last executing test programs: 2m50.92341619s ago: executing program 0 (id=1391): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) epoll_create$auto(0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0xffffffffffffffff, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) fchown$auto(0xffffffffffffffff, 0xee00, 0x0) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000380)="ed866ad7625148e6fb7003dd923e63ba59443a3c4d8ec4985e3531c2dfb7145166453aa4e0ec035225fc27a72a14d2d8ab4954fa5e4258cd2bada8a685a08639a60b1acff51d6be788231f7c975aac4bfae7a4586644a5babedf816e9f4777e2b4d68236c6fe1b730575cdb7", 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto(0xca, 0x0, 0x7f) mmap$auto(0x800000, 0x9, 0x100000001, 0x8000000008011, 0xffffffffffffffff, 0x81000000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/3t\x00', 0xa2080, 0x0) 2m49.43524408s ago: executing program 0 (id=1394): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 2m48.200314609s ago: executing program 0 (id=1399): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = io_uring_setup$auto(0x6, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2) kill$auto(r2, 0x7) io_uring_setup$auto(0xa, 0x0) ioctl$auto_SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000000)) setsockopt$auto(0xffffffffffffffff, 0x29, 0xd1, 0x0, 0x2) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r3 = socket(0x1e, 0x1, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video33\x00', 0x80382, 0x0) ioctl$auto(r4, 0xc0045627, r3) kexec_load$auto(0xfffffffffffffffb, 0x2, 0x0, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d7) ioctl$auto(0xffffffffffffffff, 0x8921, 0x24) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) ioctl$auto(r0, 0xf, 0xffffffffffffffff) mlock$auto(0xfbe8, 0x4) 2m47.007769012s ago: executing program 0 (id=1404): sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, 0x0, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) clone$auto(0x7, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x101, 0x8) write$auto(0x3, 0x0, 0x100085) 2m45.887942015s ago: executing program 0 (id=1406): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 2m44.110823525s ago: executing program 0 (id=1413): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x6, 0x7, 0x5, 0xd, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) process_mrelease$auto(0xffffffffffffffff, 0x0) 2m34.82865086s ago: executing program 3 (id=1437): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0x15, 0x4, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 2m33.810920848s ago: executing program 3 (id=1441): socket(0xa, 0x801, 0x84) r0 = getpgid(0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c080) open(0x0, 0x161342, 0x100) fcntl$auto(0x3, 0x4, 0xa553) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) syz_clone3(0x0, 0x0) shmctl$auto_IPC_INFO(0x0, 0x3, &(0x7f0000000700)={{0x7, 0x0, 0xee01, 0x5, 0x1ff, 0x5, 0x8001}, 0xda, 0x0, 0x9, 0x0, @inferred, @raw=0x8, 0x8, 0x0, 0x0, 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) migrate_pages$auto(0x0, 0xa, &(0x7f0000000080)=0x9, &(0x7f0000000280)=0x2) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) rt_tgsigqueueinfo$auto(r0, r0, 0xe, &(0x7f0000000100)={@siginfo_0_0={0x2a, 0x5, 0xb2, @_rt={r0, 0x0, @sival_ptr=&(0x7f0000000380)="62c89a0bc2225ee5b054049908213cc431697f9ba2f348e13a794b6ba3e4ceec16073e01359b1f6ffdb710160b8a0d422d64716074fea4531148e38310343efae6efdd5cf2bd1196d0afcfc4c147fadbab8f16589a00d47f8c961715c6638edf390b3536590d48b7f27eceabb74dbc679641c8c51cd8cb185e6a58924c16a99a2ff39fa04c36d1826a616bf7f43f3b3732"}}}) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x9, 0x0, 0x0, 0x0, 0x8000000000000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/rotational\x00', 0xa081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_uring_register$auto_IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000200), 0x0) write$auto(r1, &(0x7f0000000040)='7\x02\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) msgctl$auto_MSG_INFO(0x7000, 0xc, &(0x7f0000000180)={{0x5, 0xee01, 0xee00, 0x7fffffff, 0x0, 0x9, 0x2}, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x5, 0x0, 0x4, 0x1, 0x3, 0xa, 0x8, 0x5, 0x0, @inferred, @raw=0x401}) getdents64$auto(0xffffffffffffffff, &(0x7f0000000000)={0x1e, 0x459b, 0x0, 0xf8}, 0x18) socket(0x2, 0x1, 0x1) read$auto(0xffffffffffffffff, 0x0, 0x0) 2m32.962643692s ago: executing program 3 (id=1443): r0 = socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/hugepages/hugepages-2048kB/resv_hugepages\x00', 0x40200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/65, 0x41) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = socket(0xb, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r3, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, 0x0, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) 2m31.473882304s ago: executing program 3 (id=1447): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto(r0, 0x0, 0x3ff) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x10800, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r1, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x2, 0x7, 0xb, 0x8, 0x100, 0x2, 0x40000003, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/pagemap\x00', 0x4c8202, 0x0) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x40000000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r3, 0xc0285629, r3) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 2m30.399802587s ago: executing program 3 (id=1451): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(0x0, 0x7ffd, 0xfffffff4, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) open(0x0, 0x4eea40, 0x91) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x1e1401, 0xe5) rt_sigtimedwait$auto(&(0x7f0000000000)={0x86e}, 0x0, 0x0, 0x8) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0xc, 0xbc5, 0x13, 0x3, 0x8000) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) clone$auto(0x4, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x100000000006) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r1 = socket(0x5, 0x2, 0x73) getsockname$auto(r1, 0x0, &(0x7f0000000280)=0xaea) mlockall$auto(0x7) r2 = waitid$auto_P_PIDFD(0x3, r0, &(0x7f0000000040)={@siginfo_0_0={0x4, 0xb0e, 0x10000, @_kill={0x0, 0xee01}}}, 0xfffffffe, &(0x7f0000000140)={{}, {0x1, 0x400000000000000}, 0x1, 0x0, 0x6, 0xffff, 0x101, 0x5, 0x97, 0x7f, 0x7f, 0x2, 0x6, 0x7, 0x3, 0x7}) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r2, 0x6, 0x58af) rseq$auto(0x0, 0x4, 0x0, 0x4) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) 2m28.969282789s ago: executing program 32 (id=1413): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) inotify_rm_watch$auto(r1, 0x8001) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x6, 0x7, 0x5, 0xd, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) process_mrelease$auto(0xffffffffffffffff, 0x0) 2m28.74090424s ago: executing program 3 (id=1457): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram13\x00', 0x10d440, 0x0) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0x1000fff) msync$auto(0x7f, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = socket(0x10, 0x2, 0x4) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) remap_file_pages$auto(0x8, 0xda, 0x5, 0x4, 0x4) 2m13.617423526s ago: executing program 33 (id=1457): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram13\x00', 0x10d440, 0x0) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = socket(0x1e, 0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0x1000fff) msync$auto(0x7f, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r4 = socket(0x10, 0x2, 0x4) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x4, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0001, 0x15) remap_file_pages$auto(0x8, 0xda, 0x5, 0x4, 0x4) 2m6.37810238s ago: executing program 1 (id=1506): pwrite64$auto(0xffffffffffffffff, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) sendmsg$auto_NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, 0x0, 0x40) readahead$auto(0xffffffffffffffff, 0x4, 0x4) sysfs$auto(0x1003, 0x401, 0x0) unshare$auto(0x40000080) r0 = socket(0x6, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x38a1, 0x3, 0x66, 0x200, 0x4, 0x3, 0x7fffffff, 0x902c, 0x19, 0x400005, 0x35be, 0x100000004, 0xa1d0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x100000, 0x200, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0xfffff7fffffffffa, 0x8000081) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000100), 0x2001, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c02, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8005}, 0x20080845) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000300)={0x68, 0x7, 0x200000007fff, 0x6, 0x80000000007, 0x1, 0x80000010, 0x8000, 0x400000005, 0x80005, 0xfbfffffe, 0xffffffff, 0x1, 0x85, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x7ffd) rename$auto(&(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='./file0\x00') 2m5.158999375s ago: executing program 1 (id=1509): r0 = syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x2000021}, 0x0, 0x0, 0x0, 0x0}, 0x58) mq_open$auto(0x0, 0x0, 0x1, &(0x7f0000000280)={0x3, 0x5, 0x100000001, 0x62}) mmap$auto(0x8001, 0xff, 0x80000001, 0x1010, 0xffffffffffffffff, 0x28004) mmap$auto(0xc1, 0x2000, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) socket(0x29, 0x5, 0x8) socket(0xa, 0x1, 0x100) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r1, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sysfs$auto(0x0, 0x9, 0x7) prctl$auto(0x20000004, 0x1, r0, 0x8000, 0x0) r3 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r3, &(0x7f0000000200)='\\*)A\x00', 0x2, 0x6, &(0x7f0000000240)={0x3, 0x101}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x1d, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) 2m4.254091989s ago: executing program 1 (id=1521): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) setfsgid$auto(0x9) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xffffff6c, 0x4, 0x8000000, 0x0) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8955, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x10000000001013, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000e00)="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", 0xcb6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x1008000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x5603, r3) 2m2.764389781s ago: executing program 1 (id=1516): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000ff, 0x400, 0x9}]}) setgroups$auto(0xe32, 0x0) 2m0.375946595s ago: executing program 1 (id=1522): sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, 0x0, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) clone$auto(0x7, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x101, 0x8) write$auto(0x3, 0x0, 0x100085) 1m59.60010871s ago: executing program 1 (id=1524): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x8, 0x9, 0x1, 0xeb3, 0xfffefffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x149443, 0x14) fcntl$auto(r1, 0x409, 0x40003f) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) unshare$auto(0x40) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1m44.233717052s ago: executing program 34 (id=1524): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x8, 0x9, 0x1, 0xeb3, 0xfffefffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x149443, 0x14) fcntl$auto(r1, 0x409, 0x40003f) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/192, 0xc0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x8080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) acct$auto(0x0) unshare$auto(0x40) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1m40.194883569s ago: executing program 5 (id=1563): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) read$auto_ftrace_event_id_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 1m38.974180468s ago: executing program 5 (id=1566): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) 1m38.768087905s ago: executing program 5 (id=1571): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) munmap$auto(0xfffffffffffff34b, 0x8592) mkdir$auto(0x0, 0x9) socket(0x25, 0x805, 0x3) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0x7, 0x8000) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r3, 0x0, 0x8080) mmap$auto(0x773d, 0x3ff, 0x1, 0x19, r3, 0x5) shutdown$auto(0x200000003, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 1m37.651519947s ago: executing program 5 (id=1574): r0 = set_tid_address$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = fcntl$auto(0x3, 0x4, 0xa553) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/:$]\x00', 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0x5, 0x13, 0x2, 0xab3) open(0x0, 0x7ffd, 0x12) sendmmsg$auto(r1, &(0x7f0000001440)={{&(0x7f0000000380)="439ba951bfb7625d6e0e9642c0ca86db695ca7e7e00164ffedbbc13fa78ba722e7e0446e74cc2de0fe6e1f1715083c38359e5f93adae10ff847fbcb1b8a2b449c8f384194b733c4abd04572f0f35a6f7005d6ab995debbd7d24ce0cad94ab8827733b339949c8fdc71eba71f383c8fab2d671c10ac45e72378c1da8796920095d6df2ae33c67ba0ea05db3cd8e10fd4224353b4808fe", 0xc, &(0x7f0000000080)={&(0x7f0000000040)="ee244346ec2fe64f5765dfa6df636f459b644404192db23e4c6ce2dd74264525", 0x1}, 0x3, &(0x7f0000000440)="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", 0x8ac, 0x5}, 0x375}, 0x8, 0x8) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) unshare$auto(0x20000080) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) io_uring_setup$auto(0x4c2, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000]}, 0x1fe, 0xd) 1m36.342577756s ago: executing program 5 (id=1579): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 1m35.11802531s ago: executing program 5 (id=1583): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) unshare$auto(0x40000080) mmap$auto(0x8000000000000000, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/can/rcvlist_sff\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000140)=""/103, 0x67) getpgid(0x0) mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1m22.902504905s ago: executing program 2 (id=1623): write$auto(0xffffffffffffffff, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x20401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc) setsockopt$auto(r0, 0x10, 0x1f, 0x0, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.14/usb37/power/level\x00', 0x20681, 0x0) fcntl$auto(0xffffffffffffffff, 0xfffffffd, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x101a02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000001c0)={{@raw=0xfff, 0x100110d, 0xfffd, 0x6, "e927783f468fa2e92fe8ec7a46cbb766439daa1ee1aa0000000000040000660e0701000000000000008000"}, 0x6, 0x0, 0x4, @raw=0x404, @reserved="8ab8a39c0818e683d164808e8d43166d1b4a24e2092ef7dcfea023eb437be8c21c97649160d0737ea473920f544123f0e408fe0c7ca7beda36841734899bd90fac5efb27cf5c530cf4003c62d5bafcfa717532509da37aca163cd0f2706b06fb8330755e8d511549a9bd599d4fa12605a8f13425c83b2958c05e640e5e17e1f6", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)='-7', 