last executing test programs: 40m6.309713065s ago: executing program 1 (id=366): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32, @ANYBLOB="060006000500000008002e"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r2 = socket(0x25, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto(0x3, 0xae41, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x12, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x11, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r4 = fsopen$auto(0x0, 0x1) ioctl$auto(0x3, 0x4020aeb2, r4) 40m5.673736879s ago: executing program 1 (id=369): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r1, 0x80085665, r0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x400441, 0x0) write$auto(r2, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x8090) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x1000000) prctl$auto(0x59616d61, 0x1, 0x0, 0x1, 0x0) r3 = clone3$auto(&(0x7f00000000c0)={0x7c763c9, 0x7fffffffffffffff, 0x0, 0x3, 0x2, 0x2, 0x18, 0xee, 0xff, 0x9, 0x5}, 0xd) ptrace$auto_ARCH_MAP_VDSO_X32(0x8, r3, 0x2, 0x2001) 40m5.370359469s ago: executing program 1 (id=371): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) semctl$auto_GETPID(0xfffffff8, 0x0, 0xb, 0x6) (async) r2 = semctl$auto_GETPID(0xfffffff8, 0x0, 0xb, 0x6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{@inferred=0x0, 0x7, 0x101, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a00", @inferred=r2}, 0x6, 0x8, 0x6, @raw=0xd7, @integer64={0x40736b1f, 0x1, 0x8}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) get_robust_list$auto(0x0, 0x0, &(0x7f0000000180)=0x5) (async) get_robust_list$auto(0x0, 0x0, &(0x7f0000000180)=0x5) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x602, 0x8, 0x7, 0x0, 0x7, 0xb, 0x1, {0x3ff, 0x7}, 0xfffffffffffffffa, 0x200000a5, 0xa, 0x13c, 0x0, 0xc3, 0x7, 0x2, 0x5, 0x90, 0xfffffff5}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbf4250200080008000300000000001b0004"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRESOCT=r5], 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x200000c4) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRESOCT=r5], 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x200000c4) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0) fstat$auto(r7, &(0x7f0000000100)={0x3ff, 0x1ad00000, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x6bdf, 0x2, 0xfffffffffffffff9, 0x4, 0x2, 0x7, 0x7, 0x0, 0x0, 0x2}) (async) fstat$auto(r7, &(0x7f0000000100)={0x3ff, 0x1ad00000, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x6bdf, 0x2, 0xfffffffffffffff9, 0x4, 0x2, 0x7, 0x7, 0x0, 0x0, 0x2}) r8 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000080)={0x18, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40) (async) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000080)={0x18, r9, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_MODES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18", @ANYRES8=r3, @ANYRESHEX=r7, @ANYRES32=r6, @ANYRES64=r9, @ANYRESDEC=r4], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r10 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0x3, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) r11 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) pwrite64$auto(r0, &(0x7f0000000180)='/sys/bus/pci/resource_alignment\x00', 0xdf2, 0x200) read$auto_kernfs_file_fops_kernfs_internal(r11, &(0x7f0000001380)=""/134, 0x86) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 40m4.579620231s ago: executing program 1 (id=374): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) fsopen$auto(0x0, 0x1) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x6, 0x0, &(0x7f0000000240)=0x10009b) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x502, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/250, 0xfa) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) read$auto_lockdown_ops_lockdown(r2, 0x0, 0x0) socket(0xa, 0x1, 0x84) exit$auto(0x4) madvise$auto(0xfffffffffffffff7, 0x5, 0xfffffffb) bind$auto(r2, &(0x7f0000000040)=@phonet={0x23, 0xc, 0xf, 0x3}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x4020009, 0xdf, 0x420000000e31, 0xffffffffffffffff, 0x0) move_pages$auto(0x0, 0x5, 0x0, &(0x7f00000003c0)=0x1, 0x0, 0x2) write$auto(0x3, 0x0, 0xfdef) 40m3.668417397s ago: executing program 1 (id=378): pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) fchdir$auto(0xffffffffffffffff) pselect6$auto(0x3, &(0x7f0000000040)={[0x1000, 0x0, 0x8, 0x7, 0x5, 0x7, 0x3, 0x6, 0x0, 0x9, 0x8, 0x4, 0x6, 0x5, 0x1, 0x100000001]}, &(0x7f00000000c0)={[0x2, 0x9, 0x4, 0x5, 0x0, 0xc53, 0x8, 0x8c8, 0x8, 0xe4, 0x8, 0x4, 0x6, 0x0, 0x1, 0xc]}, &(0x7f0000000140)={[0xca, 0xfffffffffffffffd, 0x6, 0x7, 0x3, 0x20, 0xbb, 0x0, 0x800, 0x0, 0xf67, 0xa, 0x100000000, 0x1, 0x7ff]}, &(0x7f0000000200)={0x40000000000000, 0x2}, &(0x7f0000000240)="76e10d367d2415435f9a38b9c677dec5da964230172cee43529184032e73f06c39eb73d788c449a95e534c88ce7d6d741ed9e816e606dbda8724c0dd52d2d1719326642ed1665c73c18753c92d0404d0a65a4bd9c32222b8ccfca69e92f3a322da9421254d089bba40e01e0d4691bc01e16e4d5a0603ac0375a038c39649b96baed3172ab5138e152667aee1187261f35669cd6b4031a9d314590dad61b3bce9b0b020177a875b7e7f249bb4eb839e4c75b3528f16875021f4a647768c121f1cde19467816caf08e1c74627f97e375854cd53d841209be982702144b2612587c20f56a91c8d4c0fd8df21b0212699f") mkdir$auto(0x0, 0x6) r1 = bpf$auto(0x0, 0x0, 0x6f3) arch_prctl$auto_ARCH_REQ_XCOMP_PERM(0x1023, 0x7) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004044}, 0x10000000) io_uring_register$auto(0x2, 0x22, &(0x7f0000000100), 0x1) r2 = socket(0xa, 0x2, 0x88) r3 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/cgroup\x00', 0x420, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r1, 0x40085507, &(0x7f0000000340)={0x9, 0x8, 0x4, "a4cc8d4df580d9e94392f4dae021d6fe496641758443e7cdfc848b9bd2557c0b70948e9cd86d35f999bb13ab08bbf215c47a86a8dee7057561bcffc01fdbf0ec59276003eaaad9538a"}) bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x5, 0x10, 0x1001, 0xeb1, r2, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 40m2.811969594s ago: executing program 1 (id=380): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64$auto(r0, &(0x7f0000000400)='/proc/Nes\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x88<\xf7\xc2\xed}\xd2kM\x1f\x15\x03ZN$\'\xf4\"\x13g|\x8f\xe1Svo\xfe\xb1\xf8#]\x85\xc2\x82e\xc6#z\xeb\x14\xd3\x96\xff\xb4\xa2\xac\xc5\xd8\x8d\xce\x01B\xd4\xea\x85\xa5', 0x100000001, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) setreuid$auto(0x3, 0x7) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000140)=@link_detach={r1}, 0x8001) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r2) sendmsg$auto_NL80211_CMD_GET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x2f0, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_SAR_SPEC={0x2dc, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS={0x48, 0x2, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x800}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x33}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x401}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x81}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xf}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x1ff}, @NL80211_SAR_ATTR_SPECS={0xfc, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5cd9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fffffff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x98d5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x800}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000001}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xd775}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xd}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x90}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa0ad}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10}]}]}, @NL80211_SAR_ATTR_SPECS={0xe8, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x27fc9944}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffff000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x40}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x40}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x99d}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x253}]}]}, @NL80211_SAR_ATTR_SPECS={0x8c, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5829}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x401}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5211}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xfff7}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) fchmod$auto(r2, 0xa) socketpair$auto(0x1, 0x0, 0x0, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) r6 = socket(0x15, 0x5, 0x0) setsockopt$auto_SO_BUSY_POLL_BUDGET(r6, 0x1, 0x46, 0x0, 0x94) 40m2.243392229s ago: executing program 32 (id=380): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64$auto(r0, &(0x7f0000000400)='/proc/Nes\x00\x00\x00\x00\x1f\x00\x00\x00\x00\x00\x00\x00\x00\x88<\xf7\xc2\xed}\xd2kM\x1f\x15\x03ZN$\'\xf4\"\x13g|\x8f\xe1Svo\xfe\xb1\xf8#]\x85\xc2\x82e\xc6#z\xeb\x14\xd3\x96\xff\xb4\xa2\xac\xc5\xd8\x8d\xce\x01B\xd4\xea\x85\xa5', 0x100000001, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) setreuid$auto(0x3, 0x7) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x161342, 0x130) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000140)=@link_detach={r1}, 0x8001) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r2) sendmsg$auto_NL80211_CMD_GET_STATION(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0x2f0, r4, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_SAR_SPEC={0x2dc, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS={0x48, 0x2, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x800}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x33}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x401}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x81}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xf}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x1ff}, @NL80211_SAR_ATTR_SPECS={0xfc, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5cd9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fffffff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x98d5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x800}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000001}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xd775}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xd}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x90}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa0ad}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10}]}]}, @NL80211_SAR_ATTR_SPECS={0xe8, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x27fc9944}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffff000}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x40}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x40}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x99d}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x253}]}]}, @NL80211_SAR_ATTR_SPECS={0x8c, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffffffff}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5829}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x401}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5211}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xfff7}]}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x40010}, 0x4800) fchmod$auto(r2, 0xa) socketpair$auto(0x1, 0x0, 0x0, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa507}, 0x800}, 0x7, 0x8) r6 = socket(0x15, 0x5, 0x0) setsockopt$auto_SO_BUSY_POLL_BUDGET(r6, 0x1, 0x46, 0x0, 0x94) 37m27.645792959s ago: executing program 3 (id=969): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/logsyscall\x00', 0x20a42, 0x0) setreuid$auto(0x9, 0x1) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)="ba", 0x1) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2000b, 0x4000000000df, 0xa7e, 0x401, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x2, 0x1, 0x106) sendmsg$auto_NL80211_CMD_COLOR_CHANGE_REQUEST(r2, 0x0, 0x2000c004) r3 = io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) sendfile$auto(r4, r4, 0x0, 0x4f64a1d2) setsockopt$auto(r4, 0x2, 0x8000003e, 0x0, 0x800) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), r5) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x14, r6, 0xf09, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xb0}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x9a}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_WPAN_PHY_NAME={0x5, 0x2, '\x00'}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x803) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0x7, 0x0, 0x10001) open(0x0, 0x1ad240, 0x1b1) socket(0xf, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 37m27.533983673s ago: executing program 3 (id=970): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x40002, 0xc7, 0xdf, 0x1000000eba, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/protocol\x00', 0x40880, 0x0) r0 = socket(0x18, 0x80000, 0x0) connect$auto(r0, 0x0, 0x1e) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0x33d8c2, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x68a80, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000080), 0x3}, 0x1, &(0x7f00000000c0), 0x3, 0xab}, 0x80670}, 0x3f7ffffe, 0xd9) mmap$auto(0x100000000, 0x2020007, 0x2000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) socket(0xf, 0x5, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b3941", 0x14) close_range$auto(0x0, 0xfffffffffffff000, 0x2) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socketpair$auto(0xffffffff, 0x5, 0x9, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.1/usb2/power/wakeup_active\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/122, 0x7a) unshare$auto(0x40000080) 37m27.016422894s ago: executing program 3 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00'}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r0, 0x0, 0x20004804) 37m26.339209136s ago: executing program 3 (id=976): mbind$auto(0x0, 0x2, 0x1, &(0x7f0000000200)=0x4, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 37m26.0859297s ago: executing program 3 (id=977): r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x100000, 0x3, 0x7, 0xeb1, 0xffffffffffffffff, 0x800000000008000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/net/tls_stat\x00', 0x500, 0x0) pread64$auto(r1, 0x0, 0x1ff, 0x8800000000) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0x7f, 0x99, 0x8, 0x1, @relative_fd=0xffffffffffffffff, 0xd}, 0x92) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00'}) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000001480)=ANY=[@ANYRES16, @ANYBLOB="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", @ANYBLOB="02ff28bd7000fcdbdf250500000008000100", @ANYRES32=r0, @ANYRES32=r3], 0x28}}, 0x240448a1) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x6, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffffffdffe00, &(0x7f0000000140)=';') r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS1\x00', 0x101e81, 0x0) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_TCFLSH2(r6, 0x5459, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/interrupts/ff_pmtimer\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000000)=""/45, 0x64) epoll_create$auto(0x8800001) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000080), 0x8342, 0x0) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[], 0x1e8}, 0x1, 0x0, 0x0, 0x191}, 0x20040081) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 37m19.449656183s ago: executing program 3 (id=987): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|3\x1ck\x00'/24, 0x5) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) shmdt$auto(0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000100), r1) mmap$auto(0x8, 0x6, 0x9, 0x8011, r0, 0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/ns/cgroup\x00', 0x780, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(r4, 0x8004b709, &(0x7f00000000c0)=0xfffffd1f) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x14, r5, 0x901, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) 37m3.176637993s ago: executing program 33 (id=987): syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000080)='7\x00\\\xa0\x04|3\x1ck\x00'/24, 0x5) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) shmdt$auto(0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x800) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000100), r1) mmap$auto(0x8, 0x6, 0x9, 0x8011, r0, 0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/ns/cgroup\x00', 0x780, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(r4, 0x8004b709, &(0x7f00000000c0)=0xfffffd1f) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r3) sendmsg$auto_TCP_METRICS_CMD_DEL(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)={0x14, r5, 0x901, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) 34m31.090075764s ago: executing program 2 (id=1641): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x143b42, 0x0) read$auto(r0, &(0x7f0000000140)='---\x00', 0xfff) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) mmap$auto(0x0, 0xa, 0x8000000000de, 0x9b72, 0x5, 0xbd) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x10d47e, 0x72) socket(0x6, 0x2, 0x2) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xc0080, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000020c0)=""/4093, 0xffd) madvise$auto(0xfffffffffffffffa, 0x401, 0x4) 34m28.411648342s ago: executing program 2 (id=1654): mmap$auto(0x800000000000, 0x4020009, 0xdf, 0xeb1, 0x401, 0x7ffd) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = fsopen$auto(0x0, 0x1) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x401, r3, @relative_id=0x13, 0xe600}, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbb9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x44415}, 0x20000000) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0x3f00) 34m28.284029527s ago: executing program 2 (id=1655): sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) (async) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x2, 0x4}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) semctl$auto(0x2, 0x9, 0x939, 0x6) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x801, 0x84) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip_vs\x00', 0x100, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) (async) pselect6$auto(0x7, &(0x7f0000000180)={[0x8, 0x4, 0xffffffffffffff01, 0x8001, 0x40000008001, 0x4000000000002bc8, 0xfff, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x8000000000000001, 0xfffffffffffffffd, 0x211, 0x40000000, 0x8, 0x1]}, 0x0, 0x0, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40000c4) (async) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r1) (async) r3 = setfsuid$auto(0xee00) (async) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) (async) sendmsg$auto_TIPC_NL_BEARER_GET(r2, 0x0, 0x80) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 34m27.68751959s ago: executing program 2 (id=1657): r0 = socket(0x25, 0x1, 0x0) sendto$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r1, 0x1, 0x2, 0x6653) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000340), r0) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000380)={0x3f4, r4, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_KEY={0x3cc, 0x1, 0x0, 0x1, [@nested={0x260, 0x8d, 0x0, 0x1, [@generic="41b87c50a4967cf1a29cd38183ca0188664227b6e11ca12dfe693646b04fccc0898b647bbf2868a5ffbd27c542bfde9fca1d57943d167d68381c7288c08f3f514e1c568e1ff2085afe63fac642198b05b7981ea2bf07629dccce524d92e27c7b651a95b2d76558e96e2b50f29733aa6f1fe604a7d6a8bf488c577b9b7d3f3763cceb4e8172072e27612931e7be12f3fd66be1b618475da8b09b98284583439a0e4209066ef0273b40cb7a3cc4b4a0e70b33dcea2560ee7f4f40acbd12832ca30c7f2aba422b43b18267e56870d0454856a57335573b63dfdcd", @nested={0x4, 0x54}, @generic="bf981ddd8c60769ef8a13ce9d620e7014ae34d254a161cc825f26019987c2cf706f6d8b8c298c1aeac33bdece8ddda41f6fd7134f842312e8ca7a2f68b860ea60d61b1faf0c82b785a1a6688ade8c22e6c5819b46cec4cc2bc03e36beff3529d6b7a12eb200c0b2a185af5472b8497d32baceb6ce69ec7bfa3eb59385f630bfc5875a72f1eb6190a2090f20ec9135f761c9b2a72111ac3aa99", @generic="ae7755b5a0326f4b08087a9e9f09140164efe23525244c6ff1b88826849d31677639ebd5952e39721a74eaf414c99a4f04517b1140c6856d7339a6a55c2991a341799cd1091304cd4265aae7e43bfe435940de7d3905706efed9f9fdcbe31e1610e7484e048d2c5a31740280d5c59dcdc7ec587c107ae13a053f1d956164e2405010454adb", @typed={0xf, 0x6b, 0x0, 0x0, @str='syzkaller0\x00'}, @generic="a9fb07bccb4f7eee279a396406b9c1534c2f100693f3f55f752df33fbcf38f870d31ff9e6f7f99e5308eb2c6cca3910a587b0b67fb8e72a13fd51ce57eef41b6093c8f74f0e54ce394aa9adea776396ffe"]}, @nested={0xe8, 0x8e, 0x0, 0x1, [@generic="668ebc577fea77a29584", @nested={0x4, 0x101}, @nested={0x4, 0x11a}, @generic="12bb30da485ac8bbf69733f36d4ae19820ea8f897cbd40bfa33ff16ed9d6b7a4e77ccb5496ef500ea97c72b45c3be93d90b81ca11da9c68b60d0684c01c1282884ae810c79c877d233bc714b87683fa66bec2f80f2d760bbe645a38ceb7351078611848f6b15e7a1662b8dcf3aa06434b4472d8413b0d1d33006394f37053a55a6ea66cd5bc455abb601f2f3758a0e4da730090b1151bad6227c0defa104870d2fcf0a852977e3baa8d1a77df155b228a5ebbd60140e773a211964d3aecded75587ec52283c4b46501596e991176f5378ec1"]}, @generic="a0819377b8e96c36e03227b16815b3d6a3c12cc163a79e6b1888ad20aa62d2bdfc0db99afa6025b74df8cd5a7eb27691ab5d0b2feec84c08e5fedb3ce6737222b13dc3b88b41758e848dd12d513c612b18db9f5479d52f2d4b179a826ea110e001b8468514d258856803c93764c8424d8be67edfa1b7615b98cfb78a86186780"]}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x2}, @OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x400c044) r5 = socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000012440)='/dev/loop4\x00', 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_TXSA(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, r6, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}, @MACSEC_ATTR_RXSC_CONFIG={0x4}]}, 0x20}}, 0x4000000) 34m26.626389947s ago: executing program 2 (id=1663): pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy6/aql_enable\x00', 0x2481, 0x0) mmap$auto(0x0, 0x5, 0x9, 0x91, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400408, 0x10001, 0x411, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) pwrite64$auto(r0, 0x0, 0x3, 0x4200000000000005) 34m26.236694328s ago: executing program 2 (id=1666): mbind$auto(0x0, 0x2, 0x1, &(0x7f0000000200)=0x4, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0202, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x149002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) linkat$auto(r0, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f00000000c0), 0x40c81, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r1, 0x80086601, 0x5) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) 34m11.115414091s ago: executing program 34 (id=1666): mbind$auto(0x0, 0x2, 0x1, &(0x7f0000000200)=0x4, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0202, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x149002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) linkat$auto(r0, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f00000000c0), 0x40c81, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r1, 0x80086601, 0x5) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044010}, 0xc0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@nfc={0x27, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) 29m4.090902837s ago: executing program 4 (id=3039): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x7eb680, 0x100) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f00000000c0)='a', 0x1) pipe$auto(&(0x7f0000000500)=0xffffffffffffffff) flock$auto(r1, 0x5) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/250, 0xfa) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x1, 0x0) 29m2.890618086s ago: executing program 4 (id=3041): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x100, 0x3, 0x7, 0x10}, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x3}, 0x6f3) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) 29m2.472226549s ago: executing program 4 (id=3044): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x77) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000000), 0x7114}, 0x8) 29m2.35070793s ago: executing program 4 (id=3045): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x4000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x3a1880, 0x0) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80c00, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) r3 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) mmap$auto(0xf000, 0x1, 0x3ff, 0x12, r3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) sendfile$auto(r5, r5, 0x0, 0xef0) ioctl$auto(r2, 0x541c, r4) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f0000000000)={0xa, 0x101, 0x0, 0x8, 0x3, "a1390ba390d0d4c36c2674f2d8c47361c174f933d01cee6397fd60f26bd19a5c7dcffd5375ed49d44b10599450e9cf424b7f5fdb35b3e050f96ecf9d"}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x149b01, 0x0) write$auto(r6, &(0x7f0000000080)='0\x00\xf4\x97\xff*\x8a\xeb+8A\x99\x17\xfc\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) read$auto_tap_fops_tap(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, &(0x7f0000000300)={0x2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_GET_LGR_SMCR(r8, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, "c78150cebcb6e2820f57d3e22b46f93830dedc5c1dbc583c770f13bec57f63514093b79a0b86a1c59fb44475b6e618784f02ff4db12734ab4cc4647ad5dc907efc33fc39c5b599466968bb087a5bd1d88eea43849e7d61128acf15737cf92b9a01902f6303679df725b880573675e876a6ca540f31759c9edcd2c369caebe3371eb518136c067f7c4800131f69c538978c13c28a3158ddd4fe343f9580885021029b620de813d98ed05ccdd2518e2f987e1676a83f3ded9f4f927f4f336e1767d25fc5ba55"}, 0xdc}, 0x1, 0x0, 0x0, 0x24044040}, 0x0) fanotify_init$auto(0x6a1, 0x2000000000002) readv$auto(0x0, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) 29m1.596163354s ago: executing program 4 (id=3046): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x4f64a1d2) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) lchown$auto(&(0x7f0000000080)='./file0\x00', 0xee01, 0xee00) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r3 = semctl$auto_GETPID(0xfffffff8, 0x0, 0xb, 0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) write$auto(r4, &(0x7f0000000080)='+\x00', 0x300000000000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x7, 0x101, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a00", @inferred=r3}, 0x6, 0x8, 0x6, @raw=0xd7, @integer64={0x40736b1f, 0x1, 0x8}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) prctl$auto(0x7f, 0x2, r3, 0x7, 0xa) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket(0x13, 0x2, 0x3b) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket(0x22, 0x4, 0x83) setsockopt$auto(r5, 0x84, 0x15, 0x0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() mmap$auto(0x0, 0x4020009, 0xdb, 0x1000000000000eb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) semctl$auto_SEM_STAT(0x2, 0x400, 0x12, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r6, &(0x7f0000000040)='/dev/audio1\x00', 0x100000a3d1) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) 29m0.35368589s ago: executing program 4 (id=3052): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000240)='5\x0e@\x90\a\x1b\xb3\xff\t\xe8e!