last executing test programs: 2m38.415854031s ago: executing program 0 (id=465): close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x40000080) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x105240, 0x0) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) sysfs$auto(0x1000006, 0x1, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) r1 = open(0x0, 0x2002, 0x1) socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r2 = socket(0x2, 0x3, 0x6) setsockopt$auto(0x3, 0x0, 0x31, 0x0, 0x28) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x0, 0x407, 0x100000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) unshare$auto(0x40000080) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1ac}}, 0x0) fremovexattr$auto(r2, &(0x7f0000000000)='\x00') r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x4611, 0x0) fadvise64$auto(r1, 0x7ff, 0xe00000000000, 0xffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlock$auto(0xfbe8, 0x1000000000000004) 2m35.949408102s ago: executing program 0 (id=472): r0 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) (async) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000480)='/dev/bus/usb/004/001\x00', 0x80800, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000500)={0x8, &(0x7f00000004c0)}) (async) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000140)={0x2a4, r1, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x7fff}, @NL80211_ATTR_MLO_LINKS={0x10, 0x138, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x7fff}]}]}, @NL80211_ATTR_FTM_RESPONDER={0x26c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x9a, 0x3, "a2f8d4760bae1fbe58fb4139ba19130e98b3fae65a04f2572fb68ee72057e4ef89f9d4e1667a824b5f747e2621abcdbd60bd46c15224b7cde875a4db299ad9e0d9b8a938ea82eb41614e340de226b4c4ac132a405d7c81ddc29f3c97f8dfbdda1b549ffceef2a185f8ddf169e419d39f1247d7bd89249cd3e61d8aadd5aa2444197cdf3fb6b910e44270c12f490093ae76b283bdd20e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x45, 0x3, "116ef91b531f4ceedf38504eaff15faee8eaab356858c740d53b3d3538191581f6d02db8ec3b35746bef0e3259ccd421062f33f5c420f0870f33d3e7cd739a7821"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc2, 0x3, "f96715f59f445ff2c12c08c378ccd3ad7f21261416f434bfe4ee2b9158a0505019bfbfaa3b6a49ed058463fa463f9bd542ebaddadc92b199a5efee602ac4e76679f33f255d1914d3dbc59841388046d576ab0c21ba60712e4dfb90f03b85177497c3e42b290890447d8b63d6d33b619470952ba33a08fd84216f22f0bf462e048f6ee74dd282ac3e0ea03cd79942658aecde638e2d3e919a43148657b590858081d76eb34efaf7d21a61643f9032295d7a5f0240f929f272d422d8ff6623"}, @NL80211_FTM_RESP_ATTR_LCI={0xb5, 0x2, "734f044f7f7c29bc0b11d641642a5863ad1cc7b98dfc5884df507e4e7fb814f6b78ce956db3be82a43552355c3048f71ad894055853ba90fe7081a9c16a10531e1781d0a4576f34c26074731c8fc7de311c9178ce2cbd33c488a24cce470e9dcff6bb6467286023c632c3bbc3e39fabf40f4e983cd4042e86e5e2248de414c3a6a555bb641252ee61e1852c3b9cd05f54662ec98087a441bacc6ab198a7bbc2f10a59c3211732793335a8d8045e3a28425"}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0xa}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8800}, 0x40015) (async) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x6, 0xffffffffffffffff, @relative_id=0x2, 0x9}, 0xa3) (async) sendto$auto(r0, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 2m35.314974485s ago: executing program 0 (id=474): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x7fffffff, 0x300000000000) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) ioctl$auto(r0, 0x40085618, r0) 2m34.995194257s ago: executing program 0 (id=475): mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) sysfs$auto(0x2, 0x11, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0xf4, 0x4002000}, 0x40010) 2m34.72262268s ago: executing program 0 (id=476): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) prctl$auto(0x41, 0x0, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd15\x00', 0x80000, 0x0) poll$auto(0x0, 0x8001, 0x70) sendmsg$auto_NL80211_CMD_EPCS_CFG(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002800)={&(0x7f00000028c0)={0x120, 0x0, 0x100, 0x60bd2f, 0x25dfdafb, {}, [@NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x83}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_CQM={0xf7, 0x5e, 0x0, 0x1, [@generic="6e1dc32ddd9a8b095aea359f20be487169caaff531d6f452ded13f76eb0fd5b60a8227df2017f9719e308252f2873b52553067d0fdeda735d82841edd8fcb2f513662e906ecaede79c4ae522943208ba61b44e7a14179a4eaca1d611f989c205c22b59c4d89e56c168f28af4dc87ff9d56e94d8363ec27935b842c954af60c5cca9bfca0a9f5fdc9903daa2473a2f38459f300261aa94579576e1c59c0d52051769afdd98c5e956b44e1c905fe2d64f2e8155ca4e26a502f7c94d76c79a6b6c2fbcea01226baae0f6b351b0c455df65ccdaa9461c771217a53d581baac84e79abc7300f5604027b34a8a9d9b613eed528a117e"]}]}, 0x120}, 0x1, 0x0, 0x0, 0xc041}, 0x0) ioctl$auto_BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) shmctl$auto_SHM_UNLOCK(0x200, 0xc, &(0x7f0000001340)={{0x33c, 0xee00, 0x0, 0xffff129a, 0x6, 0x4, 0x6}, 0x3ff, 0x200, 0x1, 0x3, @inferred, @raw=0x1, 0xb0fc, 0x0, &(0x7f0000001140)="5d362a4d6f5b4ed4c157f695f2972b8e0c2f97966273fb8738a2c3082026978749767e52ff6d1da65f5651ef06a4b10742277620702974fe6116e5a2267377667ff9e02fd5112b03198485773ee4e8784ab62cc01e28975faad82606e2809d3c9fc8224d84d4e18330996c329e56eb18118ce9b158454a2dac99b6e6412f0d3398df9c326c35563119b658258946a995bf6956afd4ba609c407a8b36fe674855c71e934bb9b0e1245a76456df6cba581cc0ee5ea18ced298d6d6b4b5e7e6260c0311f11039ec2adc2349dc8c1fd7838ad6075a04158087602a71ccc7b0949b61ec82d2685f313a44901e3e", &(0x7f0000001240)}) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') setsockopt$auto(r1, 0x104000000000010e, 0xa, 0x0, 0x400) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) unshare$auto(0x40000080) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b", 0x22) 2m34.051403811s ago: executing program 0 (id=478): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000b3d9) timerfd_create$auto_CLOCK_TAI(0xb, 0x7f) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) statx$auto(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x45d9, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2c, 0x4, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r1, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x1, 0x9}, 0x9, 0x1) landlock_restrict_self$auto(r1, 0x1) bind$auto(0x3, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x280, 0x0) migrate_pages$auto(0x0, 0x3, 0x0, &(0x7f0000000140)=0x2) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x9}) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000080)={0x9, 0x0}, &(0x7f0000000100)={0xeab, 0xb266, 0x3}) fcntl$auto(r0, 0xc, r3) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x341301, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x4, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0485619, 0x38) 2m18.737493841s ago: executing program 32 (id=478): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000b3d9) timerfd_create$auto_CLOCK_TAI(0xb, 0x7f) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) statx$auto(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x45d9, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/unix\x00', 0x121040, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{o2?