0x2) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\x04\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93z', 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x4611, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) 1m21.794523846s ago: executing program 2 (id=1626): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000ff, 0x400, 0x9}]}) setgroups$auto(0xe32, 0x0) 1m19.740156537s ago: executing program 35 (id=1583): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) unshare$auto(0x40000080) mmap$auto(0x8000000000000000, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/can/rcvlist_sff\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000140)=""/103, 0x67) getpgid(0x0) mmap$auto(0x0, 0x2000d, 0x4080000200df, 0xeb1, 0x404, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 1m19.735040696s ago: executing program 2 (id=1632): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r1, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) 1m17.971724945s ago: executing program 2 (id=1636): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r1, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) unshare$auto(0x40000080) 1m14.735824377s ago: executing program 2 (id=1648): r0 = socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x8001) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x610002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x15, 0x3, 0x20009) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x4, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/dfscache\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x3, 0x6c2) r4 = ioctl$auto_TUNSETGROUP(r2, 0x400454ce, &(0x7f00000002c0)=0x401) close_range$auto(r0, r4, 0x7) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0xb0903, 0x0) 1m13.192130326s ago: executing program 2 (id=1640): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000000300)="a04f", 0x2) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socketpair$auto(0x80000000, 0xff60, 0xa26b83f, &(0x7f00000001c0)=0x1000) pread64$auto(0xffffffffffffffff, 0x0, 0x9, 0x8) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) sendfile$auto(r2, 0xffffffffffffffff, 0x0, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 1m5.990997215s ago: executing program 4 (id=1667): unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r1, 0x5509, 0x0) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r2, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44044) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x28, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) close_range$auto(0x2, 0x8, 0x0) listen$auto(0x3, 0x81) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x9, 0x8, 0xc, r0, 0x4, 0x7ff}, 0xee) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) sched_rr_get_interval$auto(0x0, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x28140, 0x0) 1m4.409524428s ago: executing program 4 (id=1664): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0030e5", @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf25010000000500070058000000080009009c781e010600020001000000080018"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000) ioprio_set$auto(0x2, 0x0, 0x208) 1m3.344344889s ago: executing program 4 (id=1666): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0x15, 0x4, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 1m1.949548151s ago: executing program 4 (id=1670): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0x15, 0x4, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 1m0.605140907s ago: executing program 4 (id=1672): sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, 0x0, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) clone$auto(0x7, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x101, 0x8) write$auto(0x3, 0x0, 0x100085) 1m0.295579891s ago: executing program 4 (id=1673): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r1, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) unshare$auto(0x40000080) 57.705265818s ago: executing program 36 (id=1640): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000000300)="a04f", 0x2) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socketpair$auto(0x80000000, 0xff60, 0xa26b83f, &(0x7f00000001c0)=0x1000) pread64$auto(0xffffffffffffffff, 0x0, 0x9, 0x8) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) sendfile$auto(r2, 0xffffffffffffffff, 0x0, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) 45.174133755s ago: executing program 37 (id=1673): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r1, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) unshare$auto(0x40000080) 13.943340749s ago: executing program 6 (id=1770): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0xfff, 0x7, 0xab8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) socket(0x29, 0x801, 0x100) mmap$auto(0x1, 0x3, 0x3, 0x55, r0, 0x8001) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x28401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x20000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto(0x9, 0x0) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) ioctl$auto(0x3, 0x40085400, 0x5) ioctl$auto_BTRFS_IOC_FORGET_DEV(r2, 0x50009405, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) 12.68775667s ago: executing program 6 (id=1775): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0030e5", @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf25010000000500070058000000080009009c781e010600020001000000080018"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) mmap$auto(0x1, 0x3, 0x1, 0xe31, 0xffffffffffffffff, 0xe0) socket(0xa, 0x1, 0x84) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x101, 0x0) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x3, 0xa00006, 0x4, 0x40eb1, 0x602, 0x300000000000) ioprio_set$auto(0x2, 0x0, 0x208) 11.556924172s ago: executing program 7 (id=1777): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r1 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r1, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 11.420173789s ago: executing program 6 (id=1778): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 9.986516064s ago: executing program 7 (id=1781): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) socket(0x15, 0x4, 0x100) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) 8.452009679s ago: executing program 6 (id=1790): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r1, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 7.036546079s ago: executing program 9 (id=1783): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) open(0x0, 0x22240, 0x155) 7.036321467s ago: executing program 6 (id=1784): openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x200, 0x0) r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x40000, 0x0) listen$auto(r0, 0x611e) poll$auto(0x0, 0x6, 0x8) socketpair$auto(0x20, 0x5, 0x4000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) madvise$auto(0x0, 0x200007, 0x19) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, r2, 0x8, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040091}, 0x40850) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 7.03615053s ago: executing program 8 (id=1785): mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram14/power/runtime_active_time\x00', 0xc2a43, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc0c00, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8002, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x4) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000000c0)={@raw=0x5, 0x9, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e"}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0x2, 0x80, 0x3, &(0x7f0000000200)=0xff, 0x3, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r2, 0x0, 0x9) socket(0xa, 0x6, 0x0) 7.035950371s ago: executing program 7 (id=1786): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xc, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x81, 0x4, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x20cc00, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000003c0)=""/239, 0xef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) madvise$auto(0x0, 0x3, 0x66) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r3) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x3c, r4, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0) mq_getsetattr$auto(r1, 0x0, 0x0) 5.532424521s ago: executing program 9 (id=1787): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r0, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) rseq$auto(0x0, 0x6, 0x3, 0xff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x27fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff010000, 0x400000004) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) 5.271932581s ago: executing program 8 (id=1788): r0 = socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x8001) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x610002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x15, 0x3, 0x20009) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x4, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/dfscache\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x3, 0x6c2) r4 = ioctl$auto_TUNSETGROUP(r2, 0x400454ce, &(0x7f00000002c0)=0x401) close_range$auto(r0, r4, 0x7) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0xb0903, 0x0) 4.067498622s ago: executing program 8 (id=1789): mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x8, 0x400008, 0x2, 0x111, 0x2, 0x8004) poll$auto(0x0, 0x5, 0x108) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd6\x00', 0x3a3c02, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.977345188s ago: executing program 9 (id=1791): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) clock_gettime$auto(0xfffffffffffffff0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000180)="f1deefed5ddf77c3086ac06f73353a35cf09d9cab432b2fc686eb8cfacf3f7e0d79f194523549539694c019cd8888a64ce8254fcad00cefceaacc388d3d6026741a73d418b2b2889bafbde9253eae9e1a923ccb8e4611a719df32b7bc8da316f997dff56244f08a89d0a3dcd65375d665dc289dc262fa628f4a4bc39e981d0133c0dda393a", 0x85) sysfs$auto(0x2, 0x0, 0x0) syz_genetlink_get_family_id$auto_psample(&(0x7f0000000040), r1) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x4, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) shutdown$auto(0x200000003, 0x2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram3/trace/end_lba\x00', 0x2062, 0x0) write$auto(r4, 0x0, 0x98c7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0) 3.658206914s ago: executing program 6 (id=1792): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r1, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000180)="221aa2a2e1a47c16e9b935b36eb66fa98ca6d90b78e1fc1799ad1e15807c54f58fa1ee6c6927048cbda12b4e1ad0336a4b88db6e5c7e4fedd6852f33d0b576", 0x2f) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 2.952165213s ago: executing program 7 (id=1793): r0 = socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x8001) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x210040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x4, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/dfscache\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x3, 0x6c2) r4 = ioctl$auto_TUNSETGROUP(r2, 0x400454ce, &(0x7f00000002c0)=0x401) close_range$auto(r0, r4, 0x7) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0xb0903, 0x0) 2.585512775s ago: executing program 9 (id=1794): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x8004) socket(0xa, 0x801, 0x84) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r4, @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x3, 0x1ff, 0x80000000, 0x11, r5, 0x1a6) ioctl$auto(0xffffffffffffffff, 0x4b32, 0x9) 1.78910801s ago: executing program 9 (id=1795): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x6e) io_uring_setup$auto(0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r0, 0x806c4120, &(0x7f0000000100)={0x0, 0x6, 0x95d7, 0x7f, 0x3, 0x1, 0x9, 0x2, 0x2, 0x7, 0xb, 0x8, 0x100, 0x2, 0x40000003, 0x3ff, 0x400, 0x80000000, "0c1056e3480805f935e214e44f620fa9eba8238cacc3d9e6fc45cf541e509fc2457ae4ae"}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x40000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 1.69491725s ago: executing program 8 (id=1796): r0 = timerfd_create$auto(0x9, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioperm$auto(0x7, 0x6, 0x2) r1 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x5, 0x0) setsockopt$auto(r2, 0x10000000084, 0x3, 0x0, 0x1) statmount$auto(0x0, 0x0, 0x1fe, 0xd) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r3 = socket(0xa, 0x801, 0x84) listen$auto(r3, 0x3) getsockopt$auto(r3, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x17d) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(0xffffffffffffffff, 0x5509, 0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSA(0xffffffffffffffff, 0x0, 0xcaa9d210872ac7f9) msgctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000400)={{0x8, 0x0, 0xee00, 0x5, 0x3, 0xb, 0x8}, 0x0, &(0x7f00000003c0)=0x6, 0x2, 0x5, 0x9, 0x9, 0x80000000, 0x100, 0x7ff, 0x3, @inferred, @inferred=0xffffffffffffffff}) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) setns(r1, 0x60020000) timerfd_gettime$auto(r0, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) 1.288053463s ago: executing program 7 (id=1797): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) sysfs$auto(0x2, 0x23, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r1, 0x0, 0x4) 1.0229815s ago: executing program 8 (id=1798): sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, 0x0, 0x4048000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) clone$auto(0x7, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x101, 0x8) write$auto(0x3, 0x0, 0x100085) 394.616043ms ago: executing program 9 (id=1799): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xffffffffffffffff, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r1, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(0x0, r3) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0xb, 0x1, 0x4, 0x0, 0x7fff, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0x10001, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 352.189231ms ago: executing program 7 (id=1800): openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x200, 0x0) r0 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x40000, 0x0) listen$auto(r0, 0x611e) poll$auto(0x0, 0x6, 0x8) socketpair$auto(0x20, 0x5, 0x4000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) madvise$auto(0x0, 0x200007, 0x19) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x14, r2, 0x8, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040091}, 0x40850) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 0s ago: executing program 8 (id=1801): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) socket(0x15, 0x4, 0x100) ioperm$auto(0x7, 0x5ad2, 0xc) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x406, 0x0) madvise$auto(0x0, 