [ 681.047728][T16750] bridge_slave_0: entered allmulticast mode [ 681.059067][T16750] bridge_slave_0: entered promiscuous mode [ 681.319032][T16750] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.342597][T16750] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.375822][T16750] bridge_slave_1: entered allmulticast mode [ 681.395264][T16750] bridge_slave_1: entered promiscuous mode [ 681.443783][T16754] Bluetooth: hci5: command 0x0c1a tx timeout [ 681.716152][T16754] Bluetooth: hci1: command tx timeout [ 682.071528][T16754] Bluetooth: hci3: command 0x0c1a tx timeout [ 682.157223][T16750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.325495][T16750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 682.389766][T16754] Bluetooth: hci4: command 0x0c1a tx timeout [ 682.704819][T16750] team0: Port device team_slave_0 added [ 682.751774][T16750] team0: Port device team_slave_1 added [ 682.845367][T16750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.859722][T16750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.890164][T16754] Bluetooth: hci2: command 0x0c1a tx timeout [ 682.919458][T16750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.945601][T16750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.953791][T16750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.981152][T16750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.031798][ T30] audit: type=1806 audit(4294976511.459:20): xattr="" res=-22 [ 683.230201][T16750] hsr_slave_0: entered promiscuous mode [ 683.250392][T16750] hsr_slave_1: entered promiscuous mode [ 683.266985][T16750] debugfs: 'hsr0' already exists in 'hsr' [ 683.280733][T16750] Cannot create hsr debugfs directory [ 683.365966][T16832] FAULT_INJECTION: forcing a failure. [ 683.365966][T16832] name failslab, interval 1, probability 0, space 0, times 0 [ 683.399729][T16832] CPU: 1 UID: 0 PID: 16832 Comm: syz.3.3085 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 683.399766][T16832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 683.399779][T16832] Call Trace: [ 683.399789][T16832] [ 683.399798][T16832] dump_stack_lvl+0x16c/0x1f0 [ 683.399832][T16832] should_fail_ex+0x512/0x640 [ 683.399863][T16832] ? fs_reclaim_acquire+0xae/0x150 [ 683.399899][T16832] ? tomoyo_init_log+0x1385/0x2140 [ 683.399929][T16832] should_failslab+0xc2/0x120 [ 683.399959][T16832] __kmalloc_noprof+0xd2/0x510 [ 683.399995][T16832] tomoyo_init_log+0x1385/0x2140 [ 683.400046][T16832] ? __pfx_tomoyo_init_log+0x10/0x10 [ 683.400088][T16832] tomoyo_write_log2+0x2f7/0xc10 [ 683.400126][T16832] tomoyo_supervisor+0x15e/0x13b0 [ 683.400169][T16832] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 683.400220][T16832] ? lockdep_hardirqs_on+0x7c/0x110 [ 683.400254][T16832] ? tomoyo_check_path_acl+0xad/0x210 [ 683.400283][T16832] ? tomoyo_check_acl+0x1f7/0x410 [ 683.400315][T16832] tomoyo_path_permission+0x270/0x3b0 [ 683.400347][T16832] tomoyo_check_open_permission+0x37b/0x3c0 [ 683.400378][T16832] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 683.400451][T16832] ? do_raw_spin_lock+0x12c/0x2b0 [ 683.400496][T16832] tomoyo_file_open+0x6b/0x90 [ 683.400520][T16832] security_file_open+0x84/0x1e0 [ 683.400552][T16832] do_dentry_open+0x596/0x1530 [ 683.400591][T16832] vfs_open+0x82/0x3f0 [ 683.400628][T16832] path_openat+0x1de4/0x2cb0 [ 683.400668][T16832] ? __pfx_path_openat+0x10/0x10 [ 683.400705][T16832] do_filp_open+0x20b/0x470 [ 683.400733][T16832] ? __pfx_do_filp_open+0x10/0x10 [ 683.400787][T16832] ? alloc_fd+0x471/0x7d0 [ 683.400820][T16832] do_sys_openat2+0x11b/0x1d0 [ 683.400853][T16832] ? __pfx_do_sys_openat2+0x10/0x10 [ 683.400900][T16832] __x64_sys_openat+0x174/0x210 [ 683.400935][T16832] ? __pfx___x64_sys_openat+0x10/0x10 [ 683.400983][T16832] do_syscall_64+0xcd/0x490 [ 683.401015][T16832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.401039][T16832] RIP: 0033:0x7f62d398ebe9 [ 683.401058][T16832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 683.401077][T16832] RSP: 002b:00007f62d47c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 683.401095][T16832] RAX: ffffffffffffffda RBX: 00007f62d3bb5fa0 