last executing test programs: 21.658566981s ago: executing program 0 (id=2157): r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}, 0x54) prctl$auto(0x100, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x3, 0x871, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioperm$auto(0x400, 0x7f, 0xd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) socket(0x2b, 0x3, 0x73) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) write$auto(0x4, 0x0, 0x100082) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) exit$auto(0x2) fchdir$auto(r1) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/vlan/vlan1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) pivot_root$auto(0x0, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) write$auto(0x4, 0x0, 0x100082) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/admmidi2\x00', 0x66a680, 0x0) socket(0xa, 0x5, 0x8) gettid() 20.005252027s ago: executing program 3 (id=2163): ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000200)={0x0, &(0x7f0000000000)={0xffff, 0x5, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x412100, 0x0) r2 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x6}) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r1, 0x81}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffffff, &(0x7f0000000100)=""/153, 0x99) madvise$auto(0x5, 0x81, 0x5) getpid() r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) 18.559432699s ago: executing program 0 (id=2167): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/system/clockevents/clockevent0/current_device\x00', 0x80500, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sysfs$auto(0x2, 0x4, 0x0) r0 = fsopen$auto(0x0, 0x31) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x200040, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$auto(r4, 0x4008af24, r3) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r2, 0x8000) socket(0x25, 0x5, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 18.094608357s ago: executing program 3 (id=2168): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) bind$auto(0x3, 0x0, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) r1 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0xa, 0x2, 0x0) socket(0x2b, 0x1, 0x1) r3 = socket(0x1, 0x2, 0x0) socket(0xa, 0x2, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103841, 0x0) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) shmctl$auto_SHM_UNLOCK(0xd, 0xc, 0x0) msgctl$auto_MSG_STAT_ANY(0x4f55, 0xd, 0x0) socket(0x11, 0x3, 0x2) getpeername$auto(0x3, 0x0, 0x0) sendmsg$auto_IPVS_CMD_GET_DEST(r0, 0x0, 0x11) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'pimreg\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000300)=@bpf_attr_0={0xfff, 0xf, 0x1, 0xf67, 0x0, r1, 0x1ff, "15fda0971d7a681eff28e98f80c2e83f", r4, r2, 0xfffffffd, 0x3ff, 0x1, 0x1, r2, r0}, 0x37a6cda9) syz_genetlink_get_family_id$auto_nfsd(0x0, r0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, 0x0, 0x1c0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) 14.409464769s ago: executing program 1 (id=2172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)={0x2c, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0xa, 0x801, 0x84) connect$auto(0x3, 0x0, 0x54) r6 = socket(0xa, 0x5, 0x84) getsockopt$auto(r6, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) setsockopt$auto(r5, 0x10000000084, 0x9, 0x0, 0x9c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x9, 0x10000, 0xffffffffffffd2e4, 0x8, 0x6, 0x6da, 0x1, 0x1, 0x6, 0x8, 0x4, 0x2, 0x80, 0x3, 0x200000000008, 0xdd2, 0x5, 0xe91, 0x6, 0x81, 0x0, 0x401}, 0x7fff, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf25020000000800021d00020000080003"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) ioctl$auto_I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000140)) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r1, 0x301, 0x70bd2a, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x4044040) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r8 = socketpair$auto(0x1, 0x2, 0xfffffff7, 0x0) ioctl$auto_TIOCMGET2(r8, 0x5415, &(0x7f00000000c0)="dd3120a0b1c830bdca5b132b77a0762b423326f626d46900c8a31de8c95815f804c9241bcf33ae65d041e6482471261fa8cd897216c183ed16dc03e83d576233fc425067d0efdf356c89a38df04c7157b7439560eb09764a6d85f9e406defb34a6c7745010764f8b3c360eeb61727c1d1ea2ccd0c70a33b968639692885d982616abaf9820ac558c6478d69627754bc0324116a95d565bfcd63cae1d3917e26d1b95b89b018b53ba0815694b97253edacf5fc2c1") close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) 14.372949642s ago: executing program 0 (id=2173): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x29d3e6c4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/afs/addr_prefs\x00', 0x441, 0x0) write$auto(r1, &(0x7f0000000300)='/ ys -ernel/tracing/set_event_notrace_p}d\xde\xc7\xbd8\xbe\xd7\xdeN\x86\xcf\x1d\rD!U\xb4\xe4+\v\xc3\x06$\xe1\x0eA\xf3ua\x8fT\xd9J\xfd\x02\x00\x00\x00\x00\x00\x00\x00\xbf\x9f\xb0e\xfex,c-\xdf\a\x9e\x9bX\x13n\xdf\xc8\x94%\x7fp\xe0\xa0x\x1f\x17\xea\xc3\xbf\xb2(}\x7f\xd3\xf6\xc5\x9bj\xcf~\x7f)\xd2\x7f\tN\xa9m\xe8\xdc\xb1\xe3\xf3L\xad\xdd%(0c\x9d\x13\xc7\x0elZ\x87K\x14_\xbau\x88\x9f\xe2\x04\x16\xec\xfa\xad\xe0\x87G[N\xf1\xb5\xc0\xab\x00\x00\x00\x00\x00\x00\x00\x04+\xc1\xd3m\xb8\xe5\a\x92\xc2\xd4\xcc\x91\x90\x05$G\x9a\x9b\xe1I\xa9/(\xd3\xa1\\8\x1afmY\xd6m\x931\xe6\xbd\xfb\xd6\x91\xbb\xef\xa1\x03\xd8j\x06ngka\xd1\xf1\xfd\xaeX)w\x1e4\x91\xc9\xce4\x97\x00', 0x40) open(0x0, 0x7ffd, 0x12) setitimer$auto(0x2, &(0x7f0000000080)={{0x1, 0x5}, {0x0, 0x8}}, 0x0) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000000)={{0x3, 0x3}, {0x8, 0x5}}, 0x0) unshare$auto(0x40000080) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000180)={{0x34c, 0x9}, {0xfffffffffffffffd}}, 0x0) setitimer$auto(0x5, &(0x7f0000000240)={{0xfea07d8, 0x9d}, {0xfffffffffffffffb, 0x9}}, &(0x7f0000000280)={{0x4, 0x200}, {0x2, 0x6}}) r2 = socket(0x10, 0x2, 0xc) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f00000000c0)={r2, 0xf}) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r3, 0x80184132, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram4\x00', 0xdd01, 0x0) open(0x0, 0xeee00, 0x31) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D3\x00', 0x1, 0x0) 12.846619761s ago: executing program 3 (id=2175): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x0, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x19, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) clock_nanosleep$auto(0x8001, 0x9, &(0x7f00000001c0)={0xf5d, 0x7f}, &(0x7f0000000240)={0x0, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x8000000000000000, 0x3, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x3d, 0xe, 0x3, 0x101, 0x100000000000ff, 0x1000000002, 0x80080001]}, 0x0, 0x0) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x10000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) 10.582435608s ago: executing program 1 (id=2178): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x7000000) r0 = setfsuid$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x2) r2 = getsockopt$auto(r1, 0x107, 0x1, 0x0, 0x0) setuid$auto(r0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000380)="fc9e170450ef09bd7aa695bcf069ac831c4ff3a803b04bde36726a77eabef7189ab3fdb837752db0b124237748f82da24d99591b25689afcf1f464d154f2ad19cf198e556858a88e9860c24834256215bb5a8ee5587260f61449171c69e964e15b3e5d15fdd275732a9daf7b50ef0b1447e8d12d107d9e559a9cb1560d45ab0684862be2dd343598ab3820a9f670a9284446a9505a429ad00d079e011c2a33b2d5b3514c960d4cf94bb17ffe97003c9e2869a2825973022ecd9f28a8e2e3c5b88488c0cae176178122dd7926108132c7adf6f7c213e2740d67b7aafa") r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r3) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01032cb57000fbdbdf250a0000000600010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0x10003, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1ab0000000080800000000000000000040000660e070100"}, 0x6, 0x0, 0x7, @raw=0x404, @reserved="70fdeb53800ee537f24de9834badb6356a1937f4ab4d7c4f35030cf54e5d5cf697dd6705ee4a40e7be912c8d4ce7cd594d960b2939e2c7817fd1d9a49d2ce209b2367f3cd0a847ec9cd238f0a26d02c026f2dff8746057e33a07e7b287faf4606b1a5e43efd186a04db7f7022f6c39266fcec51437f69e561106c2db74e7f7c3", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) read$auto(0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendto$auto(0xffffffffffffffff, 0x0, 0xfffffffffffffdef, 0x8, 0x0, 0x20) 8.737915862s ago: executing program 1 (id=2182): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/system/clockevents/clockevent0/current_device\x00', 0x80500, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sysfs$auto(0x2, 0x4, 0x0) r0 = fsopen$auto(0x0, 0x31) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x200040, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r3, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$auto(r4, 0x4008af24, r3) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r2, 0x8000) socket(0x25, 0x5, 0x6) socket$nl_generic(0x10, 0x3, 0x10) 8.254388027s ago: executing program 3 (id=2185): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x5, 