\xf6\x84\x9b_c\x9dK\x02\xfa\x82\xd8\xed\x05\xda6\t\x1a\x9d\xa3[\xb6\x1e\xe3~\x02i\x82\x83\xb8\xae\x9d\xc9\xe37\xc1\x058\x91s\xf50\xaf\x10so\'\xc3\x02\xfb,v\x06\xdf\xef\b_\x1cFX\x00\x00P\xb7\xe8\x8f\x14\x983\x8a\xb7\x86\x90\xc7\x8f2\x16\xc6\xa2?\x93\x18=\x87\x88\xc4\xf0q\xd6\xb3c\x89\xb8\xbcW\x94\x1d\x12\x05\xb1\xddD\x8f\xf9\xc9\x8bQ\x8c\x12Hkb\xdd\xae\xcf\xd92\x82\xc8\xe9\xd5\x94\x89\xcf\xa1f\xa3v\a?\n\xf9#?z\xbb%Z|\x15j\xe3\"H\xc2o$\xe8@Z;\xb2\x99\x16\xb9]\xa9hH\xba\xd7p\xf3\xa0\x9a\x0e\xc3\xe9\xc5\x9d;z%R|*`1\xee\xa9\x92\xfcN\xd5hS\x03\xe9gS', 0x800026) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)="000004") fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) r3 = socket(0xa, 0x3, 0x6) madvise$auto(0x0, 0xfffffffffff70001, 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r3, 0xd}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) setresuid$auto(0x0, 0x8, 0x0) r5 = socket(0x23, 0x3, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x4242, 0x0) fanotify_mark$auto(0x0, 0x1, 0x3a, r6, 0x0) ioctl$auto_VFIO_IOMMU_GET_INFO(r6, 0x3b70, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0x80) open(0x0, 0x261c2, 0x84) bpf$auto(0x3, &(0x7f00000001c0)=@test={r5, 0xfb50, 0x2, 0x9, 0x2, 0x18, 0x8, 0x7, 0x2, 0x4, 0x0, 0x41, 0x5, 0x0, 0x7f}, 0xd) 28m45.090114638s ago: executing program 35 (id=3052): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000240)='5\x0e@\x90\a\x1b\xb3\xff\t\xe8e!\xf6\x84\x9b_c\x9dK\x02\xfa\x82\xd8\xed\x05\xda6\t\x1a\x9d\xa3[\xb6\x1e\xe3~\x02i\x82\x83\xb8\xae\x9d\xc9\xe37\xc1\x058\x91s\xf50\xaf\x10so\'\xc3\x02\xfb,v\x06\xdf\xef\b_\x1cFX\x00\x00P\xb7\xe8\x8f\x14\x983\x8a\xb7\x86\x90\xc7\x8f2\x16\xc6\xa2?\x93\x18=\x87\x88\xc4\xf0q\xd6\xb3c\x89\xb8\xbcW\x94\x1d\x12\x05\xb1\xddD\x8f\xf9\xc9\x8bQ\x8c\x12Hkb\xdd\xae\xcf\xd92\x82\xc8\xe9\xd5\x94\x89\xcf\xa1f\xa3v\a?\n\xf9#?z\xbb%Z|\x15j\xe3\"H\xc2o$\xe8@Z;\xb2\x99\x16\xb9]\xa9hH\xba\xd7p\xf3\xa0\x9a\x0e\xc3\xe9\xc5\x9d;z%R|*`1\xee\xa9\x92\xfcN\xd5hS\x03\xe9gS', 0x800026) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)="000004") fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) r3 = socket(0xa, 0x3, 0x6) madvise$auto(0x0, 0xfffffffffff70001, 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r3, 0xd}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) setresuid$auto(0x0, 0x8, 0x0) r5 = socket(0x23, 0x3, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x4242, 0x0) fanotify_mark$auto(0x0, 0x1, 0x3a, r6, 0x0) ioctl$auto_VFIO_IOMMU_GET_INFO(r6, 0x3b70, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0x80) open(0x0, 0x261c2, 0x84) bpf$auto(0x3, &(0x7f00000001c0)=@test={r5, 0xfb50, 0x2, 0x9, 0x2, 0x18, 0x8, 0x7, 0x2, 0x4, 0x0, 0x41, 0x5, 0x0, 0x7f}, 0xd) 16m0.760167292s ago: executing program 7 (id=5777): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x7, 0xd, 0x8000000000001, 0x948b, 0x3, 0x15f4da07, 0x3, 0x7, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) statmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000007, 0x1ff, 0x6}, 0x0, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r3) fstat$auto(r2, &(0x7f00000002c0)={0x5, 0x4, 0x9, 0x1cf89d47, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x8000000000000001, 0x7, 0xdc, 0x6, 0x7fffffff, 0x1000000000000000, 0x5, 0x5, 0x7}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'vlan0\x00', 0x0}) sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f0000000ac0)={0x1254, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_COORDINATOR={0x1224, 0x1e, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @u32=0x1ff}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@mcast2}, @nested={0xff, 0x122, 0x0, 0x1, [@generic="87847934a526f54167abe5c8997ce95e06150c02dd51d84105285acf039c0a71cc8f8f583b7a5a3abfae225d9c4d6aade53e042c6664703d4e365e0ad0e96b7f87aebaad8f", @typed={0x8, 0x139, 0x0, 0x0, @u32=0x600}, @typed={0x8, 0x14f, 0x0, 0x0, @fd=r1}, @generic="9b703728df5229b5fdaeca362ca197237a6ea92b557559f3296f1f7ecf62f578bf4f0b46394510c8635e421308f06c48692df31abf9ad05f095d9b3ffb9db3fb2933e30633e2722014502120c823931f0e7ac367960190700524bc21048a97d7a3888c885a7c697eb3e8e4ff49a141d740d81707f7a4c8c4667ba90365e76ab97549b6b0b84c55ad5ef4d388b302f7a9d9075b08f24af53d6e14579bfb2f6312fb2b5203a124"]}, @nested={0x80, 0xf4, 0x0, 0x1, [@nested={0x4, 0x8}, @generic="60fea4d99afa1b665f4815def876a100b1e1ac", @generic="637696228265db8ad3b46db6aaaae47ca275f6fce72703f60ee0af31ee7798a6cd98245a0ce1e9c6a00a59669109259c5b4cdd61332a3f1a79d0173d6db63d40a139695f6314e4e0a36a6ca847edd4d05a1a2cdd937ad9ee1df8a18ccc", @typed={0x6, 0x14a, 0x0, 0x0, @str='-\x00'}]}, @generic="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", @typed={0x8, 0x79, 0x0, 0x0, @uid=r8}, @nested={0x1c, 0xd2, 0x0, 0x1, [@nested={0x4, 0xc2}, @nested={0x4, 0xcc}, @typed={0xc, 0xe, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x112}]}, @typed={0x47, 0xfd, 0x0, 0x0, @binary="e4d2c17e1cafeba41d0eaaf455a5de5fae3bea2774a7e52b541d72c71cb2b9015362cfa5f139ab0a154764d34087aca306a00c8598aac21602807f1a99011665ce811b"}, @nested={0x18, 0x21, 0x0, 0x1, [@typed={0xc, 0xfb, 0x0, 0x0, @u64=0x616c}, @typed={0x8, 0xc3, 0x0, 0x0, @fd=r2}]}]}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8}]}, 0x1254}, 0x1, 0x0, 0x0, 0x2400c841}, 0x4010) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0xffff]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x1) 15m59.396129233s ago: executing program 7 (id=5779): madvise$auto(0x0, 0xfffffffffff70001, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70005c00078055000200088b4ae114c241818bfd0d51a861020333b011faafebacd4ebe2b1295ca8cee9514a44014a7fa4b66776f8a936023c3488d7ec1bbf5200802f8c885c5ad7d17117fdebe7f13fc8cf8a6bad18ae4bf96609000000"], 0x70}, 0x1, 0x0, 0x0, 0x20008105}, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) r2 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x4000000000000005, 0x2020009, 0x5, 0xf8, r3, 0x101) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/010/001\x00', 0x40100, 0x0) mmap$auto_usbdev_file_operations_usb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r6, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x800, 0x8) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r2) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x200000000000, 0xb4, 0xffffffffffffffff, 0x8, 0x8, 0x80, 0x4, 0x0, 0xa, 0xffffffff, 0x7, 0x0, 0x84, 0x0, 0xfff, 0x0, 0x0, 0x2, [0x9a8, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x1fe, 0xd) r7 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r7, 0xfffffffffffffd03, &(0x7f00000001c0)) (fail_nth: 6) 15m58.718587117s ago: executing program 7 (id=5783): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x165840, 0x151) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/suspend_stats/fail\x00', 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socketpair$auto(0x1e, 0x1, 0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (fail_nth: 1) 15m57.567489997s ago: executing program 7 (id=5788): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x7, 0xd, 0x8000000000001, 0x948b, 0x3, 0x15f4da07, 0x3, 0x7, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) statmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000007, 0x1ff, 0x6}, 0x0, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r3) fstat$auto(r2, &(0x7f00000002c0)={0x5, 0x4, 0x9, 0x1cf89d47, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x8000000000000001, 0x7, 0xdc, 0x6, 0x7fffffff, 0x1000000000000000, 0x5, 0x5, 0x7}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'vlan0\x00', 0x0}) sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={&(0x7f0000000ac0)={0x1250, r7, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_COORDINATOR={0x1228, 0x1e, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @u32=0x1ff}, @typed={0x14, 0x65, 0x0, 0x0, @ipv6=@mcast2}, @nested={0xff, 0x122, 0x0, 0x1, [@generic="87847934a526f54167abe5c8997ce95e06150c02dd51d84105285acf039c0a71cc8f8f583b7a5a3abfae225d9c4d6aade53e042c6664703d4e365e0ad0e96b7f87aebaad8f", @typed={0x8, 0x139, 0x0, 0x0, @u32=0x600}, @typed={0x8, 0x14f, 0x0, 0x0, @fd=r1}, @generic="9b703728df5229b5fdaeca362ca197237a6ea92b557559f3296f1f7ecf62f578bf4f0b46394510c8635e421308f06c48692df31abf9ad05f095d9b3ffb9db3fb2933e30633e2722014502120c823931f0e7ac367960190700524bc21048a97d7a3888c885a7c697eb3e8e4ff49a141d740d81707f7a4c8c4667ba90365e76ab97549b6b0b84c55ad5ef4d388b302f7a9d9075b08f24af53d6e14579bfb2f6312fb2b5203a124"]}, @nested={0x80, 0xf4, 0x0, 0x1, [@nested={0x4, 0x8}, @generic="60fea4d99afa1b665f4815def876a100b1e1ac", @generic="637696228265db8ad3b46db6aaaae47ca275f6fce72703f60ee0af31ee7798a6cd98245a0ce1e9c6a00a59669109259c5b4cdd61332a3f1a79d0173d6db63d40a139695f6314e4e0a36a6ca847edd4d05a1a2cdd937ad9ee1df8a18ccc", @typed={0x6, 0x14a, 0x0, 0x0, @str='-\x00'}]}, @generic="ecf446c1d0deb3d6d0537e99828ddb6c0a537d3e1e76779d17b2f35ee594577ed41817b92503d2ca40243ed8bee75e2ba0ab80cf652bb6e50c721ef03b7e4dc7f55f302dc0b5be87da6962b07cbbd2359b0bfa15005b91f08cb01dec0fa0130eda4de1ff8adf4b05ad35a086cd79832969a4c48ca01c3262e2676956130570487e7c5c63bdc3e08602523aa062732f83fe93e76d577ff00d18adc1b3fe418f2ca581f588650a504001af0a89e23c846ca1389c34d6f199995c61404981826022eeeca4f2e29b6bba63f59ff8564f2ec3ba9756f32b51fd1bd89bddeea31644a119104608dba9f67e4cdea04485ac654134867d1366ca2d64161066983987f2daefa671f07583daaff43ddd9dc1a19c4de01471b4676c4febffb0a6a84e803ba6a236f5156199e521c86c284c510e0376fda47a0d31e552de107a6a4fa02245a13ea99cec17cf59a900cc0cef4f45dce906f0fde329eae9a18d0d4cd4d0900bf456642f8e340ed6555822b2ad5c14c4d030ded878d72e68d88d07b10a0480616828b2460664e1f4496ada0c321b7a81194ce464c61c320c9737bb9e904dc068030cb196de1730864b150af8b6f06c55e6c8a0b0589a6036a244a3d442eb746cf83457fb450d21713b66720cb0bb0d61dfda78ff04f0877406b47f5bfe406b2d273a5b9808d5d7c33c783c117311267b1f2becc5b3be8554dbfaef5496416dd3693842672d455441c60be3a88bf34669dca090b0cb56078cff4b5089bbfff5ccdc685ae588f2d5238c2ba0e90f07b195208646a161bda986b9f12386552ae588dc641a9c1c99fd9f6bd391358c591e454433dbc48e886c3d199851842a13f475c8dd4db1cdc2ddc0b9f50ca6cf62acfd1548d3a24d04acaced084b809741b39399e84897fe7ba9f8a8fdccdf70f162ab0214a982ab321ac701bb89ca48b0684176797d11247cdab9e700996b1b4b20f6030e06c69639a92112fc33f60857047b2f34a9a03b37e566e3d8e529a2bb6f9dd59df9e49c62408454a2cfc820b62b56df5c36dbbcc7d00d7758ee20bd7270ef2cba21c9ef87c5e4dbea3af010b4a15321a021742abe0fc6568b047937d2c6d975a1d4773d1fdeee9e284c2d2a0d546858c845829366c2c1f0f5eb48e00a2db98673be4d10d9eff0fc27088f8d264b53ae31cd4e7c0ab427d39891680c018f27bd63e22e02e6c762b57c3a2a6f144cf835eba4cc3a12621c325776ef46cbb04156dd4f01193a11c8bf699cb4f54f9d52a04b3de904e6eacd75593098d2a5442a903d6355c9e3ce870822671b80923703eaacb1969a7a8bc3c7cec8781a8d8d51486776613b0f657c47f54c6e3cab56144c673d94fba50ffe7935aee0521d1bd4ac0d0c2277699fbef3ea89ef2e221cd8c688e3ff497d5789ee2eaf01e39a3745a3c3c1fdf8eed3684433f77f6e7eda73fbde51ffe01f0d10fae6e2f1e07d09881bc251790e8bf4b10af95f4765ab3ebf0dcd9d1a855f901a551035fce8376f3342d0c849731adbc8757050e9884c3854f3e10bc622e79d2c6938397ca1b3a26b7f9bf6800d015f8f22c3ed27aa79d5f85f00ca107457288e6e9824c51db57e2899c69c6f22419f626883e031ee3b978ca9b0c2d7f4ee5d9df45f53abbca7e5bed9e6ed9ea7ad6da3be99df85c2b72e218fabda7fefc682395b9a58f3749fd87c36c670401f07b8a55c1852f28c0e03562f9519442318cf1e71549c1bd0e8a96c5c200a8b99a751fc06c5b6462106b0b4bdf4a50a9d206148bbc0cafae190ce1eed700b8f316344594478f8f7b24cdbaebf20d5e579d3a8ba68de9e12ca8e74de8101a5e7388a40200d2ddcea48e5f938bcc5628cb1f4f1d789ef230202d549145c06b2397cc5e3e5bd25d955b2148e4e9079ac85114327532064900e5cf83b640f14aafb4ee8cc7816a4284a304206c40ca00f213f1cc8b51b273c24fa70524a9a3377082f5245c7b6bac54ed3721dd6f1de482fd6e402905753ccc13c1cf51e0068fed3b1e4df59c5fdefe1d207fb93efa63569a95bd5413b4f02eb8651deec8572dadd66b72937b595c5c708c1970d67db92aa528223ebfcd20898be3d4f5a337e97337f34e18f880d09916b6e3b49b79a0a0e728375c755375d88eb663041f2204a6eee6ca86a6b23db4b8c1894b9cb9e07a509bd260b270df01384409e2415368110f5df4ff0b0b54cdabe21a3c145bf96a08d4889ba56bb0e2f0764b9a546c8e7daf550b3e5c213df51251ead109d4006fbb6d44ed2146c26bcefea5a31125177a474e4ac6c8617e4fe8c366c364260138b1a5cf8c75ef89509c73acb22865d1a1eac33ced2af7b6ea1cf382f5f17374dfc67c06d9bd7ebb7ae8642a560a7ba27bb49b2ac7801a83d550d7470e8ff0c2f21bb4e104992ff79909475737a2fe626426b08ebf7042977ac645b4a3dec50824e348f4597d0da5ae37d86ea31d3034ab4ecf2e48b6edd04f7d456caf90af6568b21dcd2d5eedcb9c538502c1430a539b1bbdf27336035bc1f401a88c0edcca0393571a50304c31750eb6494cb7f3bde26acc262832479007d218896ceb92f7aa429c4fec0444cd11cc3678d00e24f4a3048de458f7f0c013036b8197699ecd385fb57996fa58d0dc0e2f33d9b80a8cf375efb2d934a0d63d909cb981951e837f1771c9f144a242aae8d0114ed38e7484c155b7c06f53be3ddeec17287e7e9eacb129e0b58c2d27d7076194d8c66c970cac24ba62ac0b1406ac2159035da533f38ff7105cddd91b6994d48d87ffcaa077d0987c726edba4aa9d39b397f1b3e07655f33be061e404d711db7a6e5716458b2a17a56fb5296292d559a5ddb0f1c322199ee823cde3a9e4013c974ca6209c9076f013698d2debd8ccd33e41cba650ee30d90216383622143711e060e32c8a907f15fa95a99c98b1f118372fba711e631a8cfad5e562d12bfba71e2ca4d5162fad90a5387ce4edd3c8bfeb0459aec5ebdb3bda59bc7dc95ed9667fa0b97e35bc2f1a3c1049281d99ad877ad0839874ed9f4850654a03b20e71aa7efae4fd3f92cd0c60d4fca97ffe8d030c25aadce87d5959e16d3c1036beb42a866b950cec3e01cc683cd6ca124a28f2429eacc6cc4279e101dba96e66e2f541c46a38752f8b31dabdd8be5c19042cfba7f1ae0103522d9024f261f82c412e39ebdc0dd355db4992d066d818ce21daa4d16be1cbf61c0730e152ee70944af70fbfb049537d77cd3466683e41b8fabb584b274d7912b8555804ac8974c6f520140ae1302e1a87aecf887258cfa0e869fbc5cf35eb516de9636f77a35f3ad09a6fbb445fff2c6d2238d5b1c3b5a24e615846bedc0a3dd84d6abe042638713158db713e0ead49d199ddbf106d083fcd5071f27e7d7371d913396a7c6c8a9d1c4ff6d432c4418aefa9b56082bcea0b84170b076a9ddca7722f1ce87529b9bb3c34f5e30a5aaf8ffd0b3da2e95dfc333a1a35b1fffa62354be37b535295b79610795cdbfaa939ca32322cca468c8f9c077faec36988bbe436fd0bdc028b00f6f1e43e4a7b702285d4b7e560844620360b3d35626a5a9c7017052a486c840fefd5836f7d97c878d89230b1938d5df277306c50131d558d470d7edd81444159ab4ddf48d03af1edf0e340c1da73783e1f543ee3bc0c9520a4707adaaffa665d96b2c3d46a1ce57b767b758ec3249105e2102a303d7c36131135fc1a5ca3957da9b38b08a4fcdf68aaa4d850d43b2212114e14971d3ce45f9b7abaabe3e7568f2c76ef40d2d59af813f0ff0ddf1409054c8e2477168ea3d2b4957ca49b55e58e05f73b2527ac3fb40c4502c445556a079d73fc200a3ca9108b5b28e5975f57274b1ca089e66b6e301e64562f9bac7aa34143a7f43d6f932e27598a8292045a4e8e1da1fea9b856b84ea1436dd0d8abfb0f7404e063f55868afdf2ea9429ca47cdeea25b391076746da81d36d672f26a65a08c7d60e2a6e84cb5283429d4cebc4d57c7230ba4b82750888d83cb64fa05a6dd849773a8e4bf5402e8375c43c6ba48f3d9e1abfb9effb0bee135b417813347f715795404be8db977dac66d1a1953550d92fd9f086dfa39aee6a62829ae55e78651bc62ff275e220f00cdd0d5dbfe90731622f785d6afee73a3a332e3cb6f7779672a51018c0fc65fd545e85726343d5d6fdefbb667dc04fe6de42566f0b97cc775f71d3f3b67d8c59bfc0d87b9deb48f65f6d6e08e9f2f22528e7f5f46796f4ab8e930863eee01921adc0abf82707bf813a7c26f1a12e0dc11efb154eee55c2a518b95947950e3a7dbe3be2fa9257374479e7eabe94d855ab1cc182a098e7a6f91fe7b39b69ac82be0d36bffcd6ccb6c36593d0b76428c70d7f4d8919cc87cc551b459a430766bc0584b43f3140975c420693f2bab0c1d9f803e40a0a5c91bfbc7300851a56601201185bb7c588030a02e0d53d18c4b17dd82f4ff43fa40c65cd3932f7461426a119bbfba6c3e490ac57adfc0111e066d561c1d740759bdf4d36151e2c1d8e0f7f5214da3d848a5dba3b7adcc1f5843767eb7c17831688556400172b6bf1899f064bf13af5fbdca55b5770047eb36c611254aa840bfa8daf295d8d7caa4268756dacc10ccf4c83941dd3fc6178a35bf2d1183f7ce4a50d7395e408410adad465c38a75aa410acce45cfdca406598fba1534d4203915d022fdb2364741493df20238e80a420e9c7d3f44772f64311db8800e8dd98d32aa028006ec7a2f373d58b8251900151d3584a957e43c50df0fb5607ff73558ceb2c501b51227a895b135090f8a15670ae773b8be5700417ec5120e1e56e7f8aee6bd21bc1d8feff9bad8004011acc8cdff47978e7fde37e79cb2caf8946723b471e5268f5dee87a4d17208558e79613bc2a1b1ceb50d4d80c1889ed82ad565240b909cf11d0bb18aad12bb514425dc9184bd93e83da07b23ba5247d60ae73c5db5a550a671daff6e4958d612f31a7e1bbe394d08b7d05ca05314fbf97efff398643fb2a80890c7a399fc1e02566b4ff57f8d34a83d3b3b788ab144c91ccdc194c92996bbc7fae341c0677fb030e1a7f2f384b162a90c28d0e86d1454c6686a88880bc8f72ea8b5a2201e4b9aeb979910a325fb93adaee94a491e35c914ca54030392aefae27ad0c930f35c3c63b66501f32539495391d292e2378fbadca23f709862e249bcd239f8198d3eeef1c2e7c51ab22958165b9a663c4649d835ea3d65967c0ce943d983685d08732244d75a38bee6a947f89d1932b0ee128893ce190705dd9d78febd5ef2e6c2a8af5ee652bda43b31cbff70dd3dd5c5ef3d464368d6d24b19667b6d15dc652563e395c5537ba7bf6acb8531ec1e74b6aff3306822d7d8b30caf599a9234804b0a1d4721d73c3d40e36955d4b020e7107ad5c4cf9db87ad6cd361bf3fb53117a1603ddcc2d7e5f1ede0dbc0ee51a08d28dca5971a150cce51a8a3a73b04e573f47e164935c32c1c9e907be4532eb614d30cf92bae2e9e7dc843b17bd5c9791a556dc24b8da01d249628b9ee8d35f834527315c9ccb3524f1d86f9095db1084e46f78c51fb1dbeed7a75a79200456b0999ccbc77ff491c89ab815d24592d8bef46b62d84a0773ea3fd4f12693b8921dbe876a589ca50dfdc09bbb6ea132cb68bafe9c9efbd8017abd9cf579403c2305f5e1ff975694387ac5f84e5aef699716d60600e90f11681e6ad99944b354b18e301ef74bb97ac560cd4ec7b90dd6bd907d0c3d6c91a4e5798a81c1bca71a53bd1f2334f2ac46e3ccd9320075075e5e32a2", @typed={0x8, 0x79, 0x0, 0x0, @uid=r8}, @nested={0x1c, 0xd2, 0x0, 0x1, [@nested={0x4, 0xc2}, @nested={0x4, 0xcc}, @typed={0xc, 0xe, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x112}]}, @typed={0x47, 0xfd, 0x0, 0x0, @binary="e4d2c17e1cafeba41d0eaaf455a5de5fae3bea2774a7e52b541d72c71cb2b9015362cfa5f139ab0a154764d34087aca306a00c8598aac21602807f1a99011665ce811b"}, @nested={0x1c, 0x21, 0x0, 0x1, [@typed={0xc, 0xfb, 0x0, 0x0, @u64=0x616c}, @typed={0x8, 0xc3, 0x0, 0x0, @fd=r2}, @typed={0x4, 0x131}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x8}]}, 0x1250}, 0x1, 0x0, 0x0, 0x2400c841}, 0x4010) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0xffff]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) 15m54.92909785s ago: executing program 7 (id=5796): madvise$auto(0x0, 0xfffffffffff70001, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003ac0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70005c00078055000200088b4ae114c241818bfd0d51a861020333b011faafebacd4ebe2b1295ca8cee9514a44014a7fa4b66776f8a936023c3488d7ec1bbf5200802f8c885c5ad7d17117fdebe7f13fc8cf8a6bad18ae4bf96609000000"], 0x70}, 0x1, 0x0, 0x0, 0x20008105}, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) r2 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x4000000000000005, 0x2020009, 0x5, 0xf8, r3, 0x101) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/010/001\x00', 0x40100, 0x0) mmap$auto_usbdev_file_operations_usb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r6, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x800, 0x8) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r2) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x1ff, 0x7, 0x5, 0x7181, 0x2, 0x7, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x200000000000, 0xb4, 0xffffffffffffffff, 0x8, 0x8, 0x80, 0x4, 0x0, 0xa, 0xffffffff, 0x7, 0x0, 0x84, 0x0, 0xfff, 0x0, 0x0, 0x2, [0x9a8, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]}, 0x1fe, 0xd) r7 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r7, 0xfffffffffffffd03, &(0x7f00000001c0)) 15m54.602769458s ago: executing program 7 (id=5798): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) mlock$auto(0xfbea, 0x10004) madvise$auto(0x8000, 0x87fff, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f00000001c0)='.dev/kvm\x944<\x00d\x9b\x81\xb5\x10\xeb\xe3\x8c\x1c\x82\x85\x98a\xfb\x91\xa5w\x01\xd0\xa1_\xbb9;\xffa\xc9O\x19\xbd\x9a\xf2\x8f]\xfd\xd7\xb0m\xc1\x7f\xe8\x84}\xa7v\x9b\xdf[\x86\xe4\xc8\x863(\x16', 0xffffffac) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r0 = setfsuid$auto(0x0) setuid$auto(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x0, 0x1000000008, 0x0, 0x0, 0x0, 0x2) kcmp$auto(0x0, 0x0, 0x7, 0xffffffffffffffff, r1) sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80c0) mkdir$auto(0x0, 0xfffc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2a, 0x0, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x80000, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x144000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0xc1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x73) sendto$auto(0xffffffffffffffff, 0x0, 0x4, 0xfffffffe, 0x0, 0x21) 15m39.469701796s ago: executing program 36 (id=5798): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) mlock$auto(0xfbea, 0x10004) madvise$auto(0x8000, 0x87fff, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f00000001c0)='.dev/kvm\x944<\x00d\x9b\x81\xb5\x10\xeb\xe3\x8c\x1c\x82\x85\x98a\xfb\x91\xa5w\x01\xd0\xa1_\xbb9;\xffa\xc9O\x19\xbd\x9a\xf2\x8f]\xfd\xd7\xb0m\xc1\x7f\xe8\x84}\xa7v\x9b\xdf[\x86\xe4\xc8\x863(\x16', 0xffffffac) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r0 = setfsuid$auto(0x0) setuid$auto(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x0, 0x1000000008, 0x0, 0x0, 0x0, 0x2) kcmp$auto(0x0, 0x0, 0x7, 0xffffffffffffffff, r1) sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80c0) mkdir$auto(0x0, 0xfffc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket(0x2a, 0x0, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x80000, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x144000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0xc1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x73) sendto$auto(0xffffffffffffffff, 0x0, 0x4, 0xfffffffe, 0x0, 0x21) 6.915231109s ago: executing program 6 (id=8755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x3a}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x121003, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) socket(0x11, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r2) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x5}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x35}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0x11, 0x2, 0x73) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000240), 0xe481c8e312572c61, 0x0) socketpair$auto(0x1, 0x5, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyde\x00', 0x1a9d02, 0x0) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000015c0)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00'}) 6.87813457s ago: executing program 0 (id=8756): epoll_create$auto(0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) socket(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/2/hwirq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000280)={0xc, 0x200, "970bde1fcf44aca36348351c"}, 0x0, 0x1001) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$auto_SHM_STAT(0x7f, 0xd, &(0x7f0000000400)={{0x5, 0xee01, 0xffffffffffffffff, 0x65b, 0x61b, 0x3, 0x3}, 0x1, 0x6, 0x2, 