0x200007, 0x19) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        syzkaller syzkaller login: [ 508.413678][T11128] can: request_module (can-proto-3) failed. [ 511.038203][T11164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1129'. [ 511.712761][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.722017][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.121674][T11216] ERROR: Out of memory at tomoyo_memory_ok. [ 516.313843][T11216] HfR: entered promiscuous mode [ 519.786168][T11260] random: crng reseeded on system resumption [ 522.039462][T11265] kexec: Could not allocate control_code_buffer [ 531.229466][T11375] FAULT_INJECTION: forcing a failure. [ 531.229466][T11375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 531.340676][T11375] CPU: 1 UID: 0 PID: 11375 Comm: syz.3.1169 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 531.340723][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 531.340745][T11375] Call Trace: [ 531.340755][T11375] [ 531.340768][T11375] dump_stack_lvl+0x16c/0x1f0 [ 531.340825][T11375] should_fail_ex+0x512/0x640 [ 531.340879][T11375] should_fail_alloc_page+0xe7/0x130 [ 531.340914][T11375] prepare_alloc_pages+0x3c2/0x610 [ 531.340952][T11375] ? __lock_acquire+0x622/0x1c90 [ 531.340999][T11375] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 531.341073][T11375] ? find_held_lock+0x2b/0x80 [ 531.341106][T11375] ? mtree_load+0x309/0xa40 [ 531.341152][T11375] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 531.341207][T11375] ? mtree_load+0x325/0xa40 [ 531.341265][T11375] ? __up_read+0x1f8/0x750 [ 531.341313][T11375] ? __pfx___up_read+0x10/0x10 [ 531.341358][T11375] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.341408][T11375] ? policy_nodemask+0xea/0x4e0 [ 531.341441][T11375] alloc_pages_mpol+0x1fb/0x550 [ 531.341473][T11375] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 531.341504][T11375] ? do_raw_spin_lock+0x12c/0x2b0 [ 531.341552][T11375] ? __pfx___access_remote_vm+0x10/0x10 [ 531.341609][T11375] alloc_pages_noprof+0x131/0x390 [ 531.341639][T11375] get_free_pages_noprof+0x10/0xb0 [ 531.341673][T11375] proc_pid_cmdline_read+0x46d/0x900 [ 531.341723][T11375] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 531.341767][T11375] ? rw_verify_area+0xcf/0x680 [ 531.341807][T11375] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 531.341847][T11375] vfs_read+0x1e4/0xc60 [ 531.341898][T11375] ? __pfx___mutex_lock+0x10/0x10 [ 531.341947][T11375] ? __pfx_vfs_read+0x10/0x10 [ 531.341997][T11375] ? __fget_files+0x20e/0x3c0 [ 531.342053][T11375] ksys_read+0x12a/0x250 [ 531.342092][T11375] ? __pfx_ksys_read+0x10/0x10 [ 531.342141][T11375] do_syscall_64+0xcd/0x490 [ 531.342187][T11375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.342215][T11375] RIP: 0033:0x7f0f86b8e929 [ 531.342236][T11375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.342264][T11375] RSP: 002b:00007f0f879a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 531.342290][T11375] RAX: ffffffffffffffda RBX: 00007f0f86db5fa0 RCX: 00007f0f86b8e929 [ 531.342307][T11375] RDX: 000000000000009f RSI: 0000200000000040 RDI: 0000000000000007 [ 531.342324][T11375] RBP: 00007f0f86c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 531.342340][T11375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.342356][T11375] R13: 0000000000000000 R14: 00007f0f86db5fa0 R15: 00007ffe2f53eb38 [ 531.342390][T11375] [ 537.453683][T11438] FAULT_INJECTION: forcing a failure. [ 537.453683][T11438] name failslab, interval 1, probability 0, space 0, times 0 [ 537.579690][T11438] CPU: 0 UID: 0 PID: 11438 Comm: syz.3.1181 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 537.579731][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.579745][T11438] Call Trace: [ 537.579752][T11438] [ 537.579761][T11438] dump_stack_lvl+0x16c/0x1f0 [ 537.579799][T11438] should_fail_ex+0x512/0x640 [ 537.579832][T11438] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 537.579870][T11438] should_failslab+0xc2/0x120 [ 537.579892][T11438] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 537.579927][T11438] ? __kernfs_new_node+0xd2/0x8e0 [ 537.579962][T11438] __kernfs_new_node+0xd2/0x8e0 [ 537.579996][T11438] ? __pfx___kernfs_new_node+0x10/0x10 [ 537.580033][T11438] ? find_held_lock+0x2b/0x80 [ 537.580056][T11438] ? kernfs_root+0xee/0x2a0 [ 537.580112][T11438] kernfs_new_node+0x13c/0x1e0 [ 537.580169][T11438] __kernfs_create_file+0x53/0x350 [ 537.580197][T11438] sysfs_add_file_mode_ns+0x207/0x3c0 [ 537.580234][T11438] internal_create_group+0x578/0xf30 [ 537.580281][T11438] ? __pfx_internal_create_group+0x10/0x10 [ 537.580319][T11438] ? kernfs_create_link+0x1bd/0x240 [ 537.580349][T11438] internal_create_groups+0x9d/0x150 [ 537.580384][T11438] device_add+0x6d1/0x1a70 [ 537.580411][T11438] ? __pfx_device_add+0x10/0x10 [ 537.580433][T11438] ? lockdep_init_map_type+0x5c/0x280 [ 537.580465][T11438] ? __init_waitqueue_head+0xca/0x150 [ 537.580510][T11438] netdev_register_kobject+0x182/0x3a0 [ 537.580540][T11438] register_netdevice+0x13dc/0x2270 [ 537.580567][T11438] ? __pfx_register_netdevice+0x10/0x10 [ 537.580598][T11438] __ip_tunnel_create+0x540/0x6e0 [ 537.580626][T11438] ? __pfx___ip_tunnel_create+0x10/0x10 [ 537.580661][T11438] ip_tunnel_init_net+0x22f/0x7d0 [ 537.580691][T11438] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 537.580724][T11438] ? trace_kmalloc+0x2b/0xd0 [ 537.580746][T11438] ? __kmalloc_noprof+0x242/0x510 [ 537.580778][T11438] ? lockdep_init_map_type+0x5c/0x280 [ 537.580812][T11438] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 537.580849][T11438] ops_init+0x1df/0x5f0 [ 537.580889][T11438] setup_net+0x1ff/0x510 [ 537.580907][T11438] ? lockdep_init_map_type+0x5c/0x280 [ 537.580943][T11438] ? __pfx_setup_net+0x10/0x10 [ 537.580965][T11438] ? debug_mutex_init+0x37/0x70 [ 537.581008][T11438] copy_net_ns+0x2a6/0x5f0 [ 537.581035][T11438] create_new_namespaces+0x3ea/0xa90 [ 537.581068][T11438] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 537.581096][T11438] ksys_unshare+0x45b/0xa40 [ 537.581127][T11438] ? __pfx_ksys_unshare+0x10/0x10 [ 537.581159][T11438] ? xfd_validate_state+0x61/0x180 [ 537.581198][T11438] __x64_sys_unshare+0x31/0x40 [ 537.581228][T11438] do_syscall_64+0xcd/0x490 [ 537.581271][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.581295][T11438] RIP: 0033:0x7f0f86b8e929 [ 537.581314][T11438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.581337][T11438] RSP: 002b:00007f0f879a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 537.581360][T11438] RAX: ffffffffffffffda RBX: 00007f0f86db5fa0 RCX: 00007f0f86b8e929 [ 537.581376][T11438] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 537.581390][T11438] RBP: 00007f0f86c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 537.581405][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.581418][T11438] R13: 0000000000000000 R14: 00007f0f86db5fa0 R15: 00007ffe2f53eb38 [ 537.581447][T11438] [ 541.291489][T11476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1188'. [ 542.548160][T11491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1193'. [ 546.618590][T10865] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 550.947927][T11582] ERROR: Out of memory at tomoyo_memory_ok. [ 550.982627][T11584] ERROR: Out of memory at tomoyo_memory_ok. [ 554.744611][T11629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1221'. [ 567.756285][T11755] random: crng reseeded on system resumption [ 570.620616][T11789] FAULT_INJECTION: forcing a failure. [ 570.620616][T11789] name failslab, interval 1, probability 0, space 0, times 0 [ 570.693059][T11789] CPU: 1 UID: 0 PID: 11789 Comm: syz.3.1252 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 570.693113][T11789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 570.693132][T11789] Call Trace: [ 570.693141][T11789] [ 570.693152][T11789] dump_stack_lvl+0x16c/0x1f0 [ 570.693201][T11789] should_fail_ex+0x512/0x640 [ 570.693241][T11789] ? __kmalloc_noprof+0xbf/0x510 [ 570.693296][T11789] ? __register_sysctl_table+0xb3/0x1900 [ 570.693338][T11789] should_failslab+0xc2/0x120 [ 570.693364][T11789] __kmalloc_noprof+0xd2/0x510 [ 570.693432][T11789] __register_sysctl_table+0xb3/0x1900 [ 570.693490][T11789] ? is_module_address+0x5f/0xf0 [ 570.693538][T11789] ? __pfx___register_sysctl_table+0x10/0x10 [ 570.693584][T11789] ? is_module_address+0x69/0xf0 [ 570.693623][T11789] ? register_net_sysctl_sz+0x228/0x3e0 [ 570.693655][T11789] ? __asan_memcpy+0x3c/0x60 [ 570.693715][T11789] sysctl_core_net_init+0xe3/0x280 [ 570.693757][T11789] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 570.693798][T11789] ops_init+0x1df/0x5f0 [ 570.693852][T11789] setup_net+0x1ff/0x510 [ 570.693882][T11789] ? lockdep_init_map_type+0x5c/0x280 [ 570.693926][T11789] ? __pfx_setup_net+0x10/0x10 [ 570.693957][T11789] ? debug_mutex_init+0x37/0x70 [ 570.693991][T11789] copy_net_ns+0x2a6/0x5f0 [ 570.694028][T11789] create_new_namespaces+0x3ea/0xa90 [ 570.694072][T11789] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 570.694111][T11789] ksys_unshare+0x45b/0xa40 [ 570.694152][T11789] ? __pfx_ksys_unshare+0x10/0x10 [ 570.694196][T11789] ? xfd_validate_state+0x61/0x180 [ 570.694249][T11789] __x64_sys_unshare+0x31/0x40 [ 570.694290][T11789] do_syscall_64+0xcd/0x490 [ 570.694342][T11789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.694371][T11789] RIP: 0033:0x7f0f86b8e929 [ 570.694396][T11789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.694427][T11789] RSP: 002b:00007f0f87981038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 570.694477][T11789] RAX: ffffffffffffffda RBX: 00007f0f86db6080 RCX: 00007f0f86b8e929 [ 570.694515][T11789] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 570.694534][T11789] RBP: 00007f0f86c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 570.694554][T11789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.694573][T11789] R13: 0000000000000000 R14: 00007f0f86db6080 R15: 00007ffe2f53eb38 [ 570.694615][T11789] [ 573.156151][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.162603][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.755488][T11852] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 588.972906][T11979] HfR: entered promiscuous mode [ 589.032647][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1293'. [ 589.228170][T11980] openvswitch: HfR: Dropping previously announced user features [ 589.324802][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1296'. [ 589.358779][T11979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'. [ 589.573831][T11984] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1296'. [ 592.260961][T12004] vivid-009: ================= START STATUS ================= [ 592.312373][T12004] vivid-009: Enable Output Cropping: true grabbed [ 592.397326][T12004] vivid-009: Enable Output Composing: true grabbed [ 592.427256][T12004] vivid-009: Enable Output Scaler: true grabbed [ 592.447481][T12004] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 592.466172][T12004] vivid-009: Transmit Mode: HDMI grabbed [ 592.510246][T12004] vivid-009: Hotplug Present: 0x00000000 [ 592.515981][T12004] vivid-009: RxSense Present: 0x00000000 [ 592.531551][T11915] delete_channel: no stack [ 592.709183][T12004] vivid-009: EDID Present: 0x00000000 [ 592.877357][T12004] vivid-009: ================== END STATUS ================== [ 592.926513][T12004] block nbd7: not configured, cannot reconfigure [ 599.387828][ T30] audit: type=1800 audit(4294967624.163:18): pid=12069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1312" name="members" dev="configfs" ino=71912 res=0 errno=0 [ 600.768516][T12083] sd 0:0:1:0: PR command failed: 1026 [ 600.774142][T12083] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 600.781304][T12083] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 602.682382][T12097] Invalid ELF header magic: != ELF [ 602.715917][T12097] net_ratelimit: 77 callbacks suppressed [ 602.715938][T12097] netlink: zone id is out of range [ 602.757266][T12097] netlink: zone id is out of range [ 602.777624][T12098] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1318'. [ 602.812350][T12101] ERROR: Out of memory at tomoyo_memory_ok. [ 602.836773][T12097] netlink: zone id is out of range [ 602.847015][ T5838] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 602.877490][T12097] netlink: zone id is out of range [ 602.916216][T12101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1319'. [ 603.547228][T12097] netlink: zone id is out of range [ 603.920587][T12110] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 603.920587][T12110] The task syz.0.1320 (12110) triggered the difference, watch for misbehavior. [ 608.153313][T12141] FAULT_INJECTION: forcing a failure. [ 608.153313][T12141] name failslab, interval 1, probability 0, space 0, times 0 [ 608.217709][T12141] CPU: 0 UID: 0 PID: 12141 Comm: syz.0.1325 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 608.217754][T12141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 608.217772][T12141] Call Trace: [ 608.217782][T12141] [ 608.217793][T12141] dump_stack_lvl+0x16c/0x1f0 [ 608.217845][T12141] should_fail_ex+0x512/0x640 [ 608.217886][T12141] ? __kmalloc_node_noprof+0xc5/0x500 [ 608.217936][T12141] should_failslab+0xc2/0x120 [ 608.217964][T12141] __kmalloc_node_noprof+0xd8/0x500 [ 608.218008][T12141] ? lockdep_init_map_type+0x5c/0x280 [ 608.218048][T12141] ? mempool_init_node+0x13c/0x760 [ 608.218083][T12141] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 608.218116][T12141] mempool_init_node+0x13c/0x760 [ 608.218150][T12141] ? __pfx_xa_load+0x10/0x10 [ 608.218202][T12141] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 608.218234][T12141] ? __pfx_mempool_free_slab+0x10/0x10 [ 608.218268][T12141] mempool_init_noprof+0x3a/0x50 [ 608.218308][T12141] bioset_init+0x37a/0x880 [ 608.218341][T12141] ? __pfx_bioset_init+0x10/0x10 [ 608.218387][T12141] __alloc_disk_node+0x83/0x630 [ 608.218441][T12141] __blk_mq_alloc_disk+0x89/0x120 [ 608.218489][T12141] loop_add+0x49e/0xb70 [ 608.218522][T12141] ? do_vfs_ioctl+0x523/0x1a60 [ 608.218558][T12141] ? __pfx_loop_add+0x10/0x10 [ 608.218588][T12141] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 608.218651][T12141] ? find_held_lock+0x2b/0x80 [ 608.218695][T12141] loop_control_ioctl+0x13e/0x630 [ 608.218733][T12141] ? __pfx_loop_control_ioctl+0x10/0x10 [ 608.218787][T12141] ? __pfx_loop_control_ioctl+0x10/0x10 [ 608.218822][T12141] __x64_sys_ioctl+0x18b/0x210 [ 608.218859][T12141] do_syscall_64+0xcd/0x490 [ 608.218905][T12141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.218935][T12141] RIP: 0033:0x7fb28af8e929 [ 608.218958][T12141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.218988][T12141] RSP: 002b:00007fb28bedf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 608.219016][T12141] RAX: ffffffffffffffda RBX: 00007fb28b1b5fa0 RCX: 00007fb28af8e929 [ 608.219036][T12141] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 