0x1, 0x9, 0x7, 0x5, 0x6, 0x8, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x7, 0x10000000000, 0x0, 0x3, 0x22000, 0x203, 0x9, 0x84, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, [0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x7, 0x6, 0x2, 0x8, 0xfffffffffffffffd, 0x0, 0x3, 0x10000, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4]}, 0x81, 0x968c) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x7ff, 0x400008, 0xdf, 0x9b72, 0x2, 0x5) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x101142, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) futimesat$auto(0x2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, 0x0, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) read$auto(0xffffffffffffffff, &(0x7f0000000240)='/proc/scsi/sg\x00\x00\x00\x00ices\x00\r\xe2\xc9\x04\x986\xbc\xb0FI\xb9-E\xe3\x87j\xdes1\xa7\xdf\xc4\b\xb3\xeelc\x7f\xfdg\x18*\a:_\xb0\x92\xacwH\x9c\x9dF\xb1\xc47\x85\xc7\x13\xe1\x19UR\x96\xd8\x86\xd3\xe4\xa9R\x1c\xeb\xc8\xe5X\xfcR\xc7\vdU\x8b\xaa^\xfd\x83#\xc1o\x04\xeca\xbf\x8bYz\xd9\r\xcbk\xfd\x9e\x97\xcbOf\x80', 0x100000001) read$auto(0x3, 0x0, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(0x0, 0x9, 0x0) 7.898815302s ago: executing program 0 (id=2186): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x90000, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xd6f) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb0, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0xfffffffe, 0x10000000000002a, 0x4) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x9, 0x8000, 0xe238, 0x602, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000440)={0x4, 0x85, 0x9416, 0x1, 0x5, 0x6, "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"}, 0x6, 0x3, 0xff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r1, 0x10000000ffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x2a, 0x800, 0x2d2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000449a65a311207c03ce99b7d95d867d211cbd0eee34", @ANYRES16=r3, @ANYBLOB="210b2abd7000fedbdf25670810000800c3000000008045758fc058dcee9878afa51ff9a59485f9c175626428f8cd259f6b190b952c1b70cee92676ec458e0362bb41abc245e8af1fd49b16d1ba89d17167f2935fe6d31c7b873c1358bc54a58a528d54a2f936c9d05a48cdeb758cbc341e92a429cfc247215ace"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x2, 0x400008, 0xdf, 0x19, 0xffffffffffffffff, 0x4002) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x40c1) socket(0x1d, 0x3, 0x1) 6.742189444s ago: executing program 2 (id=2188): capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0) ioctl$auto(r0, 0xc0205648, r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x32bc2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x1) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x3, 0x7, 0x401, r0, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x705b}, {0x100, 0x1, 0x4e, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) open(0x0, 0x22240, 0x154) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) acct$auto(&(0x7f0000000100)='/dev/v4l-subdev1\x00') r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r2, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) process_madvise$auto_MADV_UNMERGEABLE(0xffffffffffffffff, 0x0, 0xfffffffffffffffb, 0xd, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) open_by_handle_at$auto(r4, &(0x7f0000000100)={0xf3, 0x2, "31ca330ca17b54cecb9ce24ac6aa7bb9fbc7427f703a379b56ba3d36771b8cacae749a95b0cf70824a29cb46cd53751c975b9ed71fb88c274ca2c310bf137cc1f821d87054848978e90c28abd913a99eca2afd38ea52e760f6db15e83a6073d436f7f0ea1e67095a176ab89aeb99cae50bc77c3df368a82e254c381923e7db9cc183c9f4713f027e3a3b2bfa8b0cc9ae0915e16bd10c5d88ca95e417cc05e458cc37438d2293bd8e036e4f6b0e96c82dd9d1fca1efdccdc20fadab583f6d2b449ad49620b2607004b50480bab7dff31d568bdd7bcf36ab982ba01688991899294d9d86a310eb71e326f17a0c0b7e453ce81061"}, 0x6) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) 5.349212947s ago: executing program 3 (id=2189): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x585541, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x48b, 0x400, 0x9}]}) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) socket(0xa, 0x1, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r4 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r4, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x40}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r5, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) inotify_rm_watch$auto(r4, 0x8001) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 5.018878995s ago: executing program 1 (id=2190): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x90000, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xd6f) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb0, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0xfffffffe, 0x10000000000002a, 0x4) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x9, 0x8000, 0xe238, 0x602, 0x5) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000440)={0x4, 0x85, 0x9416, 0x1, 0x5, 0x6, "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"}, 0x6, 0x3, 0xff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r1, 0x10000000ffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0x2a, 0x800, 0x2d2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r2) sendmsg$auto_NL80211_CMD_VENDOR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000449a65a311207c03ce99b7d95d867d211cbd0eee34", @ANYRES16=r3, @ANYBLOB="210b2abd7000fedbdf25670810000800c3000000008045758fc058dcee9878afa51ff9a59485f9c175626428f8cd259f6b190b952c1b70cee92676ec458e0362bb41abc245e8af1fd49b16d1ba89d17167f2935fe6d31c7b873c1358bc54a58a528d54a2f936c9d05a48cdeb758cbc341e92a429cfc24721"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) ioperm$auto(0x3, 0x8001, 0x2000000000000149) mmap$auto(0x2, 0x400008, 0xdf, 0x19, 0xffffffffffffffff, 0x4002) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x40c1) socket(0x1d, 0x3, 0x1) 4.966048671s ago: executing program 2 (id=2191): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0x0, 0x0) write$auto(r0, 0x0, 0x7ef) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) select$auto(0x12, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x7ffffffffffffffd, 0x2) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(r2, r0, 0x8) r3 = prctl$auto(0x21, 0x1, 0x1, 0x0, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000080)=""/202, 0xca) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE2(r3, 0x8010661b, &(0x7f0000000040)="cd0c0864cb7845cf2a936ec1fbdd9279") keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x2000b, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) 4.867789235s ago: executing program 0 (id=2192): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x7000000) r0 = setfsuid$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x3, 0x2) r2 = getsockopt$auto(r1, 0x107, 0x1, 0x0, 0x0) setuid$auto(r0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000380)="fc9e170450ef09bd7aa695bcf069ac831c4ff3a803b04bde36726a77eabef7189ab3fdb837752db0b124237748f82da24d99591b25689afcf1f464d154f2ad19cf198e556858a88e9860c24834256215bb5a8ee5587260f61449171c69e964e15b3e5d15fdd275732a9daf7b50ef0b1447e8d12d107d9e559a9cb1560d45ab0684862be2dd343598ab3820a9f670a9284446a9505a429ad00d079e011c2a33b2d5b3514c960d4cf94bb17ffe97003c9e2869a2825973022ecd9f28a8e2e3c5b88488c0cae176178122dd7926108132c7adf6f7c213e2740d67b7aafa") r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r3) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01032cb57000fbdbdf250a0000000600010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0x10003, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1ab0000000080800000000000000000040000660e070100"}, 0x6, 0x0, 0x7, @raw=0x404, @reserved="70fdeb53800ee537f24de9834badb6356a1937f4ab4d7c4f35030cf54e5d5cf697dd6705ee4a40e7be912c8d4ce7cd594d960b2939e2c7817fd1d9a49d2ce209b2367f3cd0a847ec9cd238f0a26d02c026f2dff8746057e33a07e7b287faf4606b1a5e43efd186a04db7f7022f6c39266fcec51437f69e561106c2db74e7f7c3", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x40000, 0x0) read$auto(0x3, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x240007, 0x19) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendto$auto(0xffffffffffffffff, 0x0, 0xfffffffffffffdef, 0x8, 0x0, 0x20) 3.872822898s ago: executing program 2 (id=2193): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r0, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r1) shmat$auto(0x0, &(0x7f0000000000)='\x9a\x1e2\x8e\xe3\xb95\x98F\xf8Q\x01\x00\x93^', 0xfff) mkdir$auto(&(0x7f0000000040)='./file1\x00', 0x2) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x414a00, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x1e, 0x1, 0x0) lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0x68, 0x8, 0x80}, 0x80, 0x0) r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) readv$auto(r3, &(0x7f00000000c0)={0x0, 0x200}, 0x6) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, 0x0, 0x5) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/bond_slave_1/disable_policy\x00', 0x202, 