last executing test programs: 5m31.541638518s ago: executing program 1 (id=499): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0ro\x00', 0x402000, 0x0) madvise$auto(0xf0be, 0x9, 0x9) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c030000000000002106000000000000005f6bba441810", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x88, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SUPPORTED_SELECTORS={0x73, 0x14e, "92ab50807f339a175d9ea8edc53715eea8e3f75f35c31c011313fc3c5ef6f9f17f10db75caeaba014b6746e77f523a255951c91ee5e1876eb5455eb8d6a106db366fd1e40727d10e04d422d35b66316819ccb3c33702fed9af11a1a17c78efc636e7f3c98474ce3b2ae9e2aac28fe0"}]}, 0x88}}, 0x8800) 5m31.435222081s ago: executing program 1 (id=500): madvise$auto(0x0, 0xffffffffffff0005, 0x19) 5m31.153201878s ago: executing program 1 (id=502): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80c80, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000e1, 0xeb1, 0x401, 0x7ffc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x2, 0x2, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0xdd, r0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x1aba42, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/sit0/regen_max_retry\x00', 0x800, 0x0) read$auto(r1, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) 5m30.783133288s ago: executing program 1 (id=505): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r0, 0x0) (async) init_module$auto(0x0, 0xffff9, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x8000000000000000, 0x15) (async) r1 = socketpair$auto(0xb, 0x2, 0xfffffff9, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001840), r2) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r2, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYBLOB="114c7d35be22f4e6b37f80afc3835d3d97e73c20e74ef5180abba61345d432f3f82800a86ae8764d9a43b2f07322f0bf36b6b0627cf36558fa619b7b48fc17972e600be96360e41fdd7652ecd41a6bd62287206e8e8209584f454d8808639abdafd23ab16a1c8aede62b7d917b86b5599d3fcaeca8ad4dc162ca019b7c64a911e08fcdec259909367ed8a41ba448e046641fe860f4664a25a0f1d37f07c72dee4a91b7cc45118fdfe64888b98e900ee188640191532f890a0c8f0ddb5bc605dfea35bc7c358481c74d1738f925de81ccfc81d6def395451b3e08b12413d06cbd3595c9", @ANYBLOB="090f2abd7000fddbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x10090}, 0x0) (async) sendmsg$auto_NL802154_CMD_ASSOCIATE(r1, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4c000}, 0x40408d5) (async) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20942, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)) (async) gettid() write$auto_snd_pcm_oss_f_reg_pcm_oss(r4, &(0x7f0000000080)="c2", 0x1) (async) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0xfffffffffffffffc) (async) madvise$auto(0x0, 0x2000000080000001, 0x9ffc) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x141b80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) (async) bind$auto(0x3, &(0x7f0000000040)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, 0x6a) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0xfffffffffffffff9, 0x0, 0x2, 0xb}, 0x45}, 0x5, 0x311) io_uring_setup$auto(0x1, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x45, 0x40000000007) (async) semctl$auto_GETPID(0xb3fb, 0x1, 0xb, 0x400) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfs\x00', 0x20000, 0x0) 5m27.096109936s ago: executing program 1 (id=515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYRESOCT=r0, @ANYRES64=0x0, @ANYBLOB="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", @ANYRESDEC=r1, @ANYRESDEC=r1], 0x248}, 0x1, 0x0, 0x0, 0x200400c0}, 0x8018880) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x4, 0x7, 0x5, 0xeb1, 0x401, 0x6) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) r3 = openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) read$auto_tk_debug_sleep_time_fops_(r3, &(0x7f00000000c0)=""/124, 0x7c) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mlockall$auto(0x6) brk$auto(0x7fffffffafff) brk$auto(0x7fffffffefff) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(r4, 0xffffffff, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4188aea7, &(0x7f0000000100)={0x2, 0x0, [{0x0, 0x5, 0x9}]}) 5m26.014538801s ago: executing program 1 (id=516): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) r1 = socket(0x21, 0x2, 0xfffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0x6}, 0x1, 0x9) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)=""/9, 0x9) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd3\x00', 0x40000, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0x6}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) rename$auto(&(0x7f0000000140)='.\x00', &(0x7f0000000240)='./file0\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/vlan/config\x00', 0x41900, 0x0) 5m10.735785169s ago: executing program 32 (id=516): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) r1 = socket(0x21, 0x2, 0xfffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(r1, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0x6}, 0x1, 0x9) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0xfffffe36) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040)=""/9, 0x9) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd3\x00', 0x40000, 0x0) ioctl$auto_BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0x6}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) rename$auto(&(0x7f0000000140)='.\x00', &(0x7f0000000240)='./file0\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/vlan/config\x00', 0x41900, 0x0) 7.283067793s ago: executing program 4 (id=1501): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x106) userfaultfd$auto(0x5) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/rxrpc/locals\x00', 0x40080, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8000e, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x4, 0xf, 0x1, 0x958b, 0x2, 0x8, 0x5, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x4, 0x10000]}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/modalias\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000840)="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", 0xbc0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x5609, r5) write$auto(r2, 0x0, 0x4) sysfs$auto(0x2, 0x16, 0x0) r6 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000001040), 0x880, 0x0) close_range$auto(0xffffffffffffffff, r6, 0x80000001) rseq$auto(&(0x7f0000000840)={0xa, 0x9, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) 5.291509125s ago: executing program 4 (id=1512): mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000008c0)=""/61, 0x3d) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/module/parameters/sig_enforce\x00', 0x2402, 0x0) mmap$auto(0x7, 0x400000000000008, 0x2, 0x17, 0x2, 0x4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x2, 0xf9bb, 0x8000000000df, 0x9b72, 0x2, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop9\x00', 0x147202, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r4 = memfd_create$auto(0x0, 0xe) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000280)='//\xf2\x00', 0x80000000) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) mmap$auto(0x6, 0x2, 0xdf, 0xeb1, r5, 0x2) r6 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'geneve1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'veth0_to_batadv\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="200027bd7000fbdbdfec256d00000008000100", @ANYRES32=r8, @ANYBLOB="0c00040080000000000000000c000400030000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c0004007fffffffffffffff08000100", @ANYRES32=r9, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) 5.143966583s ago: executing program 0 (id=1513): mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) r0 = socket(0x1a, 0x4, 0x2) setsockopt$auto(r0, 0x114, 0x8, 0x0, 0x4) mmap$auto(0x1, 0x4, 0x7ff, 0x8000012, 0xffffffffffffffff, 0x4006) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) bpf$auto(0x9, &(0x7f00000000c0)=@link_update={r1, @new_prog_fd, 0x6}, 0x800003) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f00000000c0)) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x6, 0x20009, 0x6, 0xeb1, 0x401, 0x4) unshare$auto(0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x0, 0x1, 0x0, 0x1e) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0xb, 0xc45d, 0x9, 0x1, 0x3, 0x100000000000002, 0x0, 0x0, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000809, 0x0, 0x8]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto(r4, 0x5523, r4) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/etherd/discover\x00', 0x80101, 0x0) setresuid$auto(0x2, 0x7, 0x0) setfsuid$auto(0x0) madvise$auto(0x80000000, 0xffffffffffff0005, 0x19) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) 4.944839641s ago: executing program 2 (id=1516): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/traceSMB\x00', 0x2a4742, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000280)=""/175, 0xaf) close_range$auto(r1, 0xfffffffffffff000, 0x2) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4040ae79, 0x38) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) 4.480218443s ago: executing program 2 (id=1517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf2502000000080001004a000000090004006e66736400000000"], 0x28}}, 0x4000) 4.279613137s ago: executing program 2 (id=1518): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x8000}, 0x54) prctl$auto(0x5, 0x1, 0x0, 0x200001, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/cgroup\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xdd, 0x8000) r1 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101800, 0x74) prctl$auto_PR_GET_TSC(0x19, 0x40, 0x1, 0x8, 0x45) read$auto(r1, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) fchdir$auto(r0) mkdir$auto(0x0, 