last executing test programs: 40.312834699s ago: executing program 1 (id=1712): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:03.0/rescan\x00', 0xa901, 0x0) socket(0x10, 0x2, 0x0) userfaultfd$auto(0xfffffffe) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x22000, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) socket(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x6, 0x4004004c) connect$auto(0x5, 0x0, 0x9) write$auto(r0, &(0x7f0000000440)='7\x00\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xbap\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV\x94R+\x94s\x84\xa4\xd4M\xa9\xea\\Vt\xde\xedS\xf8?\x91\xef\xb3 4^\xc9DO\x88Er\xb5\x82b\x8f\xfcd\xe3\x81\xf6\xe4\x16\xe1\x15\xaf\xf2q\xc41\xf5-\xcc\xcfj\x94\xce\xc2>\t=\xe5\"a\xde\x18\xd8\xe8', 0x4) 39.542214107s ago: executing program 1 (id=1718): socket(0x11, 0x80003, 0x300) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/info\x00', 0x1c1282, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) 38.109206072s ago: executing program 1 (id=1723): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r0, 0x40084504, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x98c7) socket(0x10, 0x2, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000040)=0x5) r3 = socket(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) setsockopt$auto(0x3, 0x6d, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) 37.260515796s ago: executing program 1 (id=1726): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x468401, 0x0) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r2, 0x4b67, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x203, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x6) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) read$auto_def_blk_fops_fs(r3, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x161640, 0x0) open(0x0, 0x80842, 0x20) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) madvise$auto(0xffffffffffff08b1, 0x20499c, 0x9) 37.142483627s ago: executing program 1 (id=1727): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x7, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r2, &(0x7f0000000300)={0xc0, 0x2, "0200000000000000c32f1a88a7d2ac4f994d42b9ccb04eead5e03d771a33bb03d2d7de959b4fd3cea3ebd9c48b2687fb19852b1da5ab33a6ca4c2b285666489ad5391024feca142d2ce5d558ded9719dea51d787328f8ead177dce68174a0f5524b4ae35369f8a21404d65bd5f6de5969ae3ab017c1bfc19029e678420377d0f040a0177ed0345f589774ee5a94eaa7f61f9b3f5deed725ac61251cf2764951f92e1945bfc2f2a921c06506e166743fbd01a69d364e3a9b990ef201ef568c367"}, 0x9) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) rseq$auto(&(0x7f00000005c0)={0x7, 0x6, 0x9, 0xfff, 0xa896, 0xffffffff, "af18c8a1eea866e9840b50cd944973113586d3c13361bac7f306af96f7efff43128e2b8c922b8fb895af349b0e062b81eb9c283c708b70b3acce9ee9cb134a7d7b89f2ffb21780113116e8528cfb4e952a1b38f43f7f7b0488d02d3f54d5f95a2b518d94598435ff9e3cb359f175b4a79e5debbe3437a9ee705e85abac6b17f188af31073da2af00acf600fea4db39bb050ffdfdf770463b"}, 0x584, 0x1, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x401, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x8, 0x80000008000000a, 0x40000402, 0x9, 0x8, 0xffffffff80000000, 0x800000000000d, 0x6, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r4 = socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x10000) socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, 0x0, 0x6, 0x10004008) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r5, 0x0, 0x8, 0xffff) 34.281353924s ago: executing program 1 (id=1734): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0) ioctl$auto_TIOCMGET2(r1, 0x5415, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) mknod$auto(&(0x7f0000000280)='X))\x00', 0x63c5, 0x7bf) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7fc) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, 0x0, 0x48000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001280)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x20042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x66ab80, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$auto_UI_SET_EVBIT(r2, 0x40045564, &(0x7f0000000440)=0x1) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x2, 0x0, 0xc) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) 21.503902799s ago: executing program 2 (id=1771): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 20.430122033s ago: executing program 2 (id=1773): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 19.470491611s ago: executing program 2 (id=1776): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r0, 0x40084504, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x98c7) socket(0x10, 0x2, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) r2 = socket(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) setsockopt$auto(0x3, 0x6d, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) 19.227677407s ago: executing program 32 (id=1734): mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyw5\x00', 0x28341, 0x0) ioctl$auto_TIOCMGET2(r1, 0x5415, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) mknod$auto(&(0x7f0000000280)='X))\x00', 0x63c5, 0x7bf) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x63c1, 0x7fc) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, 0x0, 0x48000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001280)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x20042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x66ab80, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$auto_UI_SET_EVBIT(r2, 0x40045564, &(0x7f0000000440)=0x1) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x2, 0x0, 0xc) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/sys/kernel/kptr_restrict\x00', 0x202, 0x0) 18.845727068s ago: executing program 2 (id=1779): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 18.128170908s ago: executing program 2 (id=1782): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtd\x00', 0xc40, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r2 = gettid() process_vm_writev$auto(r2, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/oss_mixer\x00', 0x2802, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) io_uring_setup$auto(0x8, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x8, 0x8, r1, [], {0x6, 0x6, 0xf, 0x8, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) 15.856001794s ago: executing program 2 (id=1787): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r0, 0x40084504, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x98c7) socket(0x10, 0x2, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) r2 = socket(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) setsockopt$auto(0x3, 0x6d, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) 12.47212316s ago: executing program 4 (id=1777): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x468401, 0x0) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) fstatfs$auto(0x3, 0x0) ioctl$auto(r2, 0x4b67, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x203, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x81) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x6) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) read$auto_def_blk_fops_fs(r3, &(0x7f0000000140)=""/194, 0xc2) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x161640, 0x0) open(0x0, 0x80842, 0x20) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) madvise$auto(0xffffffffffff08b1, 0x20499c, 0x9) 11.200967267s ago: executing program 4 (id=1794): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0xfc, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) write$auto(r0, 0x0, 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) ioperm$auto(0x7, 0x800, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x0, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0xd, 0x1, 0x948d, 0x6, 0x15f4da0a, 0x3, 0x3, 0x33c, 0x8000001d, 0x20000007, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto(r1, 0x400454cb, 0x5) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) mmap$auto(0x7, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 8.277054745s ago: executing program 4 (id=1798): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 7.251801504s ago: executing program 4 (id=1803): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/97, 0x61) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) getpid() prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0x0) fchown$auto(0x2, 0xffffffff, 0xa1a9) 2.314840105s ago: executing program 0 (id=1820): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, 0x0, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 2.039471645s ago: executing program 3 (id=1822): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x42, 0x0) ioctl$auto(r0, 0x9210640c, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r1 = io_uring_setup$auto(0x86, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) ioctl$auto(r2, 0xc0205647, r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x1f) open(&(0x7f0000000100)='./file0\x00', 0x201c2, 0x10e) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r4, &(0x7f0000000200)=@generic={0x11, "0000100000000000929e006300"}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') 1.974648311s ago: executing program 0 (id=1823): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, 0x0, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 1.792328008s ago: executing program 3 (id=1824): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, 0x0, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 1.702085517s ago: executing program 0 (id=1825): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, 0x0, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 1.513435545s ago: executing program 3 (id=1826): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 1.325155831s ago: executing program 3 (id=1827): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, 0x0, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 1.158132337s ago: executing program 3 (id=1828): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) write$auto(0xffffffffffffffff, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) 837.441065ms ago: executing program 33 (id=1787): close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r0, 0x40084504, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, 0x0, 0x98c7) socket(0x10, 0x2, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000040)=0x5) r2 = socket(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) setsockopt$auto(0x3, 0x6d, 0x7, 