0x3, @inferred, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000800)="865a8afc04253ca971433176de87e4fd3ef162bc18b0111c38a33076ff43617563597c197af03d516e6141378432fbae9c67cf054dbaa74fd966a995428c9f7eef1d042fcee7a66b2db209928ad96885bab741b35ecee472e36195db87d4e7b6dafb33bbfcda642b69624638a5313582eb55710dee18046c1930df36382acc622328dca6a7c5785982293343cef79d4a66eb850a4b8680d676138f727fce3d392f7c8ec013d7c04e12a05cda85feb2f7b64c54600895ea1762", &(0x7f0000000300)="6169a05c119c72d3a337eeadada9f02f2ec4ebfa8f6ee14ff331405aed8fbbf844f055c1cf27b1464b55e2ea7b0f2fa0ea19e5ea7cafe912fa89cb35c7a8ca7b0e8d581a467ac8ed9341586c108ba76d3b7c71ab421e7be9868b370a0ef1f61effc84c3d0cd62b5c560317664357420bb0da608286c9d2d7fc362e430f3b21fe12bee04970e245f9b22a837649f78d3e91aedee285bbbb77f7df5b1b4497a569a2fe9e56857affe10659c7a3a0b40ac497f50e8139296193dc8b9f8dced0ff031f8460f4888a0d4346a5e11b9c1c13bde27fc6c1eea5593f0064101a45a519f76269010392b53d0df8409f4d2e2a8bcbc56a7b0886e5598766c67b"}) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r3, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, r2, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40090) 6.781613564s ago: executing program 8 (id=8757): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x7, 0xd, 0x8000000000001, 0x948b, 0x3, 0x15f4da07, 0x3, 0x7, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) statmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000007, 0x1ff, 0x6}, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r2) fstat$auto(r1, &(0x7f00000002c0)={0x5, 0x4, 0x9, 0x1cf89d47, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x8000000000000001, 0x7, 0xdc, 0x6, 0x7fffffff, 0x1000000000000000, 0x5, 0x5, 0x7}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'vlan0\x00'}) sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000500)={&(0x7f0000000180), 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x2400c841}, 0x4010) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0xffff]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) 5.727221386s ago: executing program 0 (id=8759): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) readv$auto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYBLOB="1200", @ANYRESDEC=r0], 0x1ac}}, 0x0) ioctl$auto(r0, 0x8922, 0x24) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x7b, 0xdf, 0xeb1, 0xffffffffffffffff, 0x10001) connect$auto(0x3, 0x0, 0x55) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r3, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/2t\x00', 0xb00, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r5, 0x5, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg1\x00', 0x646502, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) r6 = socket(0x2, 0x801, 0x84) getsockopt$auto(r6, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) 5.727085713s ago: executing program 6 (id=8760): mmap$auto(0x0, 0x20009, 0xe3, 0x200100000eb1, 0xffffffffffffffff, 0x8000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(r0, r0, 0x0) r1 = socket(0x2, 0x2, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r2) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="62ab3efb", @ANYBLOB="a893b2cad4a70b4b0f850e1cf67322f1738f61d01f5d35ca57ab329279590ce3716a1924c6fd3f5f84be5c3a31e420b1421dab99694cad1c450b2859d1e7b8f120e7bf0acf54f355a454a8f5b9aad2b62ef25bbb", @ANYRES16=r3, @ANYRES64=r2, @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x129203, 0x0) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, &(0x7f00000002c0)={0x4, 0x6}) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0x20081, &(0x7f0000000200)='\x0fd\x00\xe6/\x00'/20, &(0x7f0000000100)="1a16949bc28c8e44acc07dbc23f90d530600ccf0c7c268fd5b8d19ab0a12974a8cae3e4e137432d22dbaee4154321bec1b6e4d87f281711fad53087a29ca46da7b853038c43bf38bc72932a6b627c77b03032a68779f0dbd815cd13d4b046b8ce10128ddd4e8b5d86f7e5947b13301e0b63d0b3d615e62ddd9004498b93e8e522a2596e018899fb1d93c9baec09ccb57b7853978ebde69f82222160de3bec33c962aa236f2d24f4697d5d3185ae8a49f690b9662c0682bdae316de3ca5d892dd7368f8fcfc418bc84bffc487", 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x2301, 0x0) fanotify_mark$auto(0xffffffffffffffff, 0x209, 0xa, 0xffffffffffffffff, 0x0) mmap$auto(0x7fffffff, 0xffffffff00000001, 0x6, 0x200000009b72, r2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) connect$auto(0x3, &(0x7f0000000140)=@vsock={0x28, 0x0, 0xffffffff}, 0x5c) sendto$auto(0x3, 0x0, 0x2000f, 0x13f, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) write$auto(0x1, 0x0, 0x80000000) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r5, &(0x7f0000000c80)="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", 0x159) socket(0x1b, 0x3, 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 5.598094077s ago: executing program 8 (id=8761): openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0x0, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x1, 0x84) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0xa2040, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0xfdfe, 0xd, 0x5, 0x948b, 0x445f, 0x15f4da0a, 0x1, 0x81, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) shmget$auto(0x8, 0x10566, 0x52fe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.83831132s ago: executing program 5 (id=8762): epoll_create$auto(0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) socket(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/2/hwirq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000280)={0xc, 0x200, "970bde1fcf44aca36348351c"}, 0x0, 0x1001) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$auto_SHM_STAT(0x7f, 0xd, &(0x7f0000000400)={{0x5, 0xee01, 0xffffffffffffffff, 0x65b, 0x61b, 0x3, 0x3}, 0x1, 0x6, 0x2, 0x3, @inferred, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000800)="865a8afc04253ca971433176de87e4fd3ef162bc18b0111c38a33076ff43617563597c197af03d516e6141378432fbae9c67cf054dbaa74fd966a995428c9f7eef1d042fcee7a66b2db209928ad96885bab741b35ecee472e36195db87d4e7b6dafb33bbfcda642b69624638a5313582eb55710dee18046c1930df36382acc622328dca6a7c5785982293343cef79d4a66eb850a4b8680d676138f727fce3d392f7c8ec013d7c04e12a05cda85feb2f7b64c54600895ea1762", &(0x7f0000000300)="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"}) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r3, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, r2, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40090) 4.773219665s ago: executing program 6 (id=8763): getcwd$auto(0x0, 0xffffffffffffffff) write$auto(0xca, &(0x7f0000000040)='\x04\xff\x7f\x00\x00\x00\x00\x00\x00\xc8\xbe\x94\xf3\xa2\x00\x00', 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115) r0 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) pread64$auto(r0, 0x0, 0x663, 0x6) socket(0x1a, 0xa, 0xfffffffd) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0xa, 0x100) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x3, 0x0, 0x4, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x80000001, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x3, 0x6, 0x40080003, 0x1, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0xfff, 0x0, 0xe, 0x22002, 0x200, 0x0, 0x84, 0x7f69, 0xff, 0x0, 0x0, 0x0, [0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x4]}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/tsx_async_abort\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) io_uring_setup$auto(0xa, 0x0) 3.760356323s ago: executing program 5 (id=8764): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, &(0x7f0000000080)='\x04>\x01\x12X\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8%6\x9c%\x96\x9a\\S\xa2(Q\xcc\xbf\r\x8d\xe3~kYHi\x1cd\x91g\xdd\\\xa4\x10\x83\xce\a', 0x7f) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x10, 0x7, 0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, 0xffffffffffffffff, 0x6ad, 0x8000000000000000, 0x2, 0x3, 0x1, 0x0, 0x3ff, 0x8}, 0x594) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) pread64$auto(r2, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) close_range$auto(r2, 0xffffffffffffffff, 0xffffffff) lstat$auto(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x6, 0x6, 0x8, 0x8, 0x0, r1, 0x0, 0x9, 0x4, 0x3, 0x3, 0x3, 0x80, 0xa, 0x9, 0x7, 0xffff}) keyctl$auto(0x1, 0xee01, 0x0, r1, 0x1b) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r3, 0x0, 0x2b6) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000003c0), r2) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 3.487745227s ago: executing program 0 (id=8765): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0x9) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13002cbd7040450e531c87abd4f908000300", @ANYRES32=r3, @ANYBLOB="0800610002000000080062"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) close_range$auto(0x2, r0, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) 3.09904682s ago: executing program 0 (id=8766): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/192, 0xc0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x2, 0x1d30, 0x100, 0x400000004, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x9, 0x4, 0x1000000fca, 0x9, 0x4, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) futimesat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)="b2", 0x1) 3.022045696s ago: executing program 8 (id=8767): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) 2.717455758s ago: executing program 6 (id=8768): openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0x0, 0x0) socket(0x10, 0x2, 0x4) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40004) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x5, 0x948b, 0x445f, 0x15f4da0a, 0x1, 0x81, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0) socket(0x23, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.667574247s ago: executing program 5 (id=8769): epoll_create$auto(0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) socket(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/irq/2/hwirq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000280)={0xc, 0x200, "970bde1fcf44aca36348351c"}, 0x0, 0x1001) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$auto_SHM_STAT(0x7f, 0xd, &(0x7f0000000400)={{0x5, 0xee01, 0xffffffffffffffff, 0x65b, 0x61b, 0x3, 0x3}, 0x1, 0x6, 0x2, 0x3, @inferred, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000800)="865a8afc04253ca971433176de87e4fd3ef162bc18b0111c38a33076ff43617563597c197af03d516e6141378432fbae9c67cf054dbaa74fd966a995428c9f7eef1d042fcee7a66b2db209928ad96885bab741b35ecee472e36195db87d4e7b6dafb33bbfcda642b69624638a5313582eb55710dee18046c1930df36382acc622328dca6a7c5785982293343cef79d4a66eb850a4b8680d676138f727fce3d392f7c8ec013d7c04e12a05cda85feb2f7b64c54600895ea1762", &(0x7f0000000300)="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"}) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r3, 0x0, 0x7ff, 0xd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdc, 0xeb5, 0x401, 0x41) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, r2, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) 2.647331753s ago: executing program 0 (id=8770): mmap$auto(0x7ffffffd, 0x40000c, 0x11, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) socket(0x1d, 0x1, 0x7fff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0xff8000, &(0x7f0000000040)="882fbd50bdb3556dfa0fc1774bef93d6380836b0b9e925e78945289aa0c9f1c240588bf7b2c9977cc6") unlink$auto(&(0x7f0000000080)='./file0\x00') writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) socket(0x18, 0x5, 0x1) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) 2.313780455s ago: executing program 8 (id=8771): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fd038004001298"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r1, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r2, 0x5412, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x3, 0x1040005, 0xdf, 0x9b72, 0x7, 0x28000) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r3, &(0x7f0000000340)='\x17\xd6M\x8dy\x9ai2OI\xb1\x8b\x8c#z\xd5\xd9\xdeT\xa5xWv\xaa61\xa0(\xca\xab*\xbcC\xfb\x1e&\x82\xd9\x85\xff\x7f\xf1\x03Q\xffjUq\xab%\xcc\xc9\xb5\x7f\a\x11\xe1\x9a\xe0\xc8\xcf>\xd1\xe2T\x13hf\\cC4\x13\t$Z\xa2\xf7\x97\xcb\xec\xaa\x0e\x96\xecj\xfe\xbfj\xd7\x10\xa2\xa3\xdd\t\x91F\x18Hh\xcf\xf5\xbb\xfbyLb\x03\x8a\xcf\x83[\xb1.\xd7\x11\xaf\x11\xfba\xe8O?\xa9D]ht\xc6\xcf\x01j\xe9\x8e\x8f\xd1\xa0\xbc-\xe7\x9a\xcb\x86\xc5U\xe7)\xb8g\x13\x95\xa6\xe1H\xd7\x8dN\x1a\xf4\x98\x96\xc5=>\xda\xd1\x03\xd4\xec%\xd9\xcf;\x17\xabN,\x83\xfe\\\x02V\xfbC\xfa', 0x4) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) 2.065575379s ago: executing program 5 (id=8772): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), r0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec2\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec2\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r2, 0x40046109, &(0x7f0000002c40)=0xd0) close_range$auto(0x2, 0x8, 0x0) 1.782884007s ago: executing program 5 (id=8773): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8", 0x3d) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0), 0x55) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) io_uring_setup$auto(0x6, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f42) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0x7}, 0x3) r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x600, 0x0) read$auto_tracing_buffers_fops_trace(r5, &(0x7f0000000180)=""/95, 0x5f) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() 1.664057894s ago: executing program 0 (id=8774): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x3, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000000)={r1, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r2, 0x113, 0x4, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) lseek$auto(0x3, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0xa) unshare$auto(0x40000080) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto_SG_SET_RESERVED_SIZE2(r4, 0x2275, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000440)="de33582cb49da8e16ad9a22dff98d1a6d7e37e80dedc1993b32407579025901d7605c8863976541b095f69610ccc6827ba6f65c323ffa0d9020a5e8516ebbe8110711b3072648aab6715995291395e446e200477a4283555f14c7b36411569a9ce8b1a9df660f70890b0c5745629cf04684bd490df6a74439624aaed164046c50a2d26d3ac554a89d1d037db59f469666b36ef49", 0x200}, 0x6) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) ioctl$auto_BLKRRPART(r6, 0x125f, 0x700000000000000) socket(0x18, 0x1, 0x84) ioctl$auto_BLKBSZSET(r6, 0x40081271, &(0x7f0000000380)=0x800) getdents$auto(0xffffffffffffffff, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.5/usb19/power/wakeup_max_time_ms\x00', 0x8000, 0x0) unshare$auto(0x40000080) 1.342993284s ago: executing program 8 (id=8775): epoll_create$auto(0xffffffff) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/hugetlb.1GB.rsvd.limit_in_bytes\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vgem/name\x00', 0xa8201, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = open(0x0, 0x261c2, 0x84) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x40aa2, 0x0) r2 = userfaultfd$auto(0x1) statx$auto(r2, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=r2, r3, 0x8, 0x5, 0xffffffffffffffff, @relative_id=0x6, 0xe600}, 0xf) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x2}, 0xc) write$auto(r0, &(0x7f0000000040)='E\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8) 1.342329726s ago: executing program 6 (id=8776): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) capset$auto(&(0x7f0000000400)={0xc95, 0xffffffffffffffff}, &(0x7f0000000440)={0x5, 0x80, 0x9}) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="74020000", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fedbdf251a000000140150801400e00000000000000000000000ffffac14144308006b00", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="cd395d59e973f30f0013c561069531f72cd331de8c0718c036dde5433f02bec7a678a424422c479300000600b400"], 0x274}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000001) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000380)={{0xb, 0xfffffffb, 0x5, 0xa, 0x7}, "8e49662188bdd869914afabc18888865bd16ab02ce5aa549fa07dc0a603cf661"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000000)={0x8, 0x3, 0x4, 0xba44, 0x2, 0xc, "e000265b7222b141ecb9fb5793abe8fdffdbcd2c02d3c293fa98882f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae76900"}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/tunl0/napi_defer_hard_irqs\x00', 0x28b42, 0x0) sendfile$auto(r5, r5, 0x0, 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r6, 0x0, 0x4000840) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) setpriority$auto_PRIO_USER(0x2, 0x0, 0xfffff8b0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1a, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r8 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.152923811s ago: executing program 8 (id=8777): getcwd$auto(0x0, 0xffffffffffffffff) write$auto(0xca, &(0x7f0000000040)='\x04\xff\x7f\x00\x00\x00\x00\x00\x00\xc8\xbe\x94\xf3\xa2\x00\x00', 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) unshare$auto(0x40000080) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115) r0 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) pread64$auto(r0, 0x0, 0x663, 0x6) socket(0x1a, 0xa, 0xfffffffd) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0xa, 0x100) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/sequencer2\x00', 0x1, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x3, 0x0, 0x4, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x80000001, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x3, 0x6, 0x40080003, 0x1, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0xfff, 0x0, 0xe, 0x22002, 0x200, 0x0, 0x84, 0x7f69, 0xff, 0x0, 0x0, 0x0, [0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x4]}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/tsx_async_abort\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) io_uring_setup$auto(0xa, 0x0) 328.443524ms ago: executing program 6 (id=8778): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r2 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000340)={@siginfo_0_0={0x1ff, 0x2, 0x8000, @_sigsys={&(0x7f0000000240)="b089237097b88e40064c533331bb0ef0f3871bb6271d7c7ebbe31d346d27fcd831cda35f211ad5adaa038e646c925d67cb31086631f969ce129b0382463779415e39b70fdf797cdb0eca20afbf1e054a9d1bf9b9fa44a34ce03f43ec9f1a78f74d9ccfca985bd58f840af3597c60703d4620907775a0081ef431f8be10d6c7e35ff52ec27aa3d1eadd29fe6529475538b872e0ee7197cf928e9dff0c41514b651f787dcf714aff7f2ec83d8412b0ad30a25b00075552903ebc130811936d5bd79f1741067769d3a50baa767782d8d0426cfc0d", 0x9, 0xfffffffc}}}, 0x3ff, &(0x7f00000003c0)={{0x3, 0x6}, {0x6, 0x10000}, 0xc4, 0x5, 0x7f, 0xffffffffffffffff, 0x9, 0x5, 0x3ff, 0x6, 0x8, 0x978, 0x8, 0x6, 0x1, 0x819b}) kcmp$auto_KCMP_FILE(r2, 0xffffffffffffffff, 0x0, r1, r0) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r4, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) 0s ago: executing program 5 (id=8779): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) kernel console output (not intermixed with test programs): 2 [ 2451.933829][ T1829] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.042138][ T1829] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.196869][ T1829] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.699748][ T1829] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2452.754249][T15099] chnl_net:caif_netlink_parms(): no params data found [ 2452.771377][T15117] zswap: compressor not available [ 2453.214324][T15099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2453.222784][T15099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2453.234663][T15099] bridge_slave_0: entered allmulticast mode [ 2453.247563][T15099] bridge_slave_0: entered promiscuous mode [ 2453.262692][T15099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2453.271114][T15099] bridge0: port 2(bridge_slave_1) entered disabled state [ 2453.278673][T12114] Bluetooth: hci1: command tx timeout [ 2453.310563][T15099] bridge_slave_1: entered allmulticast mode [ 2453.328166][T15099] bridge_slave_1: entered promiscuous mode [ 2453.465462][ T1829] bridge_slave_1: left allmulticast mode [ 2453.471155][ T1829] bridge_slave_1: left promiscuous mode [ 2453.507304][ T1829] bridge0: port 2(bridge_slave_1) entered disabled state [ 2453.557005][ T1829] bridge_slave_0: left allmulticast mode [ 2453.577643][ T1829] bridge_slave_0: left promiscuous mode [ 2453.597912][ T1829] bridge0: port 1(bridge_slave_0) entered disabled state [ 2454.833220][ T1829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2455.007663][ T1829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2455.043978][ T1829] bond0 (unregistering): Released all slaves [ 2455.238592][T15099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2455.305533][T15099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2455.343904][T12114] Bluetooth: hci1: command tx timeout [ 2455.717577][T15099] team0: Port device team_slave_0 added [ 2455.799007][T15099] team0: Port device team_slave_1 added [ 2455.986822][ T1829] hsr_slave_0: left promiscuous mode [ 2456.025885][ T1829] hsr_slave_1: left promiscuous mode [ 2456.061136][ T1829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2456.077757][ T1829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2456.103192][ T1829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2456.110882][ T1829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2456.181914][ T1829] veth1_macvtap: left promiscuous mode [ 2456.193817][ T1829] veth0_macvtap: left promiscuous mode [ 2456.209246][ T1829] veth1_vlan: left promiscuous mode [ 2456.219103][ T1829] veth0_vlan: left promiscuous mode [ 2457.078378][T15195] zswap: compressor not available [ 2457.415171][T12114] Bluetooth: hci1: command tx timeout [ 2458.207386][ T1829] team0 (unregistering): Port device team_slave_1 removed [ 2458.297152][ T1829] team0 (unregistering): Port device team_slave_0 removed [ 2459.403884][T15099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2459.427642][T15099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2459.463872][T15099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2459.491993][T12114] Bluetooth: hci1: command tx timeout [ 2459.511948][T15099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2459.518898][T15099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2459.544868][T15099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2459.808086][T15099] hsr_slave_0: entered promiscuous mode [ 2459.828038][T15099] hsr_slave_1: entered promiscuous mode [ 2459.852728][T15099] debugfs: 'hsr0' already exists in 'hsr' [ 2459.866747][T15099] Cannot create hsr debugfs directory [ 2460.203294][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2460.217314][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2462.762124][T15099] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2462.776029][T15099] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2462.803875][T15099] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2462.817672][T15099] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2463.318281][T15099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2463.553566][T15099] 8021q: adding VLAN 0 to HW filter on device team0 [ 2463.755598][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 2463.762758][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2463.772900][T15298] zswap: compressor not available [ 2463.833399][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 2463.840499][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2465.225110][T15099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2466.177557][T15341] zswap: compressor not available [ 2466.584328][T15099] veth0_vlan: entered promiscuous mode [ 2466.745473][T15099] veth1_vlan: entered promiscuous mode [ 2467.216470][T15099] veth0_macvtap: entered promiscuous mode [ 2467.277818][T15099] veth1_macvtap: entered promiscuous mode [ 2467.349177][T15099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2467.424587][T15099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2467.476584][ T1834] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.513472][ T1834] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.531927][ T1834] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.608414][ T1834] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2467.757387][T15380] zswap: compressor û not available [ 2467.930113][ T1826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2468.009823][ T1826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2468.181388][ T1829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2468.197011][ T1829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2470.155639][T15438] FAULT_INJECTION: forcing a failure. [ 2470.155639][T15438] name failslab, interval 1, probability 0, space 0, times 0 [ 2470.244385][T15438] CPU: 0 UID: 0 PID: 15438 Comm: syz.8.8254 Tainted: G U syzkaller #0 PREEMPT(full) [ 2470.244427][T15438] Tainted: [U]=USER [ 2470.244435][T15438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2470.244451][T15438] Call Trace: [ 2470.244460][T15438] [ 2470.244470][T15438] dump_stack_lvl+0x16c/0x1f0 [ 2470.244511][T15438] should_fail_ex+0x512/0x640 [ 2470.244546][T15438] ? fs_reclaim_acquire+0xae/0x150 [ 2470.244574][T15438] should_failslab+0xc2/0x120 [ 2470.244599][T15438] __kmalloc_noprof+0xdd/0x880 [ 2470.244630][T15438] ? tomoyo_encode2+0x100/0x3e0 [ 2470.244668][T15438] ? tomoyo_encode2+0x100/0x3e0 [ 2470.244703][T15438] tomoyo_encode2+0x100/0x3e0 [ 2470.244740][T15438] tomoyo_encode+0x29/0x50 [ 2470.244770][T15438] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2470.244814][T15438] tomoyo_path_number_perm+0x245/0x580 [ 2470.244864][T15438] ? tomoyo_path_number_perm+0x237/0x580 [ 2470.244894][T15438] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2470.244925][T15438] ? find_held_lock+0x2b/0x80 [ 2470.244989][T15438] ? find_held_lock+0x2b/0x80 [ 2470.245019][T15438] ? hook_file_ioctl_common+0x145/0x410 [ 2470.245057][T15438] ? __fget_files+0x20e/0x3c0 [ 2470.245094][T15438] security_file_ioctl+0x9b/0x240 [ 2470.245125][T15438] __x64_sys_ioctl+0xb7/0x210 [ 2470.245156][T15438] do_syscall_64+0xcd/0xfa0 [ 2470.245194][T15438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2470.245219][T15438] RIP: 0033:0x7fb42ab8eec9 [ 2470.245240][T15438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2470.245261][T15438] RSP: 002b:00007fb42ba07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2470.245284][T15438] RAX: ffffffffffffffda RBX: 00007fb42ade5fa0 RCX: 00007fb42ab8eec9 [ 2470.245300][T15438] RDX: 0000000000000000 RSI: 00000000c0044dff RDI: 0000000000000003 [ 2470.245313][T15438] RBP: 00007fb42ba07090 R08: 0000000000000000 R09: 0000000000000000 [ 2470.245328][T15438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2470.245344][T15438] R13: 00007fb42ade6038 R14: 00007fb42ade5fa0 R15: 00007ffcafb9c0d8 [ 2470.245383][T15438] [ 2470.505162][T15438] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2470.811808][T15441] zswap: compressor not available [ 2471.019541][T15451] zswap: compressor not available [ 2471.211793][T15468] zswap: compressor not available [ 2472.860068][T15497] bdi 250:0: the stable_pages_required attribute has been removed. Use the stable_writes queue attribute instead. [ 2473.266752][T15509] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2473.383904][T15513] FAULT_INJECTION: forcing a failure. [ 2473.383904][T15513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2473.399335][T15513] CPU: 1 UID: 0 PID: 15513 Comm: syz.5.8270 Tainted: G U syzkaller #0 PREEMPT(full) [ 2473.399373][T15513] Tainted: [U]=USER [ 2473.399382][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2473.399396][T15513] Call Trace: [ 2473.399405][T15513] [ 2473.399415][T15513] dump_stack_lvl+0x16c/0x1f0 [ 2473.399453][T15513] should_fail_ex+0x512/0x640 [ 2473.399494][T15513] _copy_from_user+0x2e/0xd0 [ 2473.399520][T15513] copy_msghdr_from_user+0x98/0x160 [ 2473.399558][T15513] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2473.399616][T15513] ___sys_sendmsg+0xfe/0x1d0 [ 2473.399653][T15513] ? __pfx____sys_sendmsg+0x10/0x10 [ 2473.399684][T15513] ? __lock_acquire+0x622/0x1c90 [ 2473.399752][T15513] __sys_sendmsg+0x16d/0x220 [ 2473.399788][T15513] ? __pfx___sys_sendmsg+0x10/0x10 [ 2473.399846][T15513] do_syscall_64+0xcd/0xfa0 [ 2473.399883][T15513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2473.399909][T15513] RIP: 0033:0x7f0580d8eec9 [ 2473.399929][T15513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2473.399951][T15513] RSP: 002b:00007f0581bf1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2473.399974][T15513] RAX: ffffffffffffffda RBX: 00007f0580fe5fa0 RCX: 00007f0580d8eec9 [ 2473.399991][T15513] RDX: 0000000020008810 RSI: 0000200000003040 RDI: 0000000000000003 [ 2473.400007][T15513] RBP: 00007f0581bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 2473.400022][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2473.400037][T15513] R13: 00007f0580fe6038 R14: 00007f0580fe5fa0 R15: 00007ffdd2c9b658 [ 2473.400073][T15513] [ 2475.618364][T15538] FAULT_INJECTION: forcing a failure. [ 2475.618364][T15538] name failslab, interval 1, probability 0, space 0, times 0 [ 2475.633174][T15538] CPU: 1 UID: 0 PID: 15538 Comm: syz.5.8277 Tainted: G U syzkaller #0 PREEMPT(full) [ 2475.633216][T15538] Tainted: [U]=USER [ 2475.633224][T15538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2475.633239][T15538] Call Trace: [ 2475.633248][T15538] [ 2475.633259][T15538] dump_stack_lvl+0x16c/0x1f0 [ 2475.633311][T15538] should_fail_ex+0x512/0x640 [ 2475.633350][T15538] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2475.633388][T15538] should_failslab+0xc2/0x120 [ 2475.633414][T15538] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2475.633448][T15538] ? mempool_init_node+0x2f7/0x6e0 [ 2475.633494][T15538] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 2475.633531][T15538] ? mempool_init_node+0x2f7/0x6e0 [ 2475.633567][T15538] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 2475.633604][T15538] mempool_init_node+0x2f7/0x6e0 [ 2475.633649][T15538] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 2475.633686][T15538] ? __pfx_mempool_free_slab+0x10/0x10 [ 2475.633725][T15538] mempool_init_noprof+0x3a/0x50 [ 2475.633767][T15538] bioset_init+0x388/0x8a0 [ 2475.633794][T15538] ? __pfx_bioset_init+0x10/0x10 [ 2475.633836][T15538] __alloc_disk_node+0x83/0x640 [ 2475.633860][T15538] ? blk_alloc_queue+0x1a3/0x760 [ 2475.633894][T15538] __blk_alloc_disk+0xd0/0x160 [ 2475.633919][T15538] ? __pfx___blk_alloc_disk+0x10/0x10 [ 2475.633964][T15538] ? lockdep_init_map_type+0x5c/0x280 [ 2475.633995][T15538] ? lockdep_init_map_type+0x5c/0x280 [ 2475.634028][T15538] dm_create+0x4c4/0x1160 [ 2475.634065][T15538] dev_create+0x121/0x290 [ 2475.634102][T15538] ? __pfx_dev_create+0x10/0x10 [ 2475.634136][T15538] ? __might_fault+0x13b/0x190 [ 2475.634179][T15538] ctl_ioctl+0x798/0xd70 [ 2475.634216][T15538] ? __pfx_dev_create+0x10/0x10 [ 2475.634253][T15538] ? __pfx_ctl_ioctl+0x10/0x10 [ 2475.634332][T15538] ? __fget_files+0x20e/0x3c0 [ 2475.634372][T15538] dm_ctl_ioctl+0x22/0x30 [ 2475.634405][T15538] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 2475.634440][T15538] __x64_sys_ioctl+0x18e/0x210 [ 2475.634473][T15538] do_syscall_64+0xcd/0xfa0 [ 2475.634512][T15538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2475.634540][T15538] RIP: 0033:0x7f0580d8eec9 [ 2475.634562][T15538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2475.634590][T15538] RSP: 002b:00007f0581bf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2475.634616][T15538] RAX: ffffffffffffffda RBX: 00007f0580fe5fa0 RCX: 00007f0580d8eec9 [ 2475.634634][T15538] RDX: 00002000000001c0 RSI: fffffffffffffd03 RDI: 0000000000000002 [ 2475.634652][T15538] RBP: 00007f0580e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2475.634668][T15538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2475.634685][T15538] R13: 00007f0580fe6038 R14: 00007f0580fe5fa0 R15: 00007ffdd2c9b658 [ 2475.634722][T15538] [ 2477.105324][T15567] zswap: compressor not available [ 2478.214393][T15609] size and base must be multiples of 4 kiB [ 2478.220414][T15609] CPU: 0 UID: 0 PID: 15609 Comm: syz.6.8289 Tainted: G U syzkaller #0 PREEMPT(full) [ 2478.220456][T15609] Tainted: [U]=USER [ 2478.220465][T15609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2478.220481][T15609] Call Trace: [ 2478.220490][T15609] [ 2478.220501][T15609] dump_stack_lvl+0x16c/0x1f0 [ 2478.220544][T15609] mtrr_del+0xd1/0x110 [ 2478.220571][T15609] mtrr_ioctl+0x922/0xcf0 [ 2478.220602][T15609] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2478.220637][T15609] ? find_held_lock+0x2b/0x80 [ 2478.220681][T15609] ? __fget_files+0x20e/0x3c0 [ 2478.220717][T15609] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2478.220750][T15609] proc_reg_unlocked_ioctl+0x229/0x320 [ 2478.220779][T15609] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2478.220810][T15609] __x64_sys_ioctl+0x18e/0x210 [ 2478.220843][T15609] do_syscall_64+0xcd/0xfa0 [ 2478.220882][T15609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2478.220909][T15609] RIP: 0033:0x7fac3a38eec9 [ 2478.220931][T15609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2478.220955][T15609] RSP: 002b:00007fac3b15d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2478.220980][T15609] RAX: ffffffffffffffda RBX: 00007fac3a5e5fa0 RCX: 00007fac3a38eec9 [ 2478.220998][T15609] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000004 [ 2478.221015][T15609] RBP: 00007fac3a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2478.221031][T15609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2478.221047][T15609] R13: 00007fac3a5e6038 R14: 00007fac3a5e5fa0 R15: 00007ffca02b3d48 [ 2478.221083][T15609] [ 2478.586933][T15621] netlink: 330 bytes leftover after parsing attributes in process `syz.6.8290'. [ 2478.652929][T15612] zswap: compressor not available [ 2478.709666][T15621] net veth1_virt_wifi ›: renamed from virt_wifi0 [ 2478.833416][T15613] zswap: compressor not available [ 2479.724690][T15644] FAULT_INJECTION: forcing a failure. [ 2479.724690][T15644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2479.746349][T15643] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2479.756170][T15644] CPU: 1 UID: 0 PID: 15644 Comm: syz.0.8292 Tainted: G U syzkaller #0 PREEMPT(full) [ 2479.756207][T15644] Tainted: [U]=USER [ 2479.756215][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2479.756229][T15644] Call Trace: [ 2479.756237][T15644] [ 2479.756247][T15644] dump_stack_lvl+0x16c/0x1f0 [ 2479.756285][T15644] should_fail_ex+0x512/0x640 [ 2479.756323][T15644] _copy_from_user+0x2e/0xd0 [ 2479.756338][T15644] core_sys_select+0x35b/0xc20 [ 2479.756361][T15644] ? __pfx_core_sys_select+0x10/0x10 [ 2479.756383][T15644] ? proc_fail_nth_write+0x9f/0x220 [ 2479.756417][T15644] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2479.756443][T15644] kern_select+0x15d/0x1e0 [ 2479.756460][T15644] ? __pfx_kern_select+0x10/0x10 [ 2479.756483][T15644] ? __pfx_ksys_write+0x10/0x10 [ 2479.756522][T15644] __x64_sys_select+0xbd/0x160 [ 2479.756549][T15644] ? do_syscall_64+0x91/0xfa0 [ 2479.756581][T15644] ? lockdep_hardirqs_on+0x7c/0x110 [ 2479.756614][T15644] do_syscall_64+0xcd/0xfa0 [ 2479.756649][T15644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2479.756674][T15644] RIP: 0033:0x7f07e938eec9 [ 2479.756694][T15644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2479.756718][T15644] RSP: 002b:00007f07ea2a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 2479.756740][T15644] RAX: ffffffffffffffda RBX: 00007f07e95e6090 RCX: 00007f07e938eec9 [ 2479.756757][T15644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 2479.756772][T15644] RBP: 00007f07ea2a6090 R08: 0000000000000000 R09: 0000000000000000 [ 2479.756787][T15644] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 2479.756803][T15644] R13: 00007f07e95e6128 R14: 00007f07e95e6090 R15: 00007ffe993e2bc8 [ 2479.756839][T15644] [ 2480.111713][T12114] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 2480.594617][T15654] FAULT_INJECTION: forcing a failure. [ 2480.594617][T15654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2480.612381][T15654] CPU: 1 UID: 0 PID: 15654 Comm: syz.5.8296 Tainted: G U syzkaller #0 PREEMPT(full) [ 2480.612418][T15654] Tainted: [U]=USER [ 2480.612427][T15654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2480.612442][T15654] Call Trace: [ 2480.612450][T15654] [ 2480.612460][T15654] dump_stack_lvl+0x16c/0x1f0 [ 2480.612498][T15654] should_fail_ex+0x512/0x640 [ 2480.612538][T15654] _copy_from_user+0x2e/0xd0 [ 2480.612564][T15654] core_sys_select+0x35b/0xc20 [ 2480.612604][T15654] ? __pfx_core_sys_select+0x10/0x10 [ 2480.612641][T15654] ? proc_fail_nth_write+0x9f/0x220 [ 2480.612704][T15654] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2480.612749][T15654] kern_select+0x15d/0x1e0 [ 2480.612779][T15654] ? __pfx_kern_select+0x10/0x10 [ 2480.612815][T15654] ? __pfx_ksys_write+0x10/0x10 [ 2480.612853][T15654] __x64_sys_select+0xbd/0x160 [ 2480.612881][T15654] ? do_syscall_64+0x91/0xfa0 [ 2480.612914][T15654] ? lockdep_hardirqs_on+0x7c/0x110 [ 2480.612947][T15654] do_syscall_64+0xcd/0xfa0 [ 2480.612983][T15654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2480.613008][T15654] RIP: 0033:0x7f0580d8eec9 [ 2480.613028][T15654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2480.613052][T15654] RSP: 002b:00007f0581bf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 2480.613075][T15654] RAX: ffffffffffffffda RBX: 00007f0580fe5fa0 RCX: 00007f0580d8eec9 [ 2480.613092][T15654] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 2480.613106][T15654] RBP: 00007f0581bf1090 R08: 0000000000000000 R09: 0000000000000000 [ 2480.613121][T15654] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 2480.613142][T15654] R13: 00007f0580fe6038 R14: 00007f0580fe5fa0 R15: 00007ffdd2c9b658 [ 2480.613178][T15654] [ 2481.161030][T15676] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2482.078572][T15697] zswap: compressor not available [ 2483.255041][T15723] size and base must be multiples of 4 kiB [ 2483.261339][T15723] CPU: 0 UID: 0 PID: 15723 Comm: syz.5.8306 Tainted: G U syzkaller #0 PREEMPT(full) [ 2483.261379][T15723] Tainted: [U]=USER [ 2483.261389][T15723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2483.261404][T15723] Call Trace: [ 2483.261413][T15723] [ 2483.261424][T15723] dump_stack_lvl+0x16c/0x1f0 [ 2483.261468][T15723] mtrr_del+0xd1/0x110 [ 2483.261497][T15723] mtrr_ioctl+0x922/0xcf0 [ 2483.261525][T15723] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2483.261559][T15723] ? find_held_lock+0x2b/0x80 [ 2483.261603][T15723] ? __fget_files+0x20e/0x3c0 [ 2483.261640][T15723] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2483.261668][T15723] proc_reg_unlocked_ioctl+0x229/0x320 [ 2483.261694][T15723] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2483.261712][T15723] __x64_sys_ioctl+0x18e/0x210 [ 2483.261731][T15723] do_syscall_64+0xcd/0xfa0 [ 2483.261754][T15723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2483.261769][T15723] RIP: 0033:0x7f0580d8eec9 [ 2483.261783][T15723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2483.261806][T15723] RSP: 002b:00007f0581baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2483.261822][T15723] RAX: ffffffffffffffda RBX: 00007f0580fe6180 RCX: 00007f0580d8eec9 [ 2483.261833][T15723] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 2483.261843][T15723] RBP: 00007f0580e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2483.261853][T15723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2483.261861][T15723] R13: 00007f0580fe6218 R14: 00007f0580fe6180 R15: 00007ffdd2c9b658 [ 2483.261881][T15723] [ 2484.391421][T15741] size and base must be multiples of 4 kiB [ 2484.434662][T15741] CPU: 0 UID: 0 PID: 15741 Comm: syz.5.8310 Tainted: G U syzkaller #0 PREEMPT(full) [ 2484.434704][T15741] Tainted: [U]=USER [ 2484.434714][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2484.434730][T15741] Call Trace: [ 2484.434739][T15741] [ 2484.434750][T15741] dump_stack_lvl+0x16c/0x1f0 [ 2484.434792][T15741] mtrr_del+0xd1/0x110 [ 2484.434821][T15741] mtrr_ioctl+0x922/0xcf0 [ 2484.434849][T15741] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2484.434886][T15741] ? find_held_lock+0x2b/0x80 [ 2484.434930][T15741] ? __fget_files+0x20e/0x3c0 [ 2484.434965][T15741] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2484.434992][T15741] proc_reg_unlocked_ioctl+0x229/0x320 [ 2484.435020][T15741] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2484.435052][T15741] __x64_sys_ioctl+0x18e/0x210 [ 2484.435084][T15741] do_syscall_64+0xcd/0xfa0 [ 2484.435124][T15741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2484.435152][T15741] RIP: 0033:0x7f0580d8eec9 [ 2484.435174][T15741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2484.435200][T15741] RSP: 002b:00007f0581baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2484.435226][T15741] RAX: ffffffffffffffda RBX: 00007f0580fe6180 RCX: 00007f0580d8eec9 [ 2484.435245][T15741] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000002 [ 2484.435261][T15741] RBP: 00007f0580e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2484.435277][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2484.435294][T15741] R13: 00007f0580fe6218 R14: 00007f0580fe6180 R15: 00007ffdd2c9b658 [ 2484.435331][T15741] [ 2484.920091][T15740] zswap: compressor not available [ 2485.156950][T15766] FAULT_INJECTION: forcing a failure. [ 2485.156950][T15766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2485.263191][T15766] CPU: 1 UID: 0 PID: 15766 Comm: syz.6.8313 Tainted: G U syzkaller #0 PREEMPT(full) [ 2485.263231][T15766] Tainted: [U]=USER [ 2485.263239][T15766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2485.263255][T15766] Call Trace: [ 2485.263263][T15766] [ 2485.263274][T15766] dump_stack_lvl+0x16c/0x1f0 [ 2485.263312][T15766] should_fail_ex+0x512/0x640 [ 2485.263369][T15766] _copy_to_user+0x32/0xd0 [ 2485.263396][T15766] simple_read_from_buffer+0xcb/0x170 [ 2485.263430][T15766] proc_fail_nth_read+0x197/0x240 [ 2485.263465][T15766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2485.263501][T15766] ? rw_verify_area+0xcf/0x6c0 [ 2485.263531][T15766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2485.263565][T15766] vfs_read+0x1e4/0xcf0 [ 2485.263602][T15766] ? __pfx___mutex_lock+0x10/0x10 [ 2485.263639][T15766] ? __pfx_vfs_read+0x10/0x10 [ 2485.263688][T15766] ? __fget_files+0x20e/0x3c0 [ 2485.263729][T15766] ksys_read+0x12a/0x250 [ 2485.263761][T15766] ? __pfx_ksys_read+0x10/0x10 [ 2485.263810][T15766] do_syscall_64+0xcd/0xfa0 [ 2485.263848][T15766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2485.263873][T15766] RIP: 0033:0x7fac3a38d8dc [ 2485.263893][T15766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2485.263918][T15766] RSP: 002b:00007fac385d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2485.263942][T15766] RAX: ffffffffffffffda RBX: 00007fac3a5e6180 RCX: 00007fac3a38d8dc [ 2485.263959][T15766] RDX: 000000000000000f RSI: 00007fac385d50a0 RDI: 0000000000000004 [ 2485.263974][T15766] RBP: 00007fac385d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2485.263989][T15766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2485.264004][T15766] R13: 00007fac3a5e6218 R14: 00007fac3a5e6180 R15: 00007ffca02b3d48 [ 2485.264044][T15766] [ 2485.462697][T15759] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2485.470381][T15759] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2485.476484][T15759] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2485.482763][T15759] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2485.491072][T15759] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2485.539919][T15759] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2485.582905][T15778] FAULT_INJECTION: forcing a failure. [ 2485.582905][T15778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2485.598903][T15778] CPU: 1 UID: 0 PID: 15778 Comm: syz.8.8316 Tainted: G U syzkaller #0 PREEMPT(full) [ 2485.598936][T15778] Tainted: [U]=USER [ 2485.598943][T15778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2485.598956][T15778] Call Trace: [ 2485.598964][T15778] [ 2485.598973][T15778] dump_stack_lvl+0x16c/0x1f0 [ 2485.599008][T15778] should_fail_ex+0x512/0x640 [ 2485.599045][T15778] should_fail_alloc_page+0xe7/0x130 [ 2485.599069][T15778] prepare_alloc_pages+0x3c2/0x610 [ 2485.599090][T15778] ? __lock_acquire+0x622/0x1c90 [ 2485.599116][T15778] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 2485.599164][T15778] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2485.599205][T15778] ? lock_acquire+0x179/0x350 [ 2485.599228][T15778] ? find_held_lock+0x2b/0x80 [ 2485.599257][T15778] ? page_table_check_set+0x627/0x750 [ 2485.599286][T15778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2485.599317][T15778] ? policy_nodemask+0xea/0x4e0 [ 2485.599342][T15778] alloc_pages_mpol+0x1fb/0x550 [ 2485.599366][T15778] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2485.599392][T15778] ? __lock_acquire+0x622/0x1c90 [ 2485.599418][T15778] alloc_pages_noprof+0x131/0x390 [ 2485.599442][T15778] pte_alloc_one+0x1e/0x350 [ 2485.599475][T15778] do_huge_pmd_anonymous_page+0x8bd/0x1f50 [ 2485.599513][T15778] __handle_mm_fault+0x1cff/0x2aa0 [ 2485.599545][T15778] ? mt_find+0x3e2/0xa20 [ 2485.599589][T15778] ? __pfx___handle_mm_fault+0x10/0x10 [ 2485.599613][T15778] ? __pfx_mt_find+0x10/0x10 [ 2485.599665][T15778] ? find_vma+0xbf/0x140 [ 2485.599695][T15778] ? __pfx_find_vma+0x10/0x10 [ 2485.599730][T15778] handle_mm_fault+0x589/0xd10 [ 2485.599757][T15778] ? __pkru_allows_pkey+0x11/0xb0 [ 2485.599787][T15778] do_user_addr_fault+0x7a6/0x1370 [ 2485.599818][T15778] ? rcu_is_watching+0x12/0xc0 [ 2485.599854][T15778] exc_page_fault+0x64/0xc0 [ 2485.599886][T15778] asm_exc_page_fault+0x26/0x30 [ 2485.599908][T15778] RIP: 0010:fault_in_readable+0x135/0x1d0 [ 2485.599940][T15778] Code: c1 cd b6 ff 48 85 db 0f 84 9c 00 00 00 e8 43 d2 b6 ff 48 89 de 48 89 ef e8 e8 cc b6 ff 48 39 eb 73 1d e8 2e d2 b6 ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 5b cd b6 ff 45 85 ff 74 a8 e8 [ 2485.599963][T15778] RSP: 0018:ffffc9000b9f7978 EFLAGS: 00050293 [ 2485.599982][T15778] RAX: 0000000000000000 RBX: 0000200000200000 RCX: ffffffff8205d628 [ 2485.599997][T15778] RDX: ffff888033dc3c80 RSI: ffffffff8205d632 RDI: 0000000000000006 [ 2485.600011][T15778] RBP: 0000200000200040 R08: 0000000000000006 R09: 0000200000200040 [ 2485.600026][T15778] R10: 0000200000200000 R11: 0000000000000001 R12: 0000200000000040 [ 2485.600041][T15778] R13: 0000000000200000 R14: 0000000000000000 R15: 0000000000000000 [ 2485.600065][T15778] ? fault_in_readable+0x128/0x1d0 [ 2485.600095][T15778] ? fault_in_readable+0x132/0x1d0 [ 2485.600131][T15778] ? fault_in_readable+0x132/0x1d0 [ 2485.600162][T15778] ? __pfx_fault_in_readable+0x10/0x10 [ 2485.600192][T15778] ? rcu_is_watching+0x12/0xc0 [ 2485.600222][T15778] ? I_BDEV+0xd/0x20 [ 2485.600242][T15778] ? inode_to_bdi+0x9e/0x160 [ 2485.600275][T15778] fault_in_iov_iter_readable+0x101/0x2c0 [ 2485.600312][T15778] iomap_file_buffered_write+0x441/0xac0 [ 2485.600355][T15778] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 2485.600386][T15778] ? inode_set_ctime_current+0x2a1/0x8f0 [ 2485.600447][T15778] ? __pfx_down_read+0x10/0x10 [ 2485.600473][T15778] ? preempt_count_add+0x76/0x150 [ 2485.600498][T15778] ? mnt_put_write_access_file+0xc1/0xf0 [ 2485.600532][T15778] blkdev_write_iter+0x575/0xe00 [ 2485.600578][T15778] vfs_write+0x7d3/0x11d0 [ 2485.600610][T15778] ? __pfx_blkdev_write_iter+0x10/0x10 [ 2485.600644][T15778] ? __pfx_vfs_write+0x10/0x10 [ 2485.600671][T15778] ? find_held_lock+0x2b/0x80 [ 2485.600723][T15778] ksys_write+0x12a/0x250 [ 2485.600752][T15778] ? __pfx_ksys_write+0x10/0x10 [ 2485.600792][T15778] do_syscall_64+0xcd/0xfa0 [ 2485.600826][T15778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2485.600849][T15778] RIP: 0033:0x7fb42ab8eec9 [ 2485.600868][T15778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2485.600889][T15778] RSP: 002b:00007fb42ba07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2485.600911][T15778] RAX: ffffffffffffffda RBX: 00007fb42ade5fa0 RCX: 00007fb42ab8eec9 [ 2485.600927][T15778] RDX: 0000000080000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 2485.600943][T15778] RBP: 00007fb42ba07090 R08: 0000000000000000 R09: 0000000000000000 [ 2485.600957][T15778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2485.600971][T15778] R13: 00007fb42ade6038 R14: 00007fb42ade5fa0 R15: 00007ffcafb9c0d8 [ 2485.601006][T15778] [ 2486.591441][ T30] audit: type=1800 audit(40972.997:256): pid=15781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8316" name="dbroot" dev="configfs" ino=218714 res=0 errno=0 [ 2486.967682][T15772] FAULT_INJECTION: forcing a failure. [ 2486.967682][T15772] name failslab, interval 1, probability 0, space 0, times 0 [ 2486.982038][T15772] CPU: 1 UID: 0 PID: 15772 Comm: syz.5.8314 Tainted: G U syzkaller #0 PREEMPT(full) [ 2486.982079][T15772] Tainted: [U]=USER [ 2486.982088][T15772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2486.982104][T15772] Call Trace: [ 2486.982113][T15772] [ 2486.982124][T15772] dump_stack_lvl+0x16c/0x1f0 [ 2486.982165][T15772] should_fail_ex+0x512/0x640 [ 2486.982212][T15772] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2486.982247][T15772] should_failslab+0xc2/0x120 [ 2486.982272][T15772] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2486.982303][T15772] ? futex_wait+0xa0/0x380 [ 2486.982331][T15772] ? do_epoll_ctl+0x1170/0x3790 [ 2486.982372][T15772] ? do_epoll_ctl+0x1170/0x3790 [ 2486.982404][T15772] do_epoll_ctl+0x1170/0x3790 [ 