0x3) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2cb8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x1c9) socket(0x1d, 0x2, 0x6) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.047102224s ago: executing program 0 (id=1519): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_hda_intel/parameters/bdl_pos_adj\x00', 0x80102, 0x0) sendfile$auto(r0, r0, 0x0, 0x4000000007) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) socket(0x22, 0x3, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x80059, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x8, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0xd}, {0xff, 0x1, 0x52, 0x9a0, 0x1, 0x40, 0x4, 0x8, 0x100000002}}) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000080)=""/228, 0xe4) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x4800, 0x0) 3.551027464s ago: executing program 4 (id=1521): mmap$auto(0x0, 0x5f, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy6/aql_enable\x00', 0x2481, 0x0) mmap$auto(0x0, 0x1000000000000004, 0x9, 0x91, 0xffffffffffffffff, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) prctl$auto(0x801, 0x1, 0x0, 0x3, 0xfffffffffffffffb) r0 = socket(0x2, 0x1, 0x106) connect$auto(r0, &(0x7f0000000040)=@in={0x2, 0x20, @remote}, 0x5) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x300000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x61f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x60}}, 0x4000) socket(0x22, 0x80000, 0x2) setsockopt$auto(0x7, 0x114, 0x3, 0xffffffffffffffff, 0xa0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) pwrite64$auto(r1, 0x0, 0x4, 0x4200000000000005) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket(0x22, 0x1, 0x80000000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) pwritev$auto(0x3, 0x0, 0x5, 0x3, 0x9) 2.439273261s ago: executing program 3 (id=1522): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/ad_actor_sys_prio\x00', 0x942, 0x0) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) mmap$auto(0x0, 0x2a, 0xd, 0x9b72, 0x1000, 0x6) close_range$auto(r0, r0, 0x0) r1 = socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x10000009, 0x2, 0x6, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES32=r1, @ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20000045) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x5) mkdir$auto(&(0x7f0000000480)='}[,&*}\x00', 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_mark$auto(0x0, 0x102, 0x7, 0xffffffffffffffff, 0x0) connect$auto(r0, 0x0, 0x50) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r2, 0x28000) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video26\x00', 0x88000, 0x0) socket(0x1e, 0x1, 0x0) ioctl$auto(0x3, 0xc038563c, 0x38) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x6, 0x2, 0x80000000) sendmmsg$auto(0x3, 0x0, 0x2000004, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) io_uring_setup$auto(0xfff, 0x0) kexec_load$auto(0x5, 0x4, &(0x7f0000000040)={@buf=&(0x7f0000001440)="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", 0x2aa6, 0x27b, 0x6}, 0x4) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) 2.275331566s ago: executing program 0 (id=1523): r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64$auto(r0, 0x0, 0x486, 0xffe) pread64$auto(r0, 0x0, 0x7fff, 0x8) 2.177216759s ago: executing program 3 (id=1524): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) (async) mprotect$auto(0x0, 0x806121, 0x6) pidfd_send_signal$auto(r0, 0x8, &(0x7f0000000000)={@_si_pad}, 0x2) 2.089706542s ago: executing program 0 (id=1525): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000000), 0x7f}, 0x6, 0x0) capget$auto(&(0x7f0000000000)={0x1000, r1}, &(0x7f0000000040)={0xffffffff, 0x7, 0x3}) r2 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000b80)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x2, 0x0) write$auto(r2, 0x0, 0x0) setsockopt$auto_SO_MAX_PACING_RATE(r0, 0x0, 0x2f, 0x0, 0x1) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) 2.059135228s ago: executing program 2 (id=1526): socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xf, 0x3, 0x2) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket(0x2, 0x2, 0x0) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x5, 0x3000, 0x0, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x0, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) (async) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/cmdline\x00', 0x481, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) (async) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) (async) socket(0xa, 0x5, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=0x0}}}, 0x3, &(0x7f0000000340)={{0xc, 0x5}, {0xa, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x3, 0x101, 0x8}) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r4, 0x0, 0x8, 0x7fff) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000440)={{@inferred=r3, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4"}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) (async) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000580)="2663d1edab6f5b3b4c5f80120c601ef6c15b03a851ae9817e51ce43d182556d00a9e420748561f9c5e9f2d6de5f94dd5f22cad53b6cbfebc7490420ae8503b36f51f534d09b4e12377029986bb36eee16caf256e9fda469acce7f751fc4770e5") openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0xffffffff, 0x830004, 0x2, 0x8000000008011, r0, 0x8000) 1.927534453s ago: executing program 0 (id=1527): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) faccessat2$auto(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc, 0xfffffffd) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) socket(0x22, 0x3, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='\x00'/12, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x80059, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x4000005, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0xd}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000080)=""/228, 0xe4) futex$auto(0x0, 0x5, 0x0, 0x0, 0x0, 0xa0000001) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.838530743s ago: executing program 3 (id=1528): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x109c01, 0x0) ioctl$auto(r0, 0x92106411, 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x801, 0x6) setsockopt$auto(r2, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop13\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r3, &(0x7f0000000040)={0x0, 0x1c00, &(0x7f00000013c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf25020000000800010089000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8000b) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xffffffffffffffff, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$auto_SO_OOBINLINE(r5, 0x80000001, 0xa, &(0x7f0000000080)=',\x00', 0xbffffffc) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000001c0), 0x82200, 0x0) pread64$auto(r6, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/dummy_hcd.3/power/runtime_active_time\x00', 0xe000, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) 1.667052264s ago: executing program 4 (id=1529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = set_tid_address$auto(0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01000000", @ANYRES16=r1, @ANYBLOB="1b0026bd7000fcdbdf2503000000040003800400028012000100898035000000000000000000000000000c00038008000600", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004800) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x2, 0xb) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x100) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x7, 0x203, 0x0, 0x6, 0x5, 0x3, 0xc, 0x2000000000000002, 0x9, 0xc, 0x400000000ff, 0xa, 0x80004, 0xaab, 0x5, 0x7]}, 0x0, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USB_RAW_IOCTL_EP_SET_WEDGE(r4, 0x4004550f, &(0x7f0000000180)) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) 1.136619907s ago: executing program 2 (id=1530): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x3, 0x100) sysfs$auto(0x2, 0x4c, 0x0) fsopen$auto(0x0, 0x1) socket(0x2, 0x5, 0x0) r0 = socket(0x10, 0x2, 0x0) setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x16) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24}, 0x68) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xb, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x511081, 0x4) 932.867462ms ago: executing program 2 (id=1531): mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) keyctl$auto(0x1d, 0xfffffffffffffffd, 0x2, 0x628, 0xfffffffffffffffd) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4000002, 0x1, 0x4cf09e9c, 0x3, 0x0) clock_settime$auto(0xfffffffe, 0x0) socket(0x22, 0x1, 0x100) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, 0x0, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000080) r2 = socket(0xa, 0x1, 0x0) r3 = socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0xf, r3, @relative_fd, 0xe600}, 0xf) r6 = getpgid$auto(0x0) getpriority$auto_PRIO_PGRP(0x1, r6) sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x70bd26, 0xf, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x9}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r5}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x10000}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}, @OVS_DP_ATTR_NAME={0x16, 0x1, '/dev/snd/midiC2D0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) syz_genetlink_get_family_id$auto_psample(0x0, 0xffffffffffffffff) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x261c2, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) keyctl$auto_KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0x9, 0x1) ioctl$auto(r7, 0x4b41, 0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x2000000000000, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2e}) 920.378579ms ago: executing program 4 (id=1532): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) setsockopt$auto(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x401) (async) setsockopt$auto(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x401) pipe$auto(0x0) (async) r0 = pipe$auto(0x0) read$auto(r0, 0x0, 0x8000) (async) read$auto(r0, 0x0, 0x8000) r1 = ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f0000000040)=0xc) ioctl$auto_TUNDETACHFILTER(r0, 0x401054d6, &(0x7f0000000180)={0x8000, &(0x7f00000000c0)={0xfff9, 0x9, 0xc8, @inferred=r1}}) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/softirqs\x00', 0x4063c2, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, 0x0, 0xc801) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(0x0, 0x0, &(0x7f0000000100)=0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x10000005, 0xfffffffffffffff9) (async) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x10000005, 0xfffffffffffffff9) clock_nanosleep$auto(0x7, 0x7fff, &(0x7f0000000000)={0x5, 0x5}, 0x0) write$auto(r4, 0x0, 0x81) r5 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mounts\x00', 0xaa080, 0x0) pread64$auto(r5, 0x0, 0x3c02, 0x100007) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getpid() gettid() capget$auto(0x0, 0xfffffffffffffffe) (async) capget$auto(0x0, 0xfffffffffffffffe) 596.658285ms ago: executing program 4 (id=1533): r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64$auto(r0, 0x0, 0x486, 0xffe) pread64$auto(r0, 0x0, 0x7fff, 0x8) (fail_nth: 1) 593.480399ms ago: executing program 3 (id=1534): r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64$auto(r0, 0x0, 0x486, 0xffe) pread64$auto(r0, 0x0, 0x7fff, 0x8) 175.275674ms ago: executing program 3 (id=1535): mmap$auto(0x0, 0x4020009, 0x8003, 0xebe, 0x401, 0x4) (async) mmap$auto(0x0, 0x4020009, 0x8003, 0xebe, 0x401, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x11, 0x3, 0x9) (async) r0 = socket(0x11, 0x3, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) write$auto(r1, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x3ff) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x2000048}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/txpower\x00', 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket(0x11, 0x80003, 0x300) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r3, 0x2, 0x9) ioctl$auto(r2, 0x4604, r2) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000340), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3670400000000000000ba831c1b", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) (async) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000340), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3670400000000000000ba831c1b", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) madvise$auto(0x0, 0x6, 0x2) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0xb1, 0xf3, 0xb0, @raw=0xfffff038}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r0) socket(0x10, 0x2, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0xa6ff, &(0x7f0000000000)={&(0x7f0000000340)="e77511b11ecba8e83df955d7d96d1a9eeae507235b1167689756dd089081418391f3b87c4eefbd1f3aa3926b0f1cb1b67db103bf915edb0b1612db5c5cce4db6", 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) 60.55239ms ago: executing program 0 (id=1536): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x4, 0x1f, 0x7181, 0x1ffdf, 0x7, 0x4, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) dup2$auto(0x0, 0x3) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(r4, 0x3b84, 0x38) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14d50600", @ANYRES16=0x0, @ANYBLOB="010025bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20000045) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1b54}, 0x1, 0x0, 0x0, 0x4000004}, 0x5) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) recvmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x8, 0x0, 0x1, 0x0, 0x1000002, 0x8}, 0x800}, 0x4000005, 0x8, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmmsg$auto(0x3, 0x0, 0x3, 0x2) 0s ago: executing program 3 (id=1537): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x1000000000, 0x20009, 0x4e4, 0x80000100000015, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event\x00', 0x3b9fc3, 0x0) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x169040, 0x0) read$auto_ftrace_subsystem_filter_fops_trace_events(r0, &(0x7f0000000080)=""/130, 0x82) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) quotactl_fd$auto(r1, 0xe2708a07, 0x0, &(0x7f0000000580)="454aed8e634ce41958b51cc2718e8988d0f57409ad614c3d08ac74dcb6806cdea639a9863ea5f798ea06b3a00c7ea9ffe8ffbd2861bb82be29c56b813705a38503adb108e7864ada22071bfefda699a5de88ccacf4a4a9e2a3fd0284a3e6f56fb03d688e8837c034df9672c3c0e06269e16bd3f42b57ef388f082a8d85f5214220229dfe63b2f23a1ef5cd6d591c70897b0c5cf25fb092c8b263180b9c1d61e8aca5adbd31309fffe15d9c5fb65ee61fec85166e46252d2bdf51c029b14695efcc9e79dfd357c58e3536716bd16a33c1e5492912a626f544c02a9cc77a791f362a1e0274c0b4efa8010001b9590246e1c6f198be0cb739a031") migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x8000000000000001, &(0x7f00000007c0)=0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r1, 0x1, 0x21, 0x0, 0x9) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vidtv.0/i2c-0/0-0068/name\x00', 0x18b080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001180)=""/187, 0xbb) read$auto(0x3, 0x0, 0x7ffffffff000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) prctl$auto(0x1000000001c, 0xffffffffffffffff, 0x8, 0x9, 0x80001) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000180)=""/68, 0x44) syz_genetlink_get_family_id$auto_nlbl_unlbl(0x0, r3) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r3, 0x0, 0x20000000) read$auto_full_fops_mem(r3, &(0x7f00000001c0)=""/50, 0x32) pwrite64$auto(0xc8, 0x0, 0x4e, 0x3) shmctl$auto_SHM_STAT(0x81, 0xd, &(0x7f0000000380)={{0xffffffff, 0xffffffffffffffff, 0xee00, 0xb066, 0x5, 0x8, 0x75e7}, 0xe, 0x10000, 0xbc7, 0x7ff, @inferred=0xffffffffffffffff, @inferred, 0xe, 0x0, &(0x7f0000000240)="151c154fafa92dfbcae971a789c31cf017ca56f8b944fc290309308524a1382ff6f2f9fec39ca11473487ed334bba7ab8621c2dabd8d8e70ed22285208f6e00a4e7ad4e40aa07c002674ccd02254c846bccd1509acaa4ec1c65c12d39b1ace8b91393d546dba8b2ac10bdce135e819", &(0x7f00000002c0)="30f2d09e41e135f7a09de4d20416666facf87bb1f771f745d5244901e779baa4281b1051541b9ec46d83dcd115ce32e22cd3086413f8e0b27a707c5764a9f49c8072ea9ccda8f931797df5ddf6ae3b0b0eaaa1433996f820d6bc0364b8af0039bd7eca9e9cb399e8457ccf45effd943b9e48859834b95074b5e677529d8324c198479c2208dd99d0b96fc415d3a126f567ff71a8432cf253725a82c3de9baf02072ed9ea3d720b42"}) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="68040000", @ANYRES16=0x0, @ANYBLOB="0b012bbd7000fddbdf2517000000b4002b800800130005a13961976a7a1016539ab9c352291e45bb681abef0961785aee2c76154dadf8699e7dfe126a5124b3528386708ad0178c1ffed536b62aa577de43ccc90742ec837a3213d2c6186acef42b0f74e495f5a7aa6e578eb397ce3db0d9bd578728302ebe3757caac165e4f6cfa6c55bce56461335e99e97c14db6d3270a8678e0b122ecfc6b8e0d7e07342a02ea3854b45a646be8a07217346f5b584f96a43bf53f17944914196c1f", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="14003000fe80000000000000000000000000000e0101a78009b3511d8ff09df41ded7039e13e1d8342b42223b53e78b77b58b1c6cd8e9b7595f19a928a549683e236bfc7beeaa031265bf61123b103e5281c00881eb0c86308a5900d9c2d539cc09f5c0b39652bc2d79bbfb4c0fae8ca563812be97be704fed36602b2c463212ee30615b1afbbba0d1900a62b28e3a1952411f8893075e3b316c51192cabc2bdcfd631d5910059974b820a2f362a91cd620800d200e000000108005300", @ANYRES32, @ANYBLOB="5100710088a5b336526165ec7fc2896fa3701788758955d15349e921d6380bcff6ea9ec88bec2590330c742ecb3aee0e9caa97ca4c8c5235c8d54dfda27a44eb551d9b2f9d4f0f4c29a19eb475bc54dee9000000000000fd5df97ab585205d5a5f7eab5a8d8f11305433fb59aaba880c6bf2328eb8482ce4c318d85a7cc39169a4a864261648971d55199e2c560af19614c33e386759f2a4d01350d5c2133dc561a1ef8374a739adcac14aaf0304001200000000"], 0x468}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4008000) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              [ 516.059471][T12021] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 syzkaller syzkaller login: [ 516.109064][T12010] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 517.278144][T12039] zero sized request [ 517.278773][T12039] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 519.145475][T12071] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 519.171171][T12078] random: crng reseeded on system resumption [ 519.327838][T12082] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 520.103746][T12085] zswap: compressor not available [ 521.994743][T12136] random: crng reseeded on system resumption [ 522.303275][ T30] audit: type=1326 audit(6051984762.141:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12142 comm="syz.0.1225" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe14bd8ebe9 code=0x0 [ 522.702008][T12156] random: crng reseeded on system resumption [ 522.761927][T12153] usbip-vudc usbip-vudc.0: gadget not bound [ 525.249997][T12190] hub 8-0:1.0: USB hub found [ 525.317060][T12190] hub 8-0:1.0: 1 port detected [ 527.941108][T12188] kexec: Could not allocate control_code_buffer [ 529.246212][T12259] random: crng reseeded on system resumption [ 529.271098][T12259] usbip-vudc usbip-vudc.0: gadget not bound [ 531.331739][T12313] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 532.193488][T12326] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 532.334232][T12321] FAULT_INJECTION: forcing a failure. [ 532.334232][T12321] name failslab, interval 1, probability 0, space 0, times 0 [ 532.358493][T12321] CPU: 0 UID: 0 PID: 12321 Comm: syz.0.1264 Not tainted syzkaller #0 PREEMPT(full) [ 532.358538][T12321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.358554][T12321] Call Trace: [ 532.358564][T12321] [ 532.358576][T12321] dump_stack_lvl+0x16c/0x1f0 [ 532.358623][T12321] should_fail_ex+0x512/0x640 [ 532.358666][T12321] ? __kmalloc_noprof+0xbf/0x510 [ 532.358705][T12321] ? kvm_set_irq_routing+0xf3/0x970 [ 532.358747][T12321] should_failslab+0xc2/0x120 [ 532.358783][T12321] __kmalloc_noprof+0xd2/0x510 [ 532.358840][T12321] kvm_set_irq_routing+0xf3/0x970 [ 532.358887][T12321] ? kvm_ioapic_init+0x445/0x590 [ 532.358927][T12321] kvm_arch_vm_ioctl+0x8e8/0x1860 [ 532.358965][T12321] ? register_lock_class+0x41/0x4c0 [ 532.359002][T12321] ? find_held_lock+0x2b/0x80 [ 532.359032][T12321] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 532.359079][T12321] ? __lock_acquire+0x62e/0x1ce0 [ 532.359129][T12321] ? __lock_acquire+0x62e/0x1ce0 [ 532.359179][T12321] ? __lock_acquire+0x62e/0x1ce0 [ 532.359227][T12321] ? __lock_acquire+0x62e/0x1ce0 [ 532.359291][T12321] ? is_bpf_text_address+0x8a/0x1a0 [ 532.359327][T12321] ? bpf_ksym_find+0x124/0x1c0 [ 532.359355][T12321] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 532.359392][T12321] ? is_bpf_text_address+0x94/0x1a0 [ 532.359430][T12321] ? kernel_text_address+0x8d/0x100 [ 532.359458][T12321] ? __kernel_text_address+0xd/0x40 [ 532.359484][T12321] ? unwind_get_return_address+0x59/0xa0 [ 532.359517][T12321] ? arch_stack_walk+0xa6/0x100 [ 532.359566][T12321] ? stack_trace_save+0x8e/0xc0 [ 532.359599][T12321] ? __pfx_stack_trace_save+0x10/0x10 [ 532.359634][T12321] ? stack_depot_save_flags+0x29/0x9c0 [ 532.359677][T12321] ? __lock_acquire+0xb97/0x1ce0 [ 532.359721][T12321] ? kasan_save_stack+0x42/0x60 [ 532.359755][T12321] ? kasan_save_stack+0x33/0x60 [ 532.359787][T12321] ? kasan_save_track+0x14/0x30 [ 532.359828][T12321] ? kasan_save_free_info+0x3b/0x60 [ 532.359875][T12321] ? __kasan_slab_free+0x60/0x70 [ 532.359909][T12321] ? kfree+0x2b4/0x4d0 [ 532.359944][T12321] kvm_vm_ioctl+0x1a91/0x4000 [ 532.359990][T12321] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 532.360048][T12321] ? kasan_quarantine_put+0x10a/0x240 [ 532.360082][T12321] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.360126][T12321] ? find_held_lock+0x2b/0x80 [ 532.360159][T12321] ? tomoyo_path_number_perm+0x295/0x580 [ 532.360204][T12321] ? tomoyo_path_number_perm+0x18d/0x580 [ 532.360246][T12321] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.360299][T12321] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 532.360348][T12321] ? do_vfs_ioctl+0x128/0x14f0 [ 532.360397][T12321] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 532.360458][T12321] ? find_held_lock+0x2b/0x80 [ 532.360487][T12321] ? hook_file_ioctl_common+0x145/0x410 [ 532.360536][T12321] ? __fget_files+0x20e/0x3c0 [ 532.360573][T12321] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 532.360604][T12321] __x64_sys_ioctl+0x18b/0x210 [ 532.360654][T12321] do_syscall_64+0xcd/0x490 [ 532.360700][T12321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.360732][T12321] RIP: 0033:0x7fe14bd8ebe9 [ 532.360758][T12321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.360788][T12321] RSP: 002b:00007fe14cbdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.360826][T12321] RAX: ffffffffffffffda RBX: 00007fe14bfc6090 RCX: 00007fe14bd8ebe9 [ 532.360847][T12321] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 532.360867][T12321] RBP: 00007fe14be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 532.360885][T12321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.360903][T12321] R13: 00007fe14bfc6128 R14: 00007fe14bfc6090 R15: 00007fff0c70ad98 [ 532.360945][T12321] [ 532.862454][T12333] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 syzkaller syzkaller login: [ 534.147414][T12334] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 535.278254][T12354] Console: switching to colour frame buffer device 128x48 [ 536.758480][T12367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1273'. [ 536.921212][T12367] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.100875][T12367] bridge_slave_1 (unregistering): left allmulticast mode [ 537.139245][T12367] bridge_slave_1 (unregistering): left promiscuous mode [ 537.148111][T12367] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.415747][T12423] random: crng reseeded on system resumption [ 543.408809][T12449] FAULT_INJECTION: forcing a failure. [ 543.408809][T12449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.456528][T12449] CPU: 1 UID: 0 PID: 12449 Comm: syz.2.1286 Not tainted syzkaller #0 PREEMPT(full) [ 543.456571][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 543.456589][T12449] Call Trace: [ 543.456598][T12449] [ 543.456608][T12449] dump_stack_lvl+0x16c/0x1f0 [ 543.456654][T12449] should_fail_ex+0x512/0x640 [ 543.456702][T12449] _copy_from_user+0x2e/0xd0 [ 543.456761][T12449] kstrtouint_from_user+0xd6/0x1d0 [ 543.456799][T12449] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 543.456834][T12449] ? __lock_acquire+0xb97/0x1ce0 [ 543.456902][T12449] proc_fail_nth_write+0x83/0x220 [ 543.456935][T12449] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 543.456976][T12449] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 543.457006][T12449] vfs_write+0x29d/0x11d0 [ 543.457046][T12449] ? __pfx___mutex_lock+0x10/0x10 [ 543.457097][T12449] ? __pfx_vfs_write+0x10/0x10 [ 543.457145][T12449] ? __fget_files+0x20e/0x3c0 [ 543.457193][T12449] ksys_write+0x12a/0x250 [ 543.457228][T12449] ? __pfx_ksys_write+0x10/0x10 [ 543.457277][T12449] do_syscall_64+0xcd/0x490 [ 543.457320][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.457350][T12449] RIP: 0033:0x7f369418d69f [ 543.457375][T12449] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 543.457402][T12449] RSP: 002b:00007f3695020030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 543.457431][T12449] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f369418d69f [ 543.457450][T12449] RDX: 0000000000000001 RSI: 00007f36950200a0 RDI: 0000000000000003 [ 543.457469][T12449] RBP: 00007f3695020090 R08: 0000000000000000 R09: 0000000000000000 [ 543.457486][T12449] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 543.457503][T12449] R13: 00007f36943c6218 R14: 00007f36943c6180 R15: 00007ffd8ef68398 [ 543.457542][T12449] [ 544.638944][T12438] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 544.647159][T12455] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 546.065771][T12474] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 546.291351][T12481] random: crng reseeded on system resumption [ 548.840278][T12514] ======================================================= [ 548.840278][T12514] WARNING: The mand mount option has been deprecated and [ 548.840278][T12514] and is ignored by this kernel. Remove the mand [ 548.840278][T12514] option from the mount to silence this warning. [ 548.840278][T12514] ======================================================= [ 548.879833][T12515] random: crng reseeded on system resumption [ 549.280840][T12517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 549.331208][T12517] netlink: 'syz.0.1302': attribute type 1 has an invalid length. [ 550.897929][T12541] nvme_fabrics: missing parameter 'transport=%s' [ 550.904324][T12541] nvme_fabrics: missing parameter 'nqn=%s' [ 553.080676][T12563] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 553.087422][T12563] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 553.093840][T12563] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 553.117389][T12563] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 554.951330][T11737] Bluetooth: hci2: command 0x0c1a tx timeout [ 555.102616][T11737] Bluetooth: hci1: command 0x0c1a tx timeout [ 555.105843][ T5184] Bluetooth: hci3: command 0x0c1a tx timeout [ 555.179039][ T5184] Bluetooth: hci4: command 0x0c1a tx timeout [ 556.797238][T12615] ima: policy update failed [ 556.900421][ T30] audit: type=1802 audit(6051990940.922:12): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1319" res=0 errno=0 [ 562.129734][T12664] random: crng reseeded on system resumption [ 562.239334][T12664] usbip-vudc usbip-vudc.0: gadget not bound [ 563.217320][T12672] netlink: 'syz.2.1332': attribute type 10 has an invalid length. [ 563.289116][T12672] netlink: 230 bytes leftover after parsing attributes in process `syz.2.1332'. [ 563.409550][T12672] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 564.442718][T12689] random: crng reseeded on system resumption [ 564.910598][T12697] FAULT_INJECTION: forcing a failure. [ 564.910598][T12697] name failslab, interval 1, probability 0, space 0, times 0 [ 564.928021][T12697] CPU: 1 UID: 0 PID: 12697 Comm: syz.3.1336 Not tainted syzkaller #0 PREEMPT(full) [ 564.928063][T12697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.928081][T12697] Call Trace: [ 564.928091][T12697] [ 564.928102][T12697] dump_stack_lvl+0x16c/0x1f0 [ 564.928149][T12697] should_fail_ex+0x512/0x640 [ 564.928188][T12697] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 564.928222][T12697] should_failslab+0xc2/0x120 [ 564.928258][T12697] __kmalloc_cache_noprof+0x6a/0x3e0 [ 564.928292][T12697] ? ipv4_mib_init_net+0x263/0x5f0 [ 564.928329][T12697] ipv4_mib_init_net+0x263/0x5f0 [ 564.928358][T12697] ? __pfx_igmp_net_init+0x10/0x10 [ 564.928389][T12697] ? __pfx_ipv4_mib_init_net+0x10/0x10 [ 564.928415][T12697] ops_init+0x1df/0x5f0 [ 564.928460][T12697] setup_net+0x10f/0x380 [ 564.928495][T12697] ? lockdep_init_map_type+0x5c/0x280 [ 564.928535][T12697] ? __pfx_setup_net+0x10/0x10 [ 564.928575][T12697] ? debug_mutex_init+0x37/0x70 [ 564.928608][T12697] copy_net_ns+0x2a6/0x5f0 [ 564.928664][T12697] create_new_namespaces+0x3ea/0xa90 [ 564.928709][T12697] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 564.928758][T12697] ksys_unshare+0x45b/0xa40 [ 564.928797][T12697] ? __pfx_ksys_unshare+0x10/0x10 [ 564.928852][T12697] __x64_sys_unshare+0x31/0x40 [ 564.928889][T12697] do_syscall_64+0xcd/0x490 [ 564.928923][T12697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.928941][T12697] RIP: 0033:0x7f0fa778ebe9 [ 564.928956][T12697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.928974][T12697] RSP: 