0xffffffffffffffff, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) socket(0x10, 0x2, 0xc) close_range$auto(0x2, 0x8, 0x0) 639.72167ms ago: executing program 0 (id=1830): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, 0x0, &(0x7f0000000240)={[0x6, 0x6, 0x9, 0xfffffffffffffff4, 0x9, 0x2, 0x1, 0x1, 0x8000000000000000, 0x10, 0x4, 0x8, 0x100000000, 0x8, 0x9, 0x1000]}, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 172.803016ms ago: executing program 0 (id=1831): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_INCOMING_NAPI_ID(r0, 0x3, 0x38, &(0x7f00000003c0)=',{--$^{\x00', 0x0) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x34, r1, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRET={0x7, 0x4, "96e300"}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) get_robust_list$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x407, 0x1, 0x44f, 0x7, 0x1, 0x1007181, 0x8a0d, 0x7, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84}, 0x9, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd06, &(0x7f00000001c0)) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), 0xffffffffffffffff) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x20499d, 0x9) lsm_list_modules$auto(&(0x7f0000000100)=0x101, &(0x7f0000000140)=0x4fc7, 0x8) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) pread64$auto(r4, 0x0, 0x6, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x3, 0x4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032bbd7000fddbdf250a", @ANYRES64], 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) 81.997861ms ago: executing program 3 (id=1832): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={"6a95fb871712b7b953f18f982600960ad111411be8ac47c2164cf791ec7b1333", 0x9, 0x8, 0x2, 0x3, 0x9, 0xffffffffffffffff}) capset$auto(0x0, &(0x7f0000000100)={0x1000, 0xef, 0x5}) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) socket(0x2, 0x1, 0x0) r2 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, 0x0, 0xa2000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r2, 0x0, 0x0) socket(0x11, 0x80003, 0x300) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f00000001c0)={[0x1, 0x2, 0x8, 0x0, 0x8000, 0x3, 0x8, 0x5, 0x81, 0x0, 0x9, 0xe, 0x4, 0x1, 0x5, 0x8]}, 0x0, &(0x7f00000002c0)={[0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x4, 0xa398, 0x2, 0x80, 0x4, 0x597, 0x3, 0x400, 0x7, 0x40, 0x10000, 0x80000001]}, &(0x7f0000000340)={0x1, 0x9}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000180)=@in={0x2, 0x4e20, @broadcast}, 0x1a) 0s ago: executing program 0 (id=1833): mmap$auto(0x0, 0xfffffffffffffffe, 0x3, 0xeb3, 0xfffffffffffffffa, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) io_uring_register$auto_IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0xc) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) open_by_handle_at$auto(r0, &(0x7f0000000480)={0xb4, 0x1e, "d5cb45bf3a85257cf184925b8dd3c6b4ba2f10e67122cbf74010d219333f2c634c3e01dae068eb200fac11aac7036e00eb07ace5ad056bcdf5bc266f99d6467f70017e9482374eff37af7bbecdc2d6389d2b5e78a50a4210767c870668ddcd0d3ae336ade6a363271b2fbaddc9ae97bf6ad4800dc0e850a5215973a1192b18930549f786880174c404722d369ef05a03034ac9241f0eaffe52d4363dc2e5c258bf3c4c5eab9b19fac68b638608cd45c7364f871b"}, 0x403) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) socket(0x2c, 0x3, 0x9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0xc00, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) fcntl$auto(0x0, 0x407, 0x100000) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               syzkaller syzkaller login: [ 307.229552][ T8420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.527'. [ 310.415600][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.537'. [ 310.479108][ T8461] netlink: 354 bytes leftover after parsing attributes in process `syz.0.537'. [ 310.640512][ T8467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.539'. [ 311.360436][ T8470] FAULT_INJECTION: forcing a failure. [ 311.360436][ T8470] name failslab, interval 1, probability 0, space 0, times 0 [ 311.412374][ T8470] CPU: 0 UID: 0 PID: 8470 Comm: syz.3.541 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 311.412422][ T8470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.412441][ T8470] Call Trace: [ 311.412451][ T8470] [ 311.412464][ T8470] dump_stack_lvl+0x16c/0x1f0 [ 311.412516][ T8470] should_fail_ex+0x512/0x640 [ 311.412560][ T8470] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 311.412609][ T8470] should_failslab+0xc2/0x120 [ 311.412639][ T8470] __kmalloc_cache_node_noprof+0x6d/0x420 [ 311.412683][ T8470] ? bdi_alloc+0x44/0x170 [ 311.412717][ T8470] bdi_alloc+0x44/0x170 [ 311.412745][ T8470] __alloc_disk_node+0xac/0x630 [ 311.412794][ T8470] __blk_mq_alloc_disk+0x89/0x120 [ 311.412849][ T8470] loop_add+0x49e/0xb70 [ 311.412883][ T8470] ? do_vfs_ioctl+0x523/0x1a60 [ 311.412919][ T8470] ? __pfx_loop_add+0x10/0x10 [ 311.412949][ T8470] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 311.413019][ T8470] ? find_held_lock+0x2b/0x80 [ 311.413057][ T8470] loop_control_ioctl+0x13e/0x630 [ 311.413093][ T8470] ? __pfx_loop_control_ioctl+0x10/0x10 [ 311.413135][ T8470] ? __pfx_loop_control_ioctl+0x10/0x10 [ 311.413174][ T8470] __x64_sys_ioctl+0x18b/0x210 [ 311.413213][ T8470] do_syscall_64+0xcd/0x490 [ 311.413264][ T8470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.413295][ T8470] RIP: 0033:0x7f6f6038e929 [ 311.413320][ T8470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.413347][ T8470] RSP: 002b:00007f6f61148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.413377][ T8470] RAX: ffffffffffffffda RBX: 00007f6f605b5fa0 RCX: 00007f6f6038e929 [ 311.413397][ T8470] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 311.413415][ T8470] RBP: 00007f6f60410b39 R08: 0000000000000000 R09: 0000000000000000 [ 311.413432][ T8470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.413449][ T8470] R13: 0000000000000000 R14: 00007f6f605b5fa0 R15: 00007ffc68775638 [ 311.413489][ T8470] [ 311.624876][ C0] vkms_vblank_simulate: vblank timer overrun [ 313.367535][ T8488] Process accounting paused [ 320.800528][ T8612] Invalid ELF header magic: != ELF [ 322.567790][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.574446][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.194918][ T30] audit: type=1800 audit(4294975312.150:12): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.573" name="dbroot" dev="configfs" ino=18851 res=0 errno=0 [ 328.312206][ T8697] Invalid ELF header magic: != ELF [ 328.418198][ T8702] ima: policy update failed [ 328.450422][ T30] audit: type=1802 audit(4294975313.490:13): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.577" res=0 errno=0 [ 328.456871][ T8702] netlink: 25 bytes leftover after parsing attributes in process `syz.2.577'. [ 334.531405][ T5151] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 336.848480][ T8816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.596'. [ 339.104093][ T51] Bluetooth: hci3: unexpected event 0x14 length: 11 > 6 [ 340.576172][ T8863] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 340.576172][ T8863] The task syz.3.603 (8863) triggered the difference, watch for misbehavior. [ 342.357756][ T8885] Invalid ELF header magic: != ELF [ 344.621763][ T8889] Process accounting resumed [ 347.050744][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 347.205011][ T8936] random: crng reseeded on system resumption [ 351.885594][ T9006] FAULT_INJECTION: forcing a failure. [ 351.885594][ T9006] name failslab, interval 1, probability 0, space 0, times 0 [ 351.968143][ T9006] CPU: 0 UID: 0 PID: 9006 Comm: syz.0.633 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 351.968187][ T9006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 351.968204][ T9006] Call Trace: [ 351.968215][ T9006] [ 351.968226][ T9006] dump_stack_lvl+0x16c/0x1f0 [ 351.968278][ T9006] should_fail_ex+0x512/0x640 [ 351.968323][ T9006] ? fs_reclaim_acquire+0xae/0x150 [ 351.968361][ T9006] ? tomoyo_encode2+0x100/0x3e0 [ 351.968398][ T9006] should_failslab+0xc2/0x120 [ 351.968427][ T9006] __kmalloc_noprof+0xd2/0x510 [ 351.968478][ T9006] ? d_absolute_path+0x136/0x1a0 [ 351.968517][ T9006] tomoyo_encode2+0x100/0x3e0 [ 351.968564][ T9006] tomoyo_encode+0x29/0x50 [ 351.968602][ T9006] tomoyo_realpath_from_path+0x18f/0x6e0 [ 351.968654][ T9006] tomoyo_path_number_perm+0x245/0x580 [ 351.968687][ T9006] ? tomoyo_path_number_perm+0x237/0x580 [ 351.968725][ T9006] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 351.968802][ T9006] ? find_held_lock+0x2b/0x80 [ 351.968828][ T9006] ? hook_file_ioctl_common+0x145/0x410 [ 351.968869][ T9006] ? __fget_files+0x20e/0x3c0 [ 351.968925][ T9006] security_file_ioctl+0x9b/0x240 [ 351.968964][ T9006] __x64_sys_ioctl+0xb7/0x210 [ 351.969000][ T9006] do_syscall_64+0xcd/0x490 [ 351.969047][ T9006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.969077][ T9006] RIP: 0033:0x7fc3a138e929 [ 351.969101][ T9006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.969130][ T9006] RSP: 002b:00007fc3a222e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 351.969159][ T9006] RAX: ffffffffffffffda RBX: 00007fc3a15b6080 RCX: 00007fc3a138e929 [ 351.969178][ T9006] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 351.969194][ T9006] RBP: 00007fc3a1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 351.969212][ T9006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.969229][ T9006] R13: 0000000000000000 R14: 00007fc3a15b6080 R15: 00007ffdb76c9718 [ 351.969269][ T9006] [ 351.969296][ T9006] ERROR: Out of memory at tomoyo_realpath_from_path. [ 360.251391][ T9096] FAULT_INJECTION: forcing a failure. [ 360.251391][ T9096] name failslab, interval 1, probability 0, space 0, times 0 [ 360.276118][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.1.651 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 360.276163][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.276179][ T9096] Call Trace: [ 360.276189][ T9096] [ 360.276201][ T9096] dump_stack_lvl+0x16c/0x1f0 [ 360.276249][ T9096] should_fail_ex+0x512/0x640 [ 360.276288][ T9096] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 360.276333][ T9096] should_failslab+0xc2/0x120 [ 360.276360][ T9096] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 360.276400][ T9096] ? __kernfs_new_node+0xd2/0x8e0 [ 360.276443][ T9096] __kernfs_new_node+0xd2/0x8e0 [ 360.276486][ T9096] ? __pfx___kernfs_new_node+0x10/0x10 [ 360.276535][ T9096] ? find_held_lock+0x2b/0x80 [ 360.276575][ T9096] ? kernfs_root+0xee/0x2a0 [ 360.276620][ T9096] kernfs_new_node+0x13c/0x1e0 [ 360.276669][ T9096] __kernfs_create_file+0x53/0x350 [ 360.276706][ T9096] sysfs_add_file_mode_ns+0x207/0x3c0 [ 360.276753][ T9096] internal_create_group+0x578/0xf30 [ 360.276799][ T9096] ? __pfx_internal_create_group+0x10/0x10 [ 360.276843][ T9096] ? kernfs_create_link+0x1bd/0x240 [ 360.276881][ T9096] internal_create_groups+0x9d/0x150 [ 360.276924][ T9096] device_add+0x6d1/0x1a70 [ 360.276958][ T9096] ? __pfx_device_add+0x10/0x10 [ 360.276987][ T9096] ? lockdep_init_map_type+0x5c/0x280 [ 360.277024][ T9096] ? __init_waitqueue_head+0xca/0x150 [ 360.277075][ T9096] netdev_register_kobject+0x182/0x3a0 [ 360.277109][ T9096] register_netdevice+0x13dc/0x2270 [ 360.277145][ T9096] ? __pfx_register_netdevice+0x10/0x10 [ 360.277185][ T9096] __ip_tunnel_create+0x540/0x6e0 [ 360.277219][ T9096] ? __pfx___ip_tunnel_create+0x10/0x10 [ 360.277262][ T9096] ip_tunnel_init_net+0x22f/0x7d0 [ 360.277300][ T9096] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 360.277340][ T9096] ? trace_kmalloc+0x2b/0xd0 [ 360.277366][ T9096] ? __kmalloc_noprof+0x242/0x510 [ 360.277403][ T9096] ? lockdep_init_map_type+0x5c/0x280 [ 360.277444][ T9096] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 360.277487][ T9096] ops_init+0x1df/0x5f0 [ 360.277533][ T9096] setup_net+0x1ff/0x510 [ 360.277567][ T9096] ? lockdep_init_map_type+0x5c/0x280 [ 360.277605][ T9096] ? __pfx_setup_net+0x10/0x10 [ 360.277634][ T9096] ? debug_mutex_init+0x37/0x70 [ 360.277668][ T9096] copy_net_ns+0x2a6/0x5f0 [ 360.277701][ T9096] create_new_namespaces+0x3ea/0xa90 [ 360.277742][ T9096] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 360.277776][ T9096] ksys_unshare+0x45b/0xa40 [ 360.277812][ T9096] ? __pfx_ksys_unshare+0x10/0x10 [ 360.277849][ T9096] ? xfd_validate_state+0x61/0x180 [ 360.277898][ T9096] __x64_sys_unshare+0x31/0x40 [ 360.277933][ T9096] do_syscall_64+0xcd/0x490 [ 360.277980][ T9096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.278009][ T9096] RIP: 0033:0x7f1f40b8e929 [ 360.278032][ T9096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.278057][ T9096] RSP: 002b:00007f1f419e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 360.278083][ T9096] RAX: ffffffffffffffda RBX: 00007f1f40db6080 RCX: 00007f1f40b8e929 [ 360.278102][ T9096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 360.278118][ T9096] RBP: 00007f1f40c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 360.278140][ T9096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.278156][ T9096] R13: 0000000000000000 R14: 00007f1f40db6080 R15: 00007fff136ef128 [ 360.278195][ T9096] [ 361.626419][ T9118] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 362.861068][ T9129] random: crng reseeded on system resumption [ 365.574861][ T9154] Invalid ELF header magic: != ELF [ 368.224953][ T9164] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 368.235941][ T9164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 368.244165][ T9164] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 368.381337][ T9164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 368.521487][ T9164] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 368.637148][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 368.673644][ T9164] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 368.695124][ T9164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 368.703158][ T9183] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 368.966905][ T9202] Invalid ELF header magic: != ELF [ 369.289930][ T9112] delete_channel: no stack [ 370.219135][ T9222] Invalid ELF header magic: != ELF [ 370.333795][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 370.392078][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 370.713056][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 372.392324][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 372.478526][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 374.552712][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 374.704401][ T9256] Invalid ELF header magic: != ELF [ 374.983423][ T9257] Invalid ELF header magic: != ELF [ 375.218634][ T9268] FAULT_INJECTION: forcing a failure. [ 375.218634][ T9268] name failslab, interval 1, probability 0, space 0, times 0 [ 375.233527][ T9268] CPU: 0 UID: 0 PID: 9268 Comm: syz.2.684 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 375.233554][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 375.233565][ T9268] Call Trace: [ 375.233571][ T9268] [ 375.233578][ T9268] dump_stack_lvl+0x16c/0x1f0 [ 375.233610][ T9268] should_fail_ex+0x512/0x640 [ 375.233636][ T9268] ? __kmalloc_noprof+0xbf/0x510 [ 375.233665][ T9268] ? ovs_vport_set_upcall_portids+0xfc/0x2f0 [ 375.233682][ T9268] should_failslab+0xc2/0x120 [ 375.233707][ T9268] __kmalloc_noprof+0xd2/0x510 [ 375.233738][ T9268] ovs_vport_set_upcall_portids+0xfc/0x2f0 [ 375.233758][ T9268] ovs_vport_alloc+0x28c/0x3d0 [ 375.233777][ T9268] internal_dev_create+0x25/0x520 [ 375.233796][ T9268] ovs_vport_add+0x144/0x4d0 [ 375.233827][ T9268] new_vport+0x16/0x1d0 [ 375.233850][ T9268] ovs_dp_cmd_new+0x6ba/0xe60 [ 375.233881][ T9268] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 375.233911][ T9268] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 375.233935][ T9268] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 375.233963][ T9268] genl_family_rcv_msg_doit+0x209/0x2f0 [ 375.233987][ T9268] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 375.234009][ T9268] ? trace_cap_capable+0x18d/0x200 [ 375.234031][ T9268] ? bpf_lsm_capable+0x9/0x10 [ 375.234052][ T9268] ? security_capable+0x7e/0x260 [ 375.234081][ T9268] ? ns_capable+0xd7/0x110 [ 375.234101][ T9268] genl_rcv_msg+0x55c/0x800 [ 375.234125][ T9268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.234147][ T9268] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 375.234180][ T9268] netlink_rcv_skb+0x158/0x420 [ 375.234198][ T9268] ? __pfx_genl_rcv_msg+0x10/0x10 [ 375.234221][ T9268] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 375.234249][ T9268] ? netlink_deliver_tap+0x1ae/0xd30 [ 375.234269][ T9268] genl_rcv+0x28/0x40 [ 375.234288][ T9268] netlink_unicast+0x53a/0x7f0 [ 375.234309][ T9268] ? __pfx_netlink_unicast+0x10/0x10 [ 375.234334][ T9268] netlink_sendmsg+0x8d1/0xdd0 [ 375.234356][ T9268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 375.234383][ T9268] ____sys_sendmsg+0xa98/0xc70 [ 375.234404][ T9268] ? copy_msghdr_from_user+0x10a/0x160 [ 375.234431][ T9268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.234449][ T9268] ? preempt_schedule_thunk+0x16/0x30 [ 375.234475][ T9268] ? try_to_wake_up+0xa2f/0x1680 [ 375.234497][ T9268] ___sys_sendmsg+0x134/0x1d0 [ 375.234525][ T9268] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.234549][ T9268] ? __lock_acquire+0x622/0x1c90 [ 375.234598][ T9268] __sys_sendmsg+0x16d/0x220 [ 375.234626][ T9268] ? __pfx___sys_sendmsg+0x10/0x10 [ 375.234652][ T9268] ? __x64_sys_futex+0x1e0/0x4c0 [ 375.234695][ T9268] do_syscall_64+0xcd/0x490 [ 375.234724][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.234742][ T9268] RIP: 0033:0x7f7f9458e929 [ 375.234757][ T9268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.234774][ T9268] RSP: 002b:00007f7f9540d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.234791][ T9268] RAX: ffffffffffffffda RBX: 00007f7f947b5fa0 RCX: 00007f7f9458e929 [ 375.234803][ T9268] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000008 [ 375.234813][ T9268] RBP: 00007f7f94610b39 R08: 0000000000000000 R09: 0000000000000000 [ 375.234823][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.234834][ T9268] R13: 0000000000000000 R14: 00007f7f947b5fa0 R15: 00007fff80be3888 [ 375.234856][ T9268] [ 376.271670][ T9269] Invalid ELF header magic: != ELF [ 376.870124][ T9262] Process accounting paused [ 377.197809][ T9284] Invalid ELF header magic: != ELF [ 377.202634][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 377.261502][ T9288] netlink: 354 bytes leftover after parsing attributes in process `syz.1.687'. [ 378.185741][ T9291] Invalid ELF header magic: != ELF [ 379.047269][ T9312] random: crng reseeded on system resumption [ 379.760358][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.692'. [ 381.381695][ T9323] FAULT_INJECTION: forcing a failure. [ 381.381695][ T9323] name failslab, interval 1, probability 0, space 0, times 0 [ 381.422025][ T9323] CPU: 1 UID: 0 PID: 9323 Comm: syz.0.693 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 381.422071][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 381.422089][ T9323] Call Trace: [ 381.422098][ T9323] [ 381.422110][ T9323] dump_stack_lvl+0x16c/0x1f0 [ 381.422161][ T9323] should_fail_ex+0x512/0x640 [ 381.422204][ T9323] ? __kvmalloc_node_noprof+0x124/0x620 [ 381.422250][ T9323] should_failslab+0xc2/0x120 [ 381.422279][ T9323] __kvmalloc_node_noprof+0x137/0x620 [ 381.422323][ T9323] ? alloc_netdev_mqs+0xfbe/0x1570 [ 381.422388][ T9323] ? alloc_netdev_mqs+0xfbe/0x1570 [ 381.422430][ T9323] alloc_netdev_mqs+0xfbe/0x1570 [ 381.422487][ T9323] slip_open+0x35c/0x1150 [ 381.422524][ T9323] ? __pfx___might_resched+0x10/0x10 [ 381.422554][ T9323] ? __pfx_n_tty_close+0x10/0x10 [ 381.422585][ T9323] ? find_held_lock+0x2b/0x80 [ 381.422614][ T9323] ? __pfx_slip_open+0x10/0x10 [ 381.422647][ T9323] ? down_write+0x14d/0x200 [ 381.422678][ T9323] ? __pfx_slip_open+0x10/0x10 [ 381.422714][ T9323] tty_ldisc_open+0x9f/0x120 [ 381.422754][ T9323] tty_set_ldisc+0x32b/0x780 [ 381.422803][ T9323] tty_ioctl+0xc2e/0x1640 [ 381.422850][ T9323] ? __pfx_tty_ioctl+0x10/0x10 [ 381.422910][ T9323] ? find_held_lock+0x2b/0x80 [ 381.422937][ T9323] ? hook_file_ioctl_common+0x145/0x410 [ 381.422979][ T9323] ? __fget_files+0x20e/0x3c0 [ 381.423026][ T9323] ? __pfx_tty_ioctl+0x10/0x10 [ 381.423079][ T9323] __x64_sys_ioctl+0x18b/0x210 [ 381.423117][ T9323] do_syscall_64+0xcd/0x490 [ 381.423165][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.423194][ T9323] RIP: 0033:0x7fc3a138e929 [ 381.423218][ T9323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.423246][ T9323] RSP: 002b:00007fc3a224f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.423274][ T9323] RAX: ffffffffffffffda RBX: 00007fc3a15b5fa0 RCX: 00007fc3a138e929 [ 381.423293][ T9323] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 000000000000000a [ 381.423309][ T9323] RBP: 00007fc3a1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 381.423326][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.423343][ T9323] R13: 0000000000000000 R14: 00007fc3a15b5fa0 R15: 