2486.982436][T15772] ? lockdep_init_map_type+0x5c/0x280 [ 2486.982473][T15772] ? __pfx_do_epoll_ctl+0x10/0x10 [ 2486.982495][T15772] ? find_held_lock+0x2b/0x80 [ 2486.982512][T15772] ? __might_fault+0xe3/0x190 [ 2486.982529][T15772] ? __might_fault+0xe3/0x190 [ 2486.982554][T15772] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 2486.982572][T15772] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 2486.982592][T15772] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 2486.982618][T15772] do_syscall_64+0xcd/0xfa0 [ 2486.982640][T15772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2486.982654][T15772] RIP: 0033:0x7f0580d8eec9 [ 2486.982667][T15772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2486.982681][T15772] RSP: 002b:00007f0581bf1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 2486.982695][T15772] RAX: ffffffffffffffda RBX: 00007f0580fe5fa0 RCX: 00007f0580d8eec9 [ 2486.982705][T15772] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 2486.982713][T15772] RBP: 00007f0580e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2486.982722][T15772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2486.982730][T15772] R13: 00007f0580fe6038 R14: 00007f0580fe5fa0 R15: 00007ffdd2c9b658 [ 2486.982750][T15772] [ 2487.100527][ T6886] Bluetooth: hci2: command 0x040f tx timeout [ 2487.496676][T12114] Bluetooth: hci0: command 0x0c1a tx timeout [ 2487.502701][ T663] Bluetooth: hci4: command 0x041b tx timeout [ 2487.509013][ T6886] Bluetooth: hci1: command 0x0c1a tx timeout [ 2489.565964][ T6886] Bluetooth: hci1: command 0x0c1a tx timeout [ 2489.664884][T15828] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2489.672333][T15828] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2490.254938][T15840] FAULT_INJECTION: forcing a failure. [ 2490.254938][T15840] name failslab, interval 1, probability 0, space 0, times 0 [ 2490.282199][T15840] CPU: 0 UID: 0 PID: 15840 Comm: syz.8.8328 Tainted: G U syzkaller #0 PREEMPT(full) [ 2490.282241][T15840] Tainted: [U]=USER [ 2490.282251][T15840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2490.282268][T15840] Call Trace: [ 2490.282277][T15840] [ 2490.282287][T15840] dump_stack_lvl+0x16c/0x1f0 [ 2490.282330][T15840] should_fail_ex+0x512/0x640 [ 2490.282369][T15840] ? __kmalloc_noprof+0xca/0x880 [ 2490.282404][T15840] should_failslab+0xc2/0x120 [ 2490.282431][T15840] __kmalloc_noprof+0xdd/0x880 [ 2490.282464][T15840] ? lsm_blob_alloc+0x68/0x90 [ 2490.282508][T15840] ? lsm_blob_alloc+0x68/0x90 [ 2490.282544][T15840] lsm_blob_alloc+0x68/0x90 [ 2490.282582][T15840] security_sk_alloc+0x30/0x270 [ 2490.282613][T15840] sk_prot_alloc+0x1c7/0x2a0 [ 2490.282645][T15840] sk_alloc+0x36/0xc20 [ 2490.282686][T15840] packet_create+0x127/0x8e0 [ 2490.282727][T15840] __sock_create+0x338/0x8d0 [ 2490.282764][T15840] __sys_socket+0x14d/0x260 [ 2490.282796][T15840] ? __pfx___sys_socket+0x10/0x10 [ 2490.282828][T15840] ? xfd_validate_state+0x61/0x180 [ 2490.282878][T15840] __x64_sys_socket+0x72/0xb0 [ 2490.282908][T15840] ? lockdep_hardirqs_on+0x7c/0x110 [ 2490.282948][T15840] do_syscall_64+0xcd/0xfa0 [ 2490.282989][T15840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2490.283015][T15840] RIP: 0033:0x7fb42ab8eec9 [ 2490.283037][T15840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2490.283062][T15840] RSP: 002b:00007fb42b9e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2490.283087][T15840] RAX: ffffffffffffffda RBX: 00007fb42ade6090 RCX: 00007fb42ab8eec9 [ 2490.283112][T15840] RDX: 0000000000000300 RSI: 0000000000080003 RDI: 0000000000000011 [ 2490.283129][T15840] RBP: 00007fb42ac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2490.283147][T15840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2490.283164][T15840] R13: 00007fb42ade6128 R14: 00007fb42ade6090 R15: 00007ffcafb9c0d8 [ 2490.283202][T15840] [ 2491.408325][T15859] zswap: compressor not available [ 2491.620648][T15868] zswap: compressor not available [ 2491.635375][ T6886] Bluetooth: hci1: command 0x0c1a tx timeout [ 2492.388203][T15886] FAULT_INJECTION: forcing a failure. [ 2492.388203][T15886] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2492.439072][T15886] CPU: 0 UID: 0 PID: 15886 Comm: syz.6.8333 Tainted: G U syzkaller #0 PREEMPT(full) [ 2492.439107][T15886] Tainted: [U]=USER [ 2492.439115][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2492.439129][T15886] Call Trace: [ 2492.439137][T15886] [ 2492.439146][T15886] dump_stack_lvl+0x16c/0x1f0 [ 2492.439185][T15886] should_fail_ex+0x512/0x640 [ 2492.439224][T15886] get_futex_key+0x293/0x1560 [ 2492.439264][T15886] ? __pfx_get_futex_key+0x10/0x10 [ 2492.439313][T15886] futex_wake_op+0x129/0xe40 [ 2492.439347][T15886] ? get_pid_task+0x106/0x250 [ 2492.439373][T15886] ? __pfx_futex_wake_op+0x10/0x10 [ 2492.439416][T15886] ? ksys_write+0x190/0x250 [ 2492.439454][T15886] do_futex+0x2e9/0x350 [ 2492.439478][T15886] ? __pfx_do_futex+0x10/0x10 [ 2492.439510][T15886] __x64_sys_futex+0x1e0/0x4c0 [ 2492.439537][T15886] ? fput+0x9b/0xd0 [ 2492.439559][T15886] ? __pfx___x64_sys_futex+0x10/0x10 [ 2492.439583][T15886] ? ksys_write+0x1ac/0x250 [ 2492.439613][T15886] ? __pfx_ksys_write+0x10/0x10 [ 2492.439653][T15886] do_syscall_64+0xcd/0xfa0 [ 2492.439689][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2492.439713][T15886] RIP: 0033:0x7fac3a38eec9 [ 2492.439734][T15886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2492.439757][T15886] RSP: 002b:00007fac385f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2492.439780][T15886] RAX: ffffffffffffffda RBX: 00007fac3a5e6090 RCX: 00007fac3a38eec9 [ 2492.439798][T15886] RDX: 0000000000000009 RSI: 0000000000000005 RDI: 0000200000000080 [ 2492.439812][T15886] RBP: 00007fac385f6090 R08: 0000200000000000 R09: 00000000000001bc [ 2492.439827][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2492.439842][T15886] R13: 00007fac3a5e6128 R14: 00007fac3a5e6090 R15: 00007ffca02b3d48 [ 2492.439876][T15886] [ 2493.116399][T15894] zswap: compressor not available [ 2493.347500][T15905] FAULT_INJECTION: forcing a failure. [ 2493.347500][T15905] name failslab, interval 1, probability 0, space 0, times 0 [ 2493.372871][T15905] CPU: 0 UID: 0 PID: 15905 Comm: syz.6.8337 Tainted: G U syzkaller #0 PREEMPT(full) [ 2493.372908][T15905] Tainted: [U]=USER [ 2493.372916][T15905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2493.372931][T15905] Call Trace: [ 2493.372942][T15905] [ 2493.372952][T15905] dump_stack_lvl+0x16c/0x1f0 [ 2493.372990][T15905] should_fail_ex+0x512/0x640 [ 2493.373026][T15905] ? fs_reclaim_acquire+0xae/0x150 [ 2493.373052][T15905] should_failslab+0xc2/0x120 [ 2493.373076][T15905] __kmalloc_cache_noprof+0x72/0x780 [ 2493.373106][T15905] ? kobject_create_and_add+0x4a/0xf0 [ 2493.373134][T15905] ? kobject_create_and_add+0x4a/0xf0 [ 2493.373157][T15905] kobject_create_and_add+0x4a/0xf0 [ 2493.373183][T15905] __add_disk+0x676/0xf00 [ 2493.373223][T15905] add_disk_fwnode+0x13f/0x5d0 [ 2493.373266][T15905] loop_add+0x903/0xb70 [ 2493.373297][T15905] ? __pfx_loop_add+0x10/0x10 [ 2493.373352][T15905] ? find_held_lock+0x2b/0x80 [ 2493.373394][T15905] loop_control_ioctl+0x13e/0x630 [ 2493.373424][T15905] ? __pfx_loop_control_ioctl+0x10/0x10 [ 2493.373458][T15905] ? __pfx_loop_control_ioctl+0x10/0x10 [ 2493.373490][T15905] __x64_sys_ioctl+0x18e/0x210 [ 2493.373523][T15905] do_syscall_64+0xcd/0xfa0 [ 2493.373562][T15905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2493.373589][T15905] RIP: 0033:0x7fac3a38eec9 [ 2493.373610][T15905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2493.373635][T15905] RSP: 002b:00007fac3b15d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2493.373660][T15905] RAX: ffffffffffffffda RBX: 00007fac3a5e5fa0 RCX: 00007fac3a38eec9 [ 2493.373679][T15905] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 2493.373696][T15905] RBP: 00007fac3a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2493.373713][T15905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2493.373730][T15905] R13: 00007fac3a5e6038 R14: 00007fac3a5e5fa0 R15: 00007ffca02b3d48 [ 2493.373769][T15905] [ 2494.013852][T15919] FAULT_INJECTION: forcing a failure. [ 2494.013852][T15919] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2494.027567][T15919] CPU: 1 UID: 0 PID: 15919 Comm: syz.6.8342 Tainted: G U syzkaller #0 PREEMPT(full) [ 2494.027605][T15919] Tainted: [U]=USER [ 2494.027613][T15919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2494.027629][T15919] Call Trace: [ 2494.027637][T15919] [ 2494.027647][T15919] dump_stack_lvl+0x16c/0x1f0 [ 2494.027685][T15919] should_fail_ex+0x512/0x640 [ 2494.027724][T15919] get_futex_key+0x1d0/0x1560 [ 2494.027766][T15919] ? __pfx_get_futex_key+0x10/0x10 [ 2494.027805][T15919] ? kasan_save_track+0x14/0x30 [ 2494.027837][T15919] ? __kasan_kmalloc+0xaa/0xb0 [ 2494.027873][T15919] futex_lock_pi+0x1cc/0x7c0 [ 2494.027904][T15919] ? find_held_lock+0x2b/0x80 [ 2494.027934][T15919] ? __pfx_futex_lock_pi+0x10/0x10 [ 2494.028001][T15919] ? __pfx_futex_wake_mark+0x10/0x10 [ 2494.028036][T15919] ? find_held_lock+0x2b/0x80 [ 2494.028067][T15919] ? ksys_write+0x190/0x250 [ 2494.028105][T15919] do_futex+0x11a/0x350 [ 2494.028131][T15919] ? __pfx_do_futex+0x10/0x10 [ 2494.028165][T15919] __x64_sys_futex+0x1e0/0x4c0 [ 2494.028192][T15919] ? fput+0x9b/0xd0 [ 2494.028215][T15919] ? __pfx___x64_sys_futex+0x10/0x10 [ 2494.028236][T15919] ? ksys_write+0x1ac/0x250 [ 2494.028266][T15919] ? __pfx_ksys_write+0x10/0x10 [ 2494.028303][T15919] do_syscall_64+0xcd/0xfa0 [ 2494.028337][T15919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2494.028361][T15919] RIP: 0033:0x7fac3a38eec9 [ 2494.028380][T15919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2494.028403][T15919] RSP: 002b:00007fac3b15d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2494.028424][T15919] RAX: ffffffffffffffda RBX: 00007fac3a5e5fa0 RCX: 00007fac3a38eec9 [ 2494.028440][T15919] RDX: 0000000000000008 RSI: 0000000000000086 RDI: 0000000000000000 [ 2494.028455][T15919] RBP: 00007fac3b15d090 R08: 0000000000000000 R09: 0000000000000007 [ 2494.028466][T15919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2494.028482][T15919] R13: 00007fac3a5e6038 R14: 00007fac3a5e5fa0 R15: 00007ffca02b3d48 [ 2494.028522][T15919] [ 2494.237886][ C1] vkms_vblank_simulate: vblank timer overrun [ 2494.340428][T15916] FAULT_INJECTION: forcing a failure. [ 2494.340428][T15916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2494.359373][T15916] CPU: 1 UID: 0 PID: 15916 Comm: syz.0.8340 Tainted: G U syzkaller #0 PREEMPT(full) [ 2494.359409][T15916] Tainted: [U]=USER [ 2494.359418][T15916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2494.359433][T15916] Call Trace: [ 2494.359441][T15916] [ 2494.359450][T15916] dump_stack_lvl+0x16c/0x1f0 [ 2494.359489][T15916] should_fail_ex+0x512/0x640 [ 2494.359529][T15916] _copy_to_user+0x32/0xd0 [ 2494.359556][T15916] simple_read_from_buffer+0xcb/0x170 [ 2494.359588][T15916] proc_fail_nth_read+0x197/0x240 [ 2494.359621][T15916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2494.359656][T15916] ? rw_verify_area+0xcf/0x6c0 [ 2494.359685][T15916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2494.359725][T15916] vfs_read+0x1e4/0xcf0 [ 2494.359762][T15916] ? __pfx___mutex_lock+0x10/0x10 [ 2494.359797][T15916] ? __pfx_vfs_read+0x10/0x10 [ 2494.359838][T15916] ? __fget_files+0x20e/0x3c0 [ 2494.359879][T15916] ksys_read+0x12a/0x250 [ 2494.359911][T15916] ? __pfx_ksys_read+0x10/0x10 [ 2494.359950][T15916] do_syscall_64+0xcd/0xfa0 [ 2494.359981][T15916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2494.360005][T15916] RIP: 0033:0x7f07e938d8dc [ 2494.360025][T15916] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2494.360048][T15916] RSP: 002b:00007f07ea2c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2494.360071][T15916] RAX: ffffffffffffffda RBX: 00007f07e95e5fa0 RCX: 00007f07e938d8dc [ 2494.360087][T15916] RDX: 000000000000000f RSI: 00007f07ea2c70a0 RDI: 0000000000000004 [ 2494.360102][T15916] RBP: 00007f07ea2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 2494.360117][T15916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2494.360132][T15916] R13: 00007f07e95e6038 R14: 00007f07e95e5fa0 R15: 00007ffe993e2bc8 [ 2494.360170][T15916] [ 2494.544246][ C1] vkms_vblank_simulate: vblank timer overrun [ 2494.742765][T15936] FAULT_INJECTION: forcing a failure. [ 2494.742765][T15936] name failslab, interval 1, probability 0, space 0, times 0 [ 2494.798397][T15936] CPU: 0 UID: 0 PID: 15936 Comm: syz.8.8348 Tainted: G U syzkaller #0 PREEMPT(full) [ 2494.798450][T15936] Tainted: [U]=USER [ 2494.798458][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2494.798476][T15936] Call Trace: [ 2494.798485][T15936] [ 2494.798495][T15936] dump_stack_lvl+0x16c/0x1f0 [ 2494.798533][T15936] should_fail_ex+0x512/0x640 [ 2494.798567][T15936] ? fs_reclaim_acquire+0xae/0x150 [ 2494.798594][T15936] should_failslab+0xc2/0x120 [ 2494.798618][T15936] __kmalloc_noprof+0xdd/0x880 [ 2494.798647][T15936] ? tomoyo_encode2+0x100/0x3e0 [ 2494.798685][T15936] ? tomoyo_encode2+0x100/0x3e0 [ 2494.798715][T15936] tomoyo_encode2+0x100/0x3e0 [ 2494.798750][T15936] tomoyo_encode+0x29/0x50 [ 2494.798780][T15936] tomoyo_realpath_from_path+0x18f/0x6e0 [ 2494.798817][T15936] ? tomoyo_profile+0x47/0x60 [ 2494.798855][T15936] tomoyo_path_number_perm+0x245/0x580 [ 2494.798881][T15936] ? tomoyo_path_number_perm+0x237/0x580 [ 2494.798911][T15936] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2494.798940][T15936] ? find_held_lock+0x2b/0x80 [ 2494.799002][T15936] ? find_held_lock+0x2b/0x80 [ 2494.799031][T15936] ? hook_file_ioctl_common+0x145/0x410 [ 2494.799070][T15936] ? __fget_files+0x20e/0x3c0 [ 2494.799108][T15936] security_file_ioctl+0x9b/0x240 [ 2494.799144][T15936] __x64_sys_ioctl+0xb7/0x210 [ 2494.799174][T15936] do_syscall_64+0xcd/0xfa0 [ 2494.799210][T15936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2494.799235][T15936] RIP: 0033:0x7fb42ab8eec9 [ 2494.799255][T15936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2494.799278][T15936] RSP: 002b:00007fb42ba07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2494.799302][T15936] RAX: ffffffffffffffda RBX: 00007fb42ade5fa0 RCX: 00007fb42ab8eec9 [ 2494.799319][T15936] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000004 [ 2494.799334][T15936] RBP: 00007fb42ba07090 R08: 0000000000000000 R09: 0000000000000000 [ 2494.799349][T15936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2494.799364][T15936] R13: 00007fb42ade6038 R14: 00007fb42ade5fa0 R15: 00007ffcafb9c0d8 [ 2494.799400][T15936] [ 2494.799503][T15936] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2495.097802][T15936] size and base must be multiples of 4 kiB [ 2495.120195][T15936] CPU: 0 UID: 0 PID: 15936 Comm: syz.8.8348 Tainted: G U syzkaller #0 PREEMPT(full) [ 2495.120231][T15936] Tainted: [U]=USER [ 2495.120240][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2495.120253][T15936] Call Trace: [ 2495.120262][T15936] [ 2495.120271][T15936] dump_stack_lvl+0x16c/0x1f0 [ 2495.120307][T15936] mtrr_del+0xd1/0x110 [ 2495.120329][T15936] mtrr_ioctl+0x922/0xcf0 [ 2495.120347][T15936] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2495.120370][T15936] ? find_held_lock+0x2b/0x80 [ 2495.120400][T15936] ? __fget_files+0x20e/0x3c0 [ 2495.120423][T15936] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2495.120441][T15936] proc_reg_unlocked_ioctl+0x229/0x320 [ 2495.120458][T15936] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2495.120478][T15936] __x64_sys_ioctl+0x18e/0x210 [ 2495.120499][T15936] do_syscall_64+0xcd/0xfa0 [ 2495.120526][T15936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2495.120543][T15936] RIP: 0033:0x7fb42ab8eec9 [ 2495.120558][T15936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2495.120575][T15936] RSP: 002b:00007fb42ba07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2495.120592][T15936] RAX: ffffffffffffffda RBX: 00007fb42ade5fa0 RCX: 00007fb42ab8eec9 [ 2495.120605][T15936] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000004 [ 2495.120615][T15936] RBP: 00007fb42ba07090 R08: 0000000000000000 R09: 0000000000000000 [ 2495.120633][T15936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2495.120644][T15936] R13: 00007fb42ade6038 R14: 00007fb42ade5fa0 R15: 00007ffcafb9c0d8 [ 2495.120669][T15936] [ 2495.515251][T15929] zswap: compressor not available [ 2496.047879][T15959] zswap: compressor not available [ 2497.421715][T15992] zswap: compressor not available [ 2497.889900][T16010] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2499.618386][T16038] size and base must be multiples of 4 kiB [ 2499.628419][T16038] CPU: 0 UID: 0 PID: 16038 Comm: syz.0.8362 Tainted: G U syzkaller #0 PREEMPT(full) [ 2499.628458][T16038] Tainted: [U]=USER [ 2499.628468][T16038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2499.628484][T16038] Call Trace: [ 2499.628494][T16038] [ 2499.628503][T16038] dump_stack_lvl+0x16c/0x1f0 [ 2499.628529][T16038] mtrr_del+0xd1/0x110 [ 2499.628544][T16038] mtrr_ioctl+0x922/0xcf0 [ 2499.628560][T16038] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2499.628579][T16038] ? find_held_lock+0x2b/0x80 [ 2499.628604][T16038] ? __fget_files+0x20e/0x3c0 [ 2499.628623][T16038] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2499.628638][T16038] proc_reg_unlocked_ioctl+0x229/0x320 [ 2499.628652][T16038] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2499.628668][T16038] __x64_sys_ioctl+0x18e/0x210 [ 2499.628686][T16038] do_syscall_64+0xcd/0xfa0 [ 2499.628707][T16038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2499.628722][T16038] RIP: 0033:0x7f07e938eec9 [ 2499.628734][T16038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2499.628748][T16038] RSP: 002b:00007f07ea285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2499.628762][T16038] RAX: ffffffffffffffda RBX: 00007f07e95e6180 RCX: 00007f07e938eec9 [ 2499.628771][T16038] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000002 [ 2499.628780][T16038] RBP: 00007f07e9411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2499.628788][T16038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2499.628796][T16038] R13: 00007f07e95e6218 R14: 00007f07e95e6180 R15: 00007ffe993e2bc8 [ 2499.628815][T16038] [ 2500.571742][T16056] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 2500.826229][T16061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8369'. [ 2500.862622][T16061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2500.890913][T16061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2501.011186][T16061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2501.045259][T16061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2501.168057][T16066] FAULT_INJECTION: forcing a failure. [ 2501.168057][T16066] name failslab, interval 1, probability 0, space 0, times 0 [ 2501.411091][T16066] CPU: 1 UID: 0 PID: 16066 Comm: syz.0.8369 Tainted: G U syzkaller #0 PREEMPT(full) [ 2501.411135][T16066] Tainted: [U]=USER [ 2501.411141][T16066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2501.411150][T16066] Call Trace: [ 2501.411156][T16066] [ 2501.411162][T16066] dump_stack_lvl+0x16c/0x1f0 [ 2501.411187][T16066] should_fail_ex+0x512/0x640 [ 2501.411209][T16066] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2501.411231][T16066] should_failslab+0xc2/0x120 [ 2501.411245][T16066] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2501.411266][T16066] ? security_file_alloc+0x34/0x2b0 [ 2501.411288][T16066] ? security_file_alloc+0x34/0x2b0 [ 2501.411305][T16066] security_file_alloc+0x34/0x2b0 [ 2501.411324][T16066] init_file+0x93/0x4c0 [ 2501.411339][T16066] alloc_empty_file+0x73/0x1e0 [ 2501.411354][T16066] path_openat+0xda/0x2cb0 [ 2501.411379][T16066] ? __pfx_path_openat+0x10/0x10 [ 2501.411400][T16066] ? __lock_acquire+0xb8a/0x1c90 [ 2501.411416][T16066] do_filp_open+0x20b/0x470 [ 2501.411436][T16066] ? __pfx_do_filp_open+0x10/0x10 [ 2501.411469][T16066] ? alloc_fd+0x471/0x7d0 [ 2501.411492][T16066] do_sys_openat2+0x11b/0x1d0 [ 2501.411508][T16066] ? __pfx_do_sys_openat2+0x10/0x10 [ 2501.411525][T16066] ? __fput+0x68d/0xb70 [ 2501.411542][T16066] __x64_sys_openat+0x174/0x210 [ 2501.411558][T16066] ? __pfx___x64_sys_openat+0x10/0x10 [ 2501.411581][T16066] do_syscall_64+0xcd/0xfa0 [ 2501.411603][T16066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2501.411617][T16066] RIP: 0033:0x7f07e938eec9 [ 2501.411629][T16066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2501.411643][T16066] RSP: 002b:00007f07ea285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2501.411658][T16066] RAX: ffffffffffffffda RBX: 00007f07e95e6180 RCX: 00007f07e938eec9 [ 2501.411667][T16066] RDX: 0000000000000002 RSI: 0000200000000980 RDI: ffffffffffffff9c [ 2501.411676][T16066] RBP: 00007f07e9411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2501.411685][T16066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2501.411695][T16066] R13: 00007f07e95e6218 R14: 00007f07e95e6180 R15: 00007ffe993e2bc8 [ 2501.411715][T16066] [ 2502.236186][T16074] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8372'. [ 2502.384640][T16084] FAULT_INJECTION: forcing a failure. [ 2502.384640][T16084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2502.419076][T16084] CPU: 0 UID: 0 PID: 16084 Comm: syz.5.8374 Tainted: G U syzkaller #0 PREEMPT(full) [ 2502.419100][T16084] Tainted: [U]=USER [ 2502.419105][T16084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2502.419114][T16084] Call Trace: [ 2502.419120][T16084] [ 2502.419126][T16084] dump_stack_lvl+0x16c/0x1f0 [ 2502.419150][T16084] should_fail_ex+0x512/0x640 [ 2502.419176][T16084] _copy_from_iter+0x463/0x1720 [ 2502.419203][T16084] ? __pfx__copy_from_iter+0x10/0x10 [ 2502.419225][T16084] ? rcu_is_watching+0x12/0xc0 [ 2502.419244][T16084] ? trace_kmalloc+0x2b/0xd0 [ 2502.419257][T16084] ? __kmalloc_noprof+0x34f/0x880 [ 2502.419273][T16084] ? kernfs_fop_write_iter+0x237/0x570 [ 2502.419295][T16084] kernfs_fop_write_iter+0x19a/0x570 [ 2502.419315][T16084] do_iter_readv_writev+0x662/0x9e0 [ 2502.419335][T16084] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2502.419362][T16084] vfs_writev+0x35f/0xde0 [ 2502.419385][T16084] ? __pfx_vfs_writev+0x10/0x10 [ 2502.419402][T16084] ? __mutex_lock+0x1c5/0x1060 [ 2502.419428][T16084] ? __pfx___mutex_lock+0x10/0x10 [ 2502.419455][T16084] ? __fget_files+0x20e/0x3c0 [ 2502.419472][T16084] ? __fget_files+0x180/0x3c0 [ 2502.419494][T16084] ? do_writev+0x132/0x340 [ 2502.419510][T16084] do_writev+0x132/0x340 [ 2502.419528][T16084] ? __pfx_do_writev+0x10/0x10 [ 2502.419551][T16084] do_syscall_64+0xcd/0xfa0 [ 2502.419572][T16084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2502.419587][T16084] RIP: 0033:0x7f0580d8eec9 [ 2502.419599][T16084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2502.419613][T16084] RSP: 002b:00007f0581bd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2502.419626][T16084] RAX: ffffffffffffffda RBX: 00007f0580fe6090 RCX: 00007f0580d8eec9 [ 2502.419636][T16084] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000005 [ 2502.419645][T16084] RBP: 00007f0581bd0090 R08: 0000000000000000 R09: 0000000000000000 [ 2502.419654][T16084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2502.419662][T16084] R13: 00007f0580fe6128 R14: 00007f0580fe6090 R15: 00007ffdd2c9b658 [ 2502.419682][T16084] [ 2503.849460][T16082] zswap: compressor not available [ 2504.505513][ T30] audit: type=1800 audit(40991.010:257): pid=16106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8378" name="dbroot" dev="configfs" ino=220063 res=0 errno=0 [ 2504.804644][T16121] zswap: compressor not available [ 2507.049710][T16166] zswap: compressor not available [ 2508.001832][T16168] zswap: compressor not available [ 2509.358266][T16217] FAULT_INJECTION: forcing a failure. [ 2509.358266][T16217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2509.383724][T16217] CPU: 0 UID: 0 PID: 16217 Comm: syz.8.8395 Tainted: G U syzkaller #0 PREEMPT(full) [ 2509.383762][T16217] Tainted: [U]=USER [ 2509.383770][T16217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2509.383782][T16217] Call Trace: [ 2509.383788][T16217] [ 2509.383794][T16217] dump_stack_lvl+0x16c/0x1f0 [ 2509.383819][T16217] should_fail_ex+0x512/0x640 [ 2509.383844][T16217] _copy_from_iter+0x463/0x1720 [ 2509.383870][T16217] ? __pfx__copy_from_iter+0x10/0x10 [ 2509.383892][T16217] ? rcu_is_watching+0x12/0xc0 [ 2509.383912][T16217] ? trace_kmalloc+0x2b/0xd0 [ 2509.383924][T16217] ? __kmalloc_noprof+0x34f/0x880 [ 2509.383941][T16217] ? kernfs_fop_write_iter+0x237/0x570 [ 2509.383962][T16217] kernfs_fop_write_iter+0x19a/0x570 [ 2509.383982][T16217] do_iter_readv_writev+0x662/0x9e0 [ 2509.384006][T16217] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2509.384039][T16217] vfs_writev+0x35f/0xde0 [ 2509.384062][T16217] ? __pfx_vfs_writev+0x10/0x10 [ 