002b:00007f0fa864b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 564.928992][T12697] RAX: ffffffffffffffda RBX: 00007f0fa79c6180 RCX: 00007f0fa778ebe9 [ 564.929003][T12697] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 564.929014][T12697] RBP: 00007f0fa7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 564.929024][T12697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.929035][T12697] R13: 00007f0fa79c6218 R14: 00007f0fa79c6180 R15: 00007fffb7e3fbf8 [ 564.929058][T12697] [ 565.901819][T12710] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 566.085319][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.091919][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.615268][T12714] HfR: entered promiscuous mode [ 566.955713][T12719] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 567.185830][T12726] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1345'. [ 567.274884][T12726] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1345'. [ 567.667610][T12284] syz.4.1259 (12284) used greatest stack depth: 18168 bytes left [ 569.857847][ T30] audit: type=1800 audit(6051990953.950:13): pid=12763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1354" name="members" dev="configfs" ino=37694 res=0 errno=0 [ 573.247099][T12796] ptrace attach of "./syz-executor exec"[5859] was attempted by ""[12796] [ 579.517271][T12866] netlink: 'syz.4.1370': attribute type 11 has an invalid length. [ 579.601439][T12866] netlink: 'syz.4.1370': attribute type 11 has an invalid length. [ 579.718740][T12866] netlink: 'syz.4.1370': attribute type 11 has an invalid length. [ 579.726772][T12866] netlink: 'syz.4.1370': attribute type 11 has an invalid length. [ 579.894427][T12872] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 580.446030][T12878] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 580.505764][T12883] i2c i2c-0: Failed to register i2c client card: at 0x01 (-16) [ 581.817839][T12902] i2c i2c-0: new_device: Missing parameters [ 581.947174][T12905] i2c i2c-0: new_device: Missing parameters [ 583.113805][T12923] FAULT_INJECTION: forcing a failure. [ 583.113805][T12923] name failslab, interval 1, probability 0, space 0, times 0 [ 583.157989][T12923] CPU: 0 UID: 0 PID: 12923 Comm: syz.3.1386 Not tainted syzkaller #0 PREEMPT(full) [ 583.158031][T12923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.158049][T12923] Call Trace: [ 583.158059][T12923] [ 583.158070][T12923] dump_stack_lvl+0x16c/0x1f0 [ 583.158116][T12923] should_fail_ex+0x512/0x640 [ 583.158155][T12923] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 583.158195][T12923] should_failslab+0xc2/0x120 [ 583.158234][T12923] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 583.158269][T12923] ? d_instantiate+0x77/0x90 [ 583.158306][T12923] ? alloc_empty_file+0x55/0x1e0 [ 583.158355][T12923] alloc_empty_file+0x55/0x1e0 [ 583.158398][T12923] alloc_file_pseudo+0x13a/0x230 [ 583.158440][T12923] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 583.158482][T12923] ? alloc_fd+0x471/0x7d0 [ 583.158519][T12923] sock_alloc_file+0x50/0x210 [ 583.158560][T12923] __sys_socket+0x1c0/0x260 [ 583.158590][T12923] ? __pfx___sys_socket+0x10/0x10 [ 583.158632][T12923] __x64_sys_socket+0x72/0xb0 [ 583.158660][T12923] ? lockdep_hardirqs_on+0x7c/0x110 [ 583.158706][T12923] do_syscall_64+0xcd/0x490 [ 583.158749][T12923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.158778][T12923] RIP: 0033:0x7f0fa778ebe9 [ 583.158803][T12923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.158831][T12923] RSP: 002b:00007f0fa868d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 583.158861][T12923] RAX: ffffffffffffffda RBX: 00007f0fa79c5fa0 RCX: 00007f0fa778ebe9 [ 583.158881][T12923] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 583.158898][T12923] RBP: 00007f0fa7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 583.158916][T12923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.158934][T12923] R13: 00007f0fa79c6038 R14: 00007f0fa79c5fa0 R15: 00007fffb7e3fbf8 [ 583.158973][T12923] [ 583.989759][T12939] random: crng reseeded on system resumption [ 587.331971][T12986] random: crng reseeded on system resumption [ 587.384476][T12983] usbip-vudc usbip-vudc.0: gadget not bound [ 588.293821][T13004] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 588.391088][T13004] FAULT_INJECTION: forcing a failure. [ 588.391088][T13004] name failslab, interval 1, probability 0, space 0, times 0 [ 588.473788][T13004] CPU: 0 UID: 0 PID: 13004 Comm: syz.0.1401 Not tainted syzkaller #0 PREEMPT(full) [ 588.473830][T13004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 588.473847][T13004] Call Trace: [ 588.473857][T13004] [ 588.473868][T13004] dump_stack_lvl+0x16c/0x1f0 [ 588.473911][T13004] should_fail_ex+0x512/0x640 [ 588.473950][T13004] ? fs_reclaim_acquire+0xae/0x150 [ 588.473997][T13004] should_failslab+0xc2/0x120 [ 588.474033][T13004] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 588.474067][T13004] ? security_inode_alloc+0x3b/0x2b0 [ 588.474105][T13004] security_inode_alloc+0x3b/0x2b0 [ 588.474147][T13004] inode_init_always_gfp+0xce4/0x1030 [ 588.474185][T13004] alloc_inode+0x86/0x240 [ 588.474223][T13004] sock_alloc+0x40/0x280 [ 588.474265][T13004] __sock_create+0xc1/0x8d0 [ 588.474302][T13004] __sys_socket+0x14d/0x260 [ 588.474334][T13004] ? __pfx___sys_socket+0x10/0x10 [ 588.474366][T13004] ? xfd_validate_state+0x61/0x180 [ 588.474407][T13004] ? __pfx___x64_sys_mount+0x10/0x10 [ 588.474455][T13004] __x64_sys_socket+0x72/0xb0 [ 588.474482][T13004] ? lockdep_hardirqs_on+0x7c/0x110 [ 588.474518][T13004] do_syscall_64+0xcd/0x490 [ 588.474559][T13004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.474589][T13004] RIP: 0033:0x7fe14bd8ebe9 [ 588.474612][T13004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.474640][T13004] RSP: 002b:00007fe14cc00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 588.474667][T13004] RAX: ffffffffffffffda RBX: 00007fe14bfc5fa0 RCX: 00007fe14bd8ebe9 [ 588.474687][T13004] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 588.474703][T13004] RBP: 00007fe14be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 588.474731][T13004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.474749][T13004] R13: 00007fe14bfc6038 R14: 00007fe14bfc5fa0 R15: 00007fff0c70ad98 [ 588.474787][T13004] [ 588.474821][T13004] socket: no more sockets [ 588.670168][T13012] random: crng reseeded on system resumption [ 589.505848][T13026] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 589.622452][T13033] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 590.197106][T13024] ima: policy update failed [ 590.201867][ T30] audit: type=1802 audit(6051990974.396:14): pid=13024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1405" res=0 errno=0 [ 590.254325][T13043] random: crng reseeded on system resumption [ 590.341047][T13041] usbip-vudc usbip-vudc.0: gadget not bound [ 591.593813][T13073] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1417'. [ 591.702968][T13077] FAULT_INJECTION: forcing a failure. [ 591.702968][T13077] name failslab, interval 1, probability 0, space 0, times 0 [ 591.748813][T13077] CPU: 0 UID: 0 PID: 13077 Comm: syz.3.1416 Not tainted syzkaller #0 PREEMPT(full) [ 591.748845][T13077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 591.748856][T13077] Call Trace: [ 591.748862][T13077] [ 591.748869][T13077] dump_stack_lvl+0x16c/0x1f0 [ 591.748899][T13077] should_fail_ex+0x512/0x640 [ 591.748924][T13077] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 591.748946][T13077] should_failslab+0xc2/0x120 [ 591.748978][T13077] __kmalloc_cache_noprof+0x6a/0x3e0 [ 591.748996][T13077] ? find_held_lock+0x2b/0x80 [ 591.749014][T13077] ? resv_map_alloc+0x46/0x400 [ 591.749040][T13077] resv_map_alloc+0x46/0x400 [ 591.749066][T13077] hugetlbfs_get_inode+0x33f/0x730 [ 591.749091][T13077] hugetlb_file_setup+0x15b/0x620 [ 591.749113][T13077] __do_sys_memfd_create+0x274/0x8a0 [ 591.749144][T13077] do_syscall_64+0xcd/0x490 [ 591.749171][T13077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.749190][T13077] RIP: 0033:0x7f0fa778ebe9 [ 591.749209][T13077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.749227][T13077] RSP: 002b:00007f0fa866c038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 591.749244][T13077] RAX: ffffffffffffffda RBX: 00007f0fa79c6090 RCX: 00007f0fa778ebe9 [ 591.749256][T13077] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000000 [ 591.749266][T13077] RBP: 00007f0fa7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 591.749276][T13077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.749287][T13077] R13: 00007f0fa79c6128 R14: 00007f0fa79c6090 R15: 00007fffb7e3fbf8 [ 591.749309][T13077] [ 594.131735][T13121] input: jJǸ-9%vlQ as /devices/virtual/input/input24 [ 595.018922][T13134] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 595.041699][T13131] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 595.091918][T13137] kafs: addr_prefs: Invalid Command [ 596.976522][T13170] FAULT_INJECTION: forcing a failure. [ 596.976522][T13170] name failslab, interval 1, probability 0, space 0, times 0 [ 596.998657][T13170] CPU: 0 UID: 0 PID: 13170 Comm: syz.0.1437 Not tainted syzkaller #0 PREEMPT(full) [ 596.998701][T13170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 596.998720][T13170] Call Trace: [ 596.998731][T13170] [ 596.998743][T13170] dump_stack_lvl+0x16c/0x1f0 [ 596.998791][T13170] should_fail_ex+0x512/0x640 [ 596.998832][T13170] ? __kmalloc_noprof+0xbf/0x510 [ 596.998871][T13170] ? lsm_blob_alloc+0x68/0x90 [ 596.998916][T13170] should_failslab+0xc2/0x120 [ 596.998956][T13170] __kmalloc_noprof+0xd2/0x510 [ 596.999000][T13170] lsm_blob_alloc+0x68/0x90 [ 596.999047][T13170] security_sk_alloc+0x30/0x270 [ 596.999084][T13170] sk_prot_alloc+0x1c7/0x2a0 [ 