0x0) sendfile$auto(r5, 0xffffffffffffffff, 0x0, 0x48) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r6, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) 2.828809983s ago: executing program 2 (id=2194): r0 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) umount2$auto(&(0x7f0000000500)='/proc/thread-self/ns/cgroup\x00', 0x8) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/use_zero_page\x00', 0x28442, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/36, 0x24) unshare$auto(0x40000080) socket(0x12, 0x4, 0x440a) read$auto_fault_around_bytes_fops_(r1, &(0x7f0000000080)=""/21, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000000c0), r2) r5 = clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) prctl$auto(0x3e, 0x1, r5, 0x1, 0x0) capget$auto(&(0x7f0000000140)={0x80000001, r5}, &(0x7f0000000100)={0x10ff, 0x2}) ioctl$auto_XFS_IOC_ALLOCSP64(r0, 0x40305824, &(0x7f00000001c0)={0x7, 0xa, 0x343d, 0x1, 0x2}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event2\x00', 0x100, 0x0) r6 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) pread64$auto(r6, 0x0, 0x20000000001, 0xfffffffffffff) ioctl$auto_EVIOCGREP(r3, 0x80084503, &(0x7f0000000180)=[0x1, 0xd1]) capset$auto(&(0x7f0000000000)={0x6}, &(0x7f0000000040)={0x101, 0x4, 0xbc09}) r7 = socket(0x23, 0x5, 0x0) listen$auto(r7, 0x5ed) connect$auto(r7, 0x0, 0x55) gettid() mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r9, 0x0, 0x20) writev$auto(r8, &(0x7f0000000200)={0x0, 0x3}, 0x3) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) keyctl$auto(0x16, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 2.72068133s ago: executing program 1 (id=2195): ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000200)={0x0, &(0x7f0000000000)={0xffff, 0x5, 0x7}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x412100, 0x0) r2 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x6}) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r1, 0x81}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffffff, &(0x7f0000000100)=""/153, 0x99) madvise$auto(0x5, 0x81, 0x5) getpid() r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) 2.181447117s ago: executing program 3 (id=2196): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7fc, 0x400) r0 = socket(0x22, 0x1, 0x80000000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(r0, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x49147292, 0xffffffffffffffff}, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0xa, 0x2, 0x88) setsockopt$auto_SO_INCOMING_CPU(r1, 0x103e, 0x31, &(0x7f0000000080)='/sys/devices/virtual/block/ram7/queue/dax\x00', 0x3ff) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) setsockopt$auto(r2, 0x29, 0x10, 0x0, 0x1) socket(0xa, 0x801, 0x84) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram7/queue/dax\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000004c0)=""/206, 0xce) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0xffffffe6) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="3ae90f7c", @ANYRES16=0x0, @ANYBLOB="01002bbd7000ffdbdf2502"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0202, 0x0) 334.814913ms ago: executing program 0 (id=2197): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x1c, r1, 0x400, 0x70bd29, 0x25dddc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xd, 0x3, 0x0, 0x9, 0x9) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000640)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000404, 0xd, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) write$auto(r0, &(0x7f00000000c0)='\x00', 0x6) mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x2b, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) write$auto(r4, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x80001) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000240)={0x0, 0xe8}, 0x2, 0x0, 0x3, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) r5 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r5, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0xc64, 0x5, @_sigchld={r5, 0x0, 0x401, 0x5, 0x3}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x10001, 0x7fffffffffffffff, 0xe817) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) 332.962934ms ago: executing program 1 (id=2198): mmap$auto(0xfffffffffffff000, 0x4, 0x7, 0xeb1, 0xffffffffffffffff, 0x9) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = io_uring_setup$auto(0x3ff, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) write$auto(0xffffffffffffffff, 0x0, 0x800aeb) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x8b72, 0x2, 0x8000) mmap$auto(0x0, 0x0, 0x3, 0xeb1, 0x8000000000000000, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) r3 = open(0x0, 0x22ac2, 0x0) fchown$auto(r3, 0xe5a, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) pread64$auto(r2, 0x0, 0x800000000007fb, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) sendmsg$auto_NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x4004010) fcntl$auto(0x3, 0x400, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xfffffffffffffffe, 0x7, 0xffffffffffffffff, 0x15f4da0a, 0x8000000000000003, 0x3, 0x10005f, 0x80000020, 0x7, 0x6d3e, 0x200009, 0x2, 0x1000]}, 0x0) mmap$auto(0x0, 0x8004008, 0x2000000329, 0x2000000010011, r1, 0x8000) 329.90779ms ago: executing program 2 (id=2199): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) socketpair$auto(0x9, 0x2, 0xb, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2b, 0x1, 0x0) socket(0xa, 0x5, 0x84) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x50b900, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x101002, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/midi2\x00', 0x1, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x2, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x24) socketpair$auto(0xffffffff, 0x3, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(0x3, 0x80047437, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xdaa0, 0x1, 0x8008}, 0x40000000000009, 0x0) landlock_restrict_self$auto(r0, 0xfff7fffc) 0s ago: executing program 2 (id=2200): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb2, 0x401, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mlock2$auto(0x1, 0x8001, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r1 = socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c040000", @ANYRES16=0x0, @ANYBLOB="00042abd7000fcdbdf25010000000400028042040280ec00a08008004e0000000000069460b98f9dc7a0844bac5f99d369cf85b7bce7ccb087a4a7079f37a38c85546a1dfbe45293e1c9ccf3ee8620f4d72529d24805591014acb8307d7cf8cc62b9f36b528920f1b4bc64afda3bdfe4ed383e07f774e69ab8646329a2375160cfb891a0795e4ede43c691d8685b64a4f040a07717886be5977d1ffc0c3c3f572364026bf909ac97447dffdde3e50a8001bfb7c5b69d6fa1328b8345a2f160403ba385e450c1f61f62adf70d23b31d34fb2f5309a04b7cfee526a28046a7b13c529c3f3805db", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="00000063c18213babcb287ba3a3f4af34ce4ce05bd9f9d7e1054e3a4ff8b7efb4c29b8e24093d8264966c89141833994d8992bccc3f7aaa04318182b9bc7bf812f94bdf4a32e475eb285fcc6374a286346e46203efb23eb5bf4d9d7988420f25dfdfaa9885c1446d11b5001f805b417f5250ad5387265634a5de59b43f52be81861de2314253d2ec56dacf650eae6d88a2de488bced3b7eaab1544baae2ac19e9172d76b520b406f3e30401bd2c49f6c5b7f62a107254249408c7a048be9ad66fc72286fc9c7128d8b0a132ae3fad72719e21400eb0000000000000000000000ffffe000000208003100", @ANYRES32=0x0, @ANYBLOB="230005002f7379732f6b65726e656c2f64656275672f73796e632f73775f73796e6300000400068008000100", @ANYRES32=r0, @ANYBLOB="000000040071800c00b28008007600040000000000"], 0x45c}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000240)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x4b8483, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) setsockopt$auto(r2, 0x1, 0x832, 0x0, 0x88) getsockopt$auto(0x3, 0x200000000001, 0x1d, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x4, 0xd, 0x1, 0x948f, 0x1003, 0x15f4da07, 0x3, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x0, 0x2, 0xb]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev5\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) kernel console output (not intermixed with test programs): 539:6:'x?F/zF˷fC:0 is already present [ 236.119865][ T7444] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 236.612581][ T7445] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 237.226966][ T7454] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 240.062977][ T7489] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 240.775934][ T7483] kexec: Could not allocate control_code_buffer [ 240.976363][ T7498] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 241.559855][ T7504] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 241.617411][ T31] audit: type=1806 audit(1755013698.942:6): xattr="" res=-22 [ 242.344122][ T7519] ubi: mtd0 is already attached to ubi0 [ 242.614021][ T7510] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 243.392380][ T7528] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 243.859628][ T7515] mkiss: ax0: crc mode is auto. [ 245.186559][ T7550] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 