00007ffdb76c9718 [ 381.423393][ T9323] [ 382.313070][ T9337] tipc: Started in network mode [ 382.327170][ T9337] tipc: Node identity ee00, cluster identity 4711 [ 382.339312][ T9337] tipc: Node number set to 60928 [ 382.844738][ T9350] Invalid ELF header magic: != ELF [ 382.872149][ T9350] netlink: zone id is out of range [ 382.887016][ T9350] netlink: zone id is out of range [ 382.901460][ T9350] netlink: zone id is out of range [ 382.938355][ T9350] netlink: zone id is out of range [ 382.997245][ T9350] netlink: zone id is out of range [ 384.000004][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.006432][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.734753][ T9361] Invalid ELF header magic: != ELF [ 386.469020][ T9374] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 388.692385][ T9405] FAULT_INJECTION: forcing a failure. [ 388.692385][ T9405] name failslab, interval 1, probability 0, space 0, times 0 [ 388.707583][ T9405] CPU: 1 UID: 0 PID: 9405 Comm: syz.1.708 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 388.707625][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.707641][ T9405] Call Trace: [ 388.707650][ T9405] [ 388.707661][ T9405] dump_stack_lvl+0x16c/0x1f0 [ 388.707710][ T9405] should_fail_ex+0x512/0x640 [ 388.707752][ T9405] ? __kmalloc_noprof+0xbf/0x510 [ 388.707798][ T9405] ? ops_init+0x77/0x5f0 [ 388.707841][ T9405] should_failslab+0xc2/0x120 [ 388.707870][ T9405] __kmalloc_noprof+0xd2/0x510 [ 388.707909][ T9405] ? lockdep_init_map_type+0x5c/0x280 [ 388.707961][ T9405] ops_init+0x77/0x5f0 [ 388.708013][ T9405] setup_net+0x1ff/0x510 [ 388.708038][ T9405] ? lockdep_init_map_type+0x5c/0x280 [ 388.708080][ T9405] ? __pfx_setup_net+0x10/0x10 [ 388.708111][ T9405] ? debug_mutex_init+0x37/0x70 [ 388.708144][ T9405] copy_net_ns+0x2a6/0x5f0 [ 388.708179][ T9405] create_new_namespaces+0x3ea/0xa90 [ 388.708223][ T9405] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 388.708260][ T9405] ksys_unshare+0x45b/0xa40 [ 388.708300][ T9405] ? __pfx_ksys_unshare+0x10/0x10 [ 388.708340][ T9405] ? xfd_validate_state+0x61/0x180 [ 388.708403][ T9405] __x64_sys_unshare+0x31/0x40 [ 388.708442][ T9405] do_syscall_64+0xcd/0x490 [ 388.708490][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.708522][ T9405] RIP: 0033:0x7f1f40b8e929 [ 388.708547][ T9405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.708575][ T9405] RSP: 002b:00007f1f419e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 388.708603][ T9405] RAX: ffffffffffffffda RBX: 00007f1f40db6080 RCX: 00007f1f40b8e929 [ 388.708622][ T9405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 388.708640][ T9405] RBP: 00007f1f40c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 388.708657][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.708674][ T9405] R13: 0000000000000000 R14: 00007f1f40db6080 R15: 00007fff136ef128 [ 388.708714][ T9405] [ 392.174268][ T9438] Invalid ELF header magic: != ELF [ 392.408482][ T9448] FAULT_INJECTION: forcing a failure. [ 392.408482][ T9448] name failslab, interval 1, probability 0, space 0, times 0 [ 392.562194][ T9448] CPU: 1 UID: 0 PID: 9448 Comm: syz.2.716 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 392.562242][ T9448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.562262][ T9448] Call Trace: [ 392.562272][ T9448] [ 392.562284][ T9448] dump_stack_lvl+0x16c/0x1f0 [ 392.562346][ T9448] should_fail_ex+0x512/0x640 [ 392.562389][ T9448] ? __kmalloc_noprof+0xbf/0x510 [ 392.562437][ T9448] ? mpi_alloc_limb_space+0x31/0x60 [ 392.562471][ T9448] should_failslab+0xc2/0x120 [ 392.562502][ T9448] __kmalloc_noprof+0xd2/0x510 [ 392.562556][ T9448] mpi_alloc_limb_space+0x31/0x60 [ 392.562590][ T9448] mpi_alloc+0x199/0x230 [ 392.562625][ T9448] mpi_read_raw_from_sgl+0x222/0x5b0 [ 392.562662][ T9448] ? __pfx_mpi_read_raw_from_sgl+0x10/0x10 [ 392.562709][ T9448] ? kasan_save_track+0x14/0x30 [ 392.562751][ T9448] ? __kasan_kmalloc+0xaa/0xb0 [ 392.562800][ T9448] rsa_enc+0x15d/0x3b0 [ 392.562848][ T9448] ? __pfx_rsa_enc+0x10/0x10 [ 392.562891][ T9448] ? __virt_addr_valid+0x81/0x610 [ 392.562921][ T9448] ? __phys_addr+0xe8/0x180 [ 392.562953][ T9448] ? sg_init_one+0xf5/0x1b0 [ 392.562996][ T9448] rsassa_pkcs1_verify+0x502/0xb60 [ 392.563042][ T9448] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 392.563097][ T9448] ? rsa_max_size+0xd/0x70 [ 392.563140][ T9448] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 392.563186][ T9448] public_key_verify_signature+0x672/0x970 [ 392.563232][ T9448] ? __pfx_public_key_verify_signature+0x10/0x10 [ 392.563311][ T9448] x509_check_for_self_signed+0x31a/0x500 [ 392.563369][ T9448] x509_cert_parse+0x5f8/0x900 [ 392.563404][ T9448] ? kasan_save_stack+0x42/0x60 [ 392.563445][ T9448] ? kasan_save_stack+0x33/0x60 [ 392.563485][ T9448] ? kasan_save_track+0x14/0x30 [ 392.563533][ T9448] pkcs7_extract_cert+0xa4/0x320 [ 392.563580][ T9448] asn1_ber_decoder+0xc5f/0x1df0 [ 392.563646][ T9448] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 392.563733][ T9448] pkcs7_parse_message+0x288/0x720 [ 392.563781][ T9448] verify_pkcs7_signature+0x30/0xa0 [ 392.563818][ T9448] valid_regdb+0x215/0x590 [ 392.563854][ T9448] ? __pfx___mutex_lock+0x10/0x10 [ 392.563902][ T9448] ? __pfx_valid_regdb+0x10/0x10 [ 392.563943][ T9448] reg_reload_regdb+0x11e/0x460 [ 392.563980][ T9448] ? __pfx_reg_reload_regdb+0x10/0x10 [ 392.564018][ T9448] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 392.564062][ T9448] ? nl80211_pre_doit+0x1b0/0xb10 [ 392.564113][ T9448] genl_family_rcv_msg_doit+0x209/0x2f0 [ 392.564155][ T9448] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 392.564191][ T9448] ? rcu_is_watching+0x12/0xc0 [ 392.564237][ T9448] ? bpf_lsm_capable+0x9/0x10 [ 392.564273][ T9448] ? security_capable+0x7e/0x260 [ 392.564392][ T9448] genl_rcv_msg+0x55c/0x800 [ 392.564437][ T9448] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.564476][ T9448] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 392.564519][ T9448] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 392.564552][ T9448] ? __pfx_nl80211_post_doit+0x10/0x10 [ 392.564674][ T9448] netlink_rcv_skb+0x158/0x420 [ 392.564711][ T9448] ? __pfx_genl_rcv_msg+0x10/0x10 [ 392.564749][ T9448] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 392.564801][ T9448] ? netlink_deliver_tap+0x1ae/0xd30 [ 392.564841][ T9448] genl_rcv+0x28/0x40 [ 392.564872][ T9448] netlink_unicast+0x53a/0x7f0 [ 392.564911][ T9448] ? __pfx_netlink_unicast+0x10/0x10 [ 392.564960][ T9448] netlink_sendmsg+0x8d1/0xdd0 [ 392.565002][ T9448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.565054][ T9448] ____sys_sendmsg+0xa98/0xc70 [ 392.565093][ T9448] ? copy_msghdr_from_user+0x10a/0x160 [ 392.565137][ T9448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.565185][ T9448] ? __pfx_futex_wake_mark+0x10/0x10 [ 392.565238][ T9448] ___sys_sendmsg+0x134/0x1d0 [ 392.565287][ T9448] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.565329][ T9448] ? __lock_acquire+0x622/0x1c90 [ 392.565447][ T9448] __sys_sendmsg+0x16d/0x220 [ 392.565496][ T9448] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.565541][ T9448] ? __x64_sys_futex+0x1e0/0x4c0 [ 392.565607][ T9448] do_syscall_64+0xcd/0x490 [ 392.565660][ T9448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.565690][ T9448] RIP: 0033:0x7f7f9458e929 [ 392.565717][ T9448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.565744][ T9448] RSP: 002b:00007f7f9540d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.565775][ T9448] RAX: ffffffffffffffda RBX: 00007f7f947b5fa0 RCX: 00007f7f9458e929 [ 392.565795][ T9448] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 392.565814][ T9448] RBP: 00007f7f94610b39 R08: 0000000000000000 R09: 0000000000000000 [ 392.565832][ T9448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.565850][ T9448] R13: 0000000000000000 R14: 00007f7f947b5fa0 R15: 00007fff80be3888 [ 392.565890][ T9448] [ 395.716926][ T9477] FAULT_INJECTION: forcing a failure. [ 395.716926][ T9477] name failslab, interval 1, probability 0, space 0, times 0 [ 395.832407][ T9477] CPU: 0 UID: 0 PID: 9477 Comm: syz.0.722 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 395.832452][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 395.832470][ T9477] Call Trace: [ 395.832480][ T9477] [ 395.832491][ T9477] dump_stack_lvl+0x16c/0x1f0 [ 395.832543][ T9477] should_fail_ex+0x512/0x640 [ 395.832585][ T9477] ? __kmalloc_noprof+0xbf/0x510 [ 395.832614][ T9477] ? ptp_open+0x103/0x520 [ 395.832634][ T9477] should_failslab+0xc2/0x120 [ 395.832652][ T9477] __kmalloc_noprof+0xd2/0x510 [ 395.832683][ T9477] ptp_open+0x103/0x520 [ 395.832707][ T9477] ? __pfx_ptp_open+0x10/0x10 [ 395.832735][ T9477] ? __pfx_ptp_open+0x10/0x10 [ 395.832755][ T9477] posix_clock_open+0x17b/0x290 [ 395.832776][ T9477] ? __pfx_posix_clock_open+0x10/0x10 [ 395.832795][ T9477] chrdev_open+0x231/0x6a0 [ 395.832824][ T9477] ? __pfx_chrdev_open+0x10/0x10 [ 395.832854][ T9477] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 395.832881][ T9477] do_dentry_open+0x744/0x1c10 [ 395.832908][ T9477] ? __pfx_chrdev_open+0x10/0x10 [ 395.832940][ T9477] vfs_open+0x82/0x3f0 [ 395.832962][ T9477] path_openat+0x1de4/0x2cb0 [ 395.832995][ T9477] ? __pfx_path_openat+0x10/0x10 [ 395.833022][ T9477] ? __lock_acquire+0xb8a/0x1c90 [ 395.833048][ T9477] do_filp_open+0x20b/0x470 [ 395.833074][ T9477] ? __pfx_do_filp_open+0x10/0x10 [ 395.833115][ T9477] ? alloc_fd+0x471/0x7d0 [ 395.833145][ T9477] do_sys_openat2+0x11b/0x1d0 [ 395.833164][ T9477] ? __pfx_do_sys_openat2+0x10/0x10 [ 395.833192][ T9477] __x64_sys_openat+0x174/0x210 [ 395.833213][ T9477] ? __pfx___x64_sys_openat+0x10/0x10 [ 395.833242][ T9477] do_syscall_64+0xcd/0x490 [ 395.833272][ T9477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.833291][ T9477] RIP: 0033:0x7fc3a138e929 [ 395.833306][ T9477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.833323][ T9477] RSP: 002b:00007fc3a222e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 395.833341][ T9477] RAX: ffffffffffffffda RBX: 00007fc3a15b6080 RCX: 00007fc3a138e929 [ 395.833353][ T9477] RDX: 0000000000000440 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 395.833364][ T9477] RBP: 00007fc3a1410b39 R08: 0000000000000000 R09: 0000000000000000 [ 395.833375][ T9477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.833385][ T9477] R13: 0000000000000000 R14: 00007fc3a15b6080 R15: 00007ffdb76c9718 [ 395.833407][ T9477] [ 396.614015][ T9480] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 400.120107][ T9510] Invalid ELF header magic: != ELF [ 402.411683][ T9547] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input16 [ 405.001286][ T9568] Invalid ELF header magic: != ELF [ 406.588411][ T9579] Invalid ELF header magic: != ELF [ 407.253389][ T9564] Process accounting resumed [ 409.804734][ T9612] Invalid ELF header magic: != ELF [ 411.523093][ T9631] Invalid ELF header magic: != ELF [ 414.726515][ T9668] FAULT_INJECTION: forcing a failure. [ 414.726515][ T9668] name failslab, interval 1, probability 0, space 0, times 0 [ 414.835871][ T9668] CPU: 0 UID: 0 PID: 9668 Comm: syz.1.755 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 414.835916][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.835932][ T9668] Call Trace: [ 414.835943][ T9668] [ 414.835954][ T9668] dump_stack_lvl+0x16c/0x1f0 [ 414.836002][ T9668] should_fail_ex+0x512/0x640 [ 414.836041][ T9668] ? fs_reclaim_acquire+0xae/0x150 [ 414.836077][ T9668] should_failslab+0xc2/0x120 [ 414.836104][ T9668] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 414.836156][ T9668] ? security_inode_alloc+0x3b/0x2b0 [ 414.836193][ T9668] security_inode_alloc+0x3b/0x2b0 [ 414.836223][ T9668] inode_init_always_gfp+0xce4/0x1030 [ 414.836267][ T9668] alloc_inode+0x86/0x240 [ 414.836294][ T9668] new_inode+0x22/0x1c0 [ 414.836325][ T9668] bdev_alloc+0x2b/0x420 [ 414.836362][ T9668] __alloc_disk_node+0x116/0x630 [ 414.836407][ T9668] __blk_mq_alloc_disk+0x89/0x120 [ 414.836448][ T9668] loop_add+0x49e/0xb70 [ 414.836491][ T9668] ? do_vfs_ioctl+0x523/0x1a60 [ 414.836523][ T9668] ? __pfx_loop_add+0x10/0x10 [ 414.836553][ T9668] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 414.836612][ T9668] ? find_held_lock+0x2b/0x80 [ 414.836645][ T9668] loop_control_ioctl+0x13e/0x630 [ 414.836680][ T9668] ? __pfx_loop_control_ioctl+0x10/0x10 [ 414.836719][ T9668] ? __pfx_loop_control_ioctl+0x10/0x10 [ 414.836755][ T9668] __x64_sys_ioctl+0x18b/0x210 [ 414.836791][ T9668] do_syscall_64+0xcd/0x490 [ 414.836839][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.836870][ T9668] RIP: 0033:0x7f1f40b8e929 [ 414.836894][ T9668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.836923][ T9668] RSP: 002b:00007f1f41a03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.836952][ T9668] RAX: ffffffffffffffda RBX: 00007f1f40db5fa0 RCX: 00007f1f40b8e929 [ 414.836973][ T9668] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 414.836991][ T9668] RBP: 00007f1f40c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 414.837009][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.837027][ T9668] R13: 0000000000000000 R14: 00007f1f40db5fa0 R15: 00007fff136ef128 [ 414.837066][ T9668] [ 421.047098][ T9740] Invalid ELF header magic: != ELF [ 422.425698][ T9765] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input17 [ 425.754763][ T9790] FAULT_INJECTION: forcing a failure. [ 425.754763][ T9790] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.805820][ T9790] CPU: 0 UID: 0 PID: 9790 Comm: syz.2.780 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 425.805863][ T9790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.805880][ T9790] Call Trace: [ 425.805891][ T9790] [ 425.805903][ T9790] dump_stack_lvl+0x16c/0x1f0 [ 425.805953][ T9790] should_fail_ex+0x512/0x640 [ 425.805999][ T9790] should_fail_alloc_page+0xe7/0x130 [ 425.806029][ T9790] prepare_alloc_pages+0x3c2/0x610 [ 425.806063][ T9790] ? __lock_acquire+0x622/0x1c90 [ 425.806109][ T9790] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 425.806165][ T9790] ? find_held_lock+0x2b/0x80 [ 425.806194][ T9790] ? mtree_load+0x309/0xa40 [ 425.806236][ T9790] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 425.806285][ T9790] ? mtree_load+0x325/0xa40 [ 425.806340][ T9790] ? __up_read+0x1f8/0x750 [ 425.806385][ T9790] ? __pfx___up_read+0x10/0x10 [ 425.806437][ T9790] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.806484][ T9790] ? policy_nodemask+0xea/0x4e0 [ 425.806515][ T9790] alloc_pages_mpol+0x1fb/0x550 [ 425.806545][ T9790] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 425.806573][ T9790] ? do_raw_spin_lock+0x12c/0x2b0 [ 425.806611][ T9790] ? __pfx___access_remote_vm+0x10/0x10 [ 425.806661][ T9790] alloc_pages_noprof+0x131/0x390 [ 425.806690][ T9790] get_free_pages_noprof+0x10/0xb0 [ 425.806719][ T9790] proc_pid_cmdline_read+0x46d/0x900 [ 425.806757][ T9790] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 425.806793][ T9790] ? rw_verify_area+0xcf/0x680 [ 425.806826][ T9790] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 425.806858][ T9790] vfs_read+0x1e4/0xc60 [ 425.806900][ T9790] ? __pfx___mutex_lock+0x10/0x10 [ 425.806939][ T9790] ? __pfx_vfs_read+0x10/0x10 [ 425.806987][ T9790] ? __fget_files+0x20e/0x3c0 [ 425.807037][ T9790] ksys_read+0x12a/0x250 [ 425.807074][ T9790] ? __pfx_ksys_read+0x10/0x10 [ 425.807123][ T9790] do_syscall_64+0xcd/0x490 [ 425.807166][ T9790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.807194][ T9790] RIP: 0033:0x7f7f9458e929 [ 425.807218][ T9790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.807244][ T9790] RSP: 002b:00007f7f9540d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.807283][ T9790] RAX: ffffffffffffffda RBX: 00007f7f947b5fa0 RCX: 00007f7f9458e929 [ 425.807303][ T9790] RDX: 000000000000009f RSI: 0000200000000040 RDI: 0000000000000007 [ 425.807322][ T9790] RBP: 00007f7f94610b39 R08: 0000000000000000 R09: 0000000000000000 [ 425.807341][ T9790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.807358][ T9790] R13: 0000000000000000 R14: 00007f7f947b5fa0 R15: 00007fff80be3888 [ 425.807400][ T9790] [ 428.286364][ T9805] FAULT_INJECTION: forcing a failure. [ 428.286364][ T9805] name failslab, interval 1, probability 0, space 0, times 0 [ 428.365329][ T9805] CPU: 1 UID: 0 PID: 9805 Comm: syz.3.784 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 428.365374][ T9805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.365391][ T9805] Call Trace: [ 428.365401][ T9805] [ 428.365412][ T9805] dump_stack_lvl+0x16c/0x1f0 [ 428.365463][ T9805] should_fail_ex+0x512/0x640 [ 428.365504][ T9805] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 428.365554][ T9805] should_failslab+0xc2/0x120 [ 428.365584][ T9805] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 428.365627][ T9805] ? sctp_auth_shkey_create+0x15c/0x210 [ 428.365660][ T9805] ? __d_alloc+0x31/0xaa0 [ 428.365711][ T9805] __d_alloc+0x31/0xaa0 [ 428.365759][ T9805] d_alloc_pseudo+0x1c/0xc0 [ 428.365790][ T9805] alloc_file_pseudo+0xcf/0x230 [ 428.365822][ T9805] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 428.365850][ T9805] ? alloc_fd+0x471/0x7d0 [ 428.365890][ T9805] sock_alloc_file+0x50/0x210 [ 428.365919][ T9805] __sys_socket+0x1c0/0x260 [ 428.365952][ T9805] ? __pfx___sys_socket+0x10/0x10 [ 428.365985][ T9805] ? xfd_validate_state+0x61/0x180 [ 428.366019][ T9805] ? __pfx_do_writev+0x10/0x10 [ 428.366065][ T9805] __x64_sys_socket+0x72/0xb0 [ 428.366097][ T9805] ? lockdep_hardirqs_on+0x7c/0x110 [ 428.366137][ T9805] do_syscall_64+0xcd/0x490 [ 428.366183][ T9805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.366223][ T9805] RIP: 0033:0x7f6f6038e929 [ 428.366247][ T9805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.366275][ T9805] RSP: 002b:00007f6f61148038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 428.366305][ T9805] RAX: ffffffffffffffda RBX: 00007f6f605b5fa0 RCX: 00007f6f6038e929 [ 428.366325][ T9805] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000000a [ 428.366344][ T9805] RBP: 00007f6f60410b39 R08: 0000000000000000 R09: 0000000000000000 [ 428.366360][ T9805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.366375][ T9805] R13: 0000000000000000 R14: 00007f6f605b5fa0 R15: 00007ffc68775638 [ 428.366413][ T9805] [ 431.409975][ T5151] Bluetooth: hci1: unexpected event 0x3d length: 726 > 14 [ 431.842713][ T9853] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input18 [ 436.009125][ T9896] Invalid ELF header magic: != ELF [ 437.099401][ T9904] Invalid ELF header magic: != ELF [ 437.673670][ T9910] random: crng reseeded on system resumption [ 439.653376][ T9919] Process accounting paused [ 441.826627][ T9959] Invalid ELF header magic: != ELF [ 443.866998][ T9971] Invalid ELF header magic: != ELF [ 444.254520][ T9976] Invalid ELF header magic: != ELF [ 445.335496][ T9997] random: crng reseeded on system resumption [ 445.439399][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.445908][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.532758][ T9996] Invalid ELF header magic: != ELF [ 448.179092][T10025] netlink: 342 bytes leftover after parsing attributes in process `syz.0.820'. [ 448.206254][T10025] netlink: 342 bytes leftover after parsing attributes in process `syz.0.820'. [ 448.371472][T10025] netlink: 98 bytes leftover after parsing attributes in process `syz.0.820'. [ 451.611477][T10055] Invalid ELF header magic: != ELF [ 454.297550][T10071] kafs: addr_prefs: Invalid Command [ 454.850313][ T30] audit: type=1804 audit(4294975439.890:14): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.833" name="/newroot/204/file0" dev="tmpfs" ino=1095 res=1 errno=0 [ 454.872492][ T30] audit: type=1800 audit(4294975439.890:15): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.833" name="file0" dev="tmpfs" ino=1095 res=0 errno=0 [ 454.984006][T10107] FAULT_INJECTION: forcing a failure. [ 454.984006][T10107] name failslab, interval 1, probability 0, space 0, times 0 [ 455.005673][T10107] CPU: 1 UID: 0 PID: 10107 Comm: syz.2.836 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 455.005719][T10107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 455.005737][T10107] Call Trace: [ 455.005747][T10107] [ 455.005759][T10107] dump_stack_lvl+0x16c/0x1f0 [ 455.005811][T10107] should_fail_ex+0x512/0x640 [ 455.005854][T10107] ? __kmalloc_noprof+0xbf/0x510 [ 455.005900][T10107] ? constrain_params_by_rules+0x175/0xca0 [ 455.005932][T10107] should_failslab+0xc2/0x120 [ 455.005963][T10107] __kmalloc_noprof+0xd2/0x510 [ 455.006001][T10107] ? unwind_get_return_address+0x59/0xa0 [ 455.006049][T10107] ? arch_stack_walk+0xa6/0x100 [ 455.006102][T10107] constrain_params_by_rules+0x175/0xca0 [ 455.006145][T10107] ? stack_trace_save+0x8e/0xc0 [ 455.006191][T10107] ? stack_depot_save_flags+0x28/0xa40 [ 455.006244][T10107] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 455.006289][T10107] ? __kasan_kmalloc+0xaa/0xb0 [ 455.006328][T10107] ? snd_pcm_oss_change_params_locked+0x247/0x3a30 [ 455.006360][T10107] ? snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 