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2c, 0x4, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r1, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x1, 0x9}, 0x9, 0x1) landlock_restrict_self$auto(r1, 0x1) bind$auto(0x3, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x280, 0x0) migrate_pages$auto(0x0, 0x3, 0x0, &(0x7f0000000140)=0x2) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, &(0x7f0000000080)={0x101, 0x34, 0x7fff, 0x5, 0x80000000009, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0x9}) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(&(0x7f0000000080)={0x9, 0x0}, &(0x7f0000000100)={0xeab, 0xb266, 0x3}) fcntl$auto(r0, 0xc, r3) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x341301, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x4, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0485619, 0x38) 18.383623607s ago: executing program 4 (id=818): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) 17.657860113s ago: executing program 4 (id=820): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) ioctl$auto_TCFLSH2(r1, 0x8924, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf0102000000000000000400000008001c"], 0x24}, 0x1, 0x0, 0x0, 0x4044c11}, 0xc0804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000002) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) write$auto_proc_projid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x18, 0xc000c, 0x2fe) sendfile$auto(0x1, r2, 0x0, 0x56d) r3 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x440, 0x0) r4 = open_tree_attr$auto(r0, &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xff, @inferred=r3}, 0x0) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_UIE_ON(r6, 0x7003, 0x0) ioctl$auto_RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000040)={0x1f, 0x7, 0x0, 0x5, 0x2, 0xda, 0xcb, 0x6c35, 0x3}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r5) unshare$auto(0x8) dup2$auto(0x0, 0x3) ioctl$auto(0xffffffffffffffff, 0xdaa, r4) 13.756586384s ago: executing program 4 (id=825): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_1\x00', 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1000, 0x6) (async) mlock$auto(0x1000, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.unix.ip/channel\x00', 0x8f3b7a51b8162d21, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="5cedd98d0f0000000000000e9bfa4e0000000053ca9aee370a", 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/anycast6\x00', 0x109500, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r4, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r4) read$auto(r4, &(0x7f0000000740)='nI\b\x002&1\x00dwp\x81[7\xb0\xcb+*$I\xf8\xc6\x1cr\xf2\xa9C\x01\r\x1c\x8b\xae8\x1f\xaf;\x7f\x10\xc2\xb8\xcd\x9d;\x19s\x13;\xec!\x015Hr]\xea\x96ii\vV\xf4\x96\xda\xc9\xb9\x93WL\'\x8e\x91q\xf8(>5\xf3\x17\xc8a\x9e\xf1\x1do\xf2\xe3\x8b\x0e\x02F.\x8a!\x82\xa9?Gj\xba\xf3\xb4b\x85s;ff#\xc2\x8d\xaa\xed\x88gE\x96\x94\xda\x04\xdbG\x85<\x01\x8fKH\xac\xee\xe9\x060\xaaPx#\xce\xc7\x87I\xd7Z,\x9b|@\xb7\xaae\xb3\b\xf6\\\f\x15`\\\xc9\xc9\x1b\x11\xb4\xf9\x1a\xf2uI\xe0\xc1\xee\xf3\x95\'r\xea\x9f\xce\xab\xa2\xb4\xcc\xe6\xc9\x95,\f\xe2;}\x8cq\x02\x9f\x8d6o[\x9c\x10\xe3j2\xf5\xd1\x14\xd5ba\x8b\x9c\xffa\xab\x9bs\x88\xd5u\xf6U=\xcb,:\x06\x9d\x15`\'\xdc\x0f\x13\xfb\x93D\xa3\x01\x1e\xd0\xafy\xd3\x88P\rC\xeedZgp\x9a\xd9\x8f:\xa8q\xe5K\xa3\xa1\n-\x87\xff\x81e\xd5\xd3\x13\xf5\xa0J\b\xc6@\x12;\xcc/NH]d4\xdfm\xd3\x1b\xacP\x19\x19\x82\xa4ka\x9fM\x11U\xe3wy\xe5\xfc`\x1d\x86\xe8~\xd3\xe2\x8c\x8a5\xbd\xa7\xa0\xe66\xce\xa2\xd8D\xbd\xff\xecP\x92\xc9\xaa,d\xc3AT\x06\xed>\xad\x1c\xba\xf91Z\xa4\x99\nP\xa9\xbf&\x83\xa6\r+\xa9\x88\xf7\xf9\xce\xad\xbb\xdc\x96ee^\x1fi\xd6%(_\xe8\xda\x15J\x15\n\xbfYz\x8dqsQi\x0f\xf6\xad\xc2\xcdj\xf3\xbas\xe6\xc0o8\xe3\xfa\x04\x14\xa3\xa2h8C\x93\xd3yZ0d\xf02\xae\x01x\xcc\xde\x92*\xb2\x80\x97\xe9\xd5+\xa9\xa2I\xde\xc2\xf1\xb26\x9b\x10\xee\bPY\xb2\xd2;\xc79\xc8\x85\xc3\x91`9\xfc\xb3W\x81\x9e\xdfe9\xf7\xf4\x9b\xff-v$<\x1a#\xdcc7^G\xdc-\xe2\x1f\x1bI\x8e\x1e\x98\x9a\t\xc9\x05Z\x1b\xcfAJ\xf0\xa3\x8c*\x90\v\x1f\xc7\x1c\xc8\xdd\xe5P\x00'/526, 0x5) (async) read$auto(r4, &(0x7f0000000740)='nI\b\x002&1\x00dwp\x81[7\xb0\xcb+*$I\xf8\xc6\x1cr\xf2\xa9C\x01\r\x1c\x8b\xae8\x1f\xaf;\x7f\x10\xc2\xb8\xcd\x9d;\x19s\x13;\xec!\x015Hr]\xea\x96ii\vV\xf4\x96\xda\xc9\xb9\x93WL\'\x8e\x91q\xf8(>5\xf3\x17\xc8a\x9e\xf1\x1do\xf2\xe3\x8b\x0e\x02F.\x8a!\x82\xa9?Gj\xba\xf3\xb4b\x85s;ff#\xc2\x8d\xaa\xed\x88gE\x96\x94\xda\x04\xdbG\x85<\x01\x8fKH\xac\xee\xe9\x060\xaaPx#\xce\xc7\x87I\xd7Z,\x9b|@\xb7\xaae\xb3\b\xf6\\\f\x15`\\\xc9\xc9\x1b\x11\xb4\xf9\x1a\xf2uI\xe0\xc1\xee\xf3\x95\'r\xea\x9f\xce\xab\xa2\xb4\xcc\xe6\xc9\x95,\f\xe2;}\x8cq\x02\x9f\x8d6o[\x9c\x10\xe3j2\xf5\xd1\x14\xd5ba\x8b\x9c\xffa\xab\x9bs\x88\xd5u\xf6U=\xcb,:\x06\x9d\x15`\'\xdc\x0f\x13\xfb\x93D\xa3\x01\x1e\xd0\xafy\xd3\x88P\rC\xeedZgp\x9a\xd9\x8f:\xa8q\xe5K\xa3\xa1\n-\x87\xff\x81e\xd5\xd3\x13\xf5\xa0J\b\xc6@\x12;\xcc/NH]d4\xdfm\xd3\x1b\xacP\x19\x19\x82\xa4ka\x9fM\x11U\xe3wy\xe5\xfc`\x1d\x86\xe8~\xd3\xe2\x8c\x8a5\xbd\xa7\xa0\xe66\xce\xa2\xd8D\xbd\xff\xecP\x92\xc9\xaa,d\xc3AT\x06\xed>\xad\x1c\xba\xf91Z\xa4\x99\nP\xa9\xbf&\x83\xa6\r+\xa9\x88\xf7\xf9\xce\xad\xbb\xdc\x96ee^\x1fi\xd6%(_\xe8\xda\x15J\x15\n\xbfYz\x8dqsQi\x0f\xf6\xad\xc2\xcdj\xf3\xbas\xe6\xc0o8\xe3\xfa\x04\x14\xa3\xa2h8C\x93\xd3yZ0d\xf02\xae\x01x\xcc\xde\x92*\xb2\x80\x97\xe9\xd5+\xa9\xa2I\xde\xc2\xf1\xb26\x9b\x10\xee\bPY\xb2\xd2;\xc79\xc8\x85\xc3\x91`9\xfc\xb3W\x81\x9e\xdfe9\xf7\xf4\x9b\xff-v$<\x1a#\xdcc7^G\xdc-\xe2\x1f\x1bI\x8e\x1e\x98\x9a\t\xc9\x05Z\x1b\xcfAJ\xf0\xa3\x8c*\x90\v\x1f\xc7\x1c\xc8\xdd\xe5P\x00'/526, 0x5) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="08000300060000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000240), 0x40a680, 0x0) (async) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000240), 0x40a680, 0x0) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x300) 12.159644304s ago: executing program 4 (id=829): unshare$auto(0x40000082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x5ff4, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty36\x00', 0x400201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, 0x0, 0x4000040) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000ffdbdf25880000000800260006000000050089000a00000008006100000000000800c900c20700000400ae00"], 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) syslog$auto(0x4, &(0x7f0000007980)='\n)&*%#.+&%\r\x00', 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x80402, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) r3 = clone3$auto(0x0, 0x1fe000) rt_sigqueueinfo$auto(r3, 0x0, &(0x7f00000002c0)={@_si_pad}) setrlimit$auto(0x9, 0x0) io_setup$auto(0x401, 0x0) 10.028580184s ago: executing program 3 (id=836): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0xa, 0x2, 0x73) (async) shutdown$auto(0x200000003, 0x2) 9.747698479s ago: executing program 3 (id=837): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) socket(0x2, 0x2, 0x88) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x48e, 0x0, 0x9}]}) bind$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @broadcast}, 0x6a) connect$auto(0x3, 0x0, 0x55) 9.204184416s ago: executing program 3 (id=839): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = socket(0x1e, 0x1, 0x0) getsockopt$auto_SO_OOBINLINE(r2, 0xab26, 0xa, &(0x7f0000000340)='/dev/ptyb1\x00', &(0x7f0000000380)=0x7) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xffffffff, &(0x7f00000000c0)=@link_update={r0, @new_prog_fd=r0, 0x3, @old_prog_fd=r1}, 0x1e) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyb1\x00', 0x101840, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) setsockopt$auto_SO_DOMAIN(r1, 0xe20f, 0x27, &(0x7f00000002c0)='/dev/ptyb1\x00', 0xbea) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/neigh/batadv0/proxy_delay\x00', 0x141241, 0x0) pwrite64$auto(r6, &(0x7f0000000080)='+\\#', 0x3747, 0x0) writev$auto(r5, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) close_range$auto(0x2, 0x8, 0x0) r7 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x541c, r7) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000300), r7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x24048011) 