246.125617][ T7561] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 246.637278][ T7565] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 247.873233][ T7583] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 249.194341][ T7600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.281'. [ 249.256973][ T7600] ipvlan0: entered allmulticast mode [ 249.262446][ T7600] veth0_vlan: entered allmulticast mode [ 250.056114][ T7607] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 250.349954][ T7595] netlink: 268 bytes leftover after parsing attributes in process `syz.3.278'. [ 250.482477][ T7580] kexec: Could not allocate control_code_buffer [ 251.242984][ T7620] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 251.700171][ T7622] mkiss: ax0: crc mode is auto. [ 253.676047][ T7629] Process accounting paused [ 253.978609][ T7648] netlink: zone id is out of range [ 253.983849][ T7648] netlink: zone id is out of range [ 253.991927][ T7648] netlink: zone id is out of range [ 253.997458][ T7648] netlink: zone id is out of range [ 254.002904][ T7648] netlink: zone id is out of range [ 254.012206][ T7648] netlink: zone id is out of range [ 254.021747][ T7648] netlink: zone id is out of range [ 254.042751][ T7648] netlink: zone id is out of range [ 254.050990][ T7648] netlink: zone id is out of range [ 254.063922][ T7648] netlink: zone id is out of range [ 255.521149][ T7673] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 256.200112][ T7684] FAULT_INJECTION: forcing a failure. [ 256.200112][ T7684] name failslab, interval 1, probability 0, space 0, times 0 [ 256.221243][ T7684] CPU: 1 UID: 0 PID: 7684 Comm: syz.1.297 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 256.221292][ T7684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.221326][ T7684] Call Trace: [ 256.221342][ T7684] [ 256.221357][ T7684] dump_stack_lvl+0x16c/0x1f0 [ 256.221407][ T7684] should_fail_ex+0x512/0x640 [ 256.221456][ T7684] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 256.221505][ T7684] should_failslab+0xc2/0x120 [ 256.221553][ T7684] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 256.221598][ T7684] ? sk_prot_alloc+0x60/0x2a0 [ 256.221657][ T7684] sk_prot_alloc+0x60/0x2a0 [ 256.221717][ T7684] sk_alloc+0x36/0xc20 [ 256.221761][ T7684] tipc_sk_create+0xcf/0x21a0 [ 256.221828][ T7684] ? find_held_lock+0x2b/0x80 [ 256.221866][ T7684] ? __sock_create+0x2f2/0x8d0 [ 256.221932][ T7684] __sock_create+0x335/0x8d0 [ 256.221997][ T7684] __sys_socket+0x14d/0x260 [ 256.222033][ T7684] ? __pfx___sys_socket+0x10/0x10 [ 256.222068][ T7684] ? xfd_validate_state+0x61/0x180 [ 256.222134][ T7684] __x64_sys_socket+0x72/0xb0 [ 256.222178][ T7684] ? lockdep_hardirqs_on+0x7c/0x110 [ 256.222229][ T7684] do_syscall_64+0xcd/0x490 [ 256.222282][ T7684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.222320][ T7684] RIP: 0033:0x7f7dba18ebe9 [ 256.222348][ T7684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.222388][ T7684] RSP: 002b:00007f7dbb076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 256.222423][ T7684] RAX: ffffffffffffffda RBX: 00007f7dba3b6180 RCX: 00007f7dba18ebe9 [ 256.222446][ T7684] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 256.222467][ T7684] RBP: 00007f7dba211e19 R08: 0000000000000000 R09: 0000000000000000 [ 256.222488][ T7684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.222508][ T7684] R13: 00007f7dba3b6218 R14: 00007f7dba3b6180 R15: 00007ffe24646328 [ 256.222555][ T7684] [ 259.898405][ T7742] vhci_hcd: invalid port number 16 [ 259.974640][ T7742] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 261.684241][ T7763] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 262.363997][ T7775] random: crng reseeded on system resumption [ 264.071940][ T7792] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 264.386614][ T7789] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 265.037558][ T7807] mkiss: ax0: crc mode is auto. [ 265.777783][ T7822] random: crng reseeded on system resumption [ 266.105362][ T7818] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 266.323238][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.335073][ T1304] ieee802154 phy1 wpan1: encryption failed: -22                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  [ 882.206354][T16305] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 882.442793][T16292] mkiss: ax0: crc mode is auto. syzkaller syzkaller login: [ 883.897797][T16330] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 884.656372][T16341] random: crng reseeded on system resumption [ 887.742297][T16376] bond0: option lp_interval: invalid value (0) [ 887.752628][T16376] bond0: option lp_interval: allowed values 1 - 2147483647 [ 888.452822][T16383] mkiss: ax0: crc mode is auto. [ 889.490764][T16388] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present syzkaller syzkaller login: [ 891.573095][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1708'. [ 891.587572][T16431] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 896.323231][T16504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1718'. [ 896.466924][T16495] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present syzkaller syzkaller login: [ 897.011650][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1720'. [ 897.024583][T16510] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 902.164788][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1731'. [ 902.213950][T16583] random: crng reseeded on system resumption [ 902.358344][T16576] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 902.928732][T16592] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 903.859923][T16603] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 904.178671][T16602] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 904.593486][T16617] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 905.770772][T16637] nbd: must specify a size in bytes for the device [ 907.673789][T16668] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 909.283930][T16696] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 909.490421][T16675] Process accounting resumed [ 913.394093][T16752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1759'. [ 913.415347][T16752] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 915.662913][T16783] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 915.976538][T16786] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 918.151928][T16809] random: crng reseeded on system resumption [ 919.288227][T16824] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 921.015512][T16838] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 923.456255][T16872] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 925.504101][T16900] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 926.010204][T16901] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 926.233685][T16914] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 927.233426][T16924] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 927.493483][T16919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1788'. [ 927.555327][T16922] hub 8-0:1.0: USB hub found [ 927.560835][T16922] hub 8-0:1.0: 1 port detected [ 928.286981][T16951] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 930.074161][T16971] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 931.322777][T16982] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 931.602302][T16978] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 937.160214][T17029] random: crng reseeded on system resumption [ 937.851213][T17059] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 938.669031][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.675731][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.339801][T17073] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 939.976073][T17073] Process accounting paused [ 940.202794][T17099] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 940.298084][T17085] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 941.604487][T17123] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 944.729999][T17159] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 945.973517][T17186] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 947.444582][T17206] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 950.209383][T17241] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 953.078253][T17276] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 954.662144][T17308] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 955.124903][T17313] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 955.149612][T17317] random: crng reseeded on system resumption [ 956.376521][T17325] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 957.683261][T17354] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 958.358651][T17365] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 958.837791][T17369] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 960.749138][T17390] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 