596.999116][T13170] sk_alloc+0x36/0xc20 [ 596.999157][T13170] __netlink_create+0x5e/0x2c0 [ 596.999189][T13170] ? __wake_up+0x3f/0x60 [ 596.999225][T13170] netlink_create+0x39e/0x620 [ 596.999260][T13170] ? __pfx_genl_bind+0x10/0x10 [ 596.999302][T13170] ? __pfx_genl_unbind+0x10/0x10 [ 596.999342][T13170] ? __pfx_genl_release+0x10/0x10 [ 596.999390][T13170] __sock_create+0x338/0x8d0 [ 596.999429][T13170] __sys_socket+0x14d/0x260 [ 596.999461][T13170] ? __pfx___sys_socket+0x10/0x10 [ 596.999491][T13170] ? xfd_validate_state+0x61/0x180 [ 596.999533][T13170] ? __pfx_ksys_write+0x10/0x10 [ 596.999577][T13170] __x64_sys_socket+0x72/0xb0 [ 596.999606][T13170] ? lockdep_hardirqs_on+0x7c/0x110 [ 596.999652][T13170] do_syscall_64+0xcd/0x490 [ 596.999698][T13170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.999730][T13170] RIP: 0033:0x7fe14bd8ebe9 [ 596.999756][T13170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.999786][T13170] RSP: 002b:00007fe14cc00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 596.999821][T13170] RAX: ffffffffffffffda RBX: 00007fe14bfc5fa0 RCX: 00007fe14bd8ebe9 [ 596.999841][T13170] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 596.999859][T13170] RBP: 00007fe14be11e19 R08: 0000000000000000 R09: 0000000000000000 [ 596.999876][T13170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.999894][T13170] R13: 00007fe14bfc6038 R14: 00007fe14bfc5fa0 R15: 00007fff0c70ad98 [ 596.999935][T13170] [ 597.405401][T13174] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 598.154581][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1440'. [ 598.791826][T13192] random: crng reseeded on system resumption [ 600.477916][T13219] random: crng reseeded on system resumption [ 600.507025][T13219] usbip-vudc usbip-vudc.0: gadget not bound [ 600.566954][T13226] FAULT_INJECTION: forcing a failure. [ 600.566954][T13226] name failslab, interval 1, probability 0, space 0, times 0 [ 600.609700][T13226] CPU: 0 UID: 0 PID: 13226 Comm: syz.0.1452 Not tainted syzkaller #0 PREEMPT(full) [ 600.609741][T13226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 600.609760][T13226] Call Trace: [ 600.609770][T13226] [ 600.609782][T13226] dump_stack_lvl+0x16c/0x1f0 [ 600.609832][T13226] should_fail_ex+0x512/0x640 [ 600.609875][T13226] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 600.609919][T13226] should_failslab+0xc2/0x120 [ 600.609959][T13226] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 600.609999][T13226] ? __d_alloc+0x32/0xae0 [ 600.610044][T13226] __d_alloc+0x32/0xae0 [ 600.610088][T13226] d_alloc_parallel+0x111/0x1480 [ 600.610148][T13226] ? find_held_lock+0x2b/0x80 [ 600.610182][T13226] ? __pfx_d_alloc_parallel+0x10/0x10 [ 600.610235][T13226] ? __d_lookup+0x266/0x4a0 [ 600.610293][T13226] lookup_open.isra.0+0x665/0x1580 [ 600.610337][T13226] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 600.610394][T13226] ? mnt_get_write_access+0x20c/0x300 [ 600.610448][T13226] path_openat+0x893/0x2cb0 [ 600.610542][T13226] ? __pfx_path_openat+0x10/0x10 [ 600.610593][T13226] do_filp_open+0x20b/0x470 [ 600.610630][T13226] ? __pfx_do_filp_open+0x10/0x10 [ 600.610691][T13226] ? __pfx_kfree_link+0x10/0x10 [ 600.610749][T13226] ? alloc_fd+0x471/0x7d0 [ 600.610797][T13226] do_sys_openat2+0x11b/0x1d0 [ 600.610844][T13226] ? __pfx_do_sys_openat2+0x10/0x10 [ 600.610892][T13226] ? find_held_lock+0x2b/0x80 [ 600.610934][T13226] __x64_sys_openat+0x174/0x210 [ 600.610983][T13226] ? __pfx___x64_sys_openat+0x10/0x10 [ 600.611050][T13226] do_syscall_64+0xcd/0x490 [ 600.611094][T13226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.611125][T13226] RIP: 0033:0x7fe14bd8d550 [ 600.611151][T13226] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 600.611180][T13226] RSP: 002b:00007fe14cbdef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 600.611210][T13226] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe14bd8d550 [ 600.611230][T13226] RDX: 0000000000000002 RSI: 00007fe14cbdefa0 RDI: 00000000ffffff9c [ 600.611249][T13226] RBP: 00007fe14cbdefa0 R08: 0000000000000000 R09: 0000000000000000 [ 600.611267][T13226] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 600.611285][T13226] R13: 00007fe14bfc6128 R14: 00007fe14bfc6090 R15: 00007fff0c70ad98 [ 600.611329][T13226] [ 601.047930][T13226] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1452'. [ 601.144944][T13226] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1452'. [ 601.629704][T13243] can: request_module (can-proto-5) failed. [ 601.714590][T13249] can: request_module (can-proto-5) failed. [ 602.214531][T13248] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 602.229287][T13248] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 602.235891][T13248] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 602.266186][T13248] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 602.963396][T13276] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 604.122345][ T5184] Bluetooth: hci2: command 0x0c1a tx timeout [ 604.281685][ T5184] Bluetooth: hci4: command 0x0c1a tx timeout [ 604.281722][T11737] Bluetooth: hci1: command 0x0c1a tx timeout [ 604.288090][T10847] Bluetooth: hci3: command 0x0c1a tx timeout [ 605.200126][T13317] futex_wake_op: syz.2.1469 tries to shift op by -2048; fix this program [ 605.233858][T13314] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 605.473357][T13322] random: crng reseeded on system resumption [ 606.447628][T13330] bond0: option all_slaves_active: invalid value () [ 606.808215][T13346] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 607.431374][T13365] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 608.103137][T13366] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 608.120453][T13366] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 608.190139][T13366] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 608.254528][T13366] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 608.825571][ T5184] Bluetooth: hci3: unexpected subevent 0x05 length: 123 > 12 [ 609.456355][ T5184] Bluetooth: hci2: command 0x0c1a tx timeout [ 609.729979][T13417] FAULT_INJECTION: forcing a failure. [ 609.729979][T13417] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 609.770952][T13417] CPU: 1 UID: 0 PID: 13417 Comm: syz.0.1489 Not tainted syzkaller #0 PREEMPT(full) [ 609.770995][T13417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.771013][T13417] Call Trace: [ 609.771023][T13417] [ 609.771034][T13417] dump_stack_lvl+0x16c/0x1f0 [ 609.771081][T13417] should_fail_ex+0x512/0x640 [ 609.771132][T13417] should_fail_alloc_page+0xe7/0x130 [ 609.771174][T13417] prepare_alloc_pages+0x3c2/0x610 [ 609.771220][T13417] ? rcu_is_watching+0x12/0xc0 [ 609.771253][T13417] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 609.771288][T13417] ? stack_depot_save_flags+0x29/0x9c0 [ 609.771343][T13417] ? __lock_acquire+0x62e/0x1ce0 [ 609.771390][T13417] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 609.771442][T13417] ? __lock_acquire+0x62e/0x1ce0 [ 609.771487][T13417] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 609.771533][T13417] ? policy_nodemask+0xea/0x4e0 [ 609.771577][T13417] alloc_pages_mpol+0x1fb/0x550 [ 609.771621][T13417] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 609.771676][T13417] ? __lock_acquire+0x62e/0x1ce0 [ 609.771719][T13417] folio_alloc_mpol_noprof+0x36/0x2f0 [ 609.771768][T13417] vma_alloc_folio_noprof+0xed/0x1e0 [ 609.771813][T13417] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 609.771875][T13417] do_pte_missing+0x2230/0x3ba0 [ 609.771909][T13417] ? find_held_lock+0x2b/0x80 [ 609.771952][T13417] __handle_mm_fault+0x152a/0x2a50 [ 609.771998][T13417] ? __pfx___handle_mm_fault+0x10/0x10 [ 609.772035][T13417] ? __pte_offset_map_lock+0x174/0x310 [ 609.772078][T13417] ? find_held_lock+0x2b/0x80 [ 609.772123][T13417] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 609.772181][T13417] handle_mm_fault+0x589/0xd10 [ 609.772223][T13417] __get_user_pages+0x551/0x34a0 [ 609.772287][T13417] ? __pfx___get_user_pages+0x10/0x10 [ 609.772345][T13417] populate_vma_page_range+0x267/0x3f0 [ 609.772394][T13417] ? __pfx_populate_vma_page_range+0x10/0x10 [ 609.772451][T13417] ? __pfx_find_vma_intersection+0x10/0x10 [ 609.772499][T13417] ? do_mmap+0x69c/0x1210 [ 609.772548][T13417] __mm_populate+0x1d8/0x380 [ 609.772599][T13417] ? __pfx___mm_populate+0x10/0x10 [ 609.772650][T13417] ? up_write+0x1b2/0x520 [ 609.772706][T13417] vm_mmap_pgoff+0x37f/0x470 [ 609.772753][T13417] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 609.772807][T13417] ? __x64_sys_futex+0x1e0/0x4c0 [ 609.772846][T13417] ? __x64_sys_futex+0x1e9/0x4c0 [ 609.772890][T13417] ksys_mmap_pgoff+0x7d/0x5c0 [ 609.772931][T13417] ? xfd_validate_state+0x61/0x180 [ 609.772975][T13417] ? __pfx_do_writev+0x10/0x10 [ 609.773014][T13417] __x64_sys_mmap+0x125/0x190 [ 609.773067][T13417] do_syscall_64+0xcd/0x490 [ 609.773113][T13417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.773144][T13417] RIP: 0033:0x7fe14bd8ebe9 [ 609.773169][T13417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.773199][T13417] RSP: 002b:00007fe14cbbe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 609.773228][T13417] RAX: ffffffffffffffda RBX: 00007fe14bfc6180 RCX: 00007fe14bd8ebe9 [ 609.773248][T13417] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 609.773266][T13417] RBP: 00007fe14be11e19 R08: 0000000000000007 R09: 0000000000028000 [ 609.773284][T13417] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 609.773302][T13417] R13: 00007fe14bfc6218 R14: 00007fe14bfc6180 R15: 00007fff0c70ad98 [ 609.773370][T13417] [ 610.180371][T13421] bridge0: port 3(batadv0) entered blocking state [ 610.187074][T13421] bridge0: port 3(batadv0) entered disabled state [ 610.198280][T13421] batadv0: entered allmulticast mode [ 610.206065][T13421] batadv0: entered promiscuous mode [ 