8.627659639s ago: executing program 1 (id=840): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) 7.610325315s ago: executing program 1 (id=842): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000001c0)="42777dd1330b458d0b5c44ca32e94fc00cfbce962ee7d8f31c0f90c327830f55adfdceafcc0f7b5a21ea23bdf5344d47d49d60218e57bb33118d04fdd37f5fd17f96a318132a5dd282784244bd58b9a0c8adc60d2f8535b3", 0x8}, 0x7, 0x0, 0x7, 0xb5) r0 = socket(0x11, 0x3, 0x9) unshare$auto(0x628d) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300000000000000a3677337f9eca9075f6bba4416", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) unshare$auto(0xea5) 7.102431223s ago: executing program 1 (id=843): open(0x0, 0x149443, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) socket(0x22, 0x2, 0x2) msgctl$auto_IPC_SET(0xffffff01, 0x1, &(0x7f00000000c0)={{0xb, 0x0, 0xee00, 0xffffffff, 0x1, 0xa, 0x8}, &(0x7f0000000000)=0x40, &(0x7f0000000080)=0x5, 0x5, 0xf3d, 0x8, 0x2, 0xb, 0x4, 0xfff8, 0x8001, @raw=0x10001, @inferred=0x0}) r3 = getegid() setregid$auto(r3, r3) statx$auto(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x5, 0x7, &(0x7f0000000440)={0xffffffff, 0x3, 0x0, 0x9a2, r1, r3, 0x6, 0x7, 0x40000003, 0x0, 0x8001, 0x5, {0x7, 0x6}, {0x2, 0x1}, {0x191, 0x2}, {0x0, 0x4}, 0x3, 0xfffffffe, 0xea, 0x4, 0x3, 0x7, 0x2, 0x7, 0xfffffff8, 0xfffffffd, 0xd9, 0x1, [0xf38, 0x2, 0xfffffffffffffffd, 0x78d43dfc, 0x2, 0x100000001, 0xa, 0x3, 0x5423]}) shmctl$auto_SHM_STAT_ANY(0x5, 0xf, &(0x7f0000000100)={{0x1, 0xee01, r3, 0x6, 0x10, 0xe33c, 0x9}, 0x6, 0x10001, 0x3, 0x800, @inferred, @inferred=r2, 0x7ff, 0x0, &(0x7f0000000300)="c5735d3f4c303440dab17436db31f5944b5b94a814bd9dbdae40f61efe5cb31df400cd294995a6c2b7bdc3f5a0a8c24f1a4f401c3f2e8595d6920d5297cf00bd6d2eda28acba3ad82abaeedc6f654f7212010ad99940", &(0x7f00000001c0)="dd3e822331711a6defe0e000b56263f865f2e63f15431b1ef939a5542d5cb8e6a4eb23bb788a3848b407f338ad238456d845095102d2fdf35aea51487d87824df71f05a071a3d424d1411f63916eb81e05487eddf9105218f7e55a6489d494f7b96252ed8c3708511c98f079cc01dd5c7f896e99cd5c57a20b15d4e535e7328262aa074a1b29f37246b9bbb981442b2a53c08e5a5f23bc19d31dad3a3221a22cf31e298dd5fafe412c4d0c3d13547803cb38acbab78c1ca8050065c002dad95cbbefd978be82e7"}) setpriority$auto_PRIO_USER(0x2, r4, 0x5) bind$auto(0x7, &(0x7f0000000180)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop0\x00', 0x420000, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/ioports\x00', 0x2044c2, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.282414793s ago: executing program 4 (id=845): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/acpi/parameters/ec_event_clearing\x00', 0x129882, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) ioctl$auto(r1, 0x4b62, 0x9) sendfile$auto(r0, r0, 0x0, 0x8) r2 = open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x280, 0x10) readlinkat$auto(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='/sys/module/acpi/parameters/ec_event_clearing\x00', 0x5) 6.17130323s ago: executing program 1 (id=846): socket(0x2, 0x3, 0xa) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x8) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0xfb3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-256kB/stats/anon_fault_fallback_charge\x00', 0x60c00, 0x0) read$auto(r1, &(0x7f00000000c0)='/sys/devices/~latform/vhci_hc$.7/usb23/23-0:1.0/~\xda=\x8eep_81/inver', 0x6864a34) openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) 5.838742072s ago: executing program 2 (id=847): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x2381, 0x0) ioctl$auto(r3, 0xc0845657, r3) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x6) (async) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x2100, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) 5.540635591s ago: executing program 3 (id=848): open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = socket(0x1e, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000001c0)='/:$]\x00', 0x0) prctl$auto(0x42, 0xfffffffffffffffd, 0x0, 0xb, 0xfffffffffffffffc) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x100, 0xd, 0x8fd6, 0x948b, 0x3, 0x80000000, 0x3, 0x4, 0x60, 0x80000001, 0x4, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pivot_root$auto(&(0x7f0000000080)='..\x00', 0x0) r3 = open(0x0, 0x27ffd, 0x15a) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x2, 0xc, 0x0, 0x7fb, 0x0}) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto(r3, 0x0, 0x80) 4.379562108s ago: executing program 2 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_KEY_SET(r0, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000000)={0x18, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x42000) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), r0) sendmsg$auto_NFC_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x138, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_LLC_SDP={0x10, 0x13, 0x0, 0x1, [@typed={0xb, 0x76, 0x0, 0x0, @str='TIPCv2\x00'}]}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '\"'}, @NFC_ATTR_VENDOR_DATA={0xfa, 0x1f, "0ad3842d025b5ee5ae2b6a991e4f95090d531ed9ca55e3500f1d35abe606aceb07c32e27766f11748fc2c473ad0eb9c0b73d45f5e418297131ef8998baad7414ccf33d0ff0f87303e8fa43e98d3f7edc0a51ca030a5cbf3ce99b9846aefc20cc2e932d9ff991c205c002cf7424d63438969275c0a9f5a5b27d52e572e338335a2936da2bad2d82316233c8ff999ac55541bf7b293e2352e9da8f5a7f22748feb3db59ee571401e2bc9a98c199c78b911c7ccaa6812ac9dad489bd514db56e9bcaf920b367133955e0dea28d4bd55a422cd2c98f3403d38c7c6fdff34ea0aaeb5b59c24ac6a00132c6e3f14c08e4d384b2b63261bfde2"}]}, 0x138}}, 0x4000004) 4.22587744s ago: executing program 2 (id=850): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/macvtap0/accept_local\x00', 0x82002, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/macvtap0/accept_local\x00', 0x82002, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) ppoll$auto(&(0x7f0000000040)={r2, 0x5, 0xf}, 0x4, 0x0, 0x0, 0x8) write$auto(r0, 0x0, 0x81) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/comedi\x00', 0x0, 0x0) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/comedi\x00', 0x0, 0x0) lseek$auto(0x3, 0x20000, 0x1) mmap$auto(0x3, 0xfff, 0x0, 0x1ff, r2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r1, r4, 0x0, 0x1) r5 = ioctl$auto_TUNSETLINK(r3, 0x400454cd, &(0x7f0000000100)=0x5e34) read$auto_proc_setgroups_operations_base(r5, &(0x7f0000000140)=""/122, 0x7a) 3.94492587s ago: executing program 3 (id=851): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), r0) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003e80)={0x14, r1, 0x309, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) connect$auto(0x3, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0, 0x2b}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0xc8201, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48090}, 0x0) 3.835667437s ago: executing program 2 (id=852): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) prctl$auto(0x41, 0x0, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80000, 0x0) poll$auto(0x0, 0x8001, 0x70) sendmsg$auto_NL80211_CMD_EPCS_CFG(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002800)={&(0x7f00000028c0)={0x120, 0x0, 0x100, 0x60bd2f, 0x25dfdafb, {}, [@NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x83}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_CQM={0xf7, 0x5e, 0x0, 0x1, [@generic="6e1dc32ddd9a8b095aea359f20be487169caaff531d6f452ded13f76eb0fd5b60a8227df2017f9719e308252f2873b52553067d0fdeda735d82841edd8fcb2f513662e906ecaede79c4ae522943208ba61b44e7a14179a4eaca1d611f989c205c22b59c4d89e56c168f28af4dc87ff9d56e94d8363ec27935b842c954af60c5cca9bfca0a9f5fdc9903daa2473a2f38459f300261aa94579576e1c59c0d52051769afdd98c5e956b44e1c905fe2d64f2e8155ca4e26a502f7c94d76c79a6b6c2fbcea01226baae0f6b351b0c455df65ccdaa9461c771217a53d581baac84e79abc7300f5604027b34a8a9d9b613eed528a117e"]}]}, 