961.144317][T17395] random: crng reseeded on system resumption [ 961.639103][T17402] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 962.349154][T17373] kexec: Could not allocate control_code_buffer [ 963.239062][T17417] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 964.396897][T17435] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 964.568189][T17442] FAULT_INJECTION: forcing a failure. [ 964.568189][T17442] name failslab, interval 1, probability 0, space 0, times 0 [ 964.594928][T17442] CPU: 0 UID: 0 PID: 17442 Comm: syz.2.1866 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 964.594976][T17442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 964.594996][T17442] Call Trace: [ 964.595007][T17442] [ 964.595020][T17442] dump_stack_lvl+0x16c/0x1f0 [ 964.595067][T17442] should_fail_ex+0x512/0x640 [ 964.595135][T17442] should_failslab+0xc2/0x120 [ 964.595178][T17442] __kmalloc_cache_noprof+0x6a/0x3e0 [ 964.595209][T17442] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 964.595259][T17442] ? tipc_group_create+0xbc/0x660 [ 964.595299][T17442] tipc_group_create+0xbc/0x660 [ 964.595339][T17442] tipc_setsockopt+0x7f0/0xdb0 [ 964.595396][T17442] ? __pfx_tipc_setsockopt+0x10/0x10 [ 964.595460][T17442] ? __pfx_tipc_setsockopt+0x10/0x10 [ 964.595509][T17442] do_sock_setsockopt+0xf3/0x1d0 [ 964.595564][T17442] __sys_setsockopt+0x120/0x1a0 [ 964.595611][T17442] __x64_sys_setsockopt+0xbd/0x160 [ 964.595649][T17442] ? do_syscall_64+0x91/0x490 [ 964.595690][T17442] ? lockdep_hardirqs_on+0x7c/0x110 [ 964.595730][T17442] do_syscall_64+0xcd/0x490 [ 964.595773][T17442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.595816][T17442] RIP: 0033:0x7f837438ebe9 [ 964.595842][T17442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.595875][T17442] RSP: 002b:00007f83751e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 964.595907][T17442] RAX: ffffffffffffffda RBX: 00007f83745b5fa0 RCX: 00007f837438ebe9 [ 964.595929][T17442] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 964.595949][T17442] RBP: 00007f8374411e19 R08: 0000000000000014 R09: 0000000000000000 [ 964.595968][T17442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 964.595988][T17442] R13: 00007f83745b6038 R14: 00007f83745b5fa0 R15: 00007ffd217a84a8 [ 964.596031][T17442] [ 966.552538][T17442] kexec: Could not allocate control_code_buffer [ 969.758316][T17496] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 970.616665][T17509] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 972.137729][T17511] Process accounting resumed [ 973.315476][T17554] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 975.525102][T17579] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 976.267616][T17589] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 976.513447][T17583] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 980.829300][T17637] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 981.089212][T17643] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 982.756794][T17672] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 983.618194][T17685] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 985.175285][T17700] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 986.060457][T17713] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 987.137537][T17731] ======================================================= [ 987.137537][T17731] WARNING: The mand mount option has been deprecated and [ 987.137537][T17731] and is ignored by this kernel. Remove the mand [ 987.137537][T17731] option from the mount to silence this warning. [ 987.137537][T17731] ======================================================= [ 989.389662][T17754] random: crng reseeded on system resumption [ 989.477259][T17756] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1917'. [ 989.556024][T17759] hub 8-0:1.0: USB hub found [ 989.561339][T17759] hub 8-0:1.0: 1 port detected [ 990.905293][T17771] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 992.048045][T17793] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 992.093285][T17793] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 994.923085][T17828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1927'. [ 994.955454][T17828] hub 8-0:1.0: USB hub found [ 994.975828][T17828] hub 8-0:1.0: 1 port detected [ 995.929968][T17846] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 996.365185][T17852] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 997.144194][T17860] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 997.522885][T17870] FAULT_INJECTION: forcing a failure. [ 997.522885][T17870] name failslab, interval 1, probability 0, space 0, times 0 [ 997.537098][T17870] CPU: 1 UID: 0 PID: 17870 Comm: syz.2.1936 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 997.537165][T17870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 997.537187][T17870] Call Trace: [ 997.537200][T17870] [ 997.537214][T17870] dump_stack_lvl+0x16c/0x1f0 [ 997.537266][T17870] should_fail_ex+0x512/0x640 [ 997.537317][T17870] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 997.537361][T17870] should_failslab+0xc2/0x120 [ 997.537410][T17870] __kmalloc_cache_noprof+0x6a/0x3e0 [ 997.537451][T17870] ? alloc_super+0x52/0xbd0 [ 997.537496][T17870] alloc_super+0x52/0xbd0 [ 997.537534][T17870] ? sget_fc+0xd3/0xc20 [ 997.537582][T17870] sget_fc+0x116/0xc20 [ 997.537622][T17870] ? __pfx_set_anon_super_fc+0x10/0x10 [ 997.537662][T17870] ? __pfx_mqueue_fill_super+0x10/0x10 [ 997.537720][T17870] get_tree_nodev+0x28/0x190 [ 997.537765][T17870] mqueue_get_tree+0xf1/0x130 [ 997.537823][T17870] vfs_get_tree+0x8b/0x340 [ 997.537857][T17870] fc_mount_longterm+0x18/0x160 [ 997.537922][T17870] mq_init_ns+0x426/0x620 [ 997.537966][T17870] copy_ipcs+0x383/0x610 [ 997.538003][T17870] ? copy_utsname+0xab/0x470 [ 997.538056][T17870] create_new_namespaces+0x20a/0xa90 [ 997.538098][T17870] ? security_capable+0x7e/0x260 [ 997.538149][T17870] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 997.538198][T17870] ksys_unshare+0x45b/0xa40 [ 997.538250][T17870] ? __pfx_ksys_unshare+0x10/0x10 [ 997.538302][T17870] ? xfd_validate_state+0x61/0x180 [ 997.538371][T17870] __x64_sys_unshare+0x31/0x40 [ 997.538421][T17870] do_syscall_64+0xcd/0x490 [ 997.538474][T17870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.538511][T17870] RIP: 0033:0x7f837438ebe9 [ 997.538541][T17870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 997.538578][T17870] RSP: 002b:00007f83751e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 997.538613][T17870] RAX: ffffffffffffffda RBX: 00007f83745b5fa0 RCX: 00007f837438ebe9 [ 997.538638][T17870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 997.538661][T17870] RBP: 00007f8374411e19 R08: 0000000000000000 R09: 0000000000000000 [ 997.538684][T17870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 997.538707][T17870] R13: 00007f83745b6038 R14: 00007f83745b5fa0 R15: 00007ffd217a84a8 [ 997.538756][T17870] [ 999.449228][T17891] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 999.811428][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.820361][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1001.307862][T17907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1941'. [ 1001.588198][T17913] hub 8-0:1.0: USB hub found [ 1001.672948][T17913] hub 8-0:1.0: 1 port detected [ 1001.694001][T17917] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1001.752826][T17918] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1002.070893][T17929] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 1003.540408][T17927] Process accounting paused [ 1005.060343][T17961] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1005.159287][T17971] vhci_hcd: invalid port number 255 [ 1005.164552][T17971] vhci_hcd: default hub control req: 5903 v0001 i00ff l1 [ 1006.781079][T17992] FAULT_INJECTION: forcing a failure. [ 1006.781079][T17992] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.800920][T17992] CPU: 1 UID: 0 PID: 17992 Comm: syz.2.1956 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 1006.800970][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1006.800990][T17992] Call Trace: [ 1006.801001][T17992] [ 1006.801013][T17992] dump_stack_lvl+0x16c/0x1f0 [ 1006.801059][T17992] should_fail_ex+0x512/0x640 [ 1006.801104][T17992] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1006.801148][T17992] should_failslab+0xc2/0x120 [ 1006.801193][T17992] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1006.801234][T17992] ? sk_prot_alloc+0x60/0x2a0 [ 1006.801297][T17992] sk_prot_alloc+0x60/0x2a0 [ 1006.801350][T17992] sk_alloc+0x36/0xc20 [ 1006.801391][T17992] tipc_sk_create+0xcf/0x21a0 [ 1006.801454][T17992] ? find_held_lock+0x2b/0x80 [ 1006.801488][T17992] ? __sock_create+0x2f2/0x8d0 [ 1006.801547][T17992] __sock_create+0x335/0x8d0 [ 1006.801609][T17992] __sys_socket+0x14d/0x260 [ 1006.801639][T17992] ? __pfx___sys_socket+0x10/0x10 [ 1006.801673][T17992] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1006.801734][T17992] __x64_sys_socket+0x72/0xb0 [ 