610.212835][T13421] bridge0: port 3(batadv0) entered blocking state [ 610.219647][T13421] bridge0: port 3(batadv0) entered forwarding state [ 610.226863][ T5184] Bluetooth: hci3: command 0x0c1a tx timeout [ 610.249776][ T5184] Bluetooth: hci4: command 0x0c1a tx timeout [ 610.257325][ T5184] Bluetooth: hci1: command 0x0c1a tx timeout [ 610.383714][T13426] Unable to find swap-space signature [ 610.676393][T13359] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 610.686411][T13359] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 611.025195][T13436] nbd: couldn't find device at index 137 [ 612.028473][T13451] zswap: compressor not available [ 612.238866][T10847] Bluetooth: hci3: command 0x0c1a tx timeout [ 612.306205][T13469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1502'. [ 612.379331][T13469] veth0_macvtap: left promiscuous mode [ 612.415154][T13469] macvtap0: entered promiscuous mode [ 612.425555][T13469] macvtap0: entered allmulticast mode [ 612.511629][ T30] audit: type=1800 audit(6051990996.823:15): pid=13476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1503" name="discovery_nqn" dev="configfs" ino=40820 res=0 errno=0 [ 612.857615][T13481] FAULT_INJECTION: forcing a failure. [ 612.857615][T13481] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 612.857678][T13481] CPU: 0 UID: 0 PID: 13481 Comm: syz.2.1504 Not tainted syzkaller #0 PREEMPT(full) [ 612.857715][T13481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 612.857733][T13481] Call Trace: [ 612.857744][T13481] [ 612.857756][T13481] dump_stack_lvl+0x16c/0x1f0 [ 612.857804][T13481] should_fail_ex+0x512/0x640 [ 612.857854][T13481] should_fail_alloc_page+0xe7/0x130 [ 612.857901][T13481] prepare_alloc_pages+0x3c2/0x610 [ 612.857944][T13481] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 612.857988][T13481] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 612.858030][T13481] ? arch_stack_walk+0xa6/0x100 [ 612.858080][T13481] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 612.858117][T13481] ? stack_trace_save+0x8e/0xc0 [ 612.858176][T13481] ? fb_var_to_videomode+0x4c9/0x690 [ 612.858220][T13481] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 612.858269][T13481] ? policy_nodemask+0xea/0x4e0 [ 612.858315][T13481] alloc_pages_mpol+0x1fb/0x550 [ 612.858358][T13481] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 612.858401][T13481] ? lockdep_hardirqs_on+0x7c/0x110 [ 612.858447][T13481] ? vc_allocate+0x489/0x880 [ 612.858484][T13481] ___kmalloc_large_node+0xed/0x160 [ 612.858529][T13481] ? con_is_visible+0x65/0x150 [ 612.858564][T13481] ? vc_allocate+0x489/0x880 [ 612.858600][T13481] __kmalloc_large_node_noprof+0x1c/0x70 [ 612.858652][T13481] __kmalloc_noprof.cold+0xc/0x61 [ 612.858719][T13481] vc_allocate+0x489/0x880 [ 612.858761][T13481] ? __pfx_vc_allocate+0x10/0x10 [ 612.858816][T13481] con_install+0xa1/0x600 [ 612.858859][T13481] ? __pfx_con_install+0x10/0x10 [ 612.858908][T13481] ? __pfx_con_install+0x10/0x10 [ 612.858950][T13481] tty_init_dev.part.0+0x99/0x500 [ 612.858999][T13481] tty_open+0xa50/0xf90 [ 612.859052][T13481] ? __pfx_tty_open+0x10/0x10 [ 612.859096][T13481] ? chrdev_open+0x10b/0x6a0 [ 612.859142][T13481] ? __pfx_tty_open+0x10/0x10 [ 612.859179][T13481] chrdev_open+0x231/0x6a0 [ 612.859215][T13481] ? __pfx_apparmor_file_open+0x10/0x10 [ 612.859250][T13481] ? __pfx_chrdev_open+0x10/0x10 [ 612.859293][T13481] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 612.859338][T13481] do_dentry_open+0x97f/0x1530 [ 612.859377][T13481] ? __pfx_chrdev_open+0x10/0x10 [ 612.859431][T13481] vfs_open+0x82/0x3f0 [ 612.859481][T13481] path_openat+0x1de4/0x2cb0 [ 612.859534][T13481] ? __pfx_path_openat+0x10/0x10 [ 612.859584][T13481] do_filp_open+0x20b/0x470 [ 612.859623][T13481] ? __pfx_do_filp_open+0x10/0x10 [ 612.859704][T13481] ? alloc_fd+0x471/0x7d0 [ 612.859756][T13481] do_sys_openat2+0x11b/0x1d0 [ 612.859804][T13481] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.859874][T13481] __x64_sys_openat+0x174/0x210 [ 612.859925][T13481] ? __pfx___x64_sys_openat+0x10/0x10 [ 612.859999][T13481] do_syscall_64+0xcd/0x490 [ 612.860047][T13481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.860079][T13481] RIP: 0033:0x7f369418ebe9 [ 612.860104][T13481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.860135][T13481] RSP: 002b:00007f3695062038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 612.860166][T13481] RAX: ffffffffffffffda RBX: 00007f36943c5fa0 RCX: 00007f369418ebe9 [ 612.860187][T13481] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 612.860206][T13481] RBP: 00007f3694211e19 R08: 0000000000000000 R09: 0000000000000000 [ 612.860224][T13481] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 612.860243][T13481] R13: 00007f36943c6038 R14: 00007f36943c5fa0 R15: 00007ffd8ef68398 [ 612.860287][T13481] [ 613.416838][T13492] random: crng reseeded on system resumption [ 613.439269][T13492] usbip-vudc usbip-vudc.0: gadget not bound [ 614.107522][T13501] Format for deleting device is "id" (uint). [ 614.383820][T13516] program syz.0.1513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 615.868249][T13539] random: crng reseeded on system resumption [ 615.930154][T13540] usbip-vudc usbip-vudc.0: gadget not bound [ 616.606616][T13543] FAULT_INJECTION: forcing a failure. [ 616.606616][T13543] name failslab, interval 1, probability 0, space 0, times 0 [ 616.635341][T13543] CPU: 1 UID: 0 PID: 13543 Comm: syz.4.1521 Not tainted syzkaller #0 PREEMPT(full) [ 616.635383][T13543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 616.635401][T13543] Call Trace: [ 616.635410][T13543] [ 616.635422][T13543] dump_stack_lvl+0x16c/0x1f0 [ 616.635470][T13543] should_fail_ex+0x512/0x640 [ 616.635512][T13543] ? __kmalloc_noprof+0xbf/0x510 [ 616.635550][T13543] ? __register_sysctl_table+0xea2/0x1900 [ 616.635598][T13543] should_failslab+0xc2/0x120 [ 616.635635][T13543] __kmalloc_noprof+0xd2/0x510 [ 616.635676][T13543] ? __register_sysctl_table+0xe8e/0x1900 [ 616.635727][T13543] __register_sysctl_table+0xea2/0x1900 [ 616.635778][T13543] ? __pfx___register_sysctl_table+0x10/0x10 [ 616.635819][T13543] ? is_module_address+0x69/0xf0 [ 616.635858][T13543] ? register_net_sysctl_sz+0x228/0x3e0 [ 616.635907][T13543] __devinet_sysctl_register+0x1b9/0x360 [ 616.635959][T13543] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 616.636006][T13543] ? devinet_init_net+0xeb/0x910 [ 616.636052][T13543] ? __asan_memcpy+0x3c/0x60 [ 616.636086][T13543] devinet_init_net+0x347/0x910 [ 616.636130][T13543] ? __pfx_devinet_init_net+0x10/0x10 [ 616.636174][T13543] ops_init+0x1df/0x5f0 [ 616.636220][T13543] setup_net+0x10f/0x380 [ 616.636258][T13543] ? lockdep_init_map_type+0x5c/0x280 [ 616.636300][T13543] ? __pfx_setup_net+0x10/0x10 [ 616.636343][T13543] ? debug_mutex_init+0x37/0x70 [ 616.636375][T13543] copy_net_ns+0x2a6/0x5f0 [ 616.636415][T13543] create_new_namespaces+0x3ea/0xa90 [ 616.636458][T13543] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 616.636493][T13543] ksys_unshare+0x45b/0xa40 [ 616.636534][T13543] ? __pfx_ksys_unshare+0x10/0x10 [ 616.636575][T13543] ? xfd_validate_state+0x61/0x180 [ 616.636630][T13543] __x64_sys_unshare+0x31/0x40 [ 616.636679][T13543] do_syscall_64+0xcd/0x490 [ 616.636722][T13543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.636752][T13543] RIP: 0033:0x7fd6a9d8ebe9 [ 616.636774][T13543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.636797][T13543] RSP: 002b:00007fd6aab97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 616.636824][T13543] RAX: ffffffffffffffda RBX: 00007fd6a9fc5fa0 RCX: 00007fd6a9d8ebe9 [ 616.636842][T13543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 616.636857][T13543] RBP: 00007fd6a9e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 616.636874][T13543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.636890][T13543] R13: 00007fd6a9fc6038 R14: 00007fd6a9fc5fa0 R15: 00007ffce9689e88 [ 616.636930][T13543] [ 616.898765][ C1] vkms_vblank_simulate: vblank timer overrun [ 616.912977][T13543] sysctl could not get directory: /net/ipv4/conf/default -12 [ 617.074786][T13550] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 617.496565][T13562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1526'. [ 617.529259][T13562] macvtap0: left promiscuous mode [ 617.542730][T13562] macvtap0: left allmulticast mode [ 617.865208][T13574] nbd: couldn't find device at index 137 [ 618.982626][T13598] FAULT_INJECTION: forcing a failure. [ 618.982626][T13598] name failslab, interval 1, probability 0, space 0, times 0 [ 619.061976][T13598] CPU: 0 UID: 0 PID: 13598 Comm: syz.4.1533 Not tainted syzkaller #0 PREEMPT(full) [ 619.062028][T13598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.062039][T13598] Call Trace: [ 619.062045][T13598] [ 619.062052][T13598] dump_stack_lvl+0x16c/0x1f0 [ 619.062083][T13598] should_fail_ex+0x512/0x640 [ 619.062108][T13598] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 619.062130][T13598] should_failslab+0xc2/0x120 [ 619.062155][T13598] __kmalloc_cache_noprof+0x6a/0x3e0 [ 619.062180][T13598] ? gpiolib_seq_start+0x69/0x270 [ 619.062204][T13598] gpiolib_seq_start+0x69/0x270 [ 619.062225][T13598] traverse.part.0.constprop.0+0xac/0x640 [ 619.062253][T13598] seq_read_iter+0x932/0x12c0 [ 619.062281][T13598] seq_read+0x3a3/0x570 [ 619.062298][T13598] ? __pfx_seq_read+0x10/0x10 [ 619.062321][T13598] ? get_pid_task+0xfc/0x250 [ 619.062358][T13598] full_proxy_read+0x12e/0x1a0 [ 619.062393][T13598] ? __pfx_full_proxy_read+0x10/0x10 [ 619.062422][T13598] vfs_read+0x1e1/0xcf0 [ 619.062449][T13598] ? __pfx_vfs_read+0x10/0x10 [ 619.062468][T13598] ? find_held_lock+0x2b/0x80 [ 619.062487][T13598] ? __fget_files+0x204/0x3c0 [ 619.062512][T13598] ? __fget_files+0x20e/0x3c0 [ 619.062530][T13598] ? __fget_files+0x1d0/0x3c0 [ 619.062556][T13598] __x64_sys_pread64+0x1eb/0x250 [ 619.062580][T13598] ? __pfx___x64_sys_pread64+0x10/0x10 [ 619.062611][T13598] do_syscall_64+0xcd/0x490 [ 619.062640][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.062659][T13598] RIP: 0033:0x7fd6a9d8ebe9 [ 619.062675][T13598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.062693][T13598] RSP: 002b:00007fd6aab97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 619.062711][T13598] RAX: ffffffffffffffda RBX: 00007fd6a9fc5fa0 RCX: 00007fd6a9d8ebe9 [ 619.062723][T13598] RDX: 0000000000007fff RSI: 0000000000000000 RDI: 0000000000000003 [ 619.062734][T13598] RBP: 00007fd6aab97090 R08: 0000000000000000 R09: 0000000000000000 [ 619.062745][T13598] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 619.062755][T13598] R13: 00007fd6a9fc6038 R14: 00007fd6a9fc5fa0 R15: 00007ffce9689e88 [ 619.062778][T13598] [ 619.446547][T13598] ================================================================== [ 619.454761][T13598] BUG: KASAN: slab-use-after-free in gpiolib_seq_stop+0xc6/0xe0 [ 619.463110][T13598] Read of size 4 at addr ffff888140b68704 by task syz.4.1533/13598 [ 619.471106][T13598] [ 619.473645][T13598] CPU: 0 UID: 0 PID: 13598 Comm: syz.4.1533 Not tainted syzkaller #0 PREEMPT(full) [ 619.473670][T13598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 619.473681][T13598] Call Trace: [ 619.473687][T13598] [ 619.473695][T13598] dump_stack_lvl+0x116/0x1f0 [ 619.473723][T13598] print_report+0xcd/0x630 [ 619.473747][T13598] ? __virt_addr_valid+0x81/0x610 [ 619.473769][T13598] ? __phys_addr+0xe8/0x180 [ 619.473792][T13598] ? gpiolib_seq_stop+0xc6/0xe0 [ 619.473811][T13598] kasan_report+0xe0/0x110 [ 619.473835][T13598] ? gpiolib_seq_stop+0xc6/0xe0 [ 619.473856][T13598] gpiolib_seq_stop+0xc6/0xe0 [ 619.473875][T13598] traverse.part.0.constprop.0+0x2c0/0x640 [ 619.473898][T13598] seq_read_iter+0x932/0x12c0 [ 619.473919][T13598] seq_read+0x3a3/0x570 [ 619.473935][T13598] ? __pfx_seq_read+0x10/0x10 [ 619.473954][T13598] ? get_pid_task+0xfc/0x250 [ 619.473984][T13598] full_proxy_read+0x12e/0x1a0 [ 619.474011][T13598] ? __pfx_full_proxy_read+0x10/0x10 [ 619.474039][T13598] vfs_read+0x1e1/0xcf0 [ 619.474061][T13598] ? __pfx_vfs_read+0x10/0x10 [ 619.474080][T13598] ? find_held_lock+0x2b/0x80 [ 619.474098][T13598] ? __fget_files+0x204/0x3c0 [ 619.474119][T13598] ? __fget_files+0x20e/0x3c0 [ 619.474137][T13598] ? __fget_files+0x1d0/0x3c0 [ 619.474164][T13598] __x64_sys_pread64+0x1eb/0x250 [ 619.474187][T13598] ? __pfx___x64_sys_pread64+0x10/0x10 [ 619.474212][T13598] do_syscall_64+0xcd/0x490 [ 619.474238][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.474258][T13598] RIP: 0033:0x7fd6a9d8ebe9 [ 619.474273][T13598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.474292][T13598] RSP: 002b:00007fd6aab97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 619.474309][T13598] RAX: ffffffffffffffda RBX: 00007fd6a9fc5fa0 RCX: 00007fd6a9d8ebe9 [ 619.474322][T13598] RDX: 0000000000007fff RSI: 0000000000000000 RDI: 0000000000000003 [ 619.474333][T13598] RBP: 00007fd6aab97090 R08: 0000000000000000 R09: 0000000000000000 [ 619.474344][T13598] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 619.474355][T13598] R13: 00007fd6a9fc6038 R14: 00007fd6a9fc5fa0 R15: 00007ffce9689e88 [ 619.474371][T13598] [ 619.474377][T13598] [ 619.698207][T13598] Allocated by task 13598: [ 619.702713][T13598] kasan_save_stack+0x33/0x60 [ 619.707535][T13598] kasan_save_track+0x14/0x30 [ 619.712356][T13598] __kasan_kmalloc+0xaa/0xb0 [ 619.716959][T13598] gpiolib_seq_start+0x69/0x270 [ 619.721822][T13598] seq_read_iter+0x2c1/0x12c0 [ 619.726504][T13598] seq_read+0x3a3/0x570 [ 619.730664][T13598] full_proxy_read+0x12e/0x1a0 [ 619.735453][T13598] vfs_read+0x1e1/0xcf0 [ 619.739618][T13598] __x64_sys_pread64+0x1eb/0x250 [ 619.744603][T13598] do_syscall_64+0xcd/0x490 [ 619.749210][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.755111][T13598] [ 619.757439][T13598] Freed by task 13598: [ 619.761505][T13598] kasan_save_stack+0x33/0x60 [ 619.766192][T13598] kasan_save_track+0x14/0x30 [ 619.770985][T13598] kasan_save_free_info+0x3b/0x60 [ 619.776121][T13598] __kasan_slab_free+0x60/0x70 [ 619.780900][T13598] kfree+0x2b4/0x4d0 [ 619.784803][T13598] seq_read_iter+0x60d/0x12c0 [ 619.789510][T13598] seq_read+0x3a3/0x570 [ 619.793692][T13598] full_proxy_read+0x12e/0x1a0 [ 619.798586][T13598] vfs_read+0x1e1/0xcf0 [ 619.802807][T13598] __x64_sys_pread64+0x1eb/0x250 [ 619.807769][T13598] do_syscall_64+0xcd/0x490 [ 619.812494][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.818487][T13598] [ 619.820955][T13598] The buggy address belongs to the object at ffff888140b68700 [ 619.820955][T13598] which belongs to the cache kmalloc-8 of size 8 [ 619.834842][T13598] The buggy address is located 4 bytes inside of [ 619.834842][T13598] freed 8-byte region [ffff888140b68700, ffff888140b68708) [ 619.848387][T13598] [ 619.850731][T13598] The buggy address belongs to the physical page: [ 619.857148][T13598] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x140b68 [ 619.866003][T13598] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 619.873410][T13598] page_type: f5(slab) [ 619.877415][T13598] raw: 057ff00000000000 ffff88801b841500 ffffea000511d840 dead000000000002 [ 619.886184][T13598] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 619.894863][T13598] page dumped because: kasan: bad access detected [ 619.901297][T13598] page_owner tracks the page as allocated [ 619.907195][T13598] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 13056860482, free_ts 0 [ 619.924931][T13598] post_alloc_hook+0x1c0/0x230 [ 619.929736][T13598] get_page_from_freelist+0x132b/0x38e0 [ 619.935388][T13598] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 619.941300][T13598] alloc_pages_mpol+0x1fb/0x550 [ 619.946176][T13598] new_slab+0x247/0x330 [ 619.950430][T13598] ___slab_alloc+0xcf2/0x1740 [ 619.955385][T13598] __slab_alloc.constprop.0+0x56/0xb0 [ 619.961035][T13598] __kmalloc_noprof+0x2f2/0x510 [ 619.965897][T13598] acpi_ex_allocate_name_string+0x6f/0x2e0 [ 619.971725][T13598] acpi_ex_get_name_string+0x131/0x5d0 [ 619.977203][T13598] acpi_ds_create_operand+0x37d/0x880 [ 619.982675][T13598] acpi_ds_evaluate_name_path+0x138/0x470 [ 619.988412][T13598] acpi_ds_exec_end_op+0x3b0/0x1460 [ 619.993628][T13598] acpi_ps_parse_loop+0x425/0x1d00 [ 619.998775][T13598] acpi_ps_parse_aml+0x3c1/0xcb0 [ 620.003726][T13598] acpi_ps_execute_method+0x55a/0xb30 [ 620.009156][T13598] page_owner free stack trace missing [ 620.014527][T13598] [ 620.016855][T13598] Memory state around the buggy address: [ 620.022489][T13598] ffff888140b68600: 06 fc fc fc 06 fc fc fc 06 fc fc fc 04 fc fc fc [ 620.030560][T13598] ffff888140b68680: fa fc fc fc 00 fc fc fc fa fc fc fc fa fc fc fc [ 620.038736][T13598] >ffff888140b68700: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 620.046798][T13598] ^ [ 620.050869][T13598] ffff888140b68780: fa fc fc fc 04 fc fc fc 04 fc fc fc 04 fc fc fc [ 620.058937][T13598] ffff888140b68800: 05 fc fc fc 07 fc fc fc 07 fc fc fc 07 fc fc fc [ 620.067012][T13598] ================================================================== [ 620.152415][T13598] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 620.159697][T13598] CPU: 1 UID: 0 PID: 13598 Comm: syz.4.1533 Not tainted syzkaller #0 PREEMPT(full) [ 620.169144][T13598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 620.179371][T13598] Call Trace: [ 620.182746][T13598] [ 620.185680][T13598] dump_stack_lvl+0x3d/0x1f0 [ 620.190306][T13598] vpanic+0x6e8/0x7a0 [ 620.194498][T13598] ? __pfx_vpanic+0x10/0x10 [ 620.199092][T13598] ? __pfx_vprintk_emit+0x10/0x10 [ 620.204152][T13598] ? gpiolib_seq_stop+0xc6/0xe0 [ 620.209151][T13598] panic+0xca/0xd0 [ 620.212891][T13598] ? __pfx_panic+0x10/0x10 [ 620.217331][T13598] ? gpiolib_seq_stop+0xc6/0xe0 [ 620.222240][T13598] ? preempt_schedule_common+0x44/0xc0 [ 620.227721][T13598] ? preempt_schedule_thunk+0x16/0x30 [ 620.233108][T13598] ? check_panic_on_warn+0x1f/0xb0 [ 620.238274][T13598] check_panic_on_warn+0xab/0xb0 [ 620.243251][T13598] end_report+0x107/0x170 [ 620.247798][T13598] kasan_report+0xee/0x110 [ 620.252422][T13598] ? gpiolib_seq_stop+0xc6/0xe0 [ 620.257309][T13598] gpiolib_seq_stop+0xc6/0xe0 [ 620.262044][T13598] traverse.part.0.constprop.0+0x2c0/0x640 [ 620.267894][T13598] seq_read_iter+0x932/0x12c0 [ 620.272803][T13598] seq_read+0x3a3/0x570 [ 620.277165][T13598] ? __pfx_seq_read+0x10/0x10 [ 620.281890][T13598] ? get_pid_task+0xfc/0x250 [ 620.286544][T13598] full_proxy_read+0x12e/0x1a0 [ 620.291442][T13598] ? __pfx_full_proxy_read+0x10/0x10 [ 620.296938][T13598] vfs_read+0x1e1/0xcf0 [ 620.301129][T13598] ? __pfx_vfs_read+0x10/0x10 [ 620.305834][T13598] ? find_held_lock+0x2b/0x80 [ 620.310564][T13598] ? __fget_files+0x204/0x3c0 [ 620.315530][T13598] ? __fget_files+0x20e/0x3c0 [ 620.320340][T13598] ? __fget_files+0x1d0/0x3c0 [ 620.325058][T13598] __x64_sys_pread64+0x1eb/0x250 [ 620.330101][T13598] ? __pfx___x64_sys_pread64+0x10/0x10 [ 620.335675][T13598] do_syscall_64+0xcd/0x490 [ 620.340203][T13598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.346138][T13598] RIP: 0033:0x7fd6a9d8ebe9 [ 620.350675][T13598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.370484][T13598] RSP: 002b:00007fd6aab97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 620.378928][T13598] RAX: ffffffffffffffda RBX: 00007fd6a9fc5fa0 RCX: 00007fd6a9d8ebe9 [ 620.386911][T13598] RDX: 0000000000007fff RSI: 0000000000000000 RDI: 0000000000000003 [ 620.395053][T13598] RBP: 00007fd6aab97090 R08: 0000000000000000 R09: 0000000000000000 [ 620.403067][T13598] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 620.411075][T13598] R13: 00007fd6a9fc6038 R14: 00007fd6a9fc5fa0 R15: 00007ffce9689e88 [ 620.420119][T13598] [ 620.423471][T13598] Kernel Offset: disabled [ 620.427901][T13598] Rebooting in 86400 seconds..