455.006389][T10107] ? snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 455.006437][T10107] ? rcu_is_watching+0x12/0xc0 [ 455.006466][T10107] ? snd_interval_refine+0x2fa/0x580 [ 455.006524][T10107] snd_pcm_hw_refine+0x7de/0xad0 [ 455.006573][T10107] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 455.006629][T10107] ? __asan_memset+0x23/0x50 [ 455.006667][T10107] ? _snd_pcm_hw_param_min+0x259/0x630 [ 455.006704][T10107] snd_pcm_oss_change_params_locked+0x65e/0x3a30 [ 455.006739][T10107] ? preempt_count_sub+0x90/0x160 [ 455.006789][T10107] ? __mutex_lock+0x1ca/0xb90 [ 455.006831][T10107] ? rcu_is_watching+0x12/0xc0 [ 455.006865][T10107] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 455.006901][T10107] ? __pfx___mutex_lock+0x10/0x10 [ 455.006971][T10107] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 455.007013][T10107] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 455.007049][T10107] ? hook_file_ioctl_common+0x145/0x410 [ 455.007082][T10107] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 455.007119][T10107] ? __fget_files+0x20e/0x3c0 [ 455.007168][T10107] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 455.007206][T10107] __x64_sys_ioctl+0x18b/0x210 [ 455.007255][T10107] do_syscall_64+0xcd/0x490 [ 455.007304][T10107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.007342][T10107] RIP: 0033:0x7f7f9458e929 [ 455.007368][T10107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.007399][T10107] RSP: 002b:00007f7f953ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 455.007430][T10107] RAX: ffffffffffffffda RBX: 00007f7f947b6080 RCX: 00007f7f9458e929 [ 455.007451][T10107] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000008 [ 455.007469][T10107] RBP: 00007f7f94610b39 R08: 0000000000000000 R09: 0000000000000000 [ 455.007487][T10107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 455.007504][T10107] R13: 0000000000000000 R14: 00007f7f947b6080 R15: 00007fff80be3888 [ 455.007544][T10107] [ 456.517706][T10105] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 459.303310][T10138] Invalid ELF header magic: != ELF [ 462.914635][T10189] netlink: 330 bytes leftover after parsing attributes in process `syz.2.851'. [ 463.970249][T10202] Invalid ELF header magic: != ELF [ 465.078042][T10213] Invalid ELF header magic: != ELF [ 468.085002][T10243] netlink: 28 bytes leftover after parsing attributes in process `syz.0.861'. [ 468.156649][T10243] veth1_macvtap: left allmulticast mode [ 468.156829][T10243] veth1_macvtap: left promiscuous mode [ 470.011259][T10268] Process accounting resumed [ 470.523632][T10277] Invalid ELF header magic: != ELF [ 470.853197][T10288] Invalid ELF header magic: != ELF [ 471.254923][T10283] Invalid ELF header magic: != ELF [ 474.394686][T10318] random: crng reseeded on system resumption [ 477.005649][T10353] Invalid ELF header magic: != ELF [ 477.538450][T10272] delete_channel: no stack [ 478.336845][T10366] Invalid ELF header magic: != ELF [ 479.846455][T10385] Invalid ELF header magic: != ELF [ 482.527902][T10412] Invalid ELF header magic: != ELF [ 485.097962][T10439] Invalid ELF header magic: != ELF [ 486.657137][T10457] FAULT_INJECTION: forcing a failure. [ 486.657137][T10457] name failslab, interval 1, probability 0, space 0, times 0 [ 486.735707][T10457] CPU: 0 UID: 0 PID: 10457 Comm: syz.2.897 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 486.735736][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.735748][T10457] Call Trace: [ 486.735754][T10457] [ 486.735762][T10457] dump_stack_lvl+0x16c/0x1f0 [ 486.735795][T10457] should_fail_ex+0x512/0x640 [ 486.735822][T10457] ? __kmalloc_noprof+0xbf/0x510 [ 486.735851][T10457] ? ops_init+0x77/0x5f0 [ 486.735878][T10457] should_failslab+0xc2/0x120 [ 486.735896][T10457] __kmalloc_noprof+0xd2/0x510 [ 486.735928][T10457] ops_init+0x77/0x5f0 [ 486.735959][T10457] setup_net+0x1ff/0x510 [ 486.735974][T10457] ? lockdep_init_map_type+0x5c/0x280 [ 486.736000][T10457] ? __pfx_setup_net+0x10/0x10 [ 486.736017][T10457] ? debug_mutex_init+0x37/0x70 [ 486.736037][T10457] copy_net_ns+0x2a6/0x5f0 [ 486.736066][T10457] create_new_namespaces+0x3ea/0xa90 [ 486.736091][T10457] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 486.736118][T10457] ksys_unshare+0x45b/0xa40 [ 486.736142][T10457] ? __pfx_ksys_unshare+0x10/0x10 [ 486.736168][T10457] ? xfd_validate_state+0x61/0x180 [ 486.736198][T10457] __x64_sys_unshare+0x31/0x40 [ 486.736221][T10457] do_syscall_64+0xcd/0x490 [ 486.736250][T10457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.736269][T10457] RIP: 0033:0x7f7f9458e929 [ 486.736283][T10457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.736301][T10457] RSP: 002b:00007f7f953ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 486.736318][T10457] RAX: ffffffffffffffda RBX: 00007f7f947b6080 RCX: 00007f7f9458e929 [ 486.736330][T10457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 486.736341][T10457] RBP: 00007f7f94610b39 R08: 0000000000000000 R09: 0000000000000000 [ 486.736351][T10457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.736362][T10457] R13: 0000000000000000 R14: 00007f7f947b6080 R15: 00007fff80be3888 [ 486.736389][T10457] [ 486.944988][ C0] vkms_vblank_simulate: vblank timer overrun [ 489.106672][T10484] Invalid ELF header magic: != ELF [ 489.923452][T10496] Invalid ELF header magic: != ELF [ 490.196530][T10506] Invalid ELF header magic: != ELF [ 490.208998][T10506] netlink: zone id is out of range [ 490.215016][T10506] netlink: zone id is out of range [ 490.220437][T10506] netlink: zone id is out of range [ 490.225624][T10506] netlink: zone id is out of range [ 490.230806][T10506] netlink: zone id is out of range [ 491.308064][T10526] Invalid ELF header magic: != ELF [ 491.409354][T10511] Invalid ELF header magic: != ELF [ 493.926042][T10554] Invalid ELF header magic: != ELF [ 495.179420][T10562] Invalid ELF header magic: != ELF [ 496.318536][T10570] Invalid ELF header magic: != ELF [ 496.342842][T10571] openvswitch: HfR: Dropping previously announced user features [ 498.304510][T10592] Invalid ELF header magic: != ELF [ 500.051684][T10628] Invalid ELF header magic: != ELF [ 501.101440][T10618] Process accounting paused [ 502.069350][T10644] Invalid ELF header magic: != ELF [ 502.977716][T10656] Invalid ELF header magic: != ELF [ 504.732402][T10668] Invalid ELF header magic: != ELF [ 505.848945][T10687] Invalid ELF header magic: != ELF [ 506.825126][T10697] Invalid ELF header magic: != ELF [ 506.886828][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.895705][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.006950][T10697] netlink: zone id is out of range [ 507.014523][T10697] netlink: zone id is out of range [ 507.019691][T10697] netlink: zone id is out of range [ 507.029816][T10697] netlink: zone id is out of range [ 507.035513][T10697] netlink: zone id is out of range [ 507.302212][T10704] FAULT_INJECTION: forcing a failure. [ 507.302212][T10704] name failslab, interval 1, probability 0, space 0, times 0 [ 507.321961][T10704] CPU: 0 UID: 0 PID: 10704 Comm: syz.3.938 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 507.322007][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.322024][T10704] Call Trace: [ 507.322035][T10704] [ 507.322046][T10704] dump_stack_lvl+0x16c/0x1f0 [ 507.322099][T10704] should_fail_ex+0x512/0x640 [ 507.322141][T10704] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 507.322191][T10704] should_failslab+0xc2/0x120 [ 507.322221][T10704] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 507.322260][T10704] ? __proc_create+0xc3/0x8c0 [ 507.322303][T10704] ? __proc_create+0x2ce/0x8c0 [ 507.322353][T10704] __proc_create+0x2ce/0x8c0 [ 507.322400][T10704] ? __pfx___proc_create+0x10/0x10 [ 507.322448][T10704] ? register_netdevice_notifier_net+0x23/0xb0 [ 507.322490][T10704] ? __pfx_netdev_run_todo+0x10/0x10 [ 507.322516][T10704] ? __pfx___mutex_lock+0x10/0x10 [ 507.322569][T10704] proc_create_reg+0x7d/0x180 [ 507.322599][T10704] ? __pfx_psched_show+0x10/0x10 [ 507.322633][T10704] proc_create_single_data+0x86/0x190 [ 507.322664][T10704] ? __pfx_proc_create_single_data+0x10/0x10 [ 507.322693][T10704] ? __pfx_netdev_debug_event+0x10/0x10 [ 507.322760][T10704] ? __pfx_psched_net_init+0x10/0x10 [ 507.322795][T10704] psched_net_init+0x4a/0x70 [ 507.322828][T10704] ops_init+0x1df/0x5f0 [ 507.322879][T10704] setup_net+0x1ff/0x510 [ 507.322905][T10704] ? lockdep_init_map_type+0x5c/0x280 [ 507.322946][T10704] ? __pfx_setup_net+0x10/0x10 [ 507.322979][T10704] ? debug_mutex_init+0x37/0x70 [ 507.323011][T10704] copy_net_ns+0x2a6/0x5f0 [ 507.323048][T10704] create_new_namespaces+0x3ea/0xa90 [ 507.323090][T10704] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 507.323127][T10704] ksys_unshare+0x45b/0xa40 [ 507.323166][T10704] ? __pfx_ksys_unshare+0x10/0x10 [ 507.323207][T10704] ? xfd_validate_state+0x61/0x180 [ 507.323259][T10704] __x64_sys_unshare+0x31/0x40 [ 507.323298][T10704] do_syscall_64+0xcd/0x490 [ 507.323349][T10704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.323381][T10704] RIP: 0033:0x7f6f6038e929 [ 507.323408][T10704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.323437][T10704] RSP: 002b:00007f6f61127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 507.323467][T10704] RAX: ffffffffffffffda RBX: 00007f6f605b6080 RCX: 00007f6f6038e929 [ 507.323486][T10704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 507.323505][T10704] RBP: 00007f6f60410b39 R08: 0000000000000000 R09: 0000000000000000 [ 507.323524][T10704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.323541][T10704] R13: 0000000000000000 R14: 00007f6f605b6080 R15: 00007ffc68775638 [ 507.323581][T10704] [ 513.099430][T10785] Invalid ELF header magic: != ELF [ 513.115108][T10782] Invalid ELF header magic: != ELF [ 515.764972][T10823] Invalid ELF header magic: != ELF [ 517.431746][T10844] netlink: 330 bytes leftover after parsing attributes in process `syz.3.958'. [ 518.476471][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.960'. [ 519.281204][T10858] Invalid ELF header magic: != ELF [ 519.350902][T10859] Invalid ELF header magic: != ELF [ 524.582502][T10924] Invalid ELF header magic: != ELF [ 525.597805][T10933] Invalid ELF header magic: != ELF [ 528.065085][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.981'. [ 528.142258][T10962] netlink: 354 bytes leftover after parsing attributes in process `syz.3.981'. [ 531.267718][T10995] Invalid ELF header magic: != ELF [ 531.416319][T10996] Invalid ELF header magic: != ELF [ 