608.219054][T12141] RBP: 00007fb28b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 608.219071][T12141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.219088][T12141] R13: 0000000000000000 R14: 00007fb28b1b5fa0 R15: 00007ffc77055fc8 [ 608.219125][T12141] [ 610.253387][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1330'. [ 629.387484][T12367] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1369'. [ 629.400439][T12367] netlink: 114 bytes leftover after parsing attributes in process `syz.0.1369'. [ 629.781761][T12353] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 629.847656][T12353] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 629.941862][T12353] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 629.949915][T12353] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 630.138716][T12353] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 630.146218][T12353] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 631.397227][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 631.947292][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 632.187278][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 632.633971][T12387] FAULT_INJECTION: forcing a failure. [ 632.633971][T12387] name failslab, interval 1, probability 0, space 0, times 0 [ 632.717591][T12387] CPU: 0 UID: 0 PID: 12387 Comm: syz.2.1373 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 632.717633][T12387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.717650][T12387] Call Trace: [ 632.717660][T12387] [ 632.717671][T12387] dump_stack_lvl+0x16c/0x1f0 [ 632.717720][T12387] should_fail_ex+0x512/0x640 [ 632.717762][T12387] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 632.717811][T12387] should_failslab+0xc2/0x120 [ 632.717840][T12387] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 632.717882][T12387] ? find_held_lock+0x2b/0x80 [ 632.717909][T12387] ? vm_area_dup+0x27/0x8d0 [ 632.717948][T12387] ? dup_mmap+0x5cb/0x21d0 [ 632.717985][T12387] vm_area_dup+0x27/0x8d0 [ 632.718028][T12387] dup_mmap+0x877/0x21d0 [ 632.718078][T12387] ? __pfx_dup_mmap+0x10/0x10 [ 632.718140][T12387] copy_process+0x4081/0x76a0 [ 632.718175][T12387] ? __pfx___futex_wait+0x10/0x10 [ 632.718232][T12387] ? __pfx_copy_process+0x10/0x10 [ 632.718287][T12387] kernel_clone+0xfc/0x960 [ 632.718325][T12387] ? __pfx_kernel_clone+0x10/0x10 [ 632.718384][T12387] __do_sys_clone+0xce/0x120 [ 632.718420][T12387] ? __pfx___do_sys_clone+0x10/0x10 [ 632.718455][T12387] ? ksys_unshare+0x687/0xa40 [ 632.718510][T12387] ? xfd_validate_state+0x61/0x180 [ 632.718568][T12387] do_syscall_64+0xcd/0x490 [ 632.718617][T12387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.718647][T12387] RIP: 0033:0x7fa716b8e929 [ 632.718670][T12387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.718700][T12387] RSP: 002b:00007fa717989fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 632.718728][T12387] RAX: ffffffffffffffda RBX: 00007fa716db6160 RCX: 00007fa716b8e929 [ 632.718747][T12387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 632.718765][T12387] RBP: 00007fa716c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 632.718783][T12387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 632.718800][T12387] R13: 0000000000000000 R14: 00007fa716db6160 R15: 00007fff56e76ac8 [ 632.718837][T12387] [ 633.477251][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 634.027224][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 634.267510][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 634.597935][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.604381][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 639.617353][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1383'. [ 639.651439][T12438] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1383'. [ 642.564549][T12464] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1388'. [ 646.283222][T12490] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 648.459329][T12525] FAULT_INJECTION: forcing a failure. [ 648.459329][T12525] name failslab, interval 1, probability 0, space 0, times 0 [ 648.557272][T12525] CPU: 0 UID: 0 PID: 12525 Comm: syz.2.1402 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 648.557319][T12525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.557339][T12525] Call Trace: [ 648.557350][T12525] [ 648.557362][T12525] dump_stack_lvl+0x16c/0x1f0 [ 648.557418][T12525] should_fail_ex+0x512/0x640 [ 648.557473][T12525] ? __kmalloc_noprof+0xbf/0x510 [ 648.557519][T12525] ? ops_init+0x77/0x5f0 [ 648.557563][T12525] should_failslab+0xc2/0x120 [ 648.557591][T12525] __kmalloc_noprof+0xd2/0x510 [ 648.557633][T12525] ? lockdep_init_map_type+0x5c/0x280 [ 648.557690][T12525] ops_init+0x77/0x5f0 [ 648.557741][T12525] setup_net+0x1ff/0x510 [ 648.557766][T12525] ? lockdep_init_map_type+0x5c/0x280 [ 648.557807][T12525] ? __pfx_setup_net+0x10/0x10 [ 648.557835][T12525] ? debug_mutex_init+0x37/0x70 [ 648.557867][T12525] copy_net_ns+0x2a6/0x5f0 [ 648.557901][T12525] create_new_namespaces+0x3ea/0xa90 [ 648.557941][T12525] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 648.557976][T12525] ksys_unshare+0x45b/0xa40 [ 648.558043][T12525] ? __pfx_ksys_unshare+0x10/0x10 [ 648.558086][T12525] ? xfd_validate_state+0x61/0x180 [ 648.558140][T12525] __x64_sys_unshare+0x31/0x40 [ 648.558179][T12525] do_syscall_64+0xcd/0x490 [ 648.558230][T12525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.558263][T12525] RIP: 0033:0x7fa716b8e929 [ 648.558288][T12525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.558320][T12525] RSP: 002b:00007fa7179cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 648.558362][T12525] RAX: ffffffffffffffda RBX: 00007fa716db5fa0 RCX: 00007fa716b8e929 [ 648.558380][T12525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 648.558397][T12525] RBP: 00007fa716c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 648.558414][T12525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.558431][T12525] R13: 0000000000000000 R14: 00007fa716db5fa0 R15: 00007fff56e76ac8 [ 648.558470][T12525] [ 650.056841][T12555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.1409: iget: checksum invalid [ 650.102170][T12555] platform regulatory.0: loading /lib/firmware/updates/6.16.0-rc3-syzkaller-00044-g7595b66ae9de/regulatory.db failed with error -74 [ 650.170501][T12555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.1409: iget: checksum invalid [ 650.226618][T12555] platform regulatory.0: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 650.337466][T12555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.1409: iget: checksum invalid [ 650.428002][T12555] platform regulatory.0: loading /lib/firmware/6.16.0-rc3-syzkaller-00044-g7595b66ae9de/regulatory.db failed with error -74 [ 650.469155][T12555] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.1.1409: iget: checksum invalid [ 650.511000][T12555] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -74 [ 650.547328][T12555] platform regulatory.0: Direct firmware load for regulatory.db failed with error -74 [ 650.583428][T12555] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 656.220812][T12641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1426'. [ 658.531988][T12666] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 663.253400][T12572] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 663.828012][T12746] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input18 [ 663.859858][ T5184] ERROR: Out of memory at tomoyo_memory_ok. [ 666.183220][T12782] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 666.225858][T12782] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 666.277398][T12782] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 666.430578][T12784] can: request_module (can-proto-0) failed. [ 666.543908][T12788] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input19 [ 667.381807][T12797] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 667.390613][T12797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 667.398762][T12797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 667.407857][T12797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 667.417906][T12797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 668.679563][T12796] chnl_net:caif_netlink_parms(): no params data found [ 669.484379][T12797] Bluetooth: hci4: command tx timeout [ 669.569727][T12796] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.578436][T12796] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.585608][T12796] bridge_slave_0: entered allmulticast mode [ 669.607931][T12796] bridge_slave_0: entered promiscuous mode [ 669.636190][T12796] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.660779][T12796] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.697790][T12796] bridge_slave_1: entered allmulticast mode [ 669.705742][T12796] bridge_slave_1: entered promiscuous mode [ 669.848304][T12796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.154901][T12796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.463532][T12796] team0: Port device team_slave_0 added [ 670.503534][T12796] team0: Port device team_slave_1 added [ 670.832839][T12796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 670.847660][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 670.901905][T12796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.987956][T12796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.994974][T12796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.047196][T12796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.193287][T12796] hsr_slave_0: entered promiscuous mode [ 671.210226][T12796] hsr_slave_1: entered promiscuous mode [ 671.218371][T12796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 671.246423][T12796] Cannot create hsr debugfs directory [ 671.547919][T12797] Bluetooth: hci4: command tx timeout [ 672.036401][T12796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 672.094557][T12796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 672.186979][T12796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 672.229468][T12796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 673.054794][T12796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.114774][T12796] 8021q: adding VLAN 0 to HW filter on device team0 [ 673.165139][T12553] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.172395][T12553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 673.192934][T12556] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.200164][T12556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.627992][T12797] Bluetooth: hci4: command tx timeout [ 673.799843][T12863] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1467'. [ 673.984318][T12796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 674.661699][T12796] veth0_vlan: entered promiscuous mode [ 674.692705][T12796] veth1_vlan: entered promiscuous mode [ 674.757421][T12796] veth0_macvtap: entered promiscuous mode [ 674.878449][T12796] veth1_macvtap: entered promiscuous mode [ 674.949336][T12796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.987908][T12796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 675.016989][T12796] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.026156][T12796] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.037956][T12796] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.057296][T12796] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.252206][T12546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.261787][T12546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.705232][T12550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.722362][T12797] Bluetooth: hci4: command tx timeout [ 675.728443][T12550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.213155][T12926] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 679.219600][T12926] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 679.225940][T12926] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 679.238257][T12926] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 679.285812][T12926] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 679.292831][T12926] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 679.361558][T12926] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 679.582241][T12947] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input20 [ 680.030119][T12797] Bluetooth: hci0: command 0x0c1a tx timeout [ 680.518897][T12959] ERROR: Out of memory at tomoyo_memory_ok. [ 681.092510][T12967] input: jJǸí¸ü;9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input21 [ 681.154204][ T5184] ERROR: Out of memory at tomoyo_memory_ok. [ 681.227892][T12797] Bluetooth: hci2: command 0x0c1a tx timeout [ 681.307383][T12797] Bluetooth: hci4: command 0x0c1a tx timeout [ 681.313535][T12548] Bluetooth: hci1: command 0x0c1a tx timeout [ 682.229159][T12797] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 682.239355][T12797] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 682.259035][T12797] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 682.267915][T12797] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 682.289105][T12797] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 683.234913][T12984] chnl_net:caif_netlink_parms(): no params data found [ 683.387317][T12797] Bluetooth: hci4: command 0x0c1a tx timeout [ 683.393450][T12969] Bluetooth: hci1: command 0x0c1a tx timeout [ 683.993094][T12996] FAULT_INJECTION: forcing a failure. [ 683.993094][T12996] name failslab, interval 1, probability 0, space 0, times 0 [ 684.006022][T12984] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.013211][T12984] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.020725][T12996] CPU: 1 UID: 0 PID: 12996 Comm: syz.4.1493 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 684.020762][T12996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 684.020778][T12996] Call Trace: [ 684.020788][T12996] [ 684.020797][T12996] dump_stack_lvl+0x16c/0x1f0 [ 684.020843][T12996] should_fail_ex+0x512/0x640 [ 684.020882][T12996] ? __kmalloc_noprof+0xbf/0x510 [ 684.020927][T12996] ? __register_sysctl_table+0xea2/0x1900 [ 684.020971][T12996] should_failslab+0xc2/0x120 [ 684.020998][T12996] __kmalloc_noprof+0xd2/0x510 [ 684.021037][T12996] ? __register_sysctl_table+0xe8e/0x1900 [ 684.021116][T12996] __register_sysctl_table+0xea2/0x1900 [ 684.021181][T12996] ? __pfx___register_sysctl_table+0x10/0x10 [ 684.021233][T12996] ? is_module_address+0x69/0xf0 [ 684.021277][T12996] ? register_net_sysctl_sz+0x228/0x3e0 [ 684.021313][T12996] ? __asan_memcpy+0x3c/0x60 [ 684.021368][T12996] sysctl_core_net_init+0xe3/0x280 [ 684.021412][T12996] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 684.021452][T12996] ops_init+0x1df/0x5f0 [ 684.021509][T12996] setup_net+0x1ff/0x510 [ 684.021537][T12996] ? lockdep_init_map_type+0x5c/0x280 [ 684.021583][T12996] ? __pfx_setup_net+0x10/0x10 [ 684.021617][T12996] ? debug_mutex_init+0x37/0x70 [ 