1006.801764][T17992] ? lockdep_hardirqs_on+0x7c/0x110 [ 1006.801803][T17992] do_syscall_64+0xcd/0x490 [ 1006.801848][T17992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.801881][T17992] RIP: 0033:0x7f837438ebe9 [ 1006.801908][T17992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.801939][T17992] RSP: 002b:00007f83751a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1006.801970][T17992] RAX: ffffffffffffffda RBX: 00007f83745b6180 RCX: 00007f837438ebe9 [ 1006.801991][T17992] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1006.802010][T17992] RBP: 00007f8374411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1006.802030][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1006.802050][T17992] R13: 00007f83745b6218 R14: 00007f83745b6180 R15: 00007ffd217a84a8 [ 1006.802094][T17992] [ 1007.802605][T18005] netlink: 'syz.2.1958': attribute type 1 has an invalid length. [ 1008.993084][T18019] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1008.999710][T18019] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1009.005882][T18019] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1009.038614][T18019] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1009.044745][T18019] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1011.018749][T14516] Bluetooth: hci1: command 0x0c1a tx timeout [ 1011.024866][T14914] Bluetooth: hci0: command 0x0c1a tx timeout [ 1011.087703][T14914] Bluetooth: hci2: command 0x0c1a tx timeout [ 1011.093885][T14516] Bluetooth: hci3: command 0x0c1a tx timeout [ 1012.848886][ T5873] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1013.167111][ T5873] Bluetooth: hci3: command 0x0c1a tx timeout [ 1013.281365][T18076] FAULT_INJECTION: forcing a failure. [ 1013.281365][T18076] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.550736][T18076] CPU: 1 UID: 0 PID: 18076 Comm: syz.3.1967 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 1013.550789][T18076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1013.550805][T18076] Call Trace: [ 1013.550813][T18076] [ 1013.550823][T18076] dump_stack_lvl+0x16c/0x1f0 [ 1013.550858][T18076] should_fail_ex+0x512/0x640 [ 1013.550892][T18076] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1013.550923][T18076] should_failslab+0xc2/0x120 [ 1013.550954][T18076] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1013.550983][T18076] ? sk_prot_alloc+0x60/0x2a0 [ 1013.551031][T18076] sk_prot_alloc+0x60/0x2a0 [ 1013.551068][T18076] sk_alloc+0x36/0xc20 [ 1013.551096][T18076] tipc_sk_create+0xcf/0x21a0 [ 1013.551140][T18076] ? find_held_lock+0x2b/0x80 [ 1013.551164][T18076] ? __sock_create+0x2f2/0x8d0 [ 1013.551204][T18076] __sock_create+0x335/0x8d0 [ 1013.551264][T18076] __sys_socket+0x14d/0x260 [ 1013.551292][T18076] ? __pfx___sys_socket+0x10/0x10 [ 1013.551314][T18076] ? xfd_validate_state+0x61/0x180 [ 1013.551355][T18076] __x64_sys_socket+0x72/0xb0 [ 1013.551376][T18076] ? lockdep_hardirqs_on+0x7c/0x110 [ 1013.551415][T18076] do_syscall_64+0xcd/0x490 [ 1013.551448][T18076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.551473][T18076] RIP: 0033:0x7ff976d8ebe9 [ 1013.551492][T18076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.551514][T18076] RSP: 002b:00007ff977b6e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1013.551536][T18076] RAX: ffffffffffffffda RBX: 00007ff976fb6180 RCX: 00007ff976d8ebe9 [ 1013.551552][T18076] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1013.551566][T18076] RBP: 00007ff976e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1013.551580][T18076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1013.551594][T18076] R13: 00007ff976fb6218 R14: 00007ff976fb6180 R15: 00007ffd42b35638 [ 1013.551623][T18076] [ 1014.726945][T18096] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1019.583755][T18176] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1020.567302][T18198] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1023.259809][T18243] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1023.317123][T18238] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1028.483186][T18309] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1031.080975][T18328] QAT: Invalid ioctl 44640 [ 1032.441075][T18358] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1032.705414][T18360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1032.810980][T18360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1032.818921][T18360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1032.825693][T18360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1032.832188][T18360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1034.760484][ T5873] Bluetooth: hci0: command 0x0c1a tx timeout [ 1034.804267][ T5873] Bluetooth: hci1: command 0x0c1a tx timeout [ 1034.883927][T14516] Bluetooth: hci2: command 0x0c1a tx timeout [ 1034.890046][ T5873] Bluetooth: hci3: command 0x0c1a tx timeout [ 1035.424593][T18389] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1036.094320][T18376] Process accounting resumed [ 1036.953231][ T5873] Bluetooth: hci3: command 0x0c1a tx timeout [ 1038.068339][T18434] FAULT_INJECTION: forcing a failure. [ 1038.068339][T18434] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.082870][T18434] CPU: 0 UID: 0 PID: 18434 Comm: syz.2.2024 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 1038.082917][T18434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1038.082937][T18434] Call Trace: [ 1038.082949][T18434] [ 1038.082962][T18434] dump_stack_lvl+0x16c/0x1f0 [ 1038.083009][T18434] should_fail_ex+0x512/0x640 [ 1038.083053][T18434] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1038.083106][T18434] should_failslab+0xc2/0x120 [ 1038.083151][T18434] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1038.083217][T18434] ? __pfx_proc_create_data+0x10/0x10 [ 1038.083269][T18434] ? cache_create_net+0x2b/0x220 [ 1038.083308][T18434] kmemdup_noprof+0x29/0x60 [ 1038.083348][T18434] cache_create_net+0x2b/0x220 [ 1038.083385][T18434] nfsd_idmap_init+0x11f/0x250 [ 1038.083431][T18434] ? __pfx_nfsd_net_init+0x10/0x10 [ 1038.083467][T18434] nfsd_net_init+0x69/0x3d0 [ 1038.083495][T18434] ? __pfx_nfsd_net_init+0x10/0x10 [ 1038.083521][T18434] ops_init+0x1e2/0x5f0 [ 1038.083557][T18434] setup_net+0x10f/0x380 [ 1038.083588][T18434] ? lockdep_init_map_type+0x5c/0x280 [ 1038.083621][T18434] ? __pfx_setup_net+0x10/0x10 [ 1038.083654][T18434] ? debug_mutex_init+0x37/0x70 [ 1038.083681][T18434] copy_net_ns+0x2a6/0x5f0 [ 1038.083718][T18434] create_new_namespaces+0x3ea/0xa90 [ 1038.083771][T18434] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1038.083802][T18434] ksys_unshare+0x45b/0xa40 [ 1038.083844][T18434] ? __pfx_ksys_unshare+0x10/0x10 [ 1038.083879][T18434] ? xfd_validate_state+0x61/0x180 [ 1038.083923][T18434] __x64_sys_unshare+0x31/0x40 [ 1038.083956][T18434] do_syscall_64+0xcd/0x490 [ 1038.083989][T18434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.084013][T18434] RIP: 0033:0x7f837438ebe9 [ 1038.084034][T18434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.084057][T18434] RSP: 002b:00007f83751e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1038.084079][T18434] RAX: ffffffffffffffda RBX: 00007f83745b5fa0 RCX: 00007f837438ebe9 [ 1038.084095][T18434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1038.084109][T18434] RBP: 00007f8374411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1038.084123][T18434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.084137][T18434] R13: 00007f83745b6038 R14: 00007f83745b5fa0 R15: 00007ffd217a84a8 [ 1038.084167][T18434] [ 1042.240926][T18490] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1048.824052][T18577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2044'. [ 1048.882588][T18577] netlink: 'syz.2.2044': attribute type 1 has an invalid length. [ 1048.891458][T18577] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2044'. [ 1050.402559][T18580] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1052.425759][T18612] netlink: zone id is out of range [ 1052.430936][T18612] netlink: zone id is out of range [ 1052.436388][T18612] netlink: zone id is out of range [ 1052.441701][T18612] netlink: zone id is out of range [ 1052.446977][T18612] netlink: zone id is out of range [ 1052.452265][T18612] netlink: zone id is out of range [ 1052.457689][T18612] netlink: zone id is out of range [ 1052.463046][T18612] netlink: zone id is out of range [ 1052.469292][T18612] netlink: zone id is out of range [ 1052.474497][T18612] netlink: zone id is out of range [ 1053.350523][T18610] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1055.981956][T18659] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1057.905348][T18677] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1059.565580][T18697] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1060.629011][ T31] audit: type=1806 audit(1755016570.053:12): xattr="." res=0 [ 