RCX: 00007f62d398ebe9 [ 683.401106][T16832] RDX: 0000000000020100 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 683.401117][T16832] RBP: 00007f62d3a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 683.401129][T16832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.401142][T16832] R13: 00007f62d3bb6038 R14: 00007f62d3bb5fa0 R15: 00007fff9bdf6448 [ 683.401175][T16832] [ 683.509804][T16754] Bluetooth: hci5: command 0x0c1a tx timeout [ 683.532607][T16835] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3085'. [ 683.532866][T16834] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3085'. [ 683.760182][T16754] Bluetooth: hci1: command tx timeout [ 684.530298][T16846] netlink: 306 bytes leftover after parsing attributes in process `syz.2.3088'. [ 684.830893][T16750] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 684.852561][T16750] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 684.949794][T16754] Bluetooth: hci2: command 0x0c1a tx timeout [ 684.978402][T16750] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 685.165052][T16750] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 685.329349][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3090'. [ 685.547797][T16864] misc userio: No port type given on /dev/userio [ 685.833495][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.833553][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.910203][T16754] Bluetooth: hci1: command tx timeout [ 685.987670][T16750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.046519][T16750] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.146329][T10867] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.153550][T10867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.675010][T10867] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.682187][T10867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.642265][T16750] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 687.713122][T16750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 688.829019][T10850] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 911 with max blocks 3 with error 117 [ 689.331540][T16899] zswap: compressor not available [ 689.386285][T10850] EXT4-fs (sda1): This should not happen!! Data will be lost [ 689.386285][T10850] [ 689.584702][T16750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.200809][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3101'. [ 692.368119][T16750] veth0_vlan: entered promiscuous mode [ 692.387238][T16750] veth1_vlan: entered promiscuous mode [ 692.425686][T16750] veth0_macvtap: entered promiscuous mode [ 692.437986][T16750] veth1_macvtap: entered promiscuous mode [ 692.558231][T16750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.635254][T16750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.683912][T10866] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.701371][T10866] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.064486][T10866] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.223336][T10866] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.115050][T16964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3109'. [ 694.457447][ T6365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.479178][ T6365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.690683][ T6365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.719421][ T6365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.277434][T16985] ICMPv6: process `syz.3.3110' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 697.261701][T17014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3112'. [ 701.049527][T17072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3127'. [ 701.724312][T17073] ICMPv6: process `syz.4.3125' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 705.207992][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'. [ 707.879227][T17144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3142'. [ 708.545322][T17161] misc userio: No port type given on /dev/userio [ 710.820551][T17182] FAULT_INJECTION: forcing a failure. [ 710.820551][T17182] name failslab, interval 1, probability 