684.021653][T12996] copy_net_ns+0x2a6/0x5f0 [ 684.021691][T12996] create_new_namespaces+0x3ea/0xa90 [ 684.021737][T12996] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 684.021778][T12996] ksys_unshare+0x45b/0xa40 [ 684.021822][T12996] ? __pfx_ksys_unshare+0x10/0x10 [ 684.021866][T12996] ? xfd_validate_state+0x61/0x180 [ 684.021922][T12996] __x64_sys_unshare+0x31/0x40 [ 684.021964][T12996] do_syscall_64+0xcd/0x490 [ 684.022017][T12996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.022050][T12996] RIP: 0033:0x7fb795f8e929 [ 684.022076][T12996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.022108][T12996] RSP: 002b:00007fb796e52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 684.022140][T12996] RAX: ffffffffffffffda RBX: 00007fb7961b6080 RCX: 00007fb795f8e929 [ 684.022161][T12996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 684.022181][T12996] RBP: 00007fb796010b39 R08: 0000000000000000 R09: 0000000000000000 [ 684.022200][T12996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.022219][T12996] R13: 0000000000000000 R14: 00007fb7961b6080 R15: 00007ffcb68ccf28 [ 684.022271][T12996] [ 684.022294][T12996] sysctl could not get directory: [ 684.147591][T12984] bridge_slave_0: entered allmulticast mode [ 684.149470][T12996] / [ 684.179090][T12984] bridge_slave_0: entered promiscuous mode [ 684.180215][T12996] net/ [ 684.203075][T12984] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.219729][T12996] core -12 [ 684.421580][T12797] Bluetooth: hci5: command tx timeout [ 684.428383][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.435846][T12984] bridge_slave_1: entered allmulticast mode [ 684.444167][T12984] bridge_slave_1: entered promiscuous mode [ 684.678548][T12984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.751233][T12984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.843131][T12984] team0: Port device team_slave_0 added [ 684.855936][T12984] team0: Port device team_slave_1 added [ 684.931892][T12984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.957517][T12984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.997236][T12984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 685.028133][T12984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 685.035455][T12984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 685.070478][T12984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 685.384316][T12984] hsr_slave_0: entered promiscuous mode [ 685.407125][T12984] hsr_slave_1: entered promiscuous mode [ 685.426200][T12984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 685.461946][T12984] Cannot create hsr debugfs directory [ 685.467612][T12797] Bluetooth: hci4: command 0x0c1a tx timeout [ 686.031912][T12984] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 686.052274][T12984] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 686.088981][T12984] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 686.124751][T12984] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 686.454324][T12984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.507623][T12797] Bluetooth: hci5: command tx timeout [ 686.593128][T12984] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.819225][T12546] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.826421][T12546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.937038][T12546] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.944284][T12546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.600063][T12984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.561469][T12984] veth0_vlan: entered promiscuous mode [ 688.577354][T12984] veth1_vlan: entered promiscuous mode [ 688.589607][T12797] Bluetooth: hci5: command tx timeout [ 688.703414][T12984] veth0_macvtap: entered promiscuous mode [ 688.750515][T12984] veth1_macvtap: entered promiscuous mode [ 688.791343][T12984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.804352][T12984] batman_adv: batadv0: Interface activated: batadv_slave_1 syzkaller syzkaller login: [ 688.846010][T12984] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.897432][T12984] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.906316][T12984] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.917503][T12984] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.457583][T12721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.502324][T12721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.780465][T12701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.800255][T12701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.667991][T12797] Bluetooth: hci5: command tx timeout [ 692.518339][T13137] Invalid ELF header magic: != ELF [ 692.734997][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1517'. [ 696.032841][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.039725][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.051927][T13170] FAULT_INJECTION: forcing a failure. [ 696.051927][T13170] name failslab, interval 1, probability 0, space 0, times 0 [ 696.097511][T13170] CPU: 1 UID: 0 PID: 13170 Comm: syz.5.1520 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 696.097556][T13170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 696.097574][T13170] Call Trace: [ 696.097584][T13170] [ 696.097596][T13170] dump_stack_lvl+0x16c/0x1f0 [ 696.097650][T13170] should_fail_ex+0x512/0x640 [ 696.097694][T13170] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 696.097741][T13170] should_failslab+0xc2/0x120 [ 696.097770][T13170] __kmalloc_cache_noprof+0x6a/0x3e0 [ 696.097814][T13170] ? nexthop_net_init+0x73/0x140 [ 696.097864][T13170] ? __pfx_nexthop_net_init+0x10/0x10 [ 696.097912][T13170] nexthop_net_init+0x73/0x140 [ 696.097956][T13170] ? tcf_net_init+0x55/0x150 [ 696.098003][T13170] ops_init+0x1df/0x5f0 [ 696.098058][T13170] setup_net+0x1ff/0x510 [ 696.098110][T13170] ? lockdep_init_map_type+0x5c/0x280 [ 696.098158][T13170] ? __pfx_setup_net+0x10/0x10 [ 696.098191][T13170] ? debug_mutex_init+0x37/0x70 [ 696.098227][T13170] copy_net_ns+0x2a6/0x5f0 [ 696.098266][T13170] create_new_namespaces+0x3ea/0xa90 [ 696.098312][T13170] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 696.098352][T13170] ksys_unshare+0x45b/0xa40 [ 696.098397][T13170] ? __pfx_ksys_unshare+0x10/0x10 [ 696.098442][T13170] ? xfd_validate_state+0x61/0x180 [ 696.098495][T13170] __x64_sys_unshare+0x31/0x40 [ 696.098538][T13170] do_syscall_64+0xcd/0x490 [ 696.098590][T13170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.098623][T13170] RIP: 0033:0x7f019bf8e929 [ 696.098648][T13170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.098680][T13170] RSP: 002b:00007f019cee4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 696.098712][T13170] RAX: ffffffffffffffda RBX: 00007f019c1b5fa0 RCX: 00007f019bf8e929 [ 696.098733][T13170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 696.098752][T13170] RBP: 00007f019c010b39 R08: 0000000000000000 R09: 0000000000000000 [ 696.098772][T13170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.098790][T13170] R13: 0000000000000000 R14: 00007f019c1b5fa0 R15: 00007ffdf3c91dc8 [ 696.098832][T13170] [ 698.750928][T13211] Invalid ELF header magic: != ELF [ 699.780731][T13225] FAULT_INJECTION: forcing a failure. [ 699.780731][T13225] name failslab, interval 1, probability 0, space 0, times 0 [ 699.871630][T13225] CPU: 0 UID: 0 PID: 13225 Comm: syz.4.1535 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 699.871681][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.871701][T13225] Call Trace: [ 699.871712][T13225] [ 699.871725][T13225] dump_stack_lvl+0x16c/0x1f0 [ 699.871788][T13225] should_fail_ex+0x512/0x640 [ 699.871834][T13225] ? __kmalloc_noprof+0xbf/0x510 [ 699.871885][T13225] ? ptp_open+0x103/0x520 [ 699.871920][T13225] should_failslab+0xc2/0x120 [ 699.871952][T13225] __kmalloc_noprof+0xd2/0x510 [ 699.872017][T13225] ptp_open+0x103/0x520 [ 699.872063][T13225] ? __pfx_ptp_open+0x10/0x10 [ 699.872114][T13225] ? __pfx_ptp_open+0x10/0x10 [ 699.872151][T13225] posix_clock_open+0x17b/0x290 [ 699.872189][T13225] ? __pfx_posix_clock_open+0x10/0x10 [ 699.872235][T13225] chrdev_open+0x231/0x6a0 [ 699.872283][T13225] ? __pfx_apparmor_file_open+0x10/0x10 [ 699.872322][T13225] ? __pfx_chrdev_open+0x10/0x10 [ 699.872374][T13225] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 699.872426][T13225] do_dentry_open+0x744/0x1c10 [ 699.872473][T13225] ? __pfx_chrdev_open+0x10/0x10 [ 699.872548][T13225] vfs_open+0x82/0x3f0 [ 699.872588][T13225] path_openat+0x1de4/0x2cb0 [ 699.872651][T13225] ? __pfx_path_openat+0x10/0x10 [ 699.872701][T13225] ? __lock_acquire+0xb8a/0x1c90 [ 699.872756][T13225] do_filp_open+0x20b/0x470 [ 699.872804][T13225] ? __pfx_do_filp_open+0x10/0x10 [ 699.872882][T13225] ? alloc_fd+0x471/0x7d0 [ 699.872938][T13225] do_sys_openat2+0x11b/0x1d0 [ 699.872975][T13225] ? __pfx_do_sys_openat2+0x10/0x10 [ 699.873031][T13225] __x64_sys_openat+0x174/0x210 [ 699.873068][T13225] ? __pfx___x64_sys_openat+0x10/0x10 [ 699.873124][T13225] do_syscall_64+0xcd/0x490 [ 699.873177][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.873210][T13225] RIP: 0033:0x7fb795f8e929 [ 699.873236][T13225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.873270][T13225] RSP: 002b:00007fb796e52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 699.873302][T13225] RAX: ffffffffffffffda RBX: 00007fb7961b6080 RCX: 00007fb795f8e929 [ 699.873323][T13225] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 699.873344][T13225] RBP: 00007fb796010b39 R08: 0000000000000000 R09: 0000000000000000 [ 699.873364][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.873383][T13225] R13: 0000000000000000 R14: 00007fb7961b6080 R15: 00007ffcb68ccf28 [ 699.873425][T13225] [ 701.890709][T13250] random: crng reseeded on system resumption [ 702.921936][T13260] tipc: Started in network mode [ 702.926850][T13260] tipc: Node identity ee00, cluster identity 4711 [ 702.945193][T13260] tipc: Node number set to 60928 [ 710.343980][T13345] FAULT_INJECTION: forcing a failure. [ 710.343980][T13345] name failslab, interval 1, probability 0, space 0, times 0 [ 710.356751][T13345] CPU: 0 UID: 0 PID: 13345 Comm: syz.2.1556 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 710.356792][T13345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 710.356810][T13345] Call Trace: [ 710.356820][T13345] [ 710.356830][T13345] dump_stack_lvl+0x16c/0x1f0 [ 710.356875][T13345] should_fail_ex+0x512/0x640 [ 710.356905][T13345] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 710.356941][T13345] should_failslab+0xc2/0x120 [ 710.356962][T13345] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 710.356994][T13345] ? __alloc_skb+0x2b2/0x380 [ 710.357028][T13345] __alloc_skb+0x2b2/0x380 [ 710.357058][T13345] ? __pfx___alloc_skb+0x10/0x10 [ 710.357098][T13345] ? if_nlmsg_size+0x475/0xaf0 [ 710.357147][T13345] rtmsg_ifinfo_build_skb+0x81/0x280 [ 710.357185][T13345] rtmsg_ifinfo+0x9f/0x1a0 [ 710.357221][T13345] register_netdevice+0x1bd9/0x2270 [ 710.357258][T13345] ? __pfx_register_netdevice+0x10/0x10 [ 710.357300][T13345] __ip_tunnel_create+0x540/0x6e0 [ 710.357355][T13345] ? __pfx___ip_tunnel_create+0x10/0x10 [ 710.357402][T13345] ip_tunnel_init_net+0x22f/0x7d0 [ 710.357445][T13345] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 710.357492][T13345] ? trace_kmalloc+0x2b/0xd0 [ 710.357521][T13345] ? __kmalloc_noprof+0x242/0x510 [ 710.357566][T13345] ? lockdep_init_map_type+0x5c/0x280 [ 710.357616][T13345] ? __pfx_ipgre_init_net+0x10/0x10 [ 710.357666][T13345] ops_init+0x1df/0x5f0 [ 710.357720][T13345] setup_net+0x1ff/0x510 [ 710.357746][T13345] ? lockdep_init_map_type+0x5c/0x280 [ 710.357789][T13345] ? __pfx_setup_net+0x10/0x10 [ 710.357820][T13345] ? debug_mutex_init+0x37/0x70 [ 710.357855][T13345] copy_net_ns+0x2a6/0x5f0 [ 710.357891][T13345] create_new_namespaces+0x3ea/0xa90 [ 710.357935][T13345] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 710.357974][T13345] ksys_unshare+0x45b/0xa40 [ 710.358015][T13345] ? __pfx_ksys_unshare+0x10/0x10 [ 710.358059][T13345] ? xfd_validate_state+0x61/0x180 [ 710.358119][T13345] __x64_sys_unshare+0x31/0x40 [ 710.358160][T13345] do_syscall_64+0xcd/0x490 [ 710.358211][T13345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.358244][T13345] RIP: 0033:0x7fa716b8e929 [ 710.358287][T13345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.358320][T13345] RSP: 002b:00007fa7179cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 710.358351][T13345] RAX: ffffffffffffffda RBX: 00007fa716db5fa0 RCX: 00007fa716b8e929 [ 710.358373][T13345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 710.358392][T13345] RBP: 00007fa716c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 710.358411][T13345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.358431][T13345] R13: 0000000000000000 R14: 00007fa716db5fa0 R15: 00007fff56e76ac8 [ 710.358485][T13345] [ 711.889840][T12969] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 711.898782][T12969] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 711.908434][T12969] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 711.920018][T12969] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 711.928448][T12969] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 712.192448][T13364] chnl_net:caif_netlink_parms(): no params data found [ 712.278527][T13364] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.285653][T13364] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.293387][T13364] bridge_slave_0: entered allmulticast mode [ 712.301205][T13364] bridge_slave_0: entered promiscuous mode [ 712.310736][T13364] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.318545][T13364] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.325877][T13364] bridge_slave_1: entered allmulticast mode [ 712.333642][T13364] bridge_slave_1: entered promiscuous mode [ 712.373485][T13364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.390240][T13364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.427450][T13364] team0: Port device team_slave_0 added [ 712.437407][T13364] team0: Port device team_slave_1 added [ 712.472408][T13364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.479500][T13364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.506556][T13364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.521689][T13364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.529038][T13364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.555460][T13364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.605182][T13364] hsr_slave_0: entered promiscuous mode [ 712.612110][T13364] hsr_slave_1: entered promiscuous mode [ 712.618530][T13364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 712.627567][T13364] Cannot create hsr debugfs directory syzkaller syzkaller login: [ 712.797816][T13364] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 712.809447][T13364] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 712.819998][T13364] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 