0x120}, 0x1, 0x0, 0x0, 0xc041}, 0x0) ioctl$auto_BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) shmctl$auto_SHM_UNLOCK(0x200, 0xc, &(0x7f0000001340)={{0x33c, 0xee00, 0x0, 0xffff129a, 0x6, 0x4, 0x6}, 0x3ff, 0x200, 0x1, 0x3, @inferred, @raw=0x1, 0xb0fc, 0x0, &(0x7f0000001140)="5d362a4d6f5b4ed4c157f695f2972b8e0c2f97966273fb8738a2c3082026978749767e52ff6d1da65f5651ef06a4b10742277620702974fe6116e5a2267377667ff9e02fd5112b03198485773ee4e8784ab62cc01e28975faad82606e2809d3c9fc8224d84d4e18330996c329e56eb18118ce9b158454a2dac99b6e6412f0d3398df9c326c35563119b658258946a995bf6956afd4ba609c407a8b36fe674855c71e934bb9b0e1245a76456df6cba581cc0ee5ea18ced298d6d6b4b5e7e6260c0311f11039ec2adc2349dc8c1fd7838ad6075a04158087602a71ccc7b0949b61ec82d2685f313a44901e3e", &(0x7f0000001240)}) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') setsockopt$auto(r2, 0x104000000000010e, 0xa, 0x0, 0x400) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) unshare$auto(0x40000080) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b", 0x22) 3.669242348s ago: executing program 1 (id=853): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) timer_create$auto(0x8, &(0x7f0000000140)={@sival_ptr=&(0x7f0000000040)="2f69adfd7b923e8273fe83c98ce262ec05de462636faedc0589ae3b5c7095ca84bfd313812d4e78fc108041ab6a5d583f52b069a398231387c5b90d7ce64bc7d5861bc7c6ed12ffd949062caee72269ec10705691eaa5db0cef8279d077fec58f607d5c31cf99fa84ebc3d011449812518f7b7ed4459049ff584cdf5e76631f1bda2d89923d7148edd2186916f8ce760e495ca7a2e33b1cc7e8d8c47e85b20098c9244045e01492b192274074fefeb1a3f98a1a1ae4db26d4e250d3a28b443be427ade8cec06e766a41eaa11d0066bf678f0a17c6f9b624d50111a021435fd74", @inferred=r0, 0x101, @_tid=0x0}, &(0x7f0000000180)=0x1400000) write$auto_tty_fops_tty_io(r1, &(0x7f00000001c0)="acae7371bf38bd2e49d6c2695f334fdf", 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x88400, 0x0) ioctl$auto_BLKTRACESTOP2(r0, 0x1275, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x400080, 0x200007, 0x15) r3 = syz_open_procfs$namespace(r2, &(0x7f0000000200)='ns/cgroup\x00') setns(r3, 0x20000000) 3.133779266s ago: executing program 2 (id=854): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) prctl$auto(0x41, 0x0, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd15\x00', 0x80000, 0x0) poll$auto(0x0, 0x8001, 0x70) sendmsg$auto_NL80211_CMD_EPCS_CFG(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$auto(r2, 0x104000000000010e, 0xa, 0x0, 0x400) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_TXREHASH(r4, 0x1, 0x4a, &(0x7f0000000480)='\xc4\x00', &(0x7f00000004c0)=0x10) mmap$auto(0x6, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8003) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fedbdf2503000000040008000c0001800800100004"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.764101137s ago: executing program 1 (id=855): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) prctl$auto(0x41, 0x0, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd15\x00', 0x80000, 0x0) poll$auto(0x0, 0x8001, 0x70) sendmsg$auto_NL80211_CMD_EPCS_CFG(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) r3 = open(0x0, 0x22240, 0x154) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$auto(r2, 0x104000000000010e, 0xa, 0x0, 0x400) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xb01, 0x0) unshare$auto(0x40000080) (fail_nth: 1) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763", 0x1e) 1.222050846s ago: executing program 4 (id=856): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x0, 0x5d77, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptye9\x00', 0x0, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptye9\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) open(0x0, 0x22240, 0x155) (async) open(0x0, 0x22240, 0x155) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop13/queue/wbt_lat_usec\x00', 0xa801, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x1, 0x106) (async) socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000140)=@in={0x2, 0x3, @loopback}, 0x4) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @loopback}, 0x55) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto(0x3, 0x0, 0xf34) (async) read$auto(0x3, 0x0, 0xf34) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) write$auto(0x3, 0x0, 0xffd8) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = socket(0x2, 0x80802, 0x0) r3 = open(&(0x7f0000000100)='./cgroup\x00', 0x50800, 0x412) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) io_uring_setup$auto(0x6, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) getdents$auto(r3, 0x0, 0xde) setsockopt$auto(r2, 0x0, 0x20, 0x0, 0x20000b) 1.077916457s ago: executing program 3 (id=857): syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) setsockopt$auto_SO_TIMESTAMPING_OLD(r2, 0x4, 0x25, &(0x7f0000000000)=':\x00', 0x7) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) (async) sendfile$auto(r1, r1, 0x0, 0x3) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) (async) setsockopt$auto_SO_TIMESTAMPING_OLD(r2, 0x4, 0x25, &(0x7f0000000000)=':\x00', 0x7) (async) 0s ago: executing program 2 (id=858): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/midi2\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) r1 = socket(0xa, 0x2, 0x88) setsockopt$auto(r1, 0x11, 0x1, 0x0, 0x4) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x58) sendmmsg$auto(0x3, 0x0, 0x100, 0x5e61) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x7, 0x7, 0xdf, 0x9b73, r0, 0xffffffffffffffff) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x401) getpid() socket(0x11, 0x3, 0x9) r2 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r2, &(0x7f0000000040)="6524b5aac083b05c1173a1174ad8f5246cdc9552bbdffc095f2e", 0x1a) r3 = socket(0xa, 0x3, 0x5) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000480)='\xf8\xcf\x96\xe15\xdcT\xce\x00\x00\x0fxB\xea\xa5\xb2\xcf%\xd81*\xe3\x83* \fj\xb0\xd7B\x03|\x06\xa4{u\xa7\r\xb68e\n\xd3=\xee.\x94\xb0\x19\xd0\xf4\xc4\xb4\x13\xc6\xae_3\xa407H([\xd4*\xb2\xce\t\x00\x00\x00\x00\x00\x00\x00\xe3\rg\xd2\xcd\xb2\xe7F\xa9\xd8v\x11\ap\xb1\x14\xed:a\xb0`\x06\x97\xe5r\x8b\x8b\xd9\x1d\xff(\x1d5\x0e\x86u0|\xdf\x03\xf9\xfbC\x1fQ\xd2\x84\x92\x9d\x1b\xd5\x99\nN\xaf{\xd4:\a\xc4\xd6`\xd3\xb0\n\x9d4\x8b\xcc\xfc\x92X;_+\xc7\xc8\xec\xd8\xeb~\r\x81\x00\x00\x00\x00\xa1@\xb0\x85\xcb\x80e\xa8F\xc7\x05\x97\xfe$\x9f\xbc\xf9\xfau\v\xff\x89/\xcd\xdf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x00\x00\x00\x00\x00\x00\xfc\xaf\xf9\x18z\x9b\xa7\x8a\x8c\xd1$`\x93\x13\xd2%\xaa\xc0\xf2~\xec\x915-\x15poo\xc2\xaa,$\x90\xbd>C\x8b\x1b\xce]\x7f\xb6\xae\xe2\xban5N4\xaa\xebFT\xbe\xe8H\xeb\xb5\xae\x91`+\xa48\x11n\x14\x04\x00\xcd\x17\x83\x06\x00\x00\x00\x00\x00\x00\x00\\W\xf7\xa7\xe9A\xf9\v\x8f6\xbe\x01\xc4r\xed\xf1\xfb\xaf\x00\x00\x00\x00\x00\x00\x00', 0x7fffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) socket(0x7, 0x3, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 syzkaller syzkaller login: [ 416.762174][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 419.903791][T10191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 419.904338][T10191] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 419.904541][T10191] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 419.904724][T10191] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 419.904803][T10191] CPU0 is offline. [ 420.187087][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.786'. [ 