532.116766][T10997] Process accounting resumed [ 533.654817][T10999] kexec: Could not allocate control_code_buffer [ 534.369117][T11028] Invalid ELF header magic: != ELF [ 537.620251][T11054] Invalid ELF header magic: != ELF [ 543.086098][T11124] Invalid ELF header magic: != ELF [ 545.118059][T11153] FAULT_INJECTION: forcing a failure. [ 545.118059][T11153] name failslab, interval 1, probability 0, space 0, times 0 [ 545.371396][T11153] CPU: 0 UID: 0 PID: 11153 Comm: syz.2.1018 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 545.371442][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.371460][T11153] Call Trace: [ 545.371470][T11153] [ 545.371483][T11153] dump_stack_lvl+0x16c/0x1f0 [ 545.371534][T11153] should_fail_ex+0x512/0x640 [ 545.371628][T11153] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 545.371676][T11153] should_failslab+0xc2/0x120 [ 545.371707][T11153] __kmalloc_cache_noprof+0x6a/0x3e0 [ 545.371756][T11153] ? io_uring_alloc_task_context+0x96/0x650 [ 545.371792][T11153] io_uring_alloc_task_context+0x96/0x650 [ 545.371822][T11153] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 545.371851][T11153] ? alloc_file_pseudo+0x1b3/0x230 [ 545.371884][T11153] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 545.371921][T11153] __io_uring_add_tctx_node+0x2dd/0x500 [ 545.371953][T11153] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 545.371986][T11153] ? __anon_inode_getfile+0x18b/0x3a0 [ 545.372034][T11153] io_uring_setup+0x1579/0x2080 [ 545.372077][T11153] ? __pfx_io_uring_setup+0x10/0x10 [ 545.372145][T11153] ? xfd_validate_state+0x61/0x180 [ 545.372194][T11153] __x64_sys_io_uring_setup+0xc2/0x170 [ 545.372238][T11153] do_syscall_64+0xcd/0x490 [ 545.372288][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.372319][T11153] RIP: 0033:0x7f7f9458e929 [ 545.372346][T11153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.372376][T11153] RSP: 002b:00007f7f953ec038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 545.372405][T11153] RAX: ffffffffffffffda RBX: 00007f7f947b6080 RCX: 00007f7f9458e929 [ 545.372426][T11153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 545.372444][T11153] RBP: 00007f7f94610b39 R08: 0000000000000000 R09: 0000000000000000 [ 545.372462][T11153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.372481][T11153] R13: 0000000000000000 R14: 00007f7f947b6080 R15: 00007fff80be3888 [ 545.372520][T11153] [ 546.895923][T11159] random: crng reseeded on system resumption [ 549.004738][T11184] hub 8-0:1.0: USB hub found [ 549.015664][T11184] hub 8-0:1.0: 1 port detected [ 549.470737][T11161] kexec: Could not allocate control_code_buffer [ 550.151743][T11193] Invalid ELF header magic: != ELF [ 554.039661][T11234] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1034'. [ 554.072034][T11234] team_slave_0: entered allmulticast mode [ 554.516298][T11239] Invalid ELF header magic: != ELF [ 555.149005][T11251] Invalid ELF header magic: != ELF [ 555.910746][T11256] Invalid ELF header magic: != ELF [ 556.305477][T11260] Invalid ELF header magic: != ELF [ 558.189825][T11280] Invalid ELF header magic: != ELF [ 562.637145][T11311] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 562.642010][ T5151] Bluetooth: hci0: command 0x0406 tx timeout [ 562.686215][T11311] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 562.692637][T11311] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 562.698881][T11311] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 562.859274][T11335] Process accounting paused [ 563.299870][T11351] [U] [ 563.302972][T11351] [U] [ 563.305764][T11351] [U] [ 563.308534][T11351] [U] [ 563.356248][T11345] Invalid ELF header magic: != ELF [ 563.393306][T11351] [U] [ 563.396051][T11351] [U] [ 563.398790][T11351] [U] [ 563.401530][T11351] [U] [ 563.442496][T11351] [U] [ 563.445296][T11351] [U] [ 563.448059][T11351] [U] [ 563.450913][T11351] [U] [ 563.524957][T11351] [U] [ 563.527736][T11351] [U] [ 563.530469][T11351] [U] [ 563.533185][T11351] [U] [ 563.562400][T11351] [U] [ 563.565236][T11351] [U] [ 563.567937][T11351] [U] [ 563.570636][T11351] [U] [ 563.707228][T11351] [U] [ 563.710185][T11351] [U] [ 563.712917][T11351] [U] [ 563.715646][T11351] [U] [ 563.721737][T11351] [U] [ 563.724782][T11351] [U] [ 563.727498][T11351] [U] [ 563.730233][T11351] [U] [ 563.733598][T11351] [U] [ 563.736321][T11351] [U] [ 563.739029][T11351] [U] [ 563.741735][T11351] [U] [ 563.744780][T11351] [U] [ 563.747511][T11351] [U] [ 563.750214][T11351] [U] [ 563.752946][T11351] [U] [ 563.762077][T11351] [U] [ 563.764806][T11351] [U] [ 563.767561][T11351] [U] [ 563.770440][T11351] [U] [ 563.773499][T11351] [U] [ 563.776244][T11351] [U] [ 563.779170][T11351] [U] [ 563.781926][T11351] [U] [ 563.785327][T11351] [U] [ 563.788134][T11351] [U] [ 563.790856][T11351] [U] [ 563.793588][T11351] [U] [ 563.802047][T11351] [U] [ 563.804819][T11351] [U] [ 563.807567][T11351] [U] [ 563.810376][T11351] [U] [ 563.813310][T11351] [U] [ 563.816147][T11351] [U] [ 563.818927][T11351] [U] [ 563.821685][T11351] [U] [ 563.831112][T11351] [U] [ 563.833892][T11351] [U] [ 563.836681][T11351] [U] [ 563.839415][T11351] [U] [ 563.842479][T11351] [U] [ 563.845240][T11351] [U] [ 563.848002][T11351] [U] [ 563.850763][T11351] [U] [ 563.862151][T11351] [U] [ 563.864919][T11351] [U] [ 563.867654][T11351] [U] [ 563.870398][T11351] [U] [ 563.873701][T11351] [U] [ 563.876437][T11351] [U] [ 563.879193][T11351] [U] [ 563.881923][T11351] [U] [ 563.886296][T11351] [U] [ 563.889022][T11351] [U] [ 563.891987][T11351] [U] [ 563.894694][T11351] [U] [ 563.902085][T11351] [U] [ 563.904862][T11351] [U] [ 563.907705][T11351] [U] [ 563.910446][T11351] [U] [ 563.914455][T11351] [U] [ 563.917185][T11351] [U] [ 563.919909][T11351] [U] [ 563.922640][T11351] [U] [ 563.925968][T11351] [U] [ 563.928713][T11351] [U] [ 563.931454][T11351] [U] [ 563.934186][T11351] [U] [ 563.937812][T11351] [U] [ 563.940577][T11351] [U] [ 563.943321][T11351] [U] [ 563.946047][T11351] [U] [ 563.964867][T11351] [U] [ 563.967656][T11351] [U] [ 563.970396][T11351] [U] [ 563.973125][T11351] [U] [ 563.978945][T11351] [U] [ 563.981730][T11351] [U] [ 563.984510][T11351] [U] [ 563.987294][T11351] [U] [ 563.990294][T11351] [U] [ 563.993070][T11351] [U] [ 563.995878][T11351] [U] [ 563.998710][T11351] [U] [ 564.003638][T11351] [U] [ 564.006413][T11351] [U] [ 564.009162][T11351] [U] [ 564.011968][T11351] [U] [ 564.016742][T11351] [U] [ 564.019507][T11351] [U] [ 564.022440][T11351] [U] [ 564.025190][T11351] [U] [ 564.082470][T11351] [U] [ 564.713896][T11342] Bluetooth: hci1: command 0x0406 tx timeout [ 564.713955][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 564.720058][T11342] Bluetooth: hci2: command 0x0406 tx timeout [ 567.386181][T11384] FAULT_INJECTION: forcing a failure. [ 567.386181][T11384] name failslab, interval 1, probability 0, space 0, times 0 [ 567.404504][T11384] CPU: 1 UID: 0 PID: 11384 Comm: syz.3.1063 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 567.404550][T11384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 567.404567][T11384] Call Trace: [ 567.404576][T11384] [ 567.404587][T11384] dump_stack_lvl+0x16c/0x1f0 [ 567.404633][T11384] should_fail_ex+0x512/0x640 [ 567.404672][T11384] ? fs_reclaim_acquire+0xae/0x150 [ 567.404709][T11384] should_failslab+0xc2/0x120 [ 567.404737][T11384] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 567.404777][T11384] ? security_inode_alloc+0x3b/0x2b0 [ 567.404813][T11384] security_inode_alloc+0x3b/0x2b0 [ 567.404846][T11384] inode_init_always_gfp+0xce4/0x1030 [ 567.404891][T11384] alloc_inode+0x86/0x240 [ 567.404919][T11384] iget_locked+0x2e4/0x830 [ 567.404952][T11384] ? __pfx_iget_locked+0x10/0x10 [ 567.404985][T11384] ? find_held_lock+0x2b/0x80 [ 567.405014][T11384] ? kernfs_root+0xee/0x2a0 [ 567.405060][T11384] kernfs_get_inode+0x48/0x460 [ 567.405097][T11384] kernfs_iop_lookup+0x1a7/0x2d0 [ 567.405136][T11384] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 567.405174][T11384] lookup_open.isra.0+0x4d7/0x1580 [ 567.405221][T11384] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 567.405280][T11384] ? mnt_get_write_access+0x20c/0x300 [ 567.405316][T11384] path_openat+0x893/0x2cb0 [ 567.405378][T11384] ? __pfx_path_openat+0x10/0x10 [ 567.405420][T11384] ? __lock_acquire+0xb8a/0x1c90 [ 567.405462][T11384] do_filp_open+0x20b/0x470 [ 567.405503][T11384] ? __pfx_do_filp_open+0x10/0x10 [ 567.405571][T11384] ? alloc_fd+0x471/0x7d0 [ 567.405619][T11384] do_sys_openat2+0x11b/0x1d0 [ 567.405649][T11384] ? __pfx_do_sys_openat2+0x10/0x10 [ 567.405695][T11384] __x64_sys_openat+0x174/0x210 [ 567.405727][T11384] ? __pfx___x64_sys_openat+0x10/0x10 [ 567.405775][T11384] do_syscall_64+0xcd/0x490 [ 567.405819][T11384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.405846][T11384] RIP: 0033:0x7f6f6038e929 [ 567.405870][T11384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.405899][T11384] RSP: 002b:00007f6f61127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 567.405927][T11384] RAX: ffffffffffffffda RBX: 00007f6f605b6080 RCX: 00007f6f6038e929 [ 567.405947][T11384] RDX: 0000000000001182 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 567.405965][T11384] RBP: 00007f6f60410b39 R08: 0000000000000000 R09: 0000000000000000 [ 567.405982][T11384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.405999][T11384] R13: 0000000000000000 R14: 00007f6f605b6080 R15: 00007ffc68775638 [ 567.406039][T11384] [ 568.012114][T11369] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 568.054381][T11369] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 568.064180][T11369] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 568.070400][T11369] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 568.317131][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.325953][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.712866][ T5151] Bluetooth: hci0: command 0x0406 tx timeout [ 570.071915][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 570.152284][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 570.158523][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 571.376535][T11419] Invalid ELF header magic: != ELF [ 574.094097][T11459] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1076'. [ 574.147211][T11459] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1076'. [ 575.153527][T11469] Invalid ELF header magic: != ELF [ 575.697936][T11475] Invalid ELF header magic: != ELF [ 577.641183][T11510] netlink: 'syz.3.1086': attribute type 2 has an invalid length. [ 