712.831634][T13364] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 712.874353][T13364] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.881526][T13364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.889097][T13364] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.896251][T13364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.962958][T13364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.981015][T12546] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.990176][T12546] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.012132][T13364] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.027182][T12556] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.034336][T12556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.052359][T12546] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.059507][T12546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.298787][T13364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 713.571096][T13364] veth0_vlan: entered promiscuous mode [ 713.583418][T13364] veth1_vlan: entered promiscuous mode [ 713.615521][T13364] veth0_macvtap: entered promiscuous mode [ 713.625394][T13364] veth1_macvtap: entered promiscuous mode [ 713.646955][T13364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.664676][T13364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.677705][T13364] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.686420][T13364] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.695717][T13364] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.704879][T13364] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.788549][T12721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.799631][T12721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.838047][T12701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 713.845930][T12701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.950095][T12969] Bluetooth: hci6: command tx timeout [ 716.032226][T12969] Bluetooth: hci6: command tx timeout [ 716.822908][T12969] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 718.116639][T12969] Bluetooth: hci6: command tx timeout [ 718.156044][T13457] random: crng reseeded on system resumption [ 720.187498][T12969] Bluetooth: hci6: command tx timeout [ 723.212648][T13542] GUP no longer grows the stack in syz.6.1591 (13542): 14000-401000 (4000) [ 723.284758][T13542] CPU: 1 UID: 0 PID: 13542 Comm: syz.6.1591 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 723.284822][T13542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 723.284841][T13542] Call Trace: [ 723.284851][T13542] [ 723.284863][T13542] dump_stack_lvl+0x16c/0x1f0 [ 723.284920][T13542] gup_vma_lookup+0x1d2/0x220 [ 723.284958][T13542] __get_user_pages+0x271/0x3b80 [ 723.285009][T13542] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 723.285063][T13542] ? kasan_save_stack+0x42/0x60 [ 723.285120][T13542] ? __pfx___get_user_pages+0x10/0x10 [ 723.285167][T13542] ? register_lock_class+0x41/0x4c0 [ 723.285210][T13542] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 723.285260][T13542] ? do_syscall_64+0xcd/0x490 [ 723.285321][T13542] __gup_longterm_locked+0x20d/0x1840 [ 723.285360][T13542] ? __lock_acquire+0xb8a/0x1c90 [ 723.285407][T13542] ? __pfx___gup_longterm_locked+0x10/0x10 [ 723.285465][T13542] pin_user_pages_remote+0xed/0x140 [ 723.285504][T13542] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 723.285541][T13542] ? mm_access+0x22d/0x2e0 [ 723.285599][T13542] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 723.285666][T13542] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 723.285718][T13542] ? iovec_from_user+0xbb/0x140 [ 723.285804][T13542] ? iovec_from_user+0xbb/0x140 [ 723.285857][T13542] process_vm_rw+0x216/0x2c0 [ 723.285912][T13542] ? __pfx_process_vm_rw+0x10/0x10 [ 723.285974][T13542] ? __pfx___sys_sendmmsg+0x10/0x10 [ 723.286061][T13542] ? xfd_validate_state+0x61/0x180 [ 723.286113][T13542] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 723.286167][T13542] ? do_syscall_64+0x91/0x490 [ 723.286214][T13542] ? lockdep_hardirqs_on+0x7c/0x110 [ 723.286258][T13542] do_syscall_64+0xcd/0x490 [ 723.286307][T13542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.286337][T13542] RIP: 0033:0x7fd0bbd8e929 [ 723.286360][T13542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.286388][T13542] RSP: 002b:00007fd0bccb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 723.286416][T13542] RAX: ffffffffffffffda RBX: 00007fd0bbfb5fa0 RCX: 00007fd0bbd8e929 [ 723.286437][T13542] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 000000000000002c [ 723.286455][T13542] RBP: 00007fd0bbe10b39 R08: 0000000000000003 R09: 0000000000000000 [ 723.286473][T13542] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 723.286491][T13542] R13: 0000000000000000 R14: 00007fd0bbfb5fa0 R15: 00007ffd008450d8 [ 723.286529][T13542] syzkaller syzkaller login: [ 726.094208][T13597] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 726.196495][T13600] netlink: 'syz.2.1604': attribute type 1 has an invalid length. [ 726.265648][T13600] netlink: 33 bytes leftover after parsing attributes in process `syz.2.1604'. syzkaller syzkaller login: [ 732.709938][T13707] ERROR: Out of memory at tomoyo_memory_ok. [ 732.730410][T13706] ERROR: Out of memory at tomoyo_memory_ok. [ 732.740755][T13710] tipc: Started in network mode [ 732.745640][T13710] tipc: Node identity ee00, cluster identity 4711 [ 732.752313][T13710] tipc: Node number set to 60928 [ 736.378481][T12797] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 736.388021][T12797] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 736.404069][T12797] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 736.435803][T12797] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 736.447279][T12797] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 737.138977][T13763] chnl_net:caif_netlink_parms(): no params data found [ 737.411561][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.438303][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.448764][T13763] bridge_slave_0: entered allmulticast mode [ 737.461733][T13763] bridge_slave_0: entered promiscuous mode [ 737.492396][T13786] ERROR: Out of memory at tomoyo_memory_ok. [ 737.509337][T13782] ERROR: Out of memory at tomoyo_memory_ok. [ 737.518024][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.525916][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.534415][T13763] bridge_slave_1: entered allmulticast mode [ 737.613139][T13763] bridge_slave_1: entered promiscuous mode [ 738.296123][T13763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.321825][T13763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.383585][T13763] team0: Port device team_slave_0 added [ 738.429555][T13763] team0: Port device team_slave_1 added [ 738.492348][T13763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.520631][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.600628][T12797] Bluetooth: hci7: command tx timeout [ 738.618384][T13763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.632097][T13763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.639179][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.705445][T13763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.812894][T13763] hsr_slave_0: entered promiscuous mode [ 738.828701][T13763] hsr_slave_1: entered promiscuous mode [ 738.838628][T13763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 738.846213][T13763] Cannot create hsr debugfs directory [ 739.255271][T13763] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 739.272209][T13763] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 739.284815][T13763] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 739.295342][T13763] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 739.383395][T13763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.405839][T13763] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.419848][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.427019][T12701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.444885][T12721] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.452091][T12721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.695528][T13763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.969687][T13763] veth0_vlan: entered promiscuous mode [ 739.983960][T13763] veth1_vlan: entered promiscuous mode [ 740.015630][T13763] veth0_macvtap: entered promiscuous mode [ 740.027665][T13763] veth1_macvtap: entered promiscuous mode [ 740.048816][T13763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 740.066055][T13763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 740.081716][T13763] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.091115][T13763] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.100411][T13763] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.109604][T13763] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 740.201894][T12721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.218847][T12721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.244970][T12556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 740.254883][T12556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.667724][T12797] Bluetooth: hci7: command tx timeout [ 741.970041][T13840] ERROR: Out of memory at tomoyo_memory_ok. [ 742.026533][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'. [ 742.750474][T12797] Bluetooth: hci7: command tx timeout [ 744.828891][T12969] Bluetooth: hci7: command tx timeout [ 745.285780][T13873] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 748.480652][T13911] FAULT_INJECTION: forcing a failure. [ 748.480652][T13911] name failslab, interval 1, probability 0, space 0, times 0 [ 748.587575][T13911] CPU: 0 UID: 0 PID: 13911 Comm: syz.6.1657 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 748.587625][T13911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 748.587640][T13911] Call Trace: [ 748.587648][T13911] [ 748.587657][T13911] dump_stack_lvl+0x16c/0x1f0 [ 748.587697][T13911] should_fail_ex+0x512/0x640 [ 748.587740][T13911] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 748.587780][T13911] should_failslab+0xc2/0x120 [ 748.587802][T13911] __kmalloc_cache_node_noprof+0x6d/0x420 [ 748.587837][T13911] ? bdi_alloc+0x44/0x170 [ 748.587862][T13911] bdi_alloc+0x44/0x170 [ 748.587882][T13911] __alloc_disk_node+0xac/0x630 [ 748.587920][T13911] __blk_mq_alloc_disk+0x89/0x120 [ 748.587955][T13911] loop_add+0x49e/0xb70 [ 748.587980][T13911] ? do_vfs_ioctl+0x523/0x1a60 [ 748.588007][T13911] ? __pfx_loop_add+0x10/0x10 [ 748.588030][T13911] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 748.588076][T13911] ? find_held_lock+0x2b/0x80 [ 748.588103][T13911] loop_control_ioctl+0x13e/0x630 [ 748.588131][T13911] ? __pfx_loop_control_ioctl+0x10/0x10 [ 748.588162][T13911] ? __pfx_loop_control_ioctl+0x10/0x10 [ 748.588190][T13911] __x64_sys_ioctl+0x18b/0x210 [ 748.588220][T13911] do_syscall_64+0xcd/0x490 [ 748.588258][T13911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.588282][T13911] RIP: 0033:0x7fd0bbd8e929 [ 748.588300][T13911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.588322][T13911] RSP: 002b:00007fd0bccb1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.588344][T13911] RAX: ffffffffffffffda RBX: 00007fd0bbfb5fa0 RCX: 00007fd0bbd8e929 [ 748.588359][T13911] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 748.588374][T13911] RBP: 00007fd0bbe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 748.588388][T13911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.588402][T13911] R13: 0000000000000000 R14: 00007fd0bbfb5fa0 R15: 00007ffd008450d8 [ 748.588430][T13911] syzkaller syzkaller login: [ 757.473373][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.479836][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.914734][T12797] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 757.924918][T12797] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 757.935985][T12797] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 757.949925][T12797] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 757.957868][T12797] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 758.376477][T14013] chnl_net:caif_netlink_parms(): no params data found [ 758.653771][T14013] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.678067][T14013] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.691441][T14013] bridge_slave_0: entered allmulticast mode [ 758.709358][T14013] bridge_slave_0: entered promiscuous mode [ 758.720194][T14013] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.728672][T14013] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.729813][T14030] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 758.736024][T14013] bridge_slave_1: entered allmulticast mode [ 758.769577][T14013] bridge_slave_1: entered promiscuous mode [ 758.902555][T14013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.921037][T14013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.064261][T14013] team0: Port device team_slave_0 added [ 759.086671][T14013] team0: Port device team_slave_1 added [ 759.304180][T14013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.327661][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.369624][T14013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.452245][T14013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.478417][T14013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.513269][T14013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.616235][T14013] hsr_slave_0: entered promiscuous mode [ 759.636294][T14013] hsr_slave_1: entered promiscuous mode [ 759.653893][T14013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 759.671716][T14013] Cannot create hsr debugfs directory [ 760.027649][T12797] Bluetooth: hci8: command tx timeout [ 760.332105][T14013] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 760.606050][T14013] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 760.636903][T14013] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 760.778202][T14013] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 761.136275][T14013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.235952][T14013] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.272502][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.279760][T12701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.348837][T12701] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.356147][T12701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.039290][T14013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.107767][T12969] Bluetooth: hci8: command tx timeout [ 762.649087][T14013] veth0_vlan: entered promiscuous mode [ 762.663697][T14013] veth1_vlan: entered promiscuous mode [ 762.730598][T14013] veth0_macvtap: entered promiscuous mode [ 762.769722][T14013] veth1_macvtap: entered promiscuous mode [ 