2509.384079][T16217] ? __mutex_lock+0x1c5/0x1060 [ 2509.384105][T16217] ? __pfx___mutex_lock+0x10/0x10 [ 2509.384132][T16217] ? __fget_files+0x20e/0x3c0 [ 2509.384149][T16217] ? __fget_files+0x180/0x3c0 [ 2509.384171][T16217] ? do_writev+0x132/0x340 [ 2509.384187][T16217] do_writev+0x132/0x340 [ 2509.384205][T16217] ? __pfx_do_writev+0x10/0x10 [ 2509.384228][T16217] do_syscall_64+0xcd/0xfa0 [ 2509.384250][T16217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2509.384264][T16217] RIP: 0033:0x7fb42ab8eec9 [ 2509.384276][T16217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2509.384290][T16217] RSP: 002b:00007fb42b9e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2509.384304][T16217] RAX: ffffffffffffffda RBX: 00007fb42ade6090 RCX: 00007fb42ab8eec9 [ 2509.384313][T16217] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000004 [ 2509.384322][T16217] RBP: 00007fb42b9e6090 R08: 0000000000000000 R09: 0000000000000000 [ 2509.384330][T16217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2509.384339][T16217] R13: 00007fb42ade6128 R14: 00007fb42ade6090 R15: 00007ffcafb9c0d8 [ 2509.384358][T16217] [ 2511.414292][T16242] random: crng reseeded on system resumption [ 2511.425515][T16238] zswap: compressor not available [ 2512.550888][T16259] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 2515.178107][T16298] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8411'. [ 2516.364316][T16306] FAULT_INJECTION: forcing a failure. [ 2516.364316][T16306] name failslab, interval 1, probability 0, space 0, times 0 [ 2516.432104][T16306] CPU: 1 UID: 0 PID: 16306 Comm: syz.0.8414 Tainted: G U syzkaller #0 PREEMPT(full) [ 2516.432144][T16306] Tainted: [U]=USER [ 2516.432153][T16306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2516.432169][T16306] Call Trace: [ 2516.432180][T16306] [ 2516.432191][T16306] dump_stack_lvl+0x16c/0x1f0 [ 2516.432234][T16306] should_fail_ex+0x512/0x640 [ 2516.432271][T16306] ? fs_reclaim_acquire+0xae/0x150 [ 2516.432300][T16306] should_failslab+0xc2/0x120 [ 2516.432326][T16306] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2516.432369][T16306] ? ext4_init_io_end+0x24/0x170 [ 2516.432408][T16306] ? ext4_init_io_end+0x24/0x170 [ 2516.432438][T16306] ext4_init_io_end+0x24/0x170 [ 2516.432467][T16306] ext4_do_writepages+0x9e7/0x3cf0 [ 2516.432498][T16306] ? do_raw_spin_lock+0x12c/0x2b0 [ 2516.432547][T16306] ? __pfx_ext4_do_writepages+0x10/0x10 [ 2516.432591][T16306] ? ext4_writepages+0x37a/0x7d0 [ 2516.432616][T16306] ext4_writepages+0x37a/0x7d0 [ 2516.432639][T16306] ? schedule_timeout+0x160/0x290 [ 2516.432669][T16306] ? __pfx_ext4_writepages+0x10/0x10 [ 2516.432716][T16306] ? __pfx_ext4_writepages+0x10/0x10 [ 2516.432744][T16306] do_writepages+0x27a/0x600 [ 2516.432775][T16306] ? __pfx_do_writepages+0x10/0x10 [ 2516.432800][T16306] ? do_raw_spin_unlock+0x172/0x230 [ 2516.432832][T16306] ? _raw_spin_unlock+0x28/0x50 [ 2516.432865][T16306] filemap_fdatawrite_wbc+0x104/0x160 [ 2516.432893][T16306] __filemap_fdatawrite_range+0xb9/0x100 [ 2516.432924][T16306] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 2516.432953][T16306] ? __lock_acquire+0x622/0x1c90 [ 2516.433026][T16306] file_write_and_wait_range+0xca/0x140 [ 2516.433064][T16306] ext4_sync_file+0x310/0xf10 [ 2516.433102][T16306] ? __pfx___up_read+0x10/0x10 [ 2516.433133][T16306] ? __pfx_ext4_sync_file+0x10/0x10 [ 2516.433170][T16306] vfs_fsync_range+0x139/0x220 [ 2516.433211][T16306] __do_sys_msync+0x3cb/0x5c0 [ 2516.433254][T16306] do_syscall_64+0xcd/0xfa0 [ 2516.433294][T16306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2516.433321][T16306] RIP: 0033:0x7f07e938eec9 [ 2516.433352][T16306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2516.433380][T16306] RSP: 002b:00007f07ea2c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001a [ 2516.433407][T16306] RAX: ffffffffffffffda RBX: 00007f07e95e5fa0 RCX: 00007f07e938eec9 [ 2516.433426][T16306] RDX: 0000000400000004 RSI: 0180000000000001 RDI: 000000001ffff000 [ 2516.433445][T16306] RBP: 00007f07e9411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2516.433462][T16306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2516.433478][T16306] R13: 00007f07e95e6038 R14: 00007f07e95e5fa0 R15: 00007ffe993e2bc8 [ 2516.433517][T16306] [ 2516.702867][ C1] vkms_vblank_simulate: vblank timer overrun [ 2517.019410][T16298] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2517.026040][T16298] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2517.039534][T16298] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2517.055656][T16298] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2517.492080][T16331] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2517.499355][T16331] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2517.634531][T16333] synth uevent: /devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2: unknown uevent action string [ 2518.021298][T16333] rfkill rfkill2: uevent: failed to send synthetic uevent: -22 [ 2518.860808][T16351] zswap: compressor not available [ 2518.933834][ T6886] Bluetooth: hci2: command 0x040f tx timeout [ 2519.092500][ T6886] Bluetooth: hci1: command 0x0c1a tx timeout [ 2519.099053][ T663] Bluetooth: hci0: command 0x0c1a tx timeout [ 2519.105991][T12114] Bluetooth: hci4: command 0x041b tx timeout [ 2521.325406][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2521.340383][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2521.393584][T16394] FAULT_INJECTION: forcing a failure. [ 2521.393584][T16394] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2521.397218][T16393] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8433'. [ 2521.424044][T16394] CPU: 1 UID: 0 PID: 16394 Comm: syz.0.8434 Tainted: G U syzkaller #0 PREEMPT(full) [ 2521.424080][T16394] Tainted: [U]=USER [ 2521.424088][T16394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2521.424102][T16394] Call Trace: [ 2521.424110][T16394] [ 2521.424126][T16394] dump_stack_lvl+0x16c/0x1f0 [ 2521.424165][T16394] should_fail_ex+0x512/0x640 [ 2521.424219][T16394] get_futex_key+0xff0/0x1560 [ 2521.424262][T16394] ? __pfx_get_futex_key+0x10/0x10 [ 2521.424310][T16394] futex_wake_op+0x129/0xe40 [ 2521.424345][T16394] ? get_pid_task+0x106/0x250 [ 2521.424370][T16394] ? __pfx_futex_wake_op+0x10/0x10 [ 2521.424414][T16394] ? ksys_write+0x190/0x250 [ 2521.424454][T16394] do_futex+0x2e9/0x350 [ 2521.424480][T16394] ? __pfx_do_futex+0x10/0x10 [ 2521.424516][T16394] __x64_sys_futex+0x1e0/0x4c0 [ 2521.424544][T16394] ? fput+0x9b/0xd0 [ 2521.424567][T16394] ? __pfx___x64_sys_futex+0x10/0x10 [ 2521.424591][T16394] ? ksys_write+0x1ac/0x250 [ 2521.424623][T16394] ? __pfx_ksys_write+0x10/0x10 [ 2521.424666][T16394] do_syscall_64+0xcd/0xfa0 [ 2521.424703][T16394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2521.424729][T16394] RIP: 0033:0x7f07e938eec9 [ 2521.424748][T16394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2521.424772][T16394] RSP: 002b:00007f07ea2a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2521.424796][T16394] RAX: ffffffffffffffda RBX: 00007f07e95e6090 RCX: 00007f07e938eec9 [ 2521.424813][T16394] RDX: 0000000000000009 RSI: 0000000000000005 RDI: 0000200000000080 [ 2521.424828][T16394] RBP: 00007f07ea2a6090 R08: 0000200000000000 R09: 00000000000001bc [ 2521.424844][T16394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2521.424858][T16394] R13: 00007f07e95e6128 R14: 00007f07e95e6090 R15: 00007ffe993e2bc8 [ 2521.424893][T16394] [ 2521.623648][T16393] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2523.186132][ T30] audit: type=1800 audit(4294967313.007:258): pid=16413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8438" name="dbroot" dev="configfs" ino=221918 res=0 errno=0 [ 2525.360768][T16462] FAULT_INJECTION: forcing a failure. [ 2525.360768][T16462] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.374297][T16462] CPU: 0 UID: 0 PID: 16462 Comm: syz.0.8447 Tainted: G U syzkaller #0 PREEMPT(full) [ 2525.374319][T16462] Tainted: [U]=USER [ 2525.374324][T16462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2525.374333][T16462] Call Trace: [ 2525.374338][T16462] [ 2525.374344][T16462] dump_stack_lvl+0x16c/0x1f0 [ 2525.374368][T16462] should_fail_ex+0x512/0x640 [ 2525.374389][T16462] ? kasan_save_stack+0x33/0x60 [ 2525.374412][T16462] should_failslab+0xc2/0x120 [ 2525.374426][T16462] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2525.374445][T16462] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 2525.374466][T16462] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 2525.374482][T16462] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 2525.374502][T16462] idr_get_free+0x528/0xa30 [ 2525.374526][T16462] idr_alloc_u32+0x190/0x2f0 [ 2525.374546][T16462] ? __pfx_idr_alloc_u32+0x10/0x10 [ 2525.374566][T16462] ? lock_acquire+0x179/0x350 [ 2525.374585][T16462] idr_alloc_cyclic+0x10b/0x230 [ 2525.374604][T16462] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 2525.374622][T16462] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2525.374645][T16462] ? lsm_blob_alloc+0x2b/0x90 [ 2525.374670][T16462] map_create+0x143e/0x27e0 [ 2525.374688][T16462] ? find_held_lock+0x2b/0x80 [ 2525.374712][T16462] ? __pfx_map_create+0x10/0x10 [ 2525.374728][T16462] ? __might_fault+0xe3/0x190 [ 2525.374745][T16462] ? __might_fault+0xe3/0x190 [ 2525.374761][T16462] ? __might_fault+0x13b/0x190 [ 2525.374785][T16462] __sys_bpf+0x3d9d/0x4980 [ 2525.374806][T16462] ? __pfx___sys_bpf+0x10/0x10 [ 2525.374824][T16462] ? find_held_lock+0x2b/0x80 [ 2525.374846][T16462] ? find_held_lock+0x2b/0x80 [ 2525.374868][T16462] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2525.374899][T16462] ? fput+0x9b/0xd0 [ 2525.374913][T16462] ? ksys_write+0x1ac/0x250 [ 2525.374932][T16462] ? __pfx_ksys_write+0x10/0x10 [ 2525.374954][T16462] __x64_sys_bpf+0x78/0xc0 [ 2525.374972][T16462] ? lockdep_hardirqs_on+0x7c/0x110 [ 2525.374992][T16462] do_syscall_64+0xcd/0xfa0 [ 2525.375013][T16462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2525.375027][T16462] RIP: 0033:0x7f07e938eec9 [ 2525.375039][T16462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2525.375053][T16462] RSP: 002b:00007f07ea2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2525.375067][T16462] RAX: ffffffffffffffda RBX: 00007f07e95e5fa0 RCX: 00007f07e938eec9 [ 2525.375076][T16462] RDX: 00000000000000a3 RSI: 0000200000000000 RDI: 0000000000000000 [ 2525.375085][T16462] RBP: 00007f07ea2c7090 R08: 0000000000000000 R09: 0000000000000000 [ 2525.375094][T16462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2525.375103][T16462] R13: 00007f07e95e6038 R14: 00007f07e95e5fa0 R15: 00007ffe993e2bc8 [ 2525.375121][T16462] [ 2528.071501][T16502] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2528.077939][T16502] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2528.908516][T16517] random: crng reseeded on system resumption [ 2530.598145][T16544] zswap: compressor not available [ 2531.521252][T16585] can0: slcan on pty238. [ 2531.751181][T16583] sg_write: data in/out 16121600/48 bytes for SCSI command 0x7b-- guessing data in; [ 2531.751181][T16583] program syz.6.8468 not setting count and/or reply_len properly [ 2531.945613][T16584] can0 (unregistered): slcan off pty238. [ 2533.519492][T16631] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2533.525927][T16631] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2533.731275][T16636] FAULT_INJECTION: forcing a failure. [ 2533.731275][T16636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2533.744616][T16636] CPU: 1 UID: 0 PID: 16636 Comm: syz.8.8478 Tainted: G U syzkaller #0 PREEMPT(full) [ 2533.744653][T16636] Tainted: [U]=USER [ 2533.744661][T16636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2533.744677][T16636] Call Trace: [ 2533.744685][T16636] [ 2533.744695][T16636] dump_stack_lvl+0x16c/0x1f0 [ 2533.744734][T16636] should_fail_ex+0x512/0x640 [ 2533.744776][T16636] core_sys_select+0x4c5/0xc20 [ 2533.744823][T16636] ? __pfx_core_sys_select+0x10/0x10 [ 2533.744861][T16636] ? proc_fail_nth_write+0x9f/0x220 [ 2533.744924][T16636] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2533.744970][T16636] kern_select+0x15d/0x1e0 [ 2533.745000][T16636] ? __pfx_kern_select+0x10/0x10 [ 2533.745036][T16636] ? __pfx_ksys_write+0x10/0x10 [ 2533.745075][T16636] __x64_sys_select+0xbd/0x160 [ 2533.745104][T16636] ? do_syscall_64+0x91/0xfa0 [ 2533.745136][T16636] ? lockdep_hardirqs_on+0x7c/0x110 [ 2533.745171][T16636] do_syscall_64+0xcd/0xfa0 [ 2533.745208][T16636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2533.745233][T16636] RIP: 0033:0x7fb42ab8eec9 [ 2533.745254][T16636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2533.745278][T16636] RSP: 002b:00007fb42b9c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 2533.745302][T16636] RAX: ffffffffffffffda RBX: 00007fb42ade6180 RCX: 00007fb42ab8eec9 [ 2533.745319][T16636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 2533.745334][T16636] RBP: 00007fb42b9c5090 R08: 0000000000000000 R09: 0000000000000000 [ 2533.745349][T16636] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 2533.745364][T16636] R13: 00007fb42ade6218 R14: 00007fb42ade6180 R15: 00007ffcafb9c0d8 [ 2533.745399][T16636] [ 2534.400099][T16647] size and base must be multiples of 4 kiB [ 2534.406034][T16647] CPU: 0 UID: 0 PID: 16647 Comm: syz.6.8481 Tainted: G U syzkaller #0 PREEMPT(full) [ 2534.406073][T16647] Tainted: [U]=USER [ 2534.406081][T16647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2534.406096][T16647] Call Trace: [ 2534.406105][T16647] [ 2534.406115][T16647] dump_stack_lvl+0x16c/0x1f0 [ 2534.406159][T16647] mtrr_del+0xd1/0x110 [ 2534.406188][T16647] mtrr_ioctl+0x922/0xcf0 [ 2534.406217][T16647] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2534.406252][T16647] ? find_held_lock+0x2b/0x80 [ 2534.406296][T16647] ? __fget_files+0x20e/0x3c0 [ 2534.406332][T16647] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2534.406360][T16647] proc_reg_unlocked_ioctl+0x229/0x320 [ 2534.406387][T16647] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2534.406418][T16647] __x64_sys_ioctl+0x18e/0x210 [ 2534.406451][T16647] do_syscall_64+0xcd/0xfa0 [ 2534.406489][T16647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2534.406517][T16647] RIP: 0033:0x7fac3a38eec9 [ 2534.406537][T16647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2534.406564][T16647] RSP: 002b:00007fac385f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2534.406590][T16647] RAX: ffffffffffffffda RBX: 00007fac3a5e6090 RCX: 00007fac3a38eec9 [ 2534.406609][T16647] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 2534.406626][T16647] RBP: 00007fac3a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2534.406642][T16647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2534.406658][T16647] R13: 00007fac3a5e6128 R14: 00007fac3a5e6090 R15: 00007ffca02b3d48 [ 2534.406695][T16647] [ 2534.447950][T16656] size and base must be multiples of 4 kiB [ 2534.608177][T16656] CPU: 0 UID: 0 PID: 16656 Comm: syz.0.8483 Tainted: G U syzkaller #0 PREEMPT(full) [ 2534.608219][T16656] Tainted: [U]=USER [ 2534.608229][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2534.608244][T16656] Call Trace: [ 2534.608253][T16656] [ 2534.608263][T16656] dump_stack_lvl+0x16c/0x1f0 [ 2534.608307][T16656] mtrr_del+0xd1/0x110 [ 2534.608334][T16656] mtrr_ioctl+0x922/0xcf0 [ 2534.608363][T16656] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2534.608409][T16656] ? __x64_sys_openat+0x174/0x210 [ 2534.608441][T16656] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2534.608478][T16656] proc_reg_unlocked_ioctl+0x229/0x320 [ 2534.608508][T16656] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2534.608540][T16656] __x64_sys_ioctl+0x18e/0x210 [ 2534.608573][T16656] do_syscall_64+0xcd/0xfa0 [ 2534.608612][T16656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2534.608638][T16656] RIP: 0033:0x7f07e938eec9 [ 2534.608660][T16656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2534.608685][T16656] RSP: 002b:00007f07ea285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2534.608710][T16656] RAX: ffffffffffffffda RBX: 00007f07e95e6180 RCX: 00007f07e938eec9 [ 2534.608727][T16656] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000002 [ 2534.608743][T16656] RBP: 00007f07e9411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2534.608760][T16656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2534.608776][T16656] R13: 00007f07e95e6218 R14: 00007f07e95e6180 R15: 00007ffe993e2bc8 [ 2534.608813][T16656] [ 2535.306328][T16664] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 2542.426860][T16787] serio: Serial port pty6 [ 2546.433962][T16840] size and base must be multiples of 4 kiB [ 2546.445970][T16840] CPU: 1 UID: 0 PID: 16840 Comm: syz.0.8518 Tainted: G U syzkaller #0 PREEMPT(full) [ 2546.446010][T16840] Tainted: [U]=USER [ 2546.446020][T16840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2546.446036][T16840] Call Trace: [ 2546.446047][T16840] [ 2546.446058][T16840] dump_stack_lvl+0x16c/0x1f0 [ 2546.446100][T16840] mtrr_del+0xd1/0x110 [ 2546.446129][T16840] mtrr_ioctl+0x922/0xcf0 [ 2546.446158][T16840] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2546.446192][T16840] ? find_held_lock+0x2b/0x80 [ 2546.446235][T16840] ? __fget_files+0x20e/0x3c0 [ 2546.446269][T16840] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2546.446294][T16840] proc_reg_unlocked_ioctl+0x229/0x320 [ 2546.446319][T16840] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2546.446347][T16840] __x64_sys_ioctl+0x18e/0x210 [ 2546.446380][T16840] do_syscall_64+0xcd/0xfa0 [ 2546.446418][T16840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2546.446445][T16840] RIP: 0033:0x7f07e938eec9 [ 2546.446465][T16840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2546.446489][T16840] RSP: 002b:00007f07ea285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2546.446514][T16840] RAX: ffffffffffffffda RBX: 00007f07e95e6180 RCX: 00007f07e938eec9 [ 2546.446531][T16840] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000002 [ 2546.446562][T16840] RBP: 00007f07e9411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2546.446579][T16840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2546.446596][T16840] R13: 00007f07e95e6218 R14: 00007f07e95e6180 R15: 00007ffe993e2bc8 [ 2546.446628][T16840] [ 2547.880928][T16865] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8524'. [ 2548.853414][T16886] FAULT_INJECTION: forcing a failure. [ 2548.853414][T16886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2548.916518][T16886] CPU: 0 UID: 0 PID: 16886 Comm: syz.6.8528 Tainted: G U syzkaller #0 PREEMPT(full) [ 2548.916557][T16886] Tainted: [U]=USER [ 2548.916566][T16886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2548.916580][T16886] Call Trace: [ 2548.916589][T16886] [ 2548.916599][T16886] dump_stack_lvl+0x16c/0x1f0 [ 2548.916638][T16886] should_fail_ex+0x512/0x640 [ 2548.916679][T16886] _copy_from_iter+0x29f/0x1720 [ 2548.916721][T16886] ? __alloc_skb+0x200/0x380 [ 2548.916755][T16886] ? __pfx__copy_from_iter+0x10/0x10 [ 2548.916795][T16886] ? __pfx___might_resched+0x10/0x10 [ 2548.916828][T16886] ? __lock_acquire+0xb8a/0x1c90 [ 2548.916864][T16886] netlink_sendmsg+0x820/0xdd0 [ 2548.916905][T16886] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2548.916945][T16886] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2548.916975][T16886] ____sys_sendmsg+0xa98/0xc70 [ 2548.917002][T16886] ? copy_msghdr_from_user+0x10a/0x160 [ 2548.917036][T16886] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2548.917091][T16886] ___sys_sendmsg+0x134/0x1d0 [ 2548.917128][T16886] ? __pfx____sys_sendmsg+0x10/0x10 [ 2548.917159][T16886] ? __lock_acquire+0x622/0x1c90 [ 2548.917227][T16886] __sys_sendmsg+0x16d/0x220 [ 2548.917262][T16886] ? __pfx___sys_sendmsg+0x10/0x10 [ 2548.917325][T16886] do_syscall_64+0xcd/0xfa0 [ 2548.917362][T16886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2548.917387][T16886] RIP: 0033:0x7fac3a38eec9 [ 2548.917407][T16886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2548.917430][T16886] RSP: 002b:00007fac3b15d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2548.917454][T16886] RAX: ffffffffffffffda RBX: 00007fac3a5e5fa0 RCX: 00007fac3a38eec9 [ 2548.917471][T16886] RDX: 0000000020008810 RSI: 0000200000003040 RDI: 0000000000000003 [ 2548.917487][T16886] RBP: 00007fac3b15d090 R08: 0000000000000000 R09: 0000000000000000 [ 2548.917503][T16886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2548.917518][T16886] R13: 00007fac3a5e6038 R14: 00007fac3a5e5fa0 R15: 00007ffca02b3d48 [ 2548.917554][T16886] [ 2549.123975][ C0] vkms_vblank_simulate: vblank timer overrun [ 2549.754432][T16895] FAULT_INJECTION: forcing a failure. [ 2549.754432][T16895] name failslab, interval 1, probability 0, space 0, times 0 [ 2549.836295][T16895] CPU: 0 UID: 0 PID: 16895 Comm: syz.6.8530 Tainted: G U syzkaller #0 PREEMPT(full) [ 2549.836319][T16895] Tainted: [U]=USER [ 2549.836324][T16895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2549.836333][T16895] Call Trace: [ 2549.836339][T16895] [ 2549.836345][T16895] dump_stack_lvl+0x16c/0x1f0 [ 2549.836370][T16895] should_fail_ex+0x512/0x640 [ 2549.836392][T16895] ? __kmalloc_cache_noprof+0x5f/0x780 [ 2549.836412][T16895] should_failslab+0xc2/0x120 [ 2549.836426][T16895] __kmalloc_cache_noprof+0x72/0x780 [ 2549.836443][T16895] ? kfree+0x2b8/0x6d0 [ 2549.836457][T16895] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0x3b3/0x610 [ 2549.836475][T16895] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xa4/0x610 [ 2549.836491][T16895] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2549.836512][T16895] ? snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xa4/0x610 [ 2549.836529][T16895] snd_mixer_oss_put_volume1_sw.constprop.0.isra.0+0xa4/0x610 [ 2549.836548][T16895] snd_mixer_oss_put_recsrc1_sw+0x87/0xc0 [ 2549.836564][T16895] snd_mixer_oss_ioctl1+0xb52/0x1e40 [ 2549.836576][T16895] ? lockdep_hardirqs_on+0x7c/0x110 [ 2549.836598][T16895] ? __pfx_snd_mixer_oss_put_recsrc1_sw+0x10/0x10 [ 2549.836613][T16895] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 2549.836626][T16895] ? tomoyo_path_number_perm+0x295/0x580 [ 2549.836647][T16895] ? tomoyo_path_number_perm+0x18d/0x580 [ 2549.836664][T16895] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2549.836681][T16895] ? find_held_lock+0x2b/0x80 [ 2549.836707][T16895] snd_mixer_oss_ioctl_card+0x102/0x170 [ 2549.836721][T16895] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 2549.836741][T16895] snd_pcm_oss_ioctl+0x13a5/0x37c0 [ 2549.836758][T16895] ? find_held_lock+0x2b/0x80 [ 2549.836776][T16895] ? hook_file_ioctl_common+0x145/0x410 [ 2549.836795][T16895] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 2549.836813][T16895] ? __fget_files+0x20e/0x3c0 [ 2549.836835][T16895] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 2549.836853][T16895] __x64_sys_ioctl+0x18e/0x210 [ 2549.836870][T16895] do_syscall_64+0xcd/0xfa0 [ 2549.836892][T16895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2549.836906][T16895] RIP: 0033:0x7fac3a38eec9 [ 2549.836918][T16895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2549.836932][T16895] RSP: 002b:00007fac3b15d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2549.836946][T16895] RAX: ffffffffffffffda RBX: 00007fac3a5e5fa0 RCX: 00007fac3a38eec9 [ 2549.836966][T16895] RDX: 0000000000000000 RSI: 00000000c0044dff RDI: 0000000000000003 [ 2549.836977][T16895] RBP: 00007fac3b15d090 R08: 0000000000000000 R09: 0000000000000000 [ 2549.836986][T16895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2549.836995][T16895] R13: 00007fac3a5e6038 R14: 00007fac3a5e5fa0 R15: 00007ffca02b3d48 [ 2549.837014][T16895] [ 2550.120137][ C0] vkms_vblank_simulate: vblank timer overrun [ 2551.446279][ T30] audit: type=1800 audit(4294967341.434:259): pid=16935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8537" name="dbroot" dev="configfs" ino=224314 res=0 errno=0 [ 2553.884734][T16967] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 2555.870343][T16987] zswap: compressor not available [ 2556.121082][T17009] FAULT_INJECTION: forcing a failure. [ 2556.121082][T17009] name failslab, interval 1, probability 0, space 0, times 0 [ 2556.164985][T17009] CPU: 1 UID: 0 PID: 17009 Comm: syz.5.8550 Tainted: G U syzkaller #0 PREEMPT(full) [ 2556.165023][T17009] Tainted: [U]=USER [ 2556.165031][T17009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2556.165045][T17009] Call Trace: [ 2556.165053][T17009] [ 2556.165063][T17009] dump_stack_lvl+0x16c/0x1f0 [ 2556.165099][T17009] should_fail_ex+0x512/0x640 [ 2556.165133][T17009] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2556.165170][T17009] should_failslab+0xc2/0x120 [ 2556.165195][T17009] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2556.165226][T17009] ? __pmd_alloc+0xbf/0x8b0 [ 2556.165255][T17009] ? __pmd_alloc+0xbf/0x8b0 [ 2556.165276][T17009] __pmd_alloc+0xbf/0x8b0 [ 2556.165297][T17009] ? find_held_lock+0x2b/0x80 [ 2556.165330][T17009] __handle_mm_fault+0xada/0x2aa0 [ 2556.165367][T17009] ? __pfx___handle_mm_fault+0x10/0x10 [ 2556.165419][T17009] ? find_vma+0xbf/0x140 [ 2556.165453][T17009] ? __pfx_find_vma+0x10/0x10 [ 2556.165493][T17009] handle_mm_fault+0x589/0xd10 [ 2556.165524][T17009] ? __pkru_allows_pkey+0x21/0xb0 [ 2556.165562][T17009] fixup_user_fault+0x1b4/0x540 [ 2556.165601][T17009] fault_in_user_writeable+0x70/0xe0 [ 2556.165641][T17009] futex_lock_pi+0x681/0x7c0 [ 2556.165677][T17009] ? __pfx_futex_lock_pi+0x10/0x10 [ 2556.165745][T17009] ? __pfx_futex_wake_mark+0x10/0x10 [ 2556.165780][T17009] ? find_held_lock+0x2b/0x80 [ 2556.165811][T17009] ? ksys_write+0x190/0x250 [ 2556.165849][T17009] do_futex+0x11a/0x350 [ 2556.165874][T17009] ? __pfx_do_futex+0x10/0x10 [ 2556.165909][T17009] __x64_sys_futex+0x1e0/0x4c0 [ 2556.165934][T17009] ? fput+0x9b/0xd0 [ 2556.165957][T17009] ? __pfx___x64_sys_futex+0x10/0x10 [ 2556.165979][T17009] ? ksys_write+0x1ac/0x250 [ 2556.166010][T17009] ? __pfx_ksys_write+0x10/0x10 [ 2556.166053][T17009] do_syscall_64+0xcd/0xfa0 [ 2556.166088][T17009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2556.166113][T17009] RIP: 0033:0x7f0580d8eec9 [ 2556.166130][T17009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2556.166150][T17009] RSP: 002b:00007f0581bd0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2556.166171][T17009] RAX: ffffffffffffffda RBX: 00007f0580fe6090 RCX: 00007f0580d8eec9 [ 2556.166185][T17009] RDX: 0000000000000008 RSI: 0000000000000086 RDI: 0000000000000000 [ 2556.166198][T17009] RBP: 00007f0581bd0090 R08: 0000000000000000 R09: 0000000000000007 [ 2556.166212][T17009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2556.166225][T17009] R13: 00007f0580fe6128 R14: 00007f0580fe6090 R15: 00007ffdd2c9b658 [ 2556.166255][T17009] [ 2557.164467][T17017] FAULT_INJECTION: forcing a failure. [ 2557.164467][T17017] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2557.178373][T17017] CPU: 0 UID: 0 PID: 17017 Comm: syz.0.8553 Tainted: G U syzkaller #0 PREEMPT(full) [ 2557.178396][T17017] Tainted: [U]=USER [ 2557.178401][T17017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2557.178410][T17017] Call Trace: [ 2557.178415][T17017] [ 2557.178421][T17017] dump_stack_lvl+0x16c/0x1f0 [ 2557.178445][T17017] should_fail_ex+0x512/0x640 [ 2557.178470][T17017] get_futex_key+0x1d0/0x1560 [ 2557.178497][T17017] ? __pfx_get_futex_key+0x10/0x10 [ 2557.178525][T17017] futex_wait_setup+0x9d/0x550 [ 2557.178548][T17017] __futex_wait+0x193/0x2f0 [ 2557.178566][T17017] ? __pfx___futex_wait+0x10/0x10 [ 2557.178587][T17017] ? __pfx_futex_wake_mark+0x10/0x10 [ 2557.178606][T17017] ? futex_private_hash_put+0x176/0x300 [ 2557.178631][T17017] ? futex_private_hash_put+0x18a/0x300 [ 2557.178654][T17017] futex_wait+0xe8/0x380 [ 2557.178671][T17017] ? __pfx_futex_wait+0x10/0x10 [ 2557.178692][T17017] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 2557.178709][T17017] ? lockdep_hardirqs_on+0x7c/0x110 [ 2557.178733][T17017] do_futex+0x229/0x350 [ 2557.178747][T17017] ? __pfx_do_futex+0x10/0x10 [ 2557.178763][T17017] ? __do_sys_statmount+0xf0/0x1fd0 [ 2557.178780][T17017] ? __fput+0x68d/0xb70 [ 2557.178795][T17017] __x64_sys_futex+0x1e0/0x4c0 [ 2557.178812][T17017] ? __pfx___x64_sys_futex+0x10/0x10 [ 2557.178833][T17017] do_syscall_64+0xcd/0xfa0 [ 2557.178854][T17017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2557.178868][T17017] RIP: 0033:0x7f07e938eec9 [ 2557.178880][T17017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2557.178893][T17017] RSP: 002b:00007f07ea2c70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2557.178907][T17017] RAX: ffffffffffffffda RBX: 00007f07e95e5fa8 RCX: 00007f07e938eec9 [ 2557.178917][T17017] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f07e95e5fa8 [ 2557.178926][T17017] RBP: 00007f07e95e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2557.178935][T17017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2557.178943][T17017] R13: 00007f07e95e6038 R14: 00007ffe993e2ae0 R15: 00007ffe993e2bc8 [ 2557.178962][T17017] [ 2559.108306][T17056] zswap: compressor not available [ 2559.522908][T17083] ima: policy update failed [ 2559.527644][ T30] audit: type=1802 audit(4294967349.556:260): pid=17083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.8564" res=0 errno=0 [ 2559.572172][T17073] zswap: compressor not available [ 2560.640254][T17098] zswap: compressor not available [ 2560.671270][T17106] FAULT_INJECTION: forcing a failure. [ 2560.671270][T17106] name failslab, interval 1, probability 0, space 0, times 0 [ 2560.719411][T17106] CPU: 0 UID: 0 PID: 17106 Comm: syz.6.8568 Tainted: G U syzkaller #0 PREEMPT(full) [ 2560.719441][T17106] Tainted: [U]=USER [ 2560.719446][T17106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2560.719455][T17106] Call Trace: [ 2560.719461][T17106] [ 2560.719467][T17106] dump_stack_lvl+0x16c/0x1f0 [ 2560.719491][T17106] should_fail_ex+0x512/0x640 [ 2560.719516][T17106] should_failslab+0xc2/0x120 [ 2560.719530][T17106] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2560.719549][T17106] ? skb_clone+0x190/0x3f0 [ 2560.719574][T17106] ? skb_clone+0x190/0x3f0 [ 2560.719592][T17106] skb_clone+0x190/0x3f0 [ 2560.719612][T17106] netlink_deliver_tap+0xabd/0xd30 [ 2560.719634][T17106] ? __pfx_rtnl_dump_all+0x10/0x10 [ 2560.719654][T17106] netlink_dump+0xa5f/0xd30 [ 2560.719676][T17106] ? __pfx_netlink_dump+0x10/0x10 [ 2560.719710][T17106] netlink_recvmsg+0x7dc/0xa90 [ 2560.719731][T17106] ? __pfx_netlink_recvmsg+0x10/0x10 [ 2560.719755][T17106] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 2560.719774][T17106] sock_recvmsg+0x1f9/0x250 [ 2560.719790][T17106] ____sys_recvmsg+0x218/0x6b0 [ 2560.719808][T17106] ? __pfx_____sys_recvmsg+0x10/0x10 [ 2560.719831][T17106] ? __lock_acquire+0x622/0x1c90 [ 2560.719849][T17106] ___sys_recvmsg+0x114/0x1a0 [ 2560.719869][T17106] ? __pfx____sys_recvmsg+0x10/0x10 [ 2560.719891][T17106] ? find_held_lock+0x2b/0x80 [ 2560.719922][T17106] do_recvmmsg+0x2fe/0x750 [ 2560.719945][T17106] ? __pfx_do_recvmmsg+0x10/0x10 [ 2560.719974][T17106] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 2560.720002][T17106] ? __fget_files+0x20e/0x3c0 [ 2560.720025][T17106] __x64_sys_recvmmsg+0x22a/0x280 [ 2560.720047][T17106] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2560.720074][T17106] do_syscall_64+0xcd/0xfa0 [ 2560.720095][T17106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2560.720110][T17106] RIP: 0033:0x7fac3a38eec9 [ 2560.720121][T17106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2560.720136][T17106] RSP: 002b:00007fac385f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2560.720149][T17106] RAX: ffffffffffffffda RBX: 00007fac3a5e6090 RCX: 00007fac3a38eec9 [ 2560.720159][T17106] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000003 [ 2560.720167][T17106] RBP: 00007fac385f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2560.720176][T17106] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 2560.720184][T17106] R13: 00007fac3a5e6128 R14: 00007fac3a5e6090 R15: 00007ffca02b3d48 [ 2560.720203][T17106] [ 2561.781239][T17127] FAULT_INJECTION: forcing a failure. [ 2561.781239][T17127] name failslab, interval 1, probability 0, space 0, times 0 [ 2561.795853][T17127] CPU: 0 UID: 0 PID: 17127 Comm: syz.8.8573 Tainted: G U syzkaller #0 PREEMPT(full) [ 2561.795889][T17127] Tainted: [U]=USER [ 2561.795898][T17127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2561.795913][T17127] Call Trace: [ 2561.795922][T17127] [ 2561.795932][T17127] dump_stack_lvl+0x16c/0x1f0 [ 2561.795971][T17127] should_fail_ex+0x512/0x640 [ 2561.796006][T17127] ? __kmalloc_noprof+0xca/0x880 [ 2561.796037][T17127] should_failslab+0xc2/0x120 [ 2561.796061][T17127] __kmalloc_noprof+0xdd/0x880 [ 2561.796090][T17127] ? alloc_pipe_info+0x1ec/0x590 [ 2561.796130][T17127] ? alloc_pipe_info+0x1ec/0x590 [ 2561.796162][T17127] alloc_pipe_info+0x1ec/0x590 [ 2561.796201][T17127] splice_direct_to_actor+0x77d/0xa30 [ 2561.796235][T17127] ? __pfx_direct_splice_actor+0x10/0x10 [ 2561.796268][T17127] ? __pfx_aa_file_perm+0x10/0x10 [ 2561.796301][T17127] ? find_held_lock+0x2b/0x80 [ 2561.796333][T17127] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2561.796361][T17127] ? get_pid_task+0xfc/0x250 [ 2561.796396][T17127] do_splice_direct+0x174/0x240 [ 2561.796428][T17127] ? __pfx_do_splice_direct+0x10/0x10 [ 2561.796457][T17127] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2561.796490][T17127] ? rw_verify_area+0xcf/0x6c0 [ 2561.796522][T17127] do_sendfile+0xb06/0xe50 [ 2561.796560][T17127] ? __pfx_do_sendfile+0x10/0x10 [ 2561.796591][T17127] ? __fget_files+0x20e/0x3c0 [ 2561.796630][T17127] __x64_sys_sendfile64+0x1d8/0x220 [ 2561.796653][T17127] ? ksys_write+0x1ac/0x250 [ 2561.796684][T17127] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2561.796717][T17127] do_syscall_64+0xcd/0xfa0 [ 2561.796753][T17127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2561.796785][T17127] RIP: 0033:0x7fb42ab8eec9 [ 2561.796805][T17127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2561.796828][T17127] RSP: 002b:00007fb42ba07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2561.796851][T17127] RAX: ffffffffffffffda RBX: 00007fb42ade5fa0 RCX: 00007fb42ab8eec9 [ 2561.796867][T17127] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 2561.796882][T17127] RBP: 00007fb42ba07090 R08: 0000000000000000 R09: 0000000000000000 [ 2561.796897][T17127] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 2561.796912][T17127] R13: 00007fb42ade6038 R14: 00007fb42ade5fa0 R15: 00007ffcafb9c0d8 [ 2561.796947][T17127] [ 2562.372530][T17136] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8575'. [ 2563.685007][T17154] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2563.691509][T17154] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2566.570147][T17203] zswap: compressor not available [ 2566.744831][T17223] MTRR 1 not used [ 2569.185354][T17252] size and base must be multiples of 4 kiB [ 2569.239358][T17252] CPU: 0 UID: 0 PID: 17252 Comm: syz.0.8597 Tainted: G U syzkaller #0 PREEMPT(full) [ 2569.239401][T17252] Tainted: [U]=USER [ 2569.239411][T17252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2569.239427][T17252] Call Trace: [ 2569.239435][T17252] [ 2569.239445][T17252] dump_stack_lvl+0x16c/0x1f0 [ 2569.239484][T17252] mtrr_del+0xd1/0x110 [ 2569.239510][T17252] mtrr_ioctl+0x922/0xcf0 [ 2569.239533][T17252] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2569.239563][T17252] ? find_held_lock+0x2b/0x80 [ 2569.239600][T17252] ? __fget_files+0x20e/0x3c0 [ 2569.239630][T17252] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2569.239653][T17252] proc_reg_unlocked_ioctl+0x229/0x320 [ 2569.239676][T17252] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2569.239702][T17252] __x64_sys_ioctl+0x18e/0x210 [ 2569.239729][T17252] do_syscall_64+0xcd/0xfa0 [ 2569.239763][T17252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2569.239785][T17252] RIP: 0033:0x7f07e938eec9 [ 2569.239803][T17252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2569.239826][T17252] RSP: 002b:00007f07ea285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2569.239850][T17252] RAX: ffffffffffffffda RBX: 00007f07e95e6180 RCX: 00007f07e938eec9 [ 2569.239868][T17252] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000002 [ 2569.239884][T17252] RBP: 00007f07e9411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2569.239900][T17252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2569.239916][T17252] R13: 00007f07e95e6218 R14: 00007f07e95e6180 R15: 00007ffe993e2bc8 [ 2569.239953][T17252] [ 2571.258942][T17291] FAULT_INJECTION: forcing a failure. [ 2571.258942][T17291] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2571.275231][T17291] CPU: 1 UID: 0 PID: 17291 Comm: syz.5.8606 Tainted: G U syzkaller #0 PREEMPT(full) [ 2571.275253][T17291] Tainted: [U]=USER [ 2571.275258][T17291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2571.275267][T17291] Call Trace: [ 2571.275272][T17291] [ 2571.275278][T17291] dump_stack_lvl+0x16c/0x1f0 [ 2571.275303][T17291] should_fail_ex+0x512/0x640 [ 2571.275327][T17291] get_futex_key+0x1d0/0x1560 [ 2571.275353][T17291] ? __pfx_get_futex_key+0x10/0x10 [ 2571.275381][T17291] futex_wake+0xea/0x530 [ 2571.275395][T17291] ? trace_kmem_cache_alloc+0x28/0xc0 [ 2571.275413][T17291] ? __pfx_futex_wake+0x10/0x10 [ 2571.275431][T17291] ? errseq_sample+0x53/0x70 [ 2571.275444][T17291] ? file_init_path+0x4fe/0x760 [ 2571.275462][T17291] do_futex+0x1e3/0x350 [ 2571.275476][T17291] ? __pfx_do_futex+0x10/0x10 [ 2571.275490][T17291] ? fd_install+0x225/0x750 [ 2571.275511][T17291] __x64_sys_futex+0x1e0/0x4c0 [ 2571.275526][T17291] ? __sys_socket+0xac/0x260 [ 2571.275543][T17291] ? __pfx___x64_sys_futex+0x10/0x10 [ 2571.275557][T17291] ? xfd_validate_state+0x61/0x180 [ 2571.275571][T17291] ? getname_flags.part.0+0x1c5/0x550 [ 2571.275592][T17291] do_syscall_64+0xcd/0xfa0 [ 2571.275613][T17291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2571.275628][T17291] RIP: 0033:0x7f0580d8eec9 [ 2571.275639][T17291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2571.275653][T17291] RSP: 002b:00007f0581baf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2571.275667][T17291] RAX: ffffffffffffffda RBX: 00007f0580fe6188 RCX: 00007f0580d8eec9 [ 2571.275676][T17291] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0580fe618c [ 2571.275685][T17291] RBP: 00007f0580fe6180 R08: 00007f0581bf2000 R09: 0000000000000000 [ 2571.275694][T17291] R10: 0000000000000047 R11: 0000000000000246 R12: 0000000000000000 [ 2571.275703][T17291] R13: 00007f0580fe6218 R14: 00007ffdd2c9b570 R15: 00007ffdd2c9b658 [ 2571.275721][T17291] [ 2572.082514][T17300] zswap: compressor not available [ 2572.448179][T17313] FAULT_INJECTION: forcing a failure. [ 2572.448179][T17313] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2572.515712][T17313] CPU: 0 UID: 0 PID: 17313 Comm: syz.5.8608 Tainted: G U syzkaller #0 PREEMPT(full) [ 2572.515738][T17313] Tainted: [U]=USER [ 2572.515743][T17313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2572.515752][T17313] Call Trace: [ 2572.515758][T17313] [ 2572.515764][T17313] dump_stack_lvl+0x16c/0x1f0 [ 2572.515788][T17313] should_fail_ex+0x512/0x640 [ 2572.515813][T17313] get_futex_key+0x1d0/0x1560 [ 2572.515838][T17313] ? find_held_lock+0x2b/0x80 [ 2572.515857][T17313] ? __pfx_get_futex_key+0x10/0x10 [ 2572.515880][T17313] ? do_raw_spin_unlock+0x172/0x230 [ 2572.515898][T17313] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2572.515920][T17313] futex_wait_setup+0x9d/0x550 [ 2572.515943][T17313] __futex_wait+0x193/0x2f0 [ 2572.515961][T17313] ? __pfx___futex_wait+0x10/0x10 [ 2572.515984][T17313] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2572.516003][T17313] ? lockdep_hardirqs_on+0x7c/0x110 [ 2572.516026][T17313] ? __pfx_futex_wake_mark+0x10/0x10 [ 2572.516047][T17313] ? futex_private_hash_put+0x176/0x300 [ 2572.516071][T17313] ? futex_private_hash_put+0x18a/0x300 [ 2572.516095][T17313] futex_wait+0xe8/0x380 [ 2572.516111][T17313] ? __pfx_futex_wait+0x10/0x10 [ 2572.516132][T17313] ? kmem_cache_free+0x2d4/0x6c0 [ 2572.516151][T17313] ? putname+0x154/0x1a0 [ 2572.516168][T17313] do_futex+0x229/0x350 [ 2572.516182][T17313] ? __pfx_do_futex+0x10/0x10 [ 2572.516196][T17313] ? find_held_lock+0x2b/0x80 [ 2572.516215][T17313] ? handle_mm_fault+0x2ab/0xd10 [ 2572.516233][T17313] __x64_sys_futex+0x1e0/0x4c0 [ 2572.516248][T17313] ? __x64_sys_openat+0x174/0x210 [ 2572.516264][T17313] ? __pfx___x64_sys_futex+0x10/0x10 [ 2572.516286][T17313] do_syscall_64+0xcd/0xfa0 [ 2572.516307][T17313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2572.516322][T17313] RIP: 0033:0x7f0580d8eec9 [ 2572.516334][T17313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2572.516348][T17313] RSP: 002b:00007f0581bd00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2572.516362][T17313] RAX: ffffffffffffffda RBX: 00007f0580fe6098 RCX: 00007f0580d8eec9 [ 2572.516372][T17313] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0580fe6098 [ 2572.516381][T17313] RBP: 00007f0580fe6090 R08: 0000000000000000 R09: 0000000000000000 [ 2572.516390][T17313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2572.516398][T17313] R13: 00007f0580fe6128 R14: 00007ffdd2c9b570 R15: 00007ffdd2c9b658 [ 2572.516419][T17313] [ 2572.768094][ C0] vkms_vblank_simulate: vblank timer overrun [ 2574.221955][T17333] zswap: compressor not available [ 2576.382954][T17356] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2576.421655][T17356] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2576.449006][T17356] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2576.474308][T17356] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2577.907521][T12114] Bluetooth: hci2: command 0x040f tx timeout [ 2577.933944][T17387] size and base must be multiples of 4 kiB [ 2577.975214][T17387] CPU: 1 UID: 0 PID: 17387 Comm: syz.0.8622 Tainted: G U syzkaller #0 PREEMPT(full) [ 2577.975237][T17387] Tainted: [U]=USER [ 2577.975243][T17387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2577.975251][T17387] Call Trace: [ 2577.975257][T17387] [ 2577.975263][T17387] dump_stack_lvl+0x16c/0x1f0 [ 2577.975288][T17387] mtrr_del+0xd1/0x110 [ 2577.975311][T17387] mtrr_ioctl+0x922/0xcf0 [ 2577.975326][T17387] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2577.975344][T17387] ? find_held_lock+0x2b/0x80 [ 2577.975369][T17387] ? __fget_files+0x20e/0x3c0 [ 2577.975389][T17387] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2577.975403][T17387] proc_reg_unlocked_ioctl+0x229/0x320 [ 2577.975418][T17387] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2577.975434][T17387] __x64_sys_ioctl+0x18e/0x210 [ 2577.975453][T17387] do_syscall_64+0xcd/0xfa0 [ 2577.975475][T17387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2577.975489][T17387] RIP: 0033:0x7f07e938eec9 [ 2577.975501][T17387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2577.975514][T17387] RSP: 002b:00007f07ea285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2577.975528][T17387] RAX: ffffffffffffffda RBX: 00007f07e95e6180 RCX: 00007f07e938eec9 [ 2577.975538][T17387] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 2577.975546][T17387] RBP: 00007f07e9411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2577.975556][T17387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2577.975564][T17387] R13: 00007f07e95e6218 R14: 00007f07e95e6180 R15: 00007ffe993e2bc8 [ 2577.975583][T17387] [ 2578.202349][T17402] size and base must be multiples of 4 kiB [ 2578.210756][T17402] CPU: 0 UID: 0 PID: 17402 Comm: syz.6.8623 Tainted: G U syzkaller #0 PREEMPT(full) [ 2578.210787][T17402] Tainted: [U]=USER [ 2578.210793][T17402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2578.210802][T17402] Call Trace: [ 2578.210807][T17402] [ 2578.210813][T17402] dump_stack_lvl+0x16c/0x1f0 [ 2578.210839][T17402] mtrr_del+0xd1/0x110 [ 2578.210854][T17402] mtrr_ioctl+0x922/0xcf0 [ 2578.210869][T17402] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2578.210887][T17402] ? find_held_lock+0x2b/0x80 [ 2578.210912][T17402] ? __fget_files+0x20e/0x3c0 [ 2578.210931][T17402] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2578.210946][T17402] proc_reg_unlocked_ioctl+0x229/0x320 [ 2578.210960][T17402] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2578.210976][T17402] __x64_sys_ioctl+0x18e/0x210 [ 2578.210993][T17402] do_syscall_64+0xcd/0xfa0 [ 2578.211015][T17402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2578.211029][T17402] RIP: 0033:0x7fac3a38eec9 [ 2578.211041][T17402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2578.211055][T17402] RSP: 002b:00007fac385d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2578.211069][T17402] RAX: ffffffffffffffda RBX: 00007fac3a5e6180 RCX: 00007fac3a38eec9 [ 2578.211079][T17402] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 2578.211087][T17402] RBP: 00007fac3a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2578.211096][T17402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2578.211105][T17402] R13: 00007fac3a5e6218 R14: 00007fac3a5e6180 R15: 00007ffca02b3d48 [ 2578.211124][T17402] [ 2578.473904][T12114] Bluetooth: hci0: command 0x0c1a tx timeout [ 2578.479946][T12114] Bluetooth: hci4: command 0x041b tx timeout [ 2578.542887][T12114] Bluetooth: hci1: command 0x0c1a tx timeout [ 2578.557303][T17390] zswap: compressor not available [ 2581.408991][T17451] FAULT_INJECTION: forcing a failure. [ 2581.408991][T17451] name failslab, interval 1, probability 0, space 0, times 0 [ 2581.452155][T17451] CPU: 0 UID: 0 PID: 17451 Comm: syz.8.8633 Tainted: G U syzkaller #0 PREEMPT(full) [ 2581.452185][T17451] Tainted: [U]=USER [ 2581.452190][T17451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2581.452199][T17451] Call Trace: [ 2581.452204][T17451] [ 2581.452210][T17451] dump_stack_lvl+0x16c/0x1f0 [ 2581.452234][T17451] should_fail_ex+0x512/0x640 [ 2581.452257][T17451] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 2581.452278][T17451] should_failslab+0xc2/0x120 [ 2581.452293][T17451] kmem_cache_alloc_noprof+0x75/0x6e0 [ 2581.452311][T17451] ? getname_flags.part.0+0x4c/0x550 [ 2581.452331][T17451] ? getname_flags.part.0+0x4c/0x550 [ 2581.452345][T17451] getname_flags.part.0+0x4c/0x550 [ 2581.452362][T17451] getname_flags+0x93/0xf0 [ 2581.452380][T17451] do_sys_openat2+0xb8/0x1d0 [ 2581.452396][T17451] ? __pfx_do_sys_openat2+0x10/0x10 [ 2581.452412][T17451] ? __do_sys_statmount+0xf0/0x1fd0 [ 2581.452433][T17451] __x64_sys_openat+0x174/0x210 [ 2581.452449][T17451] ? __pfx___x64_sys_openat+0x10/0x10 [ 2581.452472][T17451] do_syscall_64+0xcd/0xfa0 [ 2581.452494][T17451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2581.452509][T17451] RIP: 0033:0x7fb42ab8eec9 [ 2581.452521][T17451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2581.452534][T17451] RSP: 002b:00007fb42ba07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2581.452549][T17451] RAX: ffffffffffffffda RBX: 00007fb42ade5fa0 RCX: 00007fb42ab8eec9 [ 2581.452558][T17451] RDX: 0000000000001541 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 2581.452568][T17451] RBP: 00007fb42ac11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2581.452576][T17451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2581.452585][T17451] R13: 00007fb42ade6038 R14: 00007fb42ade5fa0 R15: 00007ffcafb9c0d8 [ 2581.452604][T17451] [ 2581.831468][T17454] size and base must be multiples of 4 kiB [ 2581.837495][T17454] CPU: 1 UID: 0 PID: 17454 Comm: syz.6.8634 Tainted: G U syzkaller #0 PREEMPT(full) [ 2581.837535][T17454] Tainted: [U]=USER [ 2581.837544][T17454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2581.837560][T17454] Call Trace: [ 2581.837569][T17454] [ 2581.837579][T17454] dump_stack_lvl+0x16c/0x1f0 [ 2581.837620][T17454] mtrr_del+0xd1/0x110 [ 2581.837649][T17454] mtrr_ioctl+0x922/0xcf0 [ 2581.837676][T17454] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2581.837711][T17454] ? find_held_lock+0x2b/0x80 [ 2581.837753][T17454] ? __fget_files+0x20e/0x3c0 [ 2581.837789][T17454] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2581.837815][T17454] proc_reg_unlocked_ioctl+0x229/0x320 [ 2581.837842][T17454] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2581.837873][T17454] __x64_sys_ioctl+0x18e/0x210 [ 2581.837904][T17454] do_syscall_64+0xcd/0xfa0 [ 2581.837944][T17454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2581.837970][T17454] RIP: 0033:0x7fac3a38eec9 [ 2581.837991][T17454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2581.838017][T17454] RSP: 002b:00007fac385f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2581.838041][T17454] RAX: ffffffffffffffda RBX: 00007fac3a5e6090 RCX: 00007fac3a38eec9 [ 2581.838067][T17454] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000003 [ 2581.838083][T17454] RBP: 00007fac3a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2581.838100][T17454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2581.838116][T17454] R13: 00007fac3a5e6128 R14: 00007fac3a5e6090 R15: 00007ffca02b3d48 [ 2581.838154][T17454] [ 2582.293508][ T30] audit: type=1800 audit(4294967372.434:261): pid=17464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8635" name="dbroot" dev="configfs" ino=226489 res=0 errno=0 [ 2582.448922][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2582.476781][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2585.722335][T17530] FAULT_INJECTION: forcing a failure. [ 2585.722335][T17530] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2585.736347][T17530] CPU: 1 UID: 0 PID: 17530 Comm: syz.8.8649 Tainted: G U syzkaller #0 PREEMPT(full) [ 2585.736369][T17530] Tainted: [U]=USER [ 