0, space 0, times 0 [ 710.833421][T17182] CPU: 1 UID: 0 PID: 17182 Comm: syz.2.3152 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 710.833455][T17182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 710.833469][T17182] Call Trace: [ 710.833478][T17182] [ 710.833488][T17182] dump_stack_lvl+0x16c/0x1f0 [ 710.833523][T17182] should_fail_ex+0x512/0x640 [ 710.833554][T17182] ? __kvmalloc_node_noprof+0x124/0x620 [ 710.833593][T17182] should_failslab+0xc2/0x120 [ 710.833624][T17182] __kvmalloc_node_noprof+0x137/0x620 [ 710.833652][T17182] ? seq_read_iter+0x826/0x12c0 [ 710.833683][T17182] ? seq_read_iter+0x826/0x12c0 [ 710.833705][T17182] seq_read_iter+0x826/0x12c0 [ 710.833745][T17182] seq_read+0x3a3/0x570 [ 710.833769][T17182] ? __pfx_seq_read+0x10/0x10 [ 710.833821][T17182] full_proxy_read+0x12e/0x1a0 [ 710.833856][T17182] ? __pfx_full_proxy_read+0x10/0x10 [ 710.833891][T17182] vfs_read+0x1e4/0xcf0 [ 710.833924][T17182] ? __pfx___mutex_lock+0x10/0x10 [ 710.833953][T17182] ? __pfx_vfs_read+0x10/0x10 [ 710.833991][T17182] ? __fget_files+0x20e/0x3c0 [ 710.834028][T17182] ksys_read+0x12a/0x250 [ 710.834054][T17182] ? __pfx_ksys_read+0x10/0x10 [ 710.834092][T17182] do_syscall_64+0xcd/0x490 [ 710.834124][T17182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.834150][T17182] RIP: 0033:0x7fde8738ebe9 [ 710.834170][T17182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.834193][T17182] RSP: 002b:00007fde88240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 710.834217][T17182] RAX: ffffffffffffffda RBX: 00007fde875b5fa0 RCX: 00007fde8738ebe9 [ 710.834234][T17182] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 710.834248][T17182] RBP: 00007fde88240090 R08: 0000000000000000 R09: 0000000000000000 [ 710.834263][T17182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.834278][T17182] R13: 00007fde875b6038 R14: 00007fde875b5fa0 R15: 00007fffa7c86538 [ 710.834320][T17182] [ 711.889702][T17203] misc userio: No port type given on /dev/userio [ 712.026211][T17205] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 712.075331][T17209] misc userio: No port type given on /dev/userio [ 712.536242][T17216] nbd: socks must be embedded in a SOCK_ITEM attr [ 712.546223][T17216] block nbd0: shutting down sockets [ 713.955821][T17233] FAULT_INJECTION: forcing a failure. [ 713.955821][T17233] name failslab, interval 1, probability 0, space 0, times 0 [ 713.979613][T17233] CPU: 0 UID: 0 PID: 17233 Comm: syz.2.3163 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 713.979651][T17233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 713.979665][T17233] Call Trace: [ 713.979674][T17233] [ 713.979684][T17233] dump_stack_lvl+0x16c/0x1f0 [ 713.979721][T17233] should_fail_ex+0x512/0x640 [ 713.979752][T17233] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 713.979782][T17233] should_failslab+0xc2/0x120 [ 713.979812][T17233] __kmalloc_cache_noprof+0x6a/0x3e0 [ 713.979838][T17233] ? gpiolib_seq_start+0x69/0x270 [ 713.979868][T17233] gpiolib_seq_start+0x69/0x270 [ 713.979895][T17233] seq_read_iter+0x2c1/0x12c0 [ 713.979935][T17233] seq_read+0x3a3/0x570 [ 713.979959][T17233] ? __pfx_seq_read+0x10/0x10 [ 713.980007][T17233] full_proxy_read+0x12e/0x1a0 [ 713.980042][T17233] ? __pfx_full_proxy_read+0x10/0x10 [ 713.980078][T17233] vfs_read+0x1e4/0xcf0 [ 713.980111][T17233] ? __pfx___mutex_lock+0x10/0x10 [ 713.980140][T17233] ? __pfx_vfs_read+0x10/0x10 [ 713.980176][T17233] ? __fget_files+0x20e/0x3c0 [ 713.980213][T17233] ksys_read+0x12a/0x250 [ 713.980247][T17233] ? __pfx_ksys_read+0x10/0x10 [ 713.980285][T17233] do_syscall_64+0xcd/0x490 [ 713.980317][T17233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.980343][T17233] RIP: 0033:0x7fde8738ebe9 [ 713.980362][T17233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 713.980386][T17233] RSP: 002b:00007fde88240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 713.980410][T17233] RAX: ffffffffffffffda RBX: 00007fde875b5fa0 RCX: 00007fde8738ebe9 [ 713.980426][T17233] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 713.980441][T17233] RBP: 00007fde88240090 R08: 0000000000000000 R09: 