762.861974][T14013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.950982][T14013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.965675][T14013] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.975567][T14013] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.985967][T14013] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.002644][T14013] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.280729][T12553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.310385][T12553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.449934][T12546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.459596][T12546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.188362][T12969] Bluetooth: hci8: command tx timeout [ 766.270255][T12969] Bluetooth: hci8: command tx timeout [ 771.219604][T12797] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 771.234641][T12797] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 771.243126][T12797] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 771.252481][T12797] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 771.278409][T12797] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 772.263318][T14169] chnl_net:caif_netlink_parms(): no params data found [ 772.660631][T14169] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.708822][T14169] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.716297][T14169] bridge_slave_0: entered allmulticast mode [ 772.750074][T14169] bridge_slave_0: entered promiscuous mode [ 772.797040][T14169] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.807377][T14169] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.824353][T14169] bridge_slave_1: entered allmulticast mode [ 772.840663][T14169] bridge_slave_1: entered promiscuous mode [ 773.159998][T14169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.308216][T12969] Bluetooth: hci9: command tx timeout [ 773.335677][T14169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 773.580548][T14169] team0: Port device team_slave_0 added [ 773.712788][T14169] team0: Port device team_slave_1 added [ 773.861014][T14169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.878916][T14169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.927358][T14169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.980734][T14169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.987871][T14169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.054527][T14169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.432848][T14169] hsr_slave_0: entered promiscuous mode [ 774.459537][T14169] hsr_slave_1: entered promiscuous mode [ 774.548140][T14169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.623499][T14169] Cannot create hsr debugfs directory [ 775.392852][T12969] Bluetooth: hci9: command tx timeout [ 775.610635][T14169] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 775.652552][T14169] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 775.768193][T14169] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 775.851983][T14169] netdevsim netdevsim9 netdevsim3: renamed from eth3 syzkaller syzkaller login: [ 777.160617][T14169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.282848][T14169] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.342445][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.349695][T12701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.408158][T12556] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.415364][T12556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.467497][T12797] Bluetooth: hci9: command tx timeout [ 777.848483][T14246] netlink: 354 bytes leftover after parsing attributes in process `syz.7.1711'. [ 778.661520][T14169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.550758][T12797] Bluetooth: hci9: command tx timeout [ 779.836954][T14286] tipc: Started in network mode [ 779.858994][T14286] tipc: Node identity ee00, cluster identity 4711 [ 779.865586][T14286] tipc: Node number set to 60928 [ 780.087173][T14169] veth0_vlan: entered promiscuous mode [ 780.186622][T14169] veth1_vlan: entered promiscuous mode [ 781.036517][T14169] veth0_macvtap: entered promiscuous mode [ 781.077603][T14169] veth1_macvtap: entered promiscuous mode [ 781.172207][T14169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.187454][T14169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 781.223635][T14169] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.249285][T14169] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.258809][T14169] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.277245][T14169] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 781.506320][T12721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.540925][T12721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 781.605708][T12721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 781.644102][T12721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.129469][T14331] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 783.689345][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1727'. [ 783.709341][T14337] netlink: 354 bytes leftover after parsing attributes in process `syz.9.1727'. [ 784.995922][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1732'. [ 785.103806][T14359] HfR: entered promiscuous mode [ 785.111069][T14362] openvswitch: HfR: Dropping previously announced user features [ 785.340093][T14360] FAULT_INJECTION: forcing a failure. [ 785.340093][T14360] name failslab, interval 1, probability 0, space 0, times 0 [ 785.353371][T14360] CPU: 1 UID: 0 PID: 14360 Comm: syz.7.1731 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 785.353410][T14360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.353428][T14360] Call Trace: [ 785.353437][T14360] [ 785.353448][T14360] dump_stack_lvl+0x16c/0x1f0 [ 785.353496][T14360] should_fail_ex+0x512/0x640 [ 785.353535][T14360] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 785.353579][T14360] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 785.353616][T14360] should_failslab+0xc2/0x120 [ 785.353642][T14360] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 785.353685][T14360] ? mempool_init_node+0x320/0x760 [ 785.353717][T14360] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 785.353746][T14360] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 785.353776][T14360] mempool_init_node+0x320/0x760 [ 785.353813][T14360] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 785.353841][T14360] ? __pfx_mempool_free_slab+0x10/0x10 [ 785.353871][T14360] mempool_init_noprof+0x3a/0x50 [ 785.353925][T14360] bioset_init+0x37a/0x880 [ 785.353955][T14360] ? __pfx_bioset_init+0x10/0x10 [ 785.353998][T14360] __alloc_disk_node+0x83/0x630 [ 785.354055][T14360] __blk_mq_alloc_disk+0x89/0x120 [ 785.354116][T14360] loop_add+0x49e/0xb70 [ 785.354149][T14360] ? do_vfs_ioctl+0x523/0x1a60 [ 785.354183][T14360] ? __pfx_loop_add+0x10/0x10 [ 785.354213][T14360] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 785.354283][T14360] ? find_held_lock+0x2b/0x80 [ 785.354316][T14360] loop_control_ioctl+0x13e/0x630 [ 785.354348][T14360] ? __pfx_loop_control_ioctl+0x10/0x10 [ 785.354385][T14360] ? __pfx_loop_control_ioctl+0x10/0x10 [ 785.354418][T14360] __x64_sys_ioctl+0x18b/0x210 [ 785.354470][T14360] do_syscall_64+0xcd/0x490 [ 785.354518][T14360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.354548][T14360] RIP: 0033:0x7f6992b8e929 [ 785.354571][T14360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.354599][T14360] RSP: 002b:00007f6993a65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 785.354632][T14360] RAX: ffffffffffffffda RBX: 00007f6992db5fa0 RCX: 00007f6992b8e929 [ 785.354652][T14360] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 785.354669][T14360] RBP: 00007f6992c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 785.354686][T14360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.354704][T14360] R13: 0000000000000000 R14: 00007f6992db5fa0 R15: 00007ffeed8de2b8 [ 785.354741][T14360] [ 787.145271][T14383] FAULT_INJECTION: forcing a failure. [ 787.145271][T14383] name failslab, interval 1, probability 0, space 0, times 0 [ 787.235953][T14383] CPU: 1 UID: 0 PID: 14383 Comm: syz.7.1737 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 787.235993][T14383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 787.236011][T14383] Call Trace: [ 787.236019][T14383] [ 787.236030][T14383] dump_stack_lvl+0x16c/0x1f0 [ 787.236077][T14383] should_fail_ex+0x512/0x640 [ 787.236118][T14383] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 787.236159][T14383] should_failslab+0xc2/0x120 [ 787.236203][T14383] __kmalloc_cache_noprof+0x6a/0x3e0 [ 787.236245][T14383] ? netdev_create_hash+0x3c/0xc0 [ 787.236280][T14383] ? __pfx_netdev_init+0x10/0x10 [ 787.236312][T14383] netdev_create_hash+0x3c/0xc0 [ 787.236345][T14383] ? __pfx_netdev_init+0x10/0x10 [ 787.236375][T14383] netdev_init+0xa5/0x230 [ 787.236406][T14383] ops_init+0x1df/0x5f0 [ 787.236472][T14383] setup_net+0x1ff/0x510 [ 787.236498][T14383] ? lockdep_init_map_type+0x5c/0x280 [ 787.236558][T14383] ? __pfx_setup_net+0x10/0x10 [ 787.236590][T14383] ? debug_mutex_init+0x37/0x70 [ 787.236624][T14383] copy_net_ns+0x2a6/0x5f0 [ 787.236662][T14383] create_new_namespaces+0x3ea/0xa90 [ 787.236712][T14383] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 787.236752][T14383] ksys_unshare+0x45b/0xa40 [ 787.236796][T14383] ? __pfx_ksys_unshare+0x10/0x10 [ 787.236840][T14383] ? xfd_validate_state+0x61/0x180 [ 787.236894][T14383] __x64_sys_unshare+0x31/0x40 [ 787.236935][T14383] do_syscall_64+0xcd/0x490 [ 787.236987][T14383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.237019][T14383] RIP: 0033:0x7f6992b8e929 [ 787.237044][T14383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.237075][T14383] RSP: 002b:00007f6993a44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 787.237123][T14383] RAX: ffffffffffffffda RBX: 00007f6992db6080 RCX: 00007f6992b8e929 [ 787.237150][T14383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 787.237170][T14383] RBP: 00007f6992c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 787.237190][T14383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.237209][T14383] R13: 0000000000000000 R14: 00007f6992db6080 R15: 00007ffeed8de2b8 [ 787.237251][T14383] [ 788.613779][T14408] HfR: entered promiscuous mode [ 788.722281][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1742'. [ 788.789820][T14410] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 788.862290][T14408] openvswitch: HfR: Dropping previously announced user features [ 789.098239][ T5184] ERROR: Out of memory at tomoyo_memory_ok. [ 790.085872][T14414] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 791.828318][ T30] audit: type=1800 audit(4294967816.632:19): pid=14456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1750" name="members" dev="configfs" ino=96193 res=0 errno=0 [ 798.150440][T14537] FAULT_INJECTION: forcing a failure. [ 798.150440][T14537] name failslab, interval 1, probability 0, space 0, times 0 [ 798.208548][T14537] CPU: 1 UID: 0 PID: 14537 Comm: syz.9.1766 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 798.208591][T14537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 798.208608][T14537] Call Trace: [ 798.208617][T14537] [ 798.208627][T14537] dump_stack_lvl+0x16c/0x1f0 [ 798.208674][T14537] should_fail_ex+0x512/0x640 [ 798.208713][T14537] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 798.208754][T14537] should_failslab+0xc2/0x120 [ 798.208781][T14537] __kmalloc_cache_noprof+0x6a/0x3e0 [ 798.208826][T14537] ? netdev_create_hash+0x3c/0xc0 [ 798.208859][T14537] ? __pfx_netdev_init+0x10/0x10 [ 798.208888][T14537] netdev_create_hash+0x3c/0xc0 [ 798.208918][T14537] ? __pfx_netdev_init+0x10/0x10 [ 798.208945][T14537] netdev_init+0xa5/0x230 [ 798.208975][T14537] ops_init+0x1df/0x5f0 [ 798.209023][T14537] setup_net+0x1ff/0x510 [ 798.209046][T14537] ? lockdep_init_map_type+0x5c/0x280 [ 798.209085][T14537] ? __pfx_setup_net+0x10/0x10 [ 798.209113][T14537] ? debug_mutex_init+0x37/0x70 [ 798.209143][T14537] copy_net_ns+0x2a6/0x5f0 [ 798.209176][T14537] create_new_namespaces+0x3ea/0xa90 [ 798.209213][T14537] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 798.209247][T14537] ksys_unshare+0x45b/0xa40 [ 798.209284][T14537] ? __pfx_ksys_unshare+0x10/0x10 [ 798.209321][T14537] ? xfd_validate_state+0x61/0x180 [ 798.209367][T14537] __x64_sys_unshare+0x31/0x40 [ 798.209402][T14537] do_syscall_64+0xcd/0x490 [ 798.209447][T14537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.209475][T14537] RIP: 0033:0x7f616fd8e929 [ 798.209496][T14537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.209524][T14537] RSP: 002b:00007f6170c73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 798.209550][T14537] RAX: ffffffffffffffda RBX: 00007f616ffb6080 RCX: 00007f616fd8e929 [ 798.209567][T14537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 798.209583][T14537] RBP: 00007f616fe10b39 R08: 0000000000000000 R09: 0000000000000000 [ 798.209599][T14537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.209615][T14537] R13: 0000000000000000 R14: 00007f616ffb6080 R15: 00007ffc024ed0d8 [ 798.209648][T14537] [ 805.643291][T12572] Bluetooth: hci5: command 0x0406 tx timeout [ 812.944188][T14705] ERROR: Out of memory at tomoyo_memory_ok. [ 812.977379][T14705] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1794'. [ 815.067992][ T31] INFO: task kworker/u10:2:12552 blocked for more than 143 seconds. [ 815.076206][ T31] Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 [ 815.084465][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 815.096047][ T31] task:kworker/u10:2 state:D stack:26952 pid:12552 tgid:12552 ppid:2 task_flags:0x4208060 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 815.170989][ T31] Workqueue: netns cleanup_net [ 815.208018][ T31] Call Trace: [ 815.211373][ T31] [ 815.214358][ T31] __schedule+0x116a/0x5de0 [ 815.225570][ T31] ? __pfx___schedule+0x10/0x10 [ 815.247444][ T31] ? find_held_lock+0x2b/0x80 [ 815.252300][ T31] ? schedule+0x2d7/0x3a0 [ 815.256708][ T31] schedule+0xe7/0x3a0 [ 815.261446][ T31] schedule_timeout+0x257/0x290 [ 815.266370][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 815.272216][ T31] ? mark_held_locks+0x49/0x80 [ 815.277063][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 815.282795][ T31] __wait_for_common+0x2ff/0x4e0 [ 815.288116][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 815.293557][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 815.305397][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 815.318974][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 815.324864][ T31] __flush_workqueue+0x3e2/0x1230 [ 815.346995][ T31] ? cx231xx_tuner_callback+0x2b9/0x300 [ 815.366640][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 815.425095][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 815.437263][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 