1060.912394][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.919060][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1062.191136][T18742] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1063.772952][T18766] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1064.818742][T18780] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1066.635374][T18352] Process accounting paused [ 1069.248226][T18840] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1069.939861][T18849] bridge0: port 3(team0) entered blocking state [ 1069.946612][T18849] bridge0: port 3(team0) entered disabled state [ 1069.953634][T18849] team0: entered allmulticast mode [ 1069.959226][T18849] team_slave_0: entered allmulticast mode [ 1069.965649][T18849] team_slave_1: entered allmulticast mode [ 1069.973041][T18849] team0: entered promiscuous mode [ 1069.978212][T18849] team_slave_0: entered promiscuous mode [ 1069.984319][T18849] team_slave_1: entered promiscuous mode [ 1069.993743][T18849] bridge0: port 3(team0) entered blocking state [ 1070.000410][T18849] bridge0: port 3(team0) entered listening state [ 1070.855055][T18838] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1072.305994][T18880] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1077.906188][T18931] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1079.777587][T18962] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1081.607632][T18980] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1082.568860][T18993] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1084.727481][T19028] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1085.104162][ C1] bridge0: port 3(team0) entered learning state [ 1087.049067][T19063] FAULT_INJECTION: forcing a failure. [ 1087.049067][T19063] name failslab, interval 1, probability 0, space 0, times 0 [ 1087.065053][T19063] CPU: 0 UID: 0 PID: 19063 Comm: syz.2.2121 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 1087.065102][T19063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1087.065122][T19063] Call Trace: [ 1087.065132][T19063] [ 1087.065144][T19063] dump_stack_lvl+0x16c/0x1f0 [ 1087.065190][T19063] should_fail_ex+0x512/0x640 [ 1087.065232][T19063] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1087.065272][T19063] should_failslab+0xc2/0x120 [ 1087.065316][T19063] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1087.065349][T19063] ? __pfx_down_write+0x10/0x10 [ 1087.065402][T19063] ? assoc_array_clear+0x75/0x200 [ 1087.065439][T19063] assoc_array_clear+0x75/0x200 [ 1087.065471][T19063] keyring_clear+0xb2/0x270 [ 1087.065525][T19063] ? __pfx_keyring_clear+0x10/0x10 [ 1087.065573][T19063] ? __pfx___rseq_handle_notify_resume+0x10/0x10 [ 1087.065623][T19063] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 1087.065675][T19063] keyctl_keyring_clear+0xd3/0x1a0 [ 1087.065709][T19063] __do_sys_keyctl+0x355/0x590 [ 1087.065748][T19063] do_syscall_64+0xcd/0x490 [ 1087.065792][T19063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.065824][T19063] RIP: 0033:0x7f837438ebe9 [ 1087.065851][T19063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.065884][T19063] RSP: 002b:00007f83751e8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1087.065917][T19063] RAX: ffffffffffffffda RBX: 00007f83745b5fa0 RCX: 00007f837438ebe9 [ 1087.065939][T19063] RDX: 0000000000000002 RSI: 00000000fffffffb RDI: 0000000000000007 [ 1087.065960][T19063] RBP: 00007f8374411e19 R08: 0000000000000008 R09: 0000000000000000 [ 1087.065980][T19063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.066000][T19063] R13: 00007f83745b6038 R14: 00007f83745b5fa0 R15: 00007ffd217a84a8 [ 1087.066043][T19063] [ 1087.079581][T19060] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1087.863818][T19071] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1091.349121][T19107] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1093.761048][T19139] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1094.029346][T19150] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1095.340716][T19164] random: crng reseeded on system resumption [ 1097.111970][T19185] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1099.974499][T19204] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1100.332339][T19182] Process accounting resumed [ 1100.383316][ C1] bridge0: port 3(team0) entered forwarding state [ 1100.389845][ C1] bridge0: topology change detected, propagating [ 1100.691914][T19221] random: crng reseeded on system resumption [ 1103.336828][T19262] 0x000200000001-0xa29656a63616329 : "" [ 1103.343676][T19262] mtd: partition "" is out of reach -- disabled [ 1103.361220][T19262] ftl_cs: FTL header not found. [ 1103.992565][T19270] FAULT_INJECTION: forcing a failure. [ 1103.992565][T19270] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.037277][T19270] CPU: 0 UID: 0 PID: 19270 Comm: syz.0.2156 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 1104.037327][T19270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1104.037348][T19270] Call Trace: [ 1104.037359][T19270] [ 1104.037372][T19270] dump_stack_lvl+0x16c/0x1f0 [ 1104.037420][T19270] should_fail_ex+0x512/0x640 [ 1104.037466][T19270] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1104.037513][T19270] should_failslab+0xc2/0x120 [ 1104.037557][T19270] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1104.037600][T19270] ? alloc_unbound_pwq+0x3ff/0xe10 [ 1104.037644][T19270] alloc_unbound_pwq+0x3ff/0xe10 [ 1104.037693][T19270] apply_wqattrs_prepare+0x8a0/0xbd0 [ 1104.037748][T19270] workqueue_apply_unbound_cpumask+0x17e/0x4f0 [ 1104.037793][T19270] ? __pfx_workqueue_apply_unbound_cpumask+0x10/0x10 [ 1104.037841][T19270] ? bitmap_parse+0x327/0x410 [ 1104.037887][T19270] cpumask_store+0x1ad/0x220 [ 1104.037924][T19270] ? __pfx_cpumask_store+0x10/0x10 [ 1104.037960][T19270] ? find_held_lock+0x2b/0x80 [ 1104.037995][T19270] ? sysfs_file_kobj+0xe4/0x290 [ 1104.038034][T19270] ? __pfx_cpumask_store+0x10/0x10 [ 1104.038068][T19270] dev_attr_store+0x58/0x80 [ 1104.038116][T19270] ? __pfx_dev_attr_store+0x10/0x10 [ 1104.038163][T19270] sysfs_kf_write+0xef/0x150 [ 1104.038202][T19270] kernfs_fop_write_iter+0x351/0x510 [ 1104.038232][T19270] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1104.038273][T19270] vfs_write+0x7d0/0x11d0 [ 1104.038315][T19270] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1104.038350][T19270] ? __pfx___mutex_lock+0x10/0x10 [ 1104.038393][T19270] ? __pfx_vfs_write+0x10/0x10 [ 1104.038452][T19270] ksys_write+0x12a/0x250 [ 1104.038485][T19270] ? __pfx_ksys_write+0x10/0x10 [ 1104.038530][T19270] do_syscall_64+0xcd/0x490 [ 1104.038569][T19270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.038600][T19270] RIP: 0033:0x7f4ca858ebe9 [ 1104.038623][T19270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.038652][T19270] RSP: 002b:00007f4ca94b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1104.038680][T19270] RAX: ffffffffffffffda RBX: 00007f4ca87b5fa0 RCX: 00007f4ca858ebe9 [ 1104.038701][T19270] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000004 [ 1104.038719][T19270] RBP: 00007f4ca8611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1104.038737][T19270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.038755][T19270] R13: 00007f4ca87b6038 R14: 00007f4ca87b5fa0 R15: 00007ffc7156f3d8 [ 1104.038794][T19270] [ 1104.997332][T19279] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1105.748333][T19282] random: crng reseeded on system resumption [ 1109.358501][T19339] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1112.047728][T19354] vivid-009: ================= START STATUS ================= [ 1112.055685][T19354] vivid-009: Enable Output Cropping: true grabbed [ 1112.081061][T19354] vivid-009: Enable Output Composing: true grabbed [ 1112.088908][T19354] vivid-009: Enable Output Scaler: true grabbed [ 1112.098034][T19354] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 1112.118750][T19354] vivid-009: Transmit Mode: HDMI grabbed [ 1112.130545][T19354] vivid-009: Hotplug Present: 0x00000000 [ 1112.144067][T19354] vivid-009: RxSense Present: 0x00000000 [ 1112.149931][T19354] vivid-009: EDID Present: 0x00000000 [ 1112.168801][T19354] vivid-009: ================== END STATUS ================== [ 1112.173662][T19361] block nbd7: not configured, cannot reconfigure [ 1112.311568][T19357] nbd: nbd7 already in use [ 1113.615895][T19376] random: crng reseeded on system resumption [ 1113.716085][T19362] kafs: addr_prefs: Too many elements in string [ 1114.078608][T19369] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2172'. [ 1114.782127][T19381] can: request_module (can-proto-3) failed. [ 1115.842222][T19398] busy [ 1117.147125][T19414] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1117.203356][T19408] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1122.034933][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.041611][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.370332][T19476] snd_aloop snd_aloop.0: control 16781581:65539:6:'x?F/zF˷fC:0 is already present [ 1124.482083][T19489] FAULT_INJECTION: forcing a failure. [ 1124.482083][T19489] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.542559][T19489] CPU: 