0000000000000000 [ 713.980455][T17233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 713.980469][T17233] R13: 00007fde875b6038 R14: 00007fde875b5fa0 R15: 00007fffa7c86538 [ 713.980504][T17233] [ 713.981623][T17233] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 714.192872][T17233] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 714.201280][T17233] CPU: 0 UID: 0 PID: 17233 Comm: syz.2.3163 Not tainted 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(full) [ 714.212983][T17233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 714.223027][T17233] RIP: 0010:gpiolib_seq_stop+0x4c/0xe0 [ 714.228484][T17233] Code: 48 c1 ea 03 80 3c 02 00 0f 85 98 00 00 00 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 60 8b [ 714.248085][T17233] RSP: 0000:ffffc90003337ad8 EFLAGS: 00010247 [ 714.254142][T17233] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 714.262103][T17233] RDX: 0000000000000000 RSI: ffffffff8518f26e RDI: 0000000000000004 [ 714.270064][T17233] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 714.278026][T17233] R10: ffffffff8e78aa93 R11: 0000000000000001 R12: 0000000000000000 [ 714.285983][T17233] R13: ffffffff8c19df60 R14: 0000000000010000 R15: 0000000000000000 [ 714.293958][T17233] FS: 00007fde882406c0(0000) GS:ffff8881246c6000(0000) knlGS:0000000000000000 [ 714.302902][T17233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 714.309475][T17233] CR2: 00002000008e0000 CR3: 000000003dda2000 CR4: 00000000003526f0 [ 714.317438][T17233] Call Trace: [ 714.320701][T17233] [ 714.323618][T17233] seq_read_iter+0x60d/0x12c0 [ 714.328290][T17233] seq_read+0x3a3/0x570 [ 714.332432][T17233] ? __pfx_seq_read+0x10/0x10 [ 714.337103][T17233] full_proxy_read+0x12e/0x1a0 [ 714.341864][T17233] ? __pfx_full_proxy_read+0x10/0x10 [ 714.347147][T17233] vfs_read+0x1e4/0xcf0 [ 714.351298][T17233] ? __pfx___mutex_lock+0x10/0x10 [ 714.356318][T17233] ? __pfx_vfs_read+0x10/0x10 [ 714.360990][T17233] ? __fget_files+0x20e/0x3c0 [ 714.365663][T17233] ksys_read+0x12a/0x250 [ 714.369895][T17233] ? __pfx_ksys_read+0x10/0x10 [ 714.374654][T17233] do_syscall_64+0xcd/0x490 [ 714.379152][T17233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.385031][T17233] RIP: 0033:0x7fde8738ebe9 [ 714.389437][T17233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.409046][T17233] RSP: 002b:00007fde88240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 714.417449][T17233] RAX: ffffffffffffffda RBX: 00007fde875b5fa0 RCX: 00007fde8738ebe9 [ 714.425409][T17233] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 714.433365][T17233] RBP: 00007fde88240090 R08: 0000000000000000 R09: 0000000000000000 [ 714.441322][T17233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.449279][T17233] R13: 00007fde875b6038 R14: 00007fde875b5fa0 R15: 00007fffa7c86538 [ 714.457252][T17233] [ 714.460260][T17233] Modules linked in: [ 714.464215][ C0] vkms_vblank_simulate: vblank timer overrun [ 714.471689][T17233] ---[ end trace 0000000000000000 ]--- [ 714.613361][ T5215] ERROR: Out of memory at tomoyo_memory_ok. [ 714.679555][T17233] RIP: 0010:gpiolib_seq_stop+0x4c/0xe0 [ 714.689424][T17233] Code: 48 c1 ea 03 80 3c 02 00 0f 85 98 00 00 00 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 60 8b [ 714.752122][T17233] RSP: 0000:ffffc90003337ad8 EFLAGS: 00010247 [ 714.758799][T17233] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 714.767072][T17233] RDX: 0000000000000000 RSI: ffffffff8518f26e RDI: 0000000000000004 [ 714.780142][T17233] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 714.806886][T17233] R10: ffffffff8e78aa93 R11: 0000000000000001 R12: 0000000000000000 [ 714.832383][T17233] R13: ffffffff8c19df60 R14: 0000000000010000 R15: 0000000000000000 [ 714.843811][T17233] FS: 00007fde882406c0(0000) GS:ffff8881247c6000(0000) knlGS:0000000000000000 [ 714.871546][T17233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 714.878166][T17233] CR2: 000000000167d000 CR3: 000000003dda2000 CR4: 00000000003526f0 [ 714.888257][T17233] Kernel panic - not syncing: Fatal exception [ 714.894566][T17233] Kernel Offset: disabled [ 714.898887][T17233] Rebooting in 86400 seconds..