815.442842][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 815.480194][ T31] rds_tcp_listen_stop+0x104/0x150 [ 815.485526][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 815.533297][ T31] rds_tcp_exit_net+0xcb/0x810 [ 815.560280][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 815.568046][ T31] ? __pfx___might_resched+0x10/0x10 [ 815.575577][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 815.592453][ T31] ops_undo_list+0x2eb/0xab0 [ 815.607476][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 815.612714][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 815.709070][ T31] cleanup_net+0x408/0x890 [ 815.727227][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 815.732252][ T31] ? rcu_is_watching+0x12/0xc0 [ 815.737643][ T31] process_one_work+0x9cc/0x1b70 [ 815.742694][ T31] ? __pfx_process_one_work+0x10/0x10 [ 815.749404][ T31] ? assign_work+0x1a0/0x250 [ 815.765440][ T31] worker_thread+0x6c8/0xf10 [ 815.770351][ T31] ? __pfx_worker_thread+0x10/0x10 [ 815.775544][ T31] kthread+0x3c5/0x780 [ 815.789405][ T31] ? __pfx_kthread+0x10/0x10 [ 815.822040][ T31] ? rcu_is_watching+0x12/0xc0 [ 815.826885][ T31] ? __pfx_kthread+0x10/0x10 [ 815.883267][ T31] ret_from_fork+0x5d4/0x6f0 [ 815.888402][ T31] ? __pfx_kthread+0x10/0x10 [ 815.893055][ T31] ret_from_fork_asm+0x1a/0x30 [ 815.912745][ T31] [ 815.920504][ T31] INFO: task syz.0.1413:12579 blocked for more than 144 seconds. [ 815.937220][ T31] Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 [ 815.997206][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 816.005948][ T31] task:syz.0.1413 state:D stack:26568 pid:12579 tgid:12566 ppid:5835 task_flags:0x400140 flags:0x00004006 [ 816.067219][ T31] Call Trace: [ 816.070562][ T31] [ 816.073555][ T31] __schedule+0x116a/0x5de0 [ 816.084168][ T31] ? __pfx___schedule+0x10/0x10 [ 816.117244][ T31] ? find_held_lock+0x2b/0x80 [ 816.122012][ T31] ? schedule+0x2d7/0x3a0 [ 816.126418][ T31] schedule+0xe7/0x3a0 [ 816.158010][ T31] schedule_timeout+0x257/0x290 [ 816.162960][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 816.207467][ T31] ? mark_held_locks+0x49/0x80 [ 816.212302][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 816.227219][ T31] __wait_for_common+0x2ff/0x4e0 [ 816.232298][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 816.270495][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 816.276050][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 816.281472][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 816.302679][ T31] __flush_workqueue+0x3e2/0x1230 [ 816.307898][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 816.313426][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 816.355209][ T31] ? release_sock+0x21/0x220 [ 816.360073][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 816.365609][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 816.387512][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 816.393069][ T31] rds_tcp_listen_stop+0x104/0x150 [ 816.412174][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 816.419520][ T31] rds_tcp_exit_net+0xcb/0x810 [ 816.424543][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 816.430504][ T31] ? __pfx___might_resched+0x10/0x10 [ 816.435866][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 816.441791][ T31] ops_undo_list+0x2eb/0xab0 [ 816.446454][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 816.452022][ T31] ? ops_init+0x2fa/0x5f0 [ 816.458556][ T31] setup_net+0x2e1/0x510 [ 816.462857][ T31] ? __pfx_setup_net+0x10/0x10 [ 816.477107][ T31] ? debug_mutex_init+0x37/0x70 [ 816.482283][ T31] copy_net_ns+0x2a6/0x5f0 [ 816.486762][ T31] create_new_namespaces+0x3ea/0xa90 [ 816.496185][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 816.502327][ T31] ksys_unshare+0x45b/0xa40 [ 816.506911][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 816.512813][ T31] ? do_user_addr_fault+0x843/0x1370 [ 816.520764][ T31] __x64_sys_unshare+0x31/0x40 [ 816.525608][ T31] do_syscall_64+0xcd/0x490 [ 816.531726][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.538042][ T31] RIP: 0033:0x7fb28af8e929 [ 816.542516][ T31] RSP: 002b:00007fb28be7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 816.551431][ T31] RAX: ffffffffffffffda RBX: 00007fb28b1b6240 RCX: 00007fb28af8e929 [ 816.561452][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 816.574273][ T31] RBP: 00007fb28b010b39 R08: 0000000000000000 R09: 0000000000000000 [ 816.589207][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.601030][ T31] R13: 0000000000000001 R14: 00007fb28b1b6240 R15: 00007ffc77055fc8 [ 816.609421][ T31] [ 816.705891][ T31] INFO: task syz.3.1457:12791 blocked for more than 144 seconds. [ 816.747712][ T31] Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 [ 816.755423][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 816.793696][ T31] task:syz.3.1457 state:D stack:26152 pid:12791 tgid:12789 ppid:5833 task_flags:0x400140 flags:0x00004006 [ 816.809398][ T31] Call Trace: [ 816.812737][ T31] [ 816.815710][ T31] __schedule+0x116a/0x5de0 [ 816.825929][ T31] ? __pfx___schedule+0x10/0x10 [ 816.831979][ T31] ? find_held_lock+0x2b/0x80 [ 816.836732][ T31] ? schedule+0x2d7/0x3a0 [ 816.843556][ T31] schedule+0xe7/0x3a0 [ 816.848887][ T31] schedule_timeout+0x257/0x290 [ 816.853802][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 816.867194][ T31] ? mark_held_locks+0x49/0x80 [ 816.872026][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 816.917240][ T31] __wait_for_common+0x2ff/0x4e0 [ 816.922285][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 816.977265][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 816.982838][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 817.017255][ T31] __flush_workqueue+0x3e2/0x1230 [ 817.022399][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 817.067185][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 817.073016][ T31] ? release_sock+0x21/0x220 [ 817.118947][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 817.124511][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 817.130227][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 817.135721][ T31] rds_tcp_listen_stop+0x104/0x150 [ 817.141228][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 817.146644][ T31] rds_tcp_exit_net+0xcb/0x810 [ 817.156094][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 817.163145][ T31] ? __pfx___might_resched+0x10/0x10 [ 817.173970][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 817.197216][ T31] ops_undo_list+0x2eb/0xab0 [ 817.201883][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 817.207054][ T31] ? ops_init+0x2fa/0x5f0 [ 817.227309][ T31] setup_net+0x2e1/0x510 [ 817.231616][ T31] ? __pfx_setup_net+0x10/0x10 [ 817.236433][ T31] ? debug_mutex_init+0x37/0x70 [ 817.257250][ T31] copy_net_ns+0x2a6/0x5f0 [ 817.264160][ T31] create_new_namespaces+0x3ea/0xa90 [ 817.270151][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 817.276613][ T31] ksys_unshare+0x45b/0xa40 [ 817.281659][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 817.286782][ T31] ? xfd_validate_state+0x61/0x180 [ 817.292504][ T31] __x64_sys_unshare+0x31/0x40 [ 817.298164][ T31] do_syscall_64+0xcd/0x490 [ 817.302762][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.310431][ T31] RIP: 0033:0x7f0f86b8e929 [ 817.315073][ T31] RSP: 002b:00007f0f87981038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 817.324291][ T31] RAX: ffffffffffffffda RBX: 00007f0f86db6080 RCX: 00007f0f86b8e929 [ 817.332548][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 817.340859][ T31] RBP: 00007f0f86c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 817.349061][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.357062][ T31] R13: 0000000000000000 R14: 00007f0f86db6080 R15: 00007ffe2f53eb38 [ 817.365126][ T31] [ 817.368412][ T31] [ 817.368412][ T31] Showing all locks held in the system: [ 817.381615][ T31] 1 lock held by khungtaskd/31: [ 817.386606][ T31] #0: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 817.401044][ T31] 3 locks held by kworker/u10:2/12552: [ 817.406573][ T31] #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 817.418487][ T31] #1: ffffc9000c147d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 817.428832][ T31] #2: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 817.438416][ T31] 1 lock held by syz.0.1413/12579: [ 817.443566][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 817.453286][ T31] 1 lock held by syz.3.1457/12791: [ 817.458658][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 817.468479][ T31] 1 lock held by syz.1.1524/13184: [ 817.473631][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 817.483685][ T31] 1 lock held by syz.5.1583/13501: [ 817.490079][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 817.499751][ T31] 1 lock held by syz.2.1640/13848: [ 817.504903][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 817.514419][ T31] 1 lock held by syz.4.1673/14000: [ 817.519736][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 817.529309][ T31] 3 locks held by syz-executor/14169: [ 817.534713][ T31] #0: ffff888099fd0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 817.544474][ T31] #1: ffff888099fd0078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 817.554501][ T31] #2: ffffffff905bf988 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 817.564754][ T31] 2 locks held by getty/14238: [ 817.570199][ T31] #0: ffff88814cf180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 817.580111][ T31] #1: ffffc90003e092f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 817.591899][ T31] 1 lock held by syz.6.1792/14696: [ 817.599692][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 817.609470][ T31] 3 locks held by syz.7.1800/14732: [ 817.614726][ T31] #0: ffff88808e8e0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 817.624603][ T31] #1: ffff88808e8e0078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 817.634592][ T31] #2: ffffffff8e5cfdb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 817.644952][ T31] 5 locks held by syz.8.1801/14743: [ 817.650247][ T31] #0: ffff888054ee8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 817.660030][ T31] #1: ffff888054ee8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 817.669942][ T31] #2: ffffffff905bf988 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 817.680342][ T31] #3: ffff888089114338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 817.691710][ T31] #4: ffffffff8e5cfdb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 817.704458][ T31] [ 817.706834][ T31] ============================================= [ 817.706834][ T31] [ 817.715486][ T31] NMI backtrace for cpu 0 [ 817.715504][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 817.715539][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 817.715565][ T31] Call Trace: [ 817.715573][ T31] [ 817.715583][ T31] dump_stack_lvl+0x116/0x1f0 [ 817.715621][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 817.715648][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 817.715685][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 817.715727][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 817.715762][ T31] watchdog+0xf70/0x12c0 [ 817.715806][ T31] ? __pfx_watchdog+0x10/0x10 [ 817.715842][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 817.715883][ T31] ? __kthread_parkme+0x19e/0x250 [ 817.715922][ T31] ? __pfx_watchdog+0x10/0x10 [ 817.715961][ T31] kthread+0x3c5/0x780 [ 817.716000][ T31] ? __pfx_kthread+0x10/0x10 [ 817.716039][ T31] ? rcu_is_watching+0x12/0xc0 [ 817.716066][ T31] ? __pfx_kthread+0x10/0x10 [ 817.716104][ T31] ret_from_fork+0x5d4/0x6f0 [ 817.716137][ T31] ? __pfx_kthread+0x10/0x10 [ 817.716174][ T31] ret_from_fork_asm+0x1a/0x30 [ 817.716216][ T31] [ 817.716226][ T31] Sending NMI from CPU 0 to CPUs 1: [ 817.843340][ C1] NMI backtrace for cpu 1 [ 817.843356][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 817.843384][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 817.843397][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 817.843433][ C1] Code: 4b 75 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 5e 2d 00 fb f4 0c fb 02 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 817.843454][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 817.843472][ C1] RAX: 0000000000448c0b RBX: 0000000000000001 RCX: ffffffff8b7cac29 [ 817.843486][ C1] RDX: 0000000000000000 RSI: ffffffff8de13876 RDI: ffffffff8c1565a0 [ 817.843500][ C1] RBP: ffffed1003cd7b40 R08: 0000000000000001 R09: ffffed10170a6645 [ 817.843514][ C1] R10: ffff8880b853322b R11: 0000000000000001 R12: 0000000000000001 [ 817.843527][ C1] R13: ffff88801e6bda00 R14: ffffffff90a82d50 R15: 0000000000000000 [ 817.843541][ C1] FS: 0000000000000000(0000) GS:ffff888124860000(0000) knlGS:0000000000000000 [ 817.843561][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 817.843575][ C1] CR2: 00007f616ff81178 CR3: 000000003552a000 CR4: 00000000003526f0 [ 817.843589][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 817.843602][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 817.843615][ C1] Call Trace: [ 817.843622][ C1] [ 817.843628][ C1] default_idle+0x13/0x20 [ 817.843649][ C1] default_idle_call+0x6d/0xb0 [ 817.843670][ C1] do_idle+0x391/0x510 [ 817.843692][ C1] ? __pfx_do_idle+0x10/0x10 [ 817.843713][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 817.843741][ C1] cpu_startup_entry+0x4f/0x60 [ 817.843763][ C1] start_secondary+0x21d/0x2b0 [ 817.843789][ C1] ? __pfx_start_secondary+0x10/0x10 [ 817.843818][ C1] common_startup_64+0x13e/0x148 [ 817.843861][ C1] [ 818.040922][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 818.047828][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00044-g7595b66ae9de #0 PREEMPT(full) [ 818.059676][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 818.069754][ T31] Call Trace: [ 818.073053][ T31] [ 818.076008][ T31] dump_stack_lvl+0x3d/0x1f0 [ 818.080649][ T31] panic+0x71c/0x800 [ 818.084583][ T31] ? __pfx_panic+0x10/0x10 [ 818.089042][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 818.094460][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 818.100484][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 818.105916][ T31] ? watchdog+0xdda/0x12c0 [ 818.110394][ T31] ? watchdog+0xdcd/0x12c0 [ 818.114859][ T31] watchdog+0xdeb/0x12c0 [ 818.119155][ T31] ? __pfx_watchdog+0x10/0x10 [ 818.123867][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 818.129185][ T31] ? __kthread_parkme+0x19e/0x250 [ 818.134252][ T31] ? __pfx_watchdog+0x10/0x10 [ 818.138990][ T31] kthread+0x3c5/0x780 [ 818.143117][ T31] ? __pfx_kthread+0x10/0x10 [ 818.147770][ T31] ? rcu_is_watching+0x12/0xc0 [ 818.152568][ T31] ? __pfx_kthread+0x10/0x10 [ 818.157204][ T31] ret_from_fork+0x5d4/0x6f0 [ 818.161838][ T31] ? __pfx_kthread+0x10/0x10 [ 818.166565][ T31] ret_from_fork_asm+0x1a/0x30 [ 818.171381][ T31] [ 818.174712][ T31] Kernel Offset: disabled [ 818.179057][ T31] Rebooting in 86400 seconds..