420.187834][T10209] random: crng reseeded on system resumption [ 420.345105][T10211] sp0: Synchronizing with TNC [ 420.434540][T10197] Invalid ELF header magic: != ELF [ 421.416978][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout [ 421.976551][ T5861] Bluetooth: hci1: command 0x0c1a tx timeout [ 421.983432][ T5861] Bluetooth: hci2: command 0x0c1a tx timeout [ 421.990585][ T5855] Bluetooth: hci4: command 0x0c1a tx timeout [ 423.828517][T10289] FAULT_INJECTION: forcing a failure. [ 423.828517][T10289] name failslab, interval 1, probability 0, space 0, times 0 [ 423.964148][T10289] CPU: 1 UID: 0 PID: 10289 Comm: syz.4.797 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 423.964184][T10289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 423.964205][T10289] Call Trace: [ 423.964212][T10289] [ 423.964222][T10289] dump_stack_lvl+0x16c/0x1f0 [ 423.964251][T10289] should_fail_ex+0x512/0x640 [ 423.964275][T10289] ? fs_reclaim_acquire+0xae/0x150 [ 423.964316][T10289] should_failslab+0xc2/0x120 [ 423.964344][T10289] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 423.964370][T10289] ? security_inode_alloc+0x3b/0x2b0 [ 423.964408][T10289] security_inode_alloc+0x3b/0x2b0 [ 423.964441][T10289] inode_init_always_gfp+0xce4/0x1030 [ 423.964489][T10289] alloc_inode+0x86/0x240 [ 423.964519][T10289] sock_alloc+0x40/0x280 [ 423.964549][T10289] __sock_create+0xc1/0x8d0 [ 423.964588][T10289] inet_ctl_sock_create+0x94/0x230 [ 423.964626][T10289] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 423.964666][T10289] ? proc_create_net_data+0x147/0x1b0 [ 423.964698][T10289] ndisc_net_init+0x89/0x250 [ 423.964730][T10289] ? __pfx_ndisc_net_init+0x10/0x10 [ 423.964764][T10289] ? __pfx_ip6mr_net_init+0x10/0x10 [ 423.964801][T10289] ? ip6mr_net_init+0x2d8/0x4e0 [ 423.964839][T10289] ? __pfx_ndisc_net_init+0x10/0x10 [ 423.964870][T10289] ops_init+0x1df/0x5f0 [ 423.964900][T10289] setup_net+0x1ff/0x510 [ 423.964926][T10289] ? lockdep_init_map_type+0x5c/0x280 [ 423.964961][T10289] ? __pfx_setup_net+0x10/0x10 [ 423.964991][T10289] ? debug_mutex_init+0x37/0x70 [ 423.965019][T10289] copy_net_ns+0x2a6/0x5f0 [ 423.965052][T10289] create_new_namespaces+0x3ea/0xa90 [ 423.965086][T10289] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 423.965116][T10289] ksys_unshare+0x45b/0xa40 [ 423.965150][T10289] ? __pfx_ksys_unshare+0x10/0x10 [ 423.965185][T10289] ? xfd_validate_state+0x61/0x180 [ 423.965257][T10289] __x64_sys_unshare+0x31/0x40 [ 423.965290][T10289] do_syscall_64+0xcd/0x490 [ 423.965318][T10289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.965343][T10289] RIP: 0033:0x7f0cf998e9a9 [ 423.965361][T10289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.965385][T10289] RSP: 002b:00007f0cfa817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 423.965408][T10289] RAX: ffffffffffffffda RBX: 00007f0cf9bb5fa0 RCX: 00007f0cf998e9a9 [ 423.965424][T10289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 423.965438][T10289] RBP: 00007f0cf9a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 423.965453][T10289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.965467][T10289] R13: 0000000000000000 R14: 00007f0cf9bb5fa0 R15: 00007fff669b1668 [ 423.965498][T10289] [ 423.989146][T10289] socket: no more sockets [ 423.989162][T10289] ICMPv6: NDISC: Failed to initialize the control socket (err -23) [ 425.654457][T10312] binder: 10309:10312 ioctl 400c620e 0 returned -22 [ 426.898683][T10283] tty tty49: ldisc open failed (-12), clearing slot 48 [ 426.960613][T10310] tty tty1: ldisc open failed (-12), clearing slot 0 [ 428.185304][T10345] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 428.248550][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.809'. [ 428.583793][T10345] svc: failed to register nfsdv3 RPC service (errno 111). [ 428.820173][T10345] svc: failed to register nfsaclv3 RPC service (errno 111). [ 430.854229][T10367] ubi0: attaching mtd0 [ 430.979689][T10367] ubi0: scanning is finished [ 431.069257][T10367] ubi0: empty MTD device detected [ 431.118395][T10367] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 431.640933][T10367] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 432.455963][T10396] FAULT_INJECTION: forcing a failure. [ 432.455963][T10396] name fail_futex, interval 1, probability 0, space 0, times 1 [ 432.678935][T10396] CPU: 1 UID: 0 PID: 10396 Comm: syz.2.821 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 432.678971][T10396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.678986][T10396] Call Trace: [ 432.678994][T10396] [ 432.679002][T10396] dump_stack_lvl+0x16c/0x1f0 [ 432.679032][T10396] should_fail_ex+0x512/0x640 [ 432.679061][T10396] get_futex_key+0x1d0/0x1540 [ 432.679094][T10396] ? __pfx_get_futex_key+0x10/0x10 [ 432.679124][T10396] ? mmap_region+0x1ee/0x3f0 [ 432.679155][T10396] futex_wake+0xe7/0x4e0 [ 432.679187][T10396] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 432.679224][T10396] ? __pfx_futex_wake+0x10/0x10 [ 432.679264][T10396] ? up_write+0x1b2/0x520 [ 432.679305][T10396] do_futex+0x1e3/0x350 [ 432.679334][T10396] ? __pfx_do_futex+0x10/0x10 [ 432.679371][T10396] __x64_sys_futex+0x1e0/0x4c0 [ 432.679402][T10396] ? fput+0x70/0xf0 [ 432.679429][T10396] ? __pfx___x64_sys_futex+0x10/0x10 [ 432.679458][T10396] ? ksys_mmap_pgoff+0x85/0x5c0 [ 432.679499][T10396] do_syscall_64+0xcd/0x490 [ 432.679526][T10396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.679550][T10396] RIP: 0033:0x7fada538e9a9 [ 432.679569][T10396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.679592][T10396] RSP: 002b:00007fada619c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 432.679623][T10396] RAX: ffffffffffffffda RBX: 00007fada55b5fa8 RCX: 00007fada538e9a9 [ 432.679639][T10396] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fada55b5fac [ 432.679654][T10396] RBP: 00007fada55b5fa0 R08: 00007fada619d000 R09: 0000000000000000 [ 432.679669][T10396] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fada55b5fac [ 432.679684][T10396] R13: 0000000000000000 R14: 00007ffd5b71fb00 R15: 00007ffd5b71fbe8 [ 432.679713][T10396] [ 436.586944][T10419] netlink: 330 bytes leftover after parsing attributes in process `syz.4.825'. [ 437.000255][T10433] netlink: 9032 bytes leftover after parsing attributes in process `syz.2.827'. [ 437.975926][T10443] binder: 10441:10443 ioctl 40046205 0 returned -22 [ 438.061943][T10445] FAULT_INJECTION: forcing a failure. [ 438.061943][T10445] name failslab, interval 1, probability 0, space 0, times 0 [ 438.202332][T10445] CPU: 1 UID: 0 PID: 10445 Comm: syz.3.831 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 438.202375][T10445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.202390][T10445] Call Trace: [ 438.202397][T10445] [ 438.202406][T10445] dump_stack_lvl+0x16c/0x1f0 [ 438.202436][T10445] should_fail_ex+0x512/0x640 [ 438.202460][T10445] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 438.202502][T10445] should_failslab+0xc2/0x120 [ 438.202530][T10445] __kmalloc_cache_noprof+0x6a/0x3e0 [ 438.202569][T10445] ? alloc_super+0x52/0xbd0 [ 438.202609][T10445] alloc_super+0x52/0xbd0 [ 438.202644][T10445] ? sget_fc+0xd3/0xc20 [ 438.202686][T10445] sget_fc+0x116/0xc20 [ 438.202724][T10445] ? __pfx_set_anon_super_fc+0x10/0x10 [ 438.202761][T10445] ? __pfx_mqueue_fill_super+0x10/0x10 [ 438.202789][T10445] get_tree_nodev+0x28/0x190 [ 438.202812][T10445] mqueue_get_tree+0xf1/0x130 [ 438.202840][T10445] vfs_get_tree+0x8e/0x340 [ 438.202873][T10445] fc_mount+0x18/0x110 [ 438.202905][T10445] mq_init_ns+0x426/0x620 [ 438.202939][T10445] copy_ipcs+0x383/0x610 [ 438.202969][T10445] ? copy_utsname+0xab/0x470 [ 438.203005][T10445] create_new_namespaces+0x20a/0xa90 [ 438.203032][T10445] ? security_capable+0x7e/0x260 [ 438.203065][T10445] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 438.203095][T10445] ksys_unshare+0x45b/0xa40 [ 438.203129][T10445] ? __pfx_ksys_unshare+0x10/0x10 [ 438.203163][T10445] ? xfd_validate_state+0x61/0x180 [ 438.203204][T10445] __x64_sys_unshare+0x31/0x40 [ 438.203237][T10445] do_syscall_64+0xcd/0x490 [ 438.203265][T10445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.203289][T10445] RIP: 0033:0x7f950798e9a9 [ 438.203308][T10445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.203331][T10445] RSP: 002b:00007f950871b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 438.203363][T10445] RAX: ffffffffffffffda RBX: 00007f9507bb5fa0 RCX: 00007f950798e9a9 [ 438.203379][T10445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 438.203394][T10445] RBP: 00007f9507a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 438.203408][T10445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.203422][T10445] R13: 0000000000000000 R14: 00007f9507bb5fa0 R15: 00007ffc9deeb958 [ 438.203451][T10445] [ 438.439390][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.213678][T10465] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 440.414773][T10471] FAULT_INJECTION: forcing a failure. [ 440.414773][T10471] name failslab, interval 1, probability 0, space 0, times 0 [ 440.648144][T10471] CPU: 1 UID: 0 PID: 10471 Comm: syz.3.839 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 440.648179][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 440.648194][T10471] Call Trace: [ 440.648203][T10471] [ 440.648212][T10471] dump_stack_lvl+0x16c/0x1f0 [ 440.648241][T10471] should_fail_ex+0x512/0x640 [ 440.648266][T10471] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 440.648308][T10471] should_failslab+0xc2/0x120 [ 440.648337][T10471] __kmalloc_cache_noprof+0x6a/0x3e0 [ 440.648374][T10471] ? drm_atomic_helper_setup_commit+0x73c/0x15d0 [ 440.648404][T10471] ? drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 440.648438][T10471] drm_atomic_helper_setup_commit+0x8d7/0x15d0 [ 440.648481][T10471] drm_atomic_helper_commit+0xa9/0x380 [ 440.648511][T10471] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 440.648542][T10471] drm_atomic_commit+0x234/0x300 [ 440.648576][T10471] ? __pfx_drm_atomic_commit+0x10/0x10 [ 440.648608][T10471] ? __pfx___drm_printfn_info+0x10/0x10 [ 440.648650][T10471] ? drm_client_rotation+0x4da/0x6a0 [ 440.648687][T10471] drm_client_modeset_commit_atomic+0x69d/0x7e0 [ 440.648730][T10471] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 440.648795][T10471] drm_client_modeset_commit_locked+0x14d/0x580 [ 440.648833][T10471] drm_client_modeset_commit+0x4f/0x80 [ 440.648867][T10471] __drm_fb_helper_restore_fbdev_mode_unlocked+0x19f/0x200 [ 440.648899][T10471] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 440.648941][T10471] drm_fbdev_client_restore+0x2c/0x40 [ 440.648980][T10471] drm_client_dev_restore+0x1f3/0x2a0 [ 440.649017][T10471] drm_release+0x2c4/0x360 [ 440.649049][T10471] ? __pfx_drm_release+0x10/0x10 [ 440.649077][T10471] __fput+0x402/0xb70 [ 440.649120][T10471] task_work_run+0x14d/0x240 [ 440.649163][T10471] ? __pfx_task_work_run+0x10/0x10 [ 440.649202][T10471] ? __pfx___do_sys_close_range+0x10/0x10 [ 440.649233][T10471] exit_to_user_mode_loop+0xeb/0x110 [ 440.649273][T10471] do_syscall_64+0x3f6/0x490 [ 440.649301][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.649325][T10471] RIP: 0033:0x7f950798e9a9 [ 440.649344][T10471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.649367][T10471] RSP: 002b:00007f950871b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 440.649389][T10471] RAX: 0000000000000000 RBX: 00007f9507bb5fa0 RCX: 00007f950798e9a9 [ 440.649405][T10471] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 440.649419][T10471] RBP: 00007f9507a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 440.649433][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.649447][T10471] R13: 0000000000000000 R14: 00007f9507bb5fa0 R15: 00007ffc9deeb958 [ 440.649477][T10471] [ 443.645120][T10500] FAULT_INJECTION: forcing a failure. [ 443.645120][T10500] name failslab, interval 1, probability 0, space 0, times 0 [ 443.729734][T10500] CPU: 1 UID: 0 PID: 10500 Comm: syz.2.847 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 443.729769][T10500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 443.729784][T10500] Call Trace: [ 443.729791][T10500] [ 443.729800][T10500] dump_stack_lvl+0x16c/0x1f0 [ 443.729828][T10500] should_fail_ex+0x512/0x640 [ 443.729852][T10500] ? __kmalloc_noprof+0xbf/0x510 [ 443.729884][T10500] ? asymmetric_key_generate_id+0x36/0x160 [ 443.729915][T10500] should_failslab+0xc2/0x120 [ 443.729943][T10500] __kmalloc_noprof+0xd2/0x510 [ 443.729974][T10500] asymmetric_key_generate_id+0x36/0x160 [ 443.730009][T10500] pkcs7_note_signed_info+0x416/0x5e0 [ 443.730035][T10500] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 443.730074][T10500] asn1_ber_decoder+0xaee/0x1df0 [ 443.730114][T10500] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 443.730161][T10500] pkcs7_parse_message+0x288/0x720 [ 443.730189][T10500] verify_pkcs7_signature+0x30/0xa0 [ 443.730222][T10500] valid_regdb+0x215/0x590 [ 443.730251][T10500] ? __pfx___mutex_lock+0x10/0x10 [ 443.730277][T10500] ? __pfx_valid_regdb+0x10/0x10 [ 443.730312][T10500] reg_reload_regdb+0x11e/0x460 [ 443.730345][T10500] ? __pfx_reg_reload_regdb+0x10/0x10 [ 443.730378][T10500] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 443.730400][T10500] ? nl80211_pre_doit+0x1b0/0xb10 [ 443.730426][T10500] genl_family_rcv_msg_doit+0x209/0x2f0 [ 443.730464][T10500] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 443.730497][T10500] ? rcu_is_watching+0x12/0xc0 [ 443.730531][T10500] ? bpf_lsm_capable+0x9/0x10 [ 443.730565][T10500] ? security_capable+0x7e/0x260 [ 443.730600][T10500] genl_rcv_msg+0x55c/0x800 [ 443.730636][T10500] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.730670][T10500] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 443.730691][T10500] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 443.730730][T10500] ? __pfx_nl80211_post_doit+0x10/0x10 [ 443.730763][T10500] netlink_rcv_skb+0x158/0x420 [ 443.730793][T10500] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.730827][T10500] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.730869][T10500] ? netlink_deliver_tap+0x1ae/0xd30 [ 443.730906][T10500] genl_rcv+0x28/0x40 [ 443.730935][T10500] netlink_unicast+0x58a/0x850 [ 443.730968][T10500] ? __pfx_netlink_unicast+0x10/0x10 [ 443.731006][T10500] netlink_sendmsg+0x8d1/0xdd0 [ 443.731041][T10500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.731081][T10500] ____sys_sendmsg+0xa95/0xc70 [ 443.731115][T10500] ? copy_msghdr_from_user+0x10a/0x160 [ 443.731140][T10500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.731180][T10500] ? __pfx_futex_wake_mark+0x10/0x10 [ 443.731219][T10500] ___sys_sendmsg+0x134/0x1d0 [ 443.731246][T10500] ? __pfx____sys_sendmsg+0x10/0x10 [ 443.731268][T10500] ? __lock_acquire+0x622/0x1c90 [ 443.731340][T10500] __sys_sendmsg+0x16d/0x220 [ 443.731366][T10500] ? __pfx___sys_sendmsg+0x10/0x10 [ 443.731390][T10500] ? __x64_sys_futex+0x1e0/0x4c0 [ 443.731437][T10500] do_syscall_64+0xcd/0x490 [ 443.731463][T10500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.731487][T10500] RIP: 0033:0x7fada538e9a9 [ 443.731506][T10500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.731529][T10500] RSP: 002b:00007fada619c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.731550][T10500] RAX: ffffffffffffffda RBX: 00007fada55b5fa0 RCX: 00007fada538e9a9 [ 443.731566][T10500] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 443.731579][T10500] RBP: 00007fada5410d69 R08: 0000000000000000 R09: 0000000000000000 [ 443.731593][T10500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.731607][T10500] R13: 0000000000000000 R14: 00007fada55b5fa0 R15: 00007ffd5b71fbe8 [ 443.731636][T10500] [ 446.322178][T10533] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 446.441293][T10533] FAULT_INJECTION: forcing a failure. [ 446.441293][T10533] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 446.573388][T10533] CPU: 1 UID: 0 PID: 10533 Comm: syz.2.854 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 446.573423][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.573438][T10533] Call Trace: [ 446.573446][T10533] [ 446.573454][T10533] dump_stack_lvl+0x16c/0x1f0 [ 446.573483][T10533] should_fail_ex+0x512/0x640 [ 446.573512][T10533] should_fail_alloc_page+0xe7/0x130 [ 446.573543][T10533] prepare_alloc_pages+0x3c2/0x610 [ 446.573578][T10533] ? rcu_is_watching+0x12/0xc0 [ 446.573607][T10533] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 446.573642][T10533] ? __lock_acquire+0x622/0x1c90 [ 446.573677][T10533] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 446.573701][T10533] ? __lock_acquire+0x622/0x1c90 [ 446.573753][T10533] ? __lock_acquire+0x622/0x1c90 [ 446.573789][T10533] ? __lock_acquire+0x622/0x1c90 [ 446.573821][T10533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 446.573860][T10533] ? policy_nodemask+0xea/0x4e0 [ 446.573891][T10533] alloc_pages_mpol+0x1fb/0x550 [ 446.573920][T10533] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 446.573956][T10533] folio_alloc_mpol_noprof+0x36/0x2f0 [ 446.573991][T10533] vma_alloc_folio_noprof+0xed/0x1e0 [ 446.574023][T10533] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 446.574055][T10533] ? find_held_lock+0x2b/0x80 [ 446.574080][T10533] ? __handle_mm_fault+0x1092/0x5490 [ 446.574121][T10533] __handle_mm_fault+0x2f21/0x5490 [ 446.574173][T10533] ? __pfx___handle_mm_fault+0x10/0x10 [ 446.574212][T10533] ? __pte_offset_map_lock+0x174/0x310 [ 446.574243][T10533] ? find_held_lock+0x2b/0x80 [ 446.574265][T10533] ? find_held_lock+0x2b/0x80 [ 446.574298][T10533] ? follow_page_pte+0x3af/0x14c0 [ 446.574337][T10533] handle_mm_fault+0x589/0xd10 [ 446.574381][T10533] __get_user_pages+0x589/0x3b80 [ 446.574423][T10533] ? __pfx_mt_find+0x10/0x10 [ 446.574450][T10533] ? __pfx___get_user_pages+0x10/0x10 [ 446.574494][T10533] populate_vma_page_range+0x278/0x3a0 [ 446.574531][T10533] ? __pfx_populate_vma_page_range+0x10/0x10 [ 446.574565][T10533] ? __pfx_find_vma_intersection+0x10/0x10 [ 446.574598][T10533] ? do_mmap+0x69c/0x1210 [ 446.574633][T10533] __mm_populate+0x1d8/0x380 [ 446.574668][T10533] ? __pfx___mm_populate+0x10/0x10 [ 446.574705][T10533] ? up_write+0x1b2/0x520 [ 446.574753][T10533] vm_mmap_pgoff+0x362/0x450 [ 446.574786][T10533] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 446.574823][T10533] ? __x64_sys_futex+0x1e0/0x4c0 [ 446.574852][T10533] ? __x64_sys_futex+0x1e9/0x4c0 [ 446.574886][T10533] ksys_mmap_pgoff+0x7d/0x5c0 [ 446.574917][T10533] ? xfd_validate_state+0x61/0x180 [ 446.574954][T10533] __x64_sys_mmap+0x125/0x190 [ 446.574992][T10533] do_syscall_64+0xcd/0x490 [ 446.575019][T10533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.575043][T10533] RIP: 0033:0x7fada538e9a9 [ 446.575062][T10533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.575085][T10533] RSP: 002b:00007fada619c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 446.575107][T10533] RAX: ffffffffffffffda RBX: 00007fada55b5fa0 RCX: 00007fada538e9a9 [ 446.575123][T10533] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 446.575138][T10533] RBP: 00007fada5410d69 R08: 0000000000000002 R09: 0000000000008000 [ 446.575153][T10533] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 446.575167][T10533] R13: 0000000000000000 R14: 00007fada55b5fa0 R15: 00007ffd5b71fbe8 [ 446.575197][T10533] [ 446.971113][T10526] vivid-003: ================= START STATUS ================= [ 446.978966][T10526] vivid-003: Radio HW Seek Mode: Bounded [ 446.985170][T10526] vivid-003: Radio Programmable HW Seek: false [ 446.991443][T10526] vivid-003: RDS Rx I/O Mode: Block I/O [ 446.997076][T10526] vivid-003: Generate RBDS Instead of RDS: false [ 447.003438][T10526] vivid-003: RDS Reception: true [ 447.008449][T10526] vivid-003: RDS Program Type: 0 inactive [ 447.015000][T10526] vivid-003: RDS PS Name: inactive [ 447.020424][T10526] vivid-003: RDS Radio Text: inactive [ 447.033290][T10526] vivid-003: RDS Traffic Announcement: false inactive [ 447.040401][T10526] vivid-003: RDS Traffic Program: false inactive [ 447.046830][T10526] vivid-003: RDS Music: false inactive [ 447.052396][T10526] vivid-003: ================== END STATUS ================== [ 447.488974][T10538] FAULT_INJECTION: forcing a failure. [ 447.488974][T10538] name failslab, interval 1, probability 0, space 0, times 0 [ 447.573400][T10538] CPU: 1 UID: 0 PID: 10538 Comm: syz.1.855 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 447.573434][T10538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 447.573449][T10538] Call Trace: [ 447.573456][T10538] [ 447.573465][T10538] dump_stack_lvl+0x16c/0x1f0 [ 447.573493][T10538] should_fail_ex+0x512/0x640 [ 447.573516][T10538] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 447.573543][T10538] should_failslab+0xc2/0x120 [ 447.573570][T10538] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 447.573593][T10538] ? trace_cap_capable+0x18d/0x200 [ 447.573627][T10538] ? create_new_namespaces+0x30/0xa90 [ 447.573659][T10538] create_new_namespaces+0x30/0xa90 [ 447.573684][T10538] ? bpf_lsm_capable+0x9/0x10 [ 447.573718][T10538] ? security_capable+0x7e/0x260 [ 447.573750][T10538] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 447.573780][T10538] ksys_unshare+0x45b/0xa40 [ 447.573812][T10538] ? __pfx_ksys_unshare+0x10/0x10 [ 447.573844][T10538] ? ksys_write+0x1ac/0x250 [ 447.573875][T10538] __x64_sys_unshare+0x31/0x40 [ 447.573906][T10538] do_syscall_64+0xcd/0x490 [ 447.573933][T10538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.573957][T10538] RIP: 0033:0x7f5b84d8e9a9 [ 447.573975][T10538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.573998][T10538] RSP: 002b:00007f5b85b1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 447.574020][T10538] RAX: ffffffffffffffda RBX: 00007f5b84fb5fa0 RCX: 00007f5b84d8e9a9 [ 447.574035][T10538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 447.574050][T10538] RBP: 00007f5b85b1e090 R08: 0000000000000000 R09: 0000000000000000 [ 447.574064][T10538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.574078][T10538] R13: 0000000000000000 R14: 00007f5b84fb5fa0 R15: 00007fffb45724f8 [ 447.574106][T10538] [ 449.418410][T10543] [ 449.420814][T10543] ====================================================== [ 449.427857][T10543] WARNING: possible circular locking dependency detected [ 449.434879][T10543] 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 Not tainted [ 449.441992][T10543] ------------------------------------------------------ [ 449.449100][T10543] syz.4.856/10543 is trying to acquire lock: [ 449.455101][T10543] ffffffff8e72a5a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 449.464697][T10543] [ 449.464697][T10543] but task is already holding lock: [ 449.472063][T10543] ffff888142f29438 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 449.483328][T10543] [ 449.483328][T10543] which lock already depends on the new lock. [ 