2585.736374][T17530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2585.736382][T17530] Call Trace: [ 2585.736387][T17530] [ 2585.736393][T17530] dump_stack_lvl+0x16c/0x1f0 [ 2585.736418][T17530] should_fail_ex+0x512/0x640 [ 2585.736443][T17530] get_futex_key+0x293/0x1560 [ 2585.736469][T17530] ? __pfx_get_futex_key+0x10/0x10 [ 2585.736496][T17530] futex_wake_op+0x167/0xe40 [ 2585.736516][T17530] ? get_pid_task+0x106/0x250 [ 2585.736531][T17530] ? __pfx_futex_wake_op+0x10/0x10 [ 2585.736555][T17530] ? ksys_write+0x190/0x250 [ 2585.736578][T17530] do_futex+0x2e9/0x350 [ 2585.736592][T17530] ? __pfx_do_futex+0x10/0x10 [ 2585.736611][T17530] __x64_sys_futex+0x1e0/0x4c0 [ 2585.736626][T17530] ? fput+0x9b/0xd0 [ 2585.736639][T17530] ? __pfx___x64_sys_futex+0x10/0x10 [ 2585.736652][T17530] ? ksys_write+0x1ac/0x250 [ 2585.736670][T17530] ? __pfx_ksys_write+0x10/0x10 [ 2585.736694][T17530] do_syscall_64+0xcd/0xfa0 [ 2585.736723][T17530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2585.736738][T17530] RIP: 0033:0x7fb42ab8eec9 [ 2585.736749][T17530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2585.736763][T17530] RSP: 002b:00007fb42b9e6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2585.736777][T17530] RAX: ffffffffffffffda RBX: 00007fb42ade6090 RCX: 00007fb42ab8eec9 [ 2585.736787][T17530] RDX: 0000000000000009 RSI: 0000000000000005 RDI: 0000200000000080 [ 2585.736795][T17530] RBP: 00007fb42b9e6090 R08: 0000200000000000 R09: 00000000000001bc [ 2585.736805][T17530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2585.736813][T17530] R13: 00007fb42ade6128 R14: 00007fb42ade6090 R15: 00007ffcafb9c0d8 [ 2585.736832][T17530] [ 2586.531674][T17541] binder: 17539:17541 ioctl 4018620d 9 returned -22 [ 2586.956193][T17552] FAULT_INJECTION: forcing a failure. [ 2586.956193][T17552] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2586.986859][T17552] CPU: 0 UID: 0 PID: 17552 Comm: syz.8.8655 Tainted: G U syzkaller #0 PREEMPT(full) [ 2586.986897][T17552] Tainted: [U]=USER [ 2586.986905][T17552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2586.986919][T17552] Call Trace: [ 2586.986928][T17552] [ 2586.986938][T17552] dump_stack_lvl+0x16c/0x1f0 [ 2586.986977][T17552] should_fail_ex+0x512/0x640 [ 2586.987018][T17552] should_fail_alloc_page+0xe7/0x130 [ 2586.987046][T17552] prepare_alloc_pages+0x3c2/0x610 [ 2586.987076][T17552] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 2586.987118][T17552] ? stack_trace_save+0x8e/0xc0 [ 2586.987153][T17552] ? __pfx_stack_trace_save+0x10/0x10 [ 2586.987185][T17552] ? rcu_is_watching+0x12/0xc0 [ 2586.987218][T17552] ? stack_depot_save_flags+0x29/0x9c0 [ 2586.987257][T17552] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2586.987291][T17552] ? kasan_save_stack+0x42/0x60 [ 2586.987322][T17552] ? kasan_save_stack+0x33/0x60 [ 2586.987354][T17552] ? kasan_save_track+0x14/0x30 [ 2586.987386][T17552] ? __kasan_slab_alloc+0x89/0x90 [ 2586.987419][T17552] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 2586.987449][T17552] ? __pmd_alloc+0xbf/0x8b0 [ 2586.987475][T17552] ? do_futex+0x11a/0x350 [ 2586.987498][T17552] ? __x64_sys_futex+0x1e0/0x4c0 [ 2586.987521][T17552] ? do_syscall_64+0xcd/0xfa0 [ 2586.987559][T17552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2586.987590][T17552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2586.987625][T17552] ? policy_nodemask+0xea/0x4e0 [ 2586.987653][T17552] alloc_pages_mpol+0x1fb/0x550 [ 2586.987679][T17552] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 2586.987705][T17552] ? __lock_acquire+0xb8a/0x1c90 [ 2586.987737][T17552] ? __pfx_filemap_map_pages+0x10/0x10 [ 2586.987767][T17552] alloc_pages_noprof+0x131/0x390 [ 2586.987793][T17552] pte_alloc_one+0x1e/0x350 [ 2586.987833][T17552] __do_fault+0x320/0x490 [ 2586.987862][T17552] ? do_raw_spin_lock+0x12c/0x2b0 [ 2586.987894][T17552] ? __pfx_filemap_map_pages+0x10/0x10 [ 2586.987923][T17552] do_pte_missing+0x1a6/0x3ba0 [ 2586.987952][T17552] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 2586.987984][T17552] ? __pmd_alloc+0x64f/0x8b0 [ 2586.988012][T17552] __handle_mm_fault+0x1556/0x2aa0 [ 2586.988052][T17552] ? __pfx___handle_mm_fault+0x10/0x10 [ 2586.988101][T17552] ? find_vma+0xbf/0x140 [ 2586.988136][T17552] ? __pfx_find_vma+0x10/0x10 [ 2586.988175][T17552] handle_mm_fault+0x589/0xd10 [ 2586.988205][T17552] ? __pkru_allows_pkey+0x21/0xb0 [ 2586.988243][T17552] fixup_user_fault+0x1b4/0x540 [ 2586.988275][T17552] fault_in_user_writeable+0x70/0xe0 [ 2586.988313][T17552] futex_lock_pi+0x681/0x7c0 [ 2586.988348][T17552] ? __pfx_futex_lock_pi+0x10/0x10 [ 2586.988416][T17552] ? __pfx_futex_wake_mark+0x10/0x10 [ 2586.988454][T17552] ? find_held_lock+0x2b/0x80 [ 2586.988487][T17552] ? ksys_write+0x190/0x250 [ 2586.988526][T17552] do_futex+0x11a/0x350 [ 2586.988557][T17552] ? __pfx_do_futex+0x10/0x10 [ 2586.988592][T17552] __x64_sys_futex+0x1e0/0x4c0 [ 2586.988620][T17552] ? fput+0x9b/0xd0 [ 2586.988643][T17552] ? __pfx___x64_sys_futex+0x10/0x10 [ 2586.988667][T17552] ? ksys_write+0x1ac/0x250 [ 2586.988699][T17552] ? __pfx_ksys_write+0x10/0x10 [ 2586.988742][T17552] do_syscall_64+0xcd/0xfa0 [ 2586.988779][T17552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2586.988803][T17552] RIP: 0033:0x7fb42ab8eec9 [ 2586.988824][T17552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2586.988848][T17552] RSP: 002b:00007fb42ba07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2586.988872][T17552] RAX: ffffffffffffffda RBX: 00007fb42ade5fa0 RCX: 00007fb42ab8eec9 [ 2586.988890][T17552] RDX: 0000000000000008 RSI: 0000000000000086 RDI: 0000000000000000 [ 2586.988905][T17552] RBP: 00007fb42ba07090 R08: 0000000000000000 R09: 0000000000000007 [ 2586.988919][T17552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2586.988932][T17552] R13: 00007fb42ade6038 R14: 00007fb42ade5fa0 R15: 00007ffcafb9c0d8 [ 2586.988967][T17552] [ 2589.047231][T17585] zswap: compressor not available [ 2590.444246][T17622] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 2592.554909][T17646] zswap: compressor not available [ 2593.809249][T17666] size and base must be multiples of 4 kiB [ 2593.815221][T17666] CPU: 1 UID: 0 PID: 17666 Comm: syz.0.8672 Tainted: G U syzkaller #0 PREEMPT(full) [ 2593.815261][T17666] Tainted: [U]=USER [ 2593.815270][T17666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2593.815285][T17666] Call Trace: [ 2593.815295][T17666] [ 2593.815305][T17666] dump_stack_lvl+0x16c/0x1f0 [ 2593.815349][T17666] mtrr_del+0xd1/0x110 [ 2593.815376][T17666] mtrr_ioctl+0x922/0xcf0 [ 2593.815404][T17666] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2593.815438][T17666] ? find_held_lock+0x2b/0x80 [ 2593.815483][T17666] ? __fget_files+0x20e/0x3c0 [ 2593.815518][T17666] ? __pfx_mtrr_ioctl+0x10/0x10 [ 2593.815545][T17666] proc_reg_unlocked_ioctl+0x229/0x320 [ 2593.815572][T17666] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 2593.815602][T17666] __x64_sys_ioctl+0x18e/0x210 [ 2593.815633][T17666] do_syscall_64+0xcd/0xfa0 [ 2593.815672][T17666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2593.815699][T17666] RIP: 0033:0x7f07e938eec9 [ 2593.815719][T17666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2593.815745][T17666] RSP: 002b:00007f07ea2c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2593.815771][T17666] RAX: ffffffffffffffda RBX: 00007f07e95e5fa0 RCX: 00007f07e938eec9 [ 2593.815789][T17666] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000005 [ 2593.815805][T17666] RBP: 00007f07e9411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2593.815822][T17666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2593.815838][T17666] R13: 00007f07e95e6038 R14: 00007f07e95e5fa0 R15: 00007ffe993e2bc8 [ 2593.815877][T17666] [ 2594.332658][T17669] zswap: compressor not available [ 2594.629314][T17676] zswap: compressor not available [ 2596.343534][T17718] zswap: compressor not available [ 2596.716403][T17732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8683'. [ 2597.856584][T17732] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2597.871821][T17732] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2597.878650][T17732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2597.889303][T17732] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2599.795962][T12114] Bluetooth: hci2: command 0x040f tx timeout [ 2599.872153][T12114] Bluetooth: hci0: command 0x0c1a tx timeout [ 2599.878202][T12114] Bluetooth: hci4: command 0x041b tx timeout [ 2599.951835][T12114] Bluetooth: hci1: command 0x0c1a tx timeout [ 2604.030637][T17855] zswap: compressor not available [ 2604.198586][T12114] Bluetooth: hci4: unexpected event 0x01 length: 5 > 1 [ 2604.344312][ T30] audit: type=1800 audit(4294967307.217:262): pid=17846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.8708" name="dbroot" dev="configfs" ino=227326 res=0 errno=0 [ 2605.524755][T17878] zswap: compressor not available [ 2607.905855][T17909] FAULT_INJECTION: forcing a failure. [ 2607.905855][T17909] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2607.922832][T17909] CPU: 1 UID: 0 PID: 17909 Comm: syz.6.8720 Tainted: G U syzkaller #0 PREEMPT(full) [ 2607.922873][T17909] Tainted: [U]=USER [ 2607.922882][T17909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2607.922899][T17909] Call Trace: [ 2607.922907][T17909] [ 2607.922918][T17909] dump_stack_lvl+0x16c/0x1f0 [ 2607.922946][T17909] should_fail_ex+0x512/0x640 [ 2607.922971][T17909] get_futex_key+0x1d0/0x1560 [ 2607.922996][T17909] ? finish_task_switch.isra.0+0x21c/0xc10 [ 2607.923016][T17909] ? __pfx_get_futex_key+0x10/0x10 [ 2607.923037][T17909] ? finish_task_switch.isra.0+0x221/0xc10 [ 2607.923057][T17909] ? finish_task_switch.isra.0+0x2fa/0xc10 [ 2607.923080][T17909] futex_wake+0xea/0x530 [ 2607.923095][T17909] ? tracing_buffers_read+0x66/0xb00 [ 2607.923112][T17909] ? __pfx_futex_wake+0x10/0x10 [ 2607.923137][T17909] do_futex+0x1e3/0x350 [ 2607.923152][T17909] ? __pfx_do_futex+0x10/0x10 [ 2607.923171][T17909] __x64_sys_futex+0x1e0/0x4c0 [ 2607.923188][T17909] ? __pfx___x64_sys_futex+0x10/0x10 [ 2607.923205][T17909] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 2607.923228][T17909] do_syscall_64+0xcd/0xfa0 [ 2607.923249][T17909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2607.923264][T17909] RIP: 0033:0x7fac3a38eec9 [ 2607.923277][T17909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2607.923292][T17909] RSP: 002b:00007fac3b15d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2607.923308][T17909] RAX: ffffffffffffffda RBX: 00007fac3a5e5fa8 RCX: 00007fac3a38eec9 [ 2607.923318][T17909] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fac3a5e5fac [ 2607.923327][T17909] RBP: 00007fac3a5e5fa0 R08: 00007fac3b15e000 R09: 0000000000000000 [ 2607.923337][T17909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2607.923346][T17909] R13: 00007fac3a5e6038 R14: 00007ffca02b3c60 R15: 00007ffca02b3d48 [ 2607.923366][T17909] [ 2608.821131][T17941] zswap: compressor not available [ 2609.508089][T17954] zswap: compressor not available [ 2610.961727][T17996] netlink: 'syz.5.8734': attribute type 3 has an invalid length. [ 2610.970681][T17996] netlink: 306 bytes leftover after parsing attributes in process `syz.5.8734'. [ 2613.818064][T18036] sg_write: data in/out 16121600/48 bytes for SCSI command 0x7b-- guessing data in; [ 2613.818064][T18036] program syz.0.8741 not setting count and/or reply_len properly [ 2616.485991][ T30] audit: type=1800 audit(4294967319.430:263): pid=18070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8749" name="dbroot" dev="configfs" ino=228733 res=0 errno=0 [ 2617.429210][T18097] can0: slcan on pty238. [ 2617.679820][T18096] can0 (unregistered): slcan off pty238. [ 2618.087529][T18113] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x18000 [ 2618.150039][T18114] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 2618.158237][T18113] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 2618.166182][T18113] raw: 00fff00000002000 ffffea0000600008 ffffea0000600008 0000000000000000 [ 2618.249232][T18114] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 2618.299963][T18113] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 2618.364820][T18113] page dumped because: unmovable page [ 2618.374350][T18119] random: crng reseeded on system resumption [ 2618.425861][T18113] page_owner info is not present (never set?) [ 2620.071504][T18156] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1.0.1), cmd(6) [ 2620.735897][T18178] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2620.742325][T18178] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2620.881952][T12114] Bluetooth: hci0: unexpected subevent 0x12 length: 123 > 5 [ 2621.733312][T18199] zswap: compressor not available [ 2621.798572][T18209] netlink: 'syz.8.8771': attribute type 3 has an invalid length. [ 2621.857113][T18209] netlink: 306 bytes leftover after parsing attributes in process `syz.8.8771'. [ 2624.084754][T18244] ================================================================== [ 2624.084773][T18244] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 2624.084821][T18244] Read of size 256 at addr ffff888072bb5c60 by task syz.6.8778/18244 [ 2624.084848][T18244] [ 2624.084864][T18244] CPU: 0 UID: 0 PID: 18244 Comm: syz.6.8778 Tainted: G U syzkaller #0 PREEMPT(full) [ 2624.084902][T18244] Tainted: [U]=USER [ 2624.084912][T18244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2624.084929][T18244] Call Trace: [ 2624.084939][T18244] [ 2624.084949][T18244] dump_stack_lvl+0x116/0x1f0 [ 2624.084988][T18244] print_report+0xcd/0x630 [ 2624.085013][T18244] ? __virt_addr_valid+0x81/0x610 [ 2624.085038][T18244] ? __phys_addr+0xe8/0x180 [ 2624.085064][T18244] ? fbcon_prepare_logo+0xa03/0xc70 [ 2624.085100][T18244] kasan_report+0xe0/0x110 [ 2624.085125][T18244] ? fbcon_prepare_logo+0xa03/0xc70 [ 2624.085166][T18244] kasan_check_range+0x100/0x1b0 [ 2624.085195][T18244] __asan_memcpy+0x23/0x60 [ 2624.085228][T18244] fbcon_prepare_logo+0xa03/0xc70 [ 2624.085271][T18244] fbcon_init+0xd77/0x1900 [ 2624.085308][T18244] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 2624.085347][T18244] visual_init+0x320/0x620 [ 2624.085386][T18244] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 2624.085419][T18244] store_bind+0x61d/0x760 [ 2624.085446][T18244] ? sysfs_file_kobj+0xe4/0x290 [ 2624.085480][T18244] ? __pfx_store_bind+0x10/0x10 [ 2624.085505][T18244] dev_attr_store+0x58/0x80 [ 2624.085542][T18244] ? __pfx_dev_attr_store+0x10/0x10 [ 2624.085577][T18244] sysfs_kf_write+0xf2/0x150 [ 2624.085613][T18244] kernfs_fop_write_iter+0x3af/0x570 [ 2624.085654][T18244] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2624.085692][T18244] iter_file_splice_write+0xa24/0x12e0 [ 2624.085739][T18244] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2624.085777][T18244] ? __pfx_copy_splice_read+0x10/0x10 [ 2624.085817][T18244] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2624.085852][T18244] direct_splice_actor+0x192/0x6c0 [ 2624.085886][T18244] splice_direct_to_actor+0x345/0xa30 [ 2624.085919][T18244] ? __pfx_direct_splice_actor+0x10/0x10 [ 2624.085955][T18244] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2624.085991][T18244] do_splice_direct+0x174/0x240 [ 2624.086020][T18244] ? __pfx_do_splice_direct+0x10/0x10 [ 2624.086051][T18244] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2624.086085][T18244] ? rw_verify_area+0xcf/0x6c0 [ 2624.086116][T18244] do_sendfile+0xb06/0xe50 [ 2624.086150][T18244] ? __pfx_do_sendfile+0x10/0x10 [ 2624.086184][T18244] ? __x64_sys_futex+0x1e0/0x4c0 [ 2624.086209][T18244] ? __x64_sys_futex+0x1e9/0x4c0 [ 2624.086237][T18244] __x64_sys_sendfile64+0x1d8/0x220 [ 2624.086262][T18244] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2624.086291][T18244] do_syscall_64+0xcd/0xfa0 [ 2624.086332][T18244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2624.086357][T18244] RIP: 0033:0x7fac3a38eec9 [ 2624.086378][T18244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2624.086404][T18244] RSP: 002b:00007fac385f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2624.086429][T18244] RAX: ffffffffffffffda RBX: 00007fac3a5e6090 RCX: 00007fac3a38eec9 [ 2624.086448][T18244] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 2624.086465][T18244] RBP: 00007fac3a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2624.086482][T18244] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 2624.086496][T18244] R13: 00007fac3a5e6128 R14: 00007fac3a5e6090 R15: 00007ffca02b3d48 [ 2624.086517][T18244] [ 2624.086525][T18244] [ 2624.086532][T18244] Allocated by task 18242: [ 2624.086545][T18244] kasan_save_stack+0x33/0x60 [ 2624.086579][T18244] kasan_save_track+0x14/0x30 [ 2624.086611][T18244] __kasan_kmalloc+0xaa/0xb0 [ 2624.086654][T18244] __kmalloc_noprof+0x32f/0x880 [ 2624.086682][T18244] __register_sysctl_table+0xea2/0x1900 [ 2624.086710][T18244] lowpan_frags_init_net+0x254/0x3a0 [ 2624.086733][T18244] ops_init+0x1e2/0x5f0 [ 2624.086765][T18244] setup_net+0x100/0x390 [ 2624.086797][T18244] copy_net_ns+0x2f8/0x690 [ 2624.086818][T18244] create_new_namespaces+0x3ea/0xa90 [ 2624.086851][T18244] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 2624.086883][T18244] ksys_unshare+0x45b/0xa40 [ 2624.086905][T18244] __x64_sys_unshare+0x31/0x40 [ 2624.086927][T18244] do_syscall_64+0xcd/0xfa0 [ 2624.086961][T18244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2624.086986][T18244] [ 2624.086993][T18244] The buggy address belongs to the object at ffff888072bb5c00 [ 2624.086993][T18244] which belongs to the cache kmalloc-256 of size 256 [ 2624.087015][T18244] The buggy address is located 96 bytes inside of [ 2624.087015][T18244] allocated 195-byte region [ffff888072bb5c00, ffff888072bb5cc3) [ 2624.087042][T18244] [ 2624.087050][T18244] The buggy address belongs to the physical page: [ 2624.087062][T18244] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72bb4 [ 2624.087085][T18244] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2624.087106][T18244] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2624.087130][T18244] page_type: f5(slab) [ 2624.087152][T18244] raw: 00fff00000000040 ffff88813ffa6b40 ffffea0000a14880 dead000000000003 [ 2624.087176][T18244] raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 2624.087201][T18244] head: 00fff00000000040 ffff88813ffa6b40 ffffea0000a14880 dead000000000003 [ 2624.087225][T18244] head: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000 [ 2624.087249][T18244] head: 00fff00000000001 ffffea0001caed01 00000000ffffffff 00000000ffffffff [ 2624.087273][T18244] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 2624.087288][T18244] page dumped because: kasan: bad access detected [ 2624.087301][T18244] page_owner tracks the page as allocated [ 2624.087310][T18244] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8608, tgid 8608 (syz-executor), ts 229955940605, free_ts 229879357780 [ 2624.087365][T18244] post_alloc_hook+0x1c0/0x230 [ 2624.087394][T18244] get_page_from_freelist+0x10a3/0x3a30 [ 2624.087426][T18244] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 2624.087459][T18244] alloc_pages_mpol+0x1fb/0x550 [ 2624.087482][T18244] new_slab+0x24a/0x360 [ 2624.087508][T18244] ___slab_alloc+0xdc4/0x1ae0 [ 2624.087535][T18244] __slab_alloc.constprop.0+0x63/0x110 [ 2624.087563][T18244] __kmalloc_cache_noprof+0x477/0x780 [ 2624.087593][T18244] ____ip_mc_inc_group+0x403/0x10f0 [ 2624.087616][T18244] ip_mc_up+0x154/0x3b0 [ 2624.087645][T18244] inetdev_event+0xafb/0x18a0 [ 2624.087673][T18244] notifier_call_chain+0xbc/0x410 [ 2624.087697][T18244] call_netdevice_notifiers_info+0xbe/0x140 [ 2624.087725][T18244] __dev_notify_flags+0x12c/0x2e0 [ 2624.087758][T18244] netif_change_flags+0x108/0x160 [ 2624.087793][T18244] do_setlink.constprop.0+0xb53/0x4380 [ 2624.087830][T18244] page last free pid 7567 tgid 7567 stack trace: [ 2624.087845][T18244] __free_frozen_pages+0x7df/0x1160 [ 2624.087872][T18244] qlist_free_all+0x4d/0x120 [ 2624.087905][T18244] kasan_quarantine_reduce+0x195/0x1e0 [ 2624.087941][T18244] __kasan_slab_alloc+0x69/0x90 [ 2624.087978][T18244] kmem_cache_alloc_noprof+0x250/0x6e0 [ 2624.088010][T18244] ptlock_alloc+0x1f/0x70 [ 2624.088037][T18244] pte_alloc_one+0x84/0x350 [ 2624.088069][T18244] __pte_alloc+0x6d/0x380 [ 2624.088103][T18244] copy_page_range+0x44a1/0x6930 [ 2624.088129][T18244] dup_mmap+0xe80/0x2280 [ 2624.088152][T18244] copy_process+0x3f0c/0x76a0 [ 2624.088186][T18244] kernel_clone+0xfc/0x930 [ 2624.088219][T18244] __do_sys_clone+0xce/0x120 [ 2624.088238][T18244] do_syscall_64+0xcd/0xfa0 [ 2624.088271][T18244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2624.088296][T18244] [ 2624.088303][T18244] Memory state around the buggy address: [ 2624.088317][T18244] ffff888072bb5b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2624.088336][T18244] ffff888072bb5c00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2624.088354][T18244] >ffff888072bb5c80: 00 00 00 00 00 00 00 00 03 fc fc fc fc fc fc fc [ 2624.088369][T18244] ^ [ 2624.088384][T18244] ffff888072bb5d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2624.088402][T18244] ffff888072bb5d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2624.088417][T18244] ================================================================== [ 2624.123201][T18244] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2624.123227][T18244] CPU: 0 UID: 0 PID: 18244 Comm: syz.6.8778 Tainted: G U syzkaller #0 PREEMPT(full) [ 2624.123270][T18244] Tainted: [U]=USER [ 2624.123280][T18244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2624.123297][T18244] Call Trace: [ 2624.123307][T18244] [ 2624.123318][T18244] dump_stack_lvl+0x3d/0x1f0 [ 2624.123358][T18244] vpanic+0x640/0x6f0 [ 2624.123387][T18244] panic+0xca/0xd0 [ 2624.123413][T18244] ? __pfx_panic+0x10/0x10 [ 2624.123441][T18244] ? fbcon_prepare_logo+0xa03/0xc70 [ 2624.123480][T18244] ? preempt_schedule_common+0x44/0xc0 [ 2624.123516][T18244] ? preempt_schedule_thunk+0x16/0x30 [ 2624.123551][T18244] check_panic_on_warn+0xab/0xb0 [ 2624.123582][T18244] end_report+0x107/0x170 [ 2624.123607][T18244] kasan_report+0xee/0x110 [ 2624.123640][T18244] ? fbcon_prepare_logo+0xa03/0xc70 [ 2624.123685][T18244] kasan_check_range+0x100/0x1b0 [ 2624.123717][T18244] __asan_memcpy+0x23/0x60 [ 2624.123751][T18244] fbcon_prepare_logo+0xa03/0xc70 [ 2624.123798][T18244] fbcon_init+0xd77/0x1900 [ 2624.123836][T18244] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 2624.123876][T18244] visual_init+0x320/0x620 [ 2624.123915][T18244] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 2624.123948][T18244] store_bind+0x61d/0x760 [ 2624.123978][T18244] ? sysfs_file_kobj+0xe4/0x290 [ 2624.124013][T18244] ? __pfx_store_bind+0x10/0x10 [ 2624.124039][T18244] dev_attr_store+0x58/0x80 [ 2624.124076][T18244] ? __pfx_dev_attr_store+0x10/0x10 [ 2624.124113][T18244] sysfs_kf_write+0xf2/0x150 [ 2624.124150][T18244] kernfs_fop_write_iter+0x3af/0x570 [ 2624.124182][T18244] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2624.124219][T18244] iter_file_splice_write+0xa24/0x12e0 [ 2624.124265][T18244] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2624.124303][T18244] ? __pfx_copy_splice_read+0x10/0x10 [ 2624.124344][T18244] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2624.124381][T18244] direct_splice_actor+0x192/0x6c0 [ 2624.124416][T18244] splice_direct_to_actor+0x345/0xa30 [ 2624.124450][T18244] ? __pfx_direct_splice_actor+0x10/0x10 [ 2624.124488][T18244] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2624.124526][T18244] do_splice_direct+0x174/0x240 [ 2624.124560][T18244] ? __pfx_do_splice_direct+0x10/0x10 [ 2624.124593][T18244] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2624.124635][T18244] ? rw_verify_area+0xcf/0x6c0 [ 2624.124670][T18244] do_sendfile+0xb06/0xe50 [ 2624.124708][T18244] ? __pfx_do_sendfile+0x10/0x10 [ 2624.124746][T18244] ? __x64_sys_futex+0x1e0/0x4c0 [ 2624.124773][T18244] ? __x64_sys_futex+0x1e9/0x4c0 [ 2624.124802][T18244] __x64_sys_sendfile64+0x1d8/0x220 [ 2624.124829][T18244] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 2624.124860][T18244] do_syscall_64+0xcd/0xfa0 [ 2624.124900][T18244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2624.124927][T18244] RIP: 0033:0x7fac3a38eec9 [ 2624.124948][T18244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2624.124974][T18244] RSP: 002b:00007fac385f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2624.125001][T18244] RAX: ffffffffffffffda RBX: 00007fac3a5e6090 RCX: 00007fac3a38eec9 [ 2624.125020][T18244] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000003 [ 2624.125037][T18244] RBP: 00007fac3a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 2624.125055][T18244] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 2624.125072][T18244] R13: 00007fac3a5e6128 R14: 00007fac3a5e6090 R15: 00007ffca02b3d48 [ 2624.125101][T18244] [ 2624.125349][T18244] Kernel Offset: disabled