0 UID: 0 PID: 19489 Comm: syz.2.2194 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 1124.542609][T19489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1124.542630][T19489] Call Trace: [ 1124.542642][T19489] [ 1124.542655][T19489] dump_stack_lvl+0x16c/0x1f0 [ 1124.542705][T19489] should_fail_ex+0x512/0x640 [ 1124.542751][T19489] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1124.542796][T19489] should_failslab+0xc2/0x120 [ 1124.542842][T19489] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1124.542883][T19489] ? rcu_is_watching+0x12/0xc0 [ 1124.542915][T19489] ? key_alloc+0x3e0/0x1330 [ 1124.542963][T19489] key_alloc+0x3e0/0x1330 [ 1124.543028][T19489] ? __pfx_key_alloc+0x10/0x10 [ 1124.543084][T19489] keyring_alloc+0x44/0xc0 [ 1124.543136][T19489] install_session_keyring_to_cred+0x190/0x230 [ 1124.543183][T19489] join_session_keyring+0x1b8/0x340 [ 1124.543225][T19489] lookup_user_key+0x576/0x1300 [ 1124.543269][T19489] ? __pfx_lookup_user_key+0x10/0x10 [ 1124.543309][T19489] ? find_held_lock+0x2b/0x80 [ 1124.543344][T19489] ? setid_policy_lookup+0x10c/0x350 [ 1124.543400][T19489] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1124.543450][T19489] ? bpf_lsm_capable+0x9/0x10 [ 1124.543480][T19489] ? security_capable+0x7e/0x260 [ 1124.543517][T19489] keyctl_get_persistent+0x1a5/0x8c0 [ 1124.543566][T19489] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 1124.543622][T19489] ? __x64_sys_futex+0x1e0/0x4c0 [ 1124.543664][T19489] ? __x64_sys_futex+0x1e9/0x4c0 [ 1124.543708][T19489] ? __fget_files+0x20e/0x3c0 [ 1124.543744][T19489] ? __pfx___x64_sys_futex+0x10/0x10 [ 1124.543798][T19489] __do_sys_keyctl+0x1a9/0x590 [ 1124.543838][T19489] do_syscall_64+0xcd/0x490 [ 1124.543884][T19489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.543919][T19489] RIP: 0033:0x7f837438ebe9 [ 1124.543944][T19489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1124.543978][T19489] RSP: 002b:00007f83751e8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1124.544016][T19489] RAX: ffffffffffffffda RBX: 00007f83745b5fa0 RCX: 00007f837438ebe9 [ 1124.544044][T19489] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000016 [ 1124.544065][T19489] RBP: 00007f8374411e19 R08: 0000000000000001 R09: 0000000000000000 [ 1124.544085][T19489] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 1124.544118][T19489] R13: 00007f83745b6038 R14: 00007f83745b5fa0 R15: 00007ffd217a84a8 [ 1124.544170][T19489] [ 1127.187029][T19516] ptp ptp0: delete virtual clock ptp3 [ 1127.422974][T19516] [ 1127.425448][T19516] ====================================================== [ 1127.432479][T19516] WARNING: possible circular locking dependency detected [ 1127.439535][T19516] 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 Not tainted [ 1127.446846][T19516] ------------------------------------------------------ [ 1127.453911][T19516] syz.0.2197/19516 is trying to acquire lock: [ 1127.460284][T19516] ffff888142fbe130 (&clk->rwsem){++++}-{4:4}, at: posix_clock_unregister+0x4d/0xd0 [ 1127.469648][T19516] [ 1127.469648][T19516] but task is already holding lock: [ 1127.477057][T19516] ffff88802fdec870 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0 [ 1127.486608][T19516] [ 1127.486608][T19516] which lock already depends on the new lock. [ 1127.486608][T19516] [ 1127.502228][T19516] [ 1127.502228][T19516] the existing dependency chain (in reverse order) is: [ 1127.511535][T19516] [ 1127.511535][T19516] -> #1 (&ptp->n_vclocks_mux){+.+.}-{4:4}: [ 1127.519605][T19516] __mutex_lock+0x193/0x10b0 [ 1127.524774][T19516] ptp_clock_adjtime+0x527/0x760 [ 1127.530417][T19516] pc_clock_adjtime+0x118/0x1e0 [ 1127.535911][T19516] __do_sys_clock_adjtime+0x175/0x290 [ 1127.541854][T19516] do_syscall_64+0xcd/0x490 [ 1127.546930][T19516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.553384][T19516] [ 1127.553384][T19516] -> #0 (&clk->rwsem){++++}-{4:4}: [ 1127.560917][T19516] __lock_acquire+0x12a6/0x1ce0 [ 1127.566345][T19516] lock_acquire+0x179/0x350 [ 1127.571407][T19516] down_write+0x92/0x200 [ 1127.576212][T19516] posix_clock_unregister+0x4d/0xd0 [ 1127.582051][T19516] ptp_clock_unregister+0x14f/0x250 [ 1127.587986][T19516] ptp_vclock_unregister+0x11a/0x160 [ 1127.593924][T19516] unregister_vclock+0x108/0x1a0 [ 1127.599470][T19516] device_for_each_child_reverse+0x133/0x1a0 [ 1127.606094][T19516] n_vclocks_store+0x4b6/0x6d0 [ 1127.611407][T19516] dev_attr_store+0x58/0x80 [ 1127.616533][T19516] sysfs_kf_write+0xef/0x150 [ 1127.621669][T19516] kernfs_fop_write_iter+0x351/0x510 [ 1127.627593][T19516] vfs_write+0x7d0/0x11d0 [ 1127.632507][T19516] ksys_write+0x12a/0x250 [ 1127.637404][T19516] do_syscall_64+0xcd/0x490 [ 1127.642501][T19516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.649054][T19516] [ 1127.649054][T19516] other info that might help us debug this: [ 1127.649054][T19516] [ 1127.659696][T19516] Possible unsafe locking scenario: [ 1127.659696][T19516] [ 1127.667177][T19516] CPU0 CPU1 [ 1127.672612][T19516] ---- ---- [ 1127.678120][T19516] lock(&ptp->n_vclocks_mux); [ 1127.682925][T19516] lock(&clk->rwsem); [ 1127.689557][T19516] lock(&ptp->n_vclocks_mux); [ 1127.696975][T19516] lock(&clk->rwsem); [ 1127.701291][T19516] [ 1127.701291][T19516] *** DEADLOCK *** [ 1127.701291][T19516] [ 1127.709457][T19516] 5 locks held by syz.0.2197/19516: [ 1127.714692][T19516] #0: ffff88802598c9b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1127.723810][T19516] #1: ffff8880351f0428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1127.733118][T19516] #2: ffff8880308f0c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 1127.743051][T19516] #3: ffff88802fd6f3c8 (kn->active#96){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 1127.753316][T19516] #4: ffff88802fdec870 (&ptp->n_vclocks_mux){+.+.}-{4:4}, at: n_vclocks_store+0xf1/0x6d0 [ 1127.763649][T19516] [ 1127.763649][T19516] stack backtrace: [ 1127.769564][T19516] CPU: 1 UID: 0 PID: 19516 Comm: syz.0.2197 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 1127.769602][T19516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1127.769619][T19516] Call Trace: [ 1127.769636][T19516] [ 1127.769647][T19516] dump_stack_lvl+0x116/0x1f0 [ 1127.769685][T19516] print_circular_bug+0x275/0x350 [ 1127.769722][T19516] check_noncircular+0x14c/0x170 [ 1127.769760][T19516] __lock_acquire+0x12a6/0x1ce0 [ 1127.769801][T19516] lock_acquire+0x179/0x350 [ 1127.769835][T19516] ? posix_clock_unregister+0x4d/0xd0 [ 1127.769868][T19516] ? __pfx___might_resched+0x10/0x10 [ 1127.769896][T19516] ? cdev_default_release+0x35/0x50 [ 1127.769932][T19516] down_write+0x92/0x200 [ 1127.769968][T19516] ? posix_clock_unregister+0x4d/0xd0 [ 1127.769998][T19516] ? __pfx_down_write+0x10/0x10 [ 1127.770035][T19516] ? kobject_put+0x210/0x5a0 [ 1127.770072][T19516] posix_clock_unregister+0x4d/0xd0 [ 1127.770104][T19516] ptp_clock_unregister+0x14f/0x250 [ 1127.770149][T19516] ptp_vclock_unregister+0x11a/0x160 [ 1127.770182][T19516] unregister_vclock+0x108/0x1a0 [ 1127.770210][T19516] ? __pfx_unregister_vclock+0x10/0x10 [ 1127.770237][T19516] device_for_each_child_reverse+0x133/0x1a0 [ 1127.770271][T19516] ? __pfx_device_for_each_child_reverse+0x10/0x10 [ 1127.770302][T19516] ? __pfx_kstrtouint+0x10/0x10 [ 1127.770338][T19516] n_vclocks_store+0x4b6/0x6d0 [ 1127.770368][T19516] ? __pfx_n_vclocks_store+0x10/0x10 [ 1127.770415][T19516] ? find_held_lock+0x2b/0x80 [ 1127.770442][T19516] ? __pfx_n_vclocks_store+0x10/0x10 [ 1127.770469][T19516] dev_attr_store+0x58/0x80 [ 1127.770508][T19516] ? __pfx_dev_attr_store+0x10/0x10 [ 1127.770547][T19516] sysfs_kf_write+0xef/0x150 [ 1127.770578][T19516] kernfs_fop_write_iter+0x351/0x510 [ 1127.770603][T19516] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1127.770640][T19516] vfs_write+0x7d0/0x11d0 [ 1127.770671][T19516] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1127.770699][T19516] ? __pfx___mutex_lock+0x10/0x10 [ 1127.770735][T19516] ? __pfx_vfs_write+0x10/0x10 [ 1127.770780][T19516] ksys_write+0x12a/0x250 [ 1127.770813][T19516] ? __pfx_ksys_write+0x10/0x10 [ 1127.770852][T19516] do_syscall_64+0xcd/0x490 [ 1127.770888][T19516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.770916][T19516] RIP: 0033:0x7f4ca858ebe9 [ 1127.770937][T19516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1127.770964][T19516] RSP: 002b:00007f4ca94b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1127.770989][T19516] RAX: ffffffffffffffda RBX: 00007f4ca87b5fa0 RCX: 00007f4ca858ebe9 [ 1127.771008][T19516] RDX: 0000000000080001 RSI: 00002000000003c0 RDI: 0000000000000006 [ 1127.771025][T19516] RBP: 00007f4ca8611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1127.771041][T19516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1127.771057][T19516] R13: 00007f4ca87b6038 R14: 00007f4ca87b5fa0 R15: 00007ffc7156f3d8 [ 1127.771083][T19516] [ 1128.504373][T19516] ptp ptp0: delete virtual clock ptp2 [ 1128.819037][T19516] ptp ptp0: delete virtual clock ptp1 [ 1128.924242][T19516] ptp ptp0: only physical clock in use now