449.483328][T10543] [ 449.493750][T10543] [ 449.493750][T10543] the existing dependency chain (in reverse order) is: [ 449.502767][T10543] [ 449.502767][T10543] -> #2 (&q->q_usage_counter(io)#30){++++}-{0:0}: [ 449.511403][T10543] blk_alloc_queue+0x619/0x760 [ 449.516711][T10543] blk_mq_alloc_queue+0x175/0x290 [ 449.522268][T10543] __blk_mq_alloc_disk+0x29/0x120 [ 449.527823][T10543] loop_add+0x49e/0xb70 [ 449.532524][T10543] loop_init+0x164/0x270 [ 449.537312][T10543] do_one_initcall+0x120/0x6e0 [ 449.542614][T10543] kernel_init_freeable+0x5c2/0x900 [ 449.548361][T10543] kernel_init+0x1c/0x2b0 [ 449.553588][T10543] ret_from_fork+0x5d4/0x6f0 [ 449.558728][T10543] ret_from_fork_asm+0x1a/0x30 [ 449.564026][T10543] [ 449.564026][T10543] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 449.571254][T10543] fs_reclaim_acquire+0x102/0x150 [ 449.576844][T10543] prepare_alloc_pages+0x162/0x610 [ 449.582504][T10543] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 449.588937][T10543] __alloc_pages_noprof+0xb/0x1b0 [ 449.594517][T10543] pcpu_populate_chunk+0x110/0xb00 [ 449.600175][T10543] pcpu_alloc_noprof+0x86a/0x1470 [ 449.605730][T10543] xt_percpu_counter_alloc+0x13e/0x1b0 [ 449.611732][T10543] find_check_entry.constprop.0+0xbc/0x9b0 [ 449.618084][T10543] translate_table+0xc98/0x1720 [ 449.623483][T10543] ipt_register_table+0x102/0x430 [ 449.629052][T10543] iptable_filter_table_init+0x75/0xa0 [ 449.635088][T10543] xt_find_table_lock+0x2e1/0x520 [ 449.640656][T10543] xt_request_find_table_lock+0x28/0xf0 [ 449.646744][T10543] get_info+0x190/0x610 [ 449.651456][T10543] do_ipt_get_ctl+0x169/0xa10 [ 449.656683][T10543] nf_getsockopt+0x79/0xe0 [ 449.661641][T10543] ip_getsockopt+0x18c/0x1e0 [ 449.666776][T10543] tcp_getsockopt+0x9e/0x100 [ 449.671899][T10543] do_sock_getsockopt+0x34a/0x440 [ 449.677463][T10543] __sys_getsockopt+0x123/0x1b0 [ 449.682849][T10543] __x64_sys_getsockopt+0xbd/0x160 [ 449.688579][T10543] do_syscall_64+0xcd/0x490 [ 449.693613][T10543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.700041][T10543] [ 449.700041][T10543] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 449.707792][T10543] __lock_acquire+0x126f/0x1c90 [ 449.713187][T10543] lock_acquire+0x179/0x350 [ 449.718240][T10543] __mutex_lock+0x199/0xb90 [ 449.723275][T10543] pcpu_alloc_noprof+0xb4c/0x1470 [ 449.728830][T10543] blk_stat_alloc_callback+0xc8/0x280 [ 449.734742][T10543] wbt_init+0xac/0x540 [ 449.739364][T10543] queue_wb_lat_store+0x354/0x3d0 [ 449.744936][T10543] queue_attr_store+0x276/0x320 [ 449.750327][T10543] sysfs_kf_write+0xf2/0x150 [ 449.755479][T10543] kernfs_fop_write_iter+0x354/0x510 [ 449.761315][T10543] vfs_write+0x6c4/0x1150 [ 449.766212][T10543] ksys_write+0x12a/0x250 [ 449.771092][T10543] do_syscall_64+0xcd/0x490 [ 449.776151][T10543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.782587][T10543] [ 449.782587][T10543] other info that might help us debug this: [ 449.782587][T10543] [ 449.792822][T10543] Chain exists of: [ 449.792822][T10543] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#30 [ 449.792822][T10543] [ 449.806496][T10543] Possible unsafe locking scenario: [ 449.806496][T10543] [ 449.813949][T10543] CPU0 CPU1 [ 449.819317][T10543] ---- ---- [ 449.824685][T10543] lock(&q->q_usage_counter(io)#30); [ 449.830080][T10543] lock(fs_reclaim); [ 449.836607][T10543] lock(&q->q_usage_counter(io)#30); [ 449.844525][T10543] lock(pcpu_alloc_mutex); [ 449.849044][T10543] [ 449.849044][T10543] *** DEADLOCK *** [ 449.849044][T10543] [ 449.857204][T10543] 6 locks held by syz.4.856/10543: [ 449.862332][T10543] #0: ffff888033634ef8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 449.871429][T10543] #1: ffff8880359f2428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 449.880433][T10543] #2: ffff888059153488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 449.890213][T10543] #3: ffff888142bafc38 (kn->active#202){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 449.900348][T10543] #4: ffff888142f29438 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 449.912057][T10543] #5: ffff888142f29470 (&q->q_usage_counter(queue)#21){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 449.924023][T10543] [ 449.924023][T10543] stack backtrace: [ 449.929918][T10543] CPU: 1 UID: 0 PID: 10543 Comm: syz.4.856 Not tainted 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(full) [ 449.929948][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 449.929962][T10543] Call Trace: [ 449.929970][T10543] [ 449.929979][T10543] dump_stack_lvl+0x116/0x1f0 [ 449.930004][T10543] print_circular_bug+0x275/0x350 [ 449.930035][T10543] check_noncircular+0x14c/0x170 [ 449.930070][T10543] __lock_acquire+0x126f/0x1c90 [ 449.930106][T10543] lock_acquire+0x179/0x350 [ 449.930136][T10543] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 449.930159][T10543] ? __pfx___might_resched+0x10/0x10 [ 449.930182][T10543] ? ksys_write+0x12a/0x250 [ 449.930202][T10543] ? do_syscall_64+0xcd/0x490 [ 449.930224][T10543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.930250][T10543] __mutex_lock+0x199/0xb90 [ 449.930273][T10543] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 449.930300][T10543] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 449.930322][T10543] ? __pfx___mutex_lock+0x10/0x10 [ 449.930353][T10543] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 449.930373][T10543] pcpu_alloc_noprof+0xb4c/0x1470 [ 449.930398][T10543] ? __pfx_wbt_data_dir+0x10/0x10 [ 449.930420][T10543] ? __pfx_wb_timer_fn+0x10/0x10 [ 449.930447][T10543] blk_stat_alloc_callback+0xc8/0x280 [ 449.930474][T10543] ? kasan_save_track+0x14/0x30 [ 449.930498][T10543] wbt_init+0xac/0x540 [ 449.930528][T10543] queue_wb_lat_store+0x354/0x3d0 [ 449.930554][T10543] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 449.930580][T10543] ? __mutex_trylock_common+0xe9/0x250 [ 449.930614][T10543] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 449.930638][T10543] queue_attr_store+0x276/0x320 [ 449.930664][T10543] ? __pfx_queue_attr_store+0x10/0x10 [ 449.930688][T10543] ? __lock_acquire+0x622/0x1c90 [ 449.930730][T10543] ? find_held_lock+0x2b/0x80 [ 449.930753][T10543] ? sysfs_file_kobj+0xe4/0x290 [ 449.930786][T10543] ? __pfx_queue_attr_store+0x10/0x10 [ 449.930811][T10543] sysfs_kf_write+0xf2/0x150 [ 449.930844][T10543] kernfs_fop_write_iter+0x354/0x510 [ 449.930873][T10543] ? __pfx_sysfs_kf_write+0x10/0x10 [ 449.930907][T10543] vfs_write+0x6c4/0x1150 [ 449.930927][T10543] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 449.930958][T10543] ? __pfx___mutex_lock+0x10/0x10 [ 449.930981][T10543] ? __pfx_vfs_write+0x10/0x10 [ 449.931010][T10543] ksys_write+0x12a/0x250 [ 449.931031][T10543] ? __pfx_ksys_write+0x10/0x10 [ 449.931055][T10543] do_syscall_64+0xcd/0x490 [ 449.931079][T10543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.931103][T10543] RIP: 0033:0x7f0cf998e9a9 [ 449.931121][T10543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.931143][T10543] RSP: 002b:00007f0cfa817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 449.931163][T10543] RAX: ffffffffffffffda RBX: 00007f0cf9bb5fa0 RCX: 00007f0cf998e9a9 [ 449.931179][T10543] RDX: 0000000000000081 RSI: 0000200000000040 RDI: 0000000000000005 [ 449.931193][T10543] RBP: 00007f0cf9a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 449.931207][T10543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.931221][T10543] R13: 0000000000000000 R14: 00007f0cf9bb5fa0 R15: 00007fff669b1668 [ 449.931242][T10543] [ 450.586597][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.592918][ T1300] ieee802154 phy1 wpan1: encryption failed: -22