577.691143][T11498] Invalid ELF header magic: != ELF [ 580.730421][T11536] Invalid ELF header magic: != ELF [ 581.272391][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 581.281264][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.292411][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 581.299018][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.308672][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 581.315370][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.393266][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 581.399688][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.872010][T11534] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 581.896842][T11534] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 581.930895][T11534] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 581.956274][T11534] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 582.337124][T11342] Bluetooth: hci0: command 0x0406 tx timeout [ 582.823717][ T30] audit: type=1800 audit(4294975567.870:16): pid=11563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1096" name="members" dev="configfs" ino=81155 res=0 errno=0 [ 583.918257][T11342] Bluetooth: hci1: command 0x0406 tx timeout [ 584.012223][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 584.018411][T11342] Bluetooth: hci3: command 0x0406 tx timeout [ 584.120615][T11574] Invalid ELF header magic: != ELF [ 586.108096][T11609] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.393292][T11614] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 586.393292][T11614] M' is too long [ 586.403962][T11614] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 586.403962][T11614] W ' is too long [ 586.424466][T11592] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 586.442353][T11592] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 586.448837][T11592] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 586.459914][T11592] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 587.751958][ T5151] Bluetooth: hci0: command 0x0406 tx timeout [ 588.482596][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 588.488910][T11342] Bluetooth: hci2: command 0x0406 tx timeout [ 588.497999][T11342] Bluetooth: hci1: command 0x0406 tx timeout [ 588.561481][T11641] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 589.384057][T11654] Invalid ELF header magic: != ELF [ 592.870252][T11676] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 592.879659][T11676] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 592.887213][T11676] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 592.907355][T11676] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 592.964344][T11693] Invalid ELF header magic: != ELF [ 593.569607][T11701] Invalid ELF header magic: != ELF [ 594.072571][ T5151] Bluetooth: hci0: command 0x0406 tx timeout [ 594.131515][T11709] Process accounting resumed [ 594.953178][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 594.953712][T11342] Bluetooth: hci2: command 0x0406 tx timeout [ 594.959333][T11639] Bluetooth: hci1: command 0x0406 tx timeout [ 595.403927][T11712] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 595.468296][T11712] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 595.542290][T11712] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 595.623566][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 595.629925][T11712] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 595.630382][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 595.661786][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 595.698490][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 595.715327][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 595.729381][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 595.745553][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 595.770102][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 597.442010][T11342] Bluetooth: hci0: command 0x0406 tx timeout [ 597.525051][T11342] Bluetooth: hci1: command 0x0406 tx timeout [ 597.592068][T11342] Bluetooth: hci2: command 0x0406 tx timeout [ 597.672333][T11342] Bluetooth: hci3: command 0x0406 tx timeout [ 597.800590][T11750] Invalid ELF header magic: != ELF [ 598.094415][T11757] Invalid ELF header magic: != ELF [ 598.985156][T11767] Invalid ELF header magic: != ELF [ 600.384150][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1138'. [ 602.034345][ T30] audit: type=1800 audit(4294975587.080:17): pid=11800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1144" name="members" dev="configfs" ino=85547 res=0 errno=0 [ 602.105106][T11787] Invalid ELF header magic: != ELF [ 605.362501][T11831] Invalid ELF header magic: != ELF [ 607.699411][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 607.709275][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 607.760594][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 607.767176][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 607.792906][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 607.799322][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 607.952563][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 607.969175][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 608.130036][T11864] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 608.176115][T11861] Invalid ELF header magic: != ELF [ 608.794396][T11877] Invalid ELF header magic: != ELF [ 616.190549][T11966] sd 0:0:1:0: PR command failed: 1026 [ 616.206850][T11966] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 616.362088][T11966] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 618.135162][T11990] Invalid ELF header magic: != ELF [ 620.981218][T12021] Invalid ELF header magic: != ELF [ 622.543689][T12046] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 624.654027][T12063] Invalid ELF header magic: != ELF [ 624.834173][T12058] Process accounting paused [ 625.237207][T12078] Invalid ELF header magic: != ELF [ 625.329919][T12068] Invalid ELF header magic: != ELF [ 629.757157][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.772131][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.752078][T12132] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 630.760896][T12132] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 630.767511][T12132] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 630.777870][T12132] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 631.673097][T11342] Bluetooth: hci0: command 0x0406 tx timeout [ 632.791927][T11342] Bluetooth: hci3: command 0x0406 tx timeout [ 632.798002][T11342] Bluetooth: hci2: command 0x0406 tx timeout [ 632.804131][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 633.703413][T12177] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1228'. [ 636.825989][T12221] Invalid ELF header magic: != ELF [ 637.751282][T12227] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 638.585062][T12230] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 640.693520][T12274] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1249'. [ 643.916448][T12316] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(6) [ 644.685683][T12313] syz.3.1259 (12313): attempted to duplicate a private mapping with mremap. This is not supported. [ 644.715858][T12326] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1262'. [ 648.832237][T12359] Invalid ELF header magic: != ELF [ 651.842368][T12399] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 652.799968][T12402] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 655.050497][T12433] Invalid ELF header magic: != ELF [ 655.749633][T12442] Invalid ELF header magic: != ELF [ 656.597696][T12418] Process accounting resumed [ 657.348241][T12460] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 663.286268][T12542] Invalid ELF header magic: != ELF [ 663.952073][T12536] Invalid ELF header magic: != ELF [ 667.521046][T12602] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 667.531969][T12602] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1319'. [ 673.693456][T12684] Invalid ELF header magic: != ELF [ 674.126749][T12680] GUP no longer grows the stack in syz.0.1335 (12680): 14000-401000 (4000) [ 674.135881][T12680] CPU: 1 UID: 0 PID: 12680 Comm: syz.0.1335 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 674.135923][T12680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 674.135941][T12680] Call Trace: [ 674.135951][T12680] [ 674.135964][T12680] dump_stack_lvl+0x16c/0x1f0 [ 674.136024][T12680] gup_vma_lookup+0x1d2/0x220 [ 674.136060][T12680] __get_user_pages+0x271/0x3b80 [ 674.136110][T12680] ? process_vm_rw_core.constprop.0+0x1d8/0x9a0 [ 674.136158][T12680] ? kasan_save_stack+0x42/0x60 [ 674.136201][T12680] ? __pfx___get_user_pages+0x10/0x10 [ 674.136235][T12680] ? register_lock_class+0x41/0x4c0 [ 674.136273][T12680] ? __x64_sys_process_vm_readv+0xe2/0x1c0 [ 674.136318][T12680] ? do_syscall_64+0xcd/0x490 [ 674.136365][T12680] __gup_longterm_locked+0x20d/0x1840 [ 674.136394][T12680] ? __lock_acquire+0xb8a/0x1c90 [ 674.136429][T12680] ? __pfx___gup_longterm_locked+0x10/0x10 [ 674.136472][T12680] pin_user_pages_remote+0xed/0x140 [ 674.136501][T12680] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 674.136527][T12680] ? mm_access+0x22d/0x2e0 [ 674.136566][T12680] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 674.136618][T12680] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 674.136658][T12680] ? iovec_from_user+0xbb/0x140 [ 674.136710][T12680] ? iovec_from_user+0xbb/0x140 [ 674.136749][T12680] process_vm_rw+0x216/0x2c0 [ 674.136788][T12680] ? __pfx_process_vm_rw+0x10/0x10 [ 674.136832][T12680] ? task_mm_cid_work+0x37b/0x910 [ 674.136887][T12680] ? xfd_validate_state+0x61/0x180 [ 674.136915][T12680] ? __task_pid_nr_ns+0x17c/0x500 [ 674.136949][T12680] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 674.136987][T12680] ? do_syscall_64+0x91/0x490 [ 674.137027][T12680] ? lockdep_hardirqs_on+0x7c/0x110 [ 674.137060][T12680] do_syscall_64+0xcd/0x490 [ 674.137097][T12680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.137120][T12680] RIP: 0033:0x7fc3a138e929 [ 674.137140][T12680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.137164][T12680] RSP: 002b:00007fc3a222e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 674.137188][T12680] RAX: ffffffffffffffda RBX: 00007fc3a15b6080 RCX: 00007fc3a138e929 [ 674.137204][T12680] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 00000000000005de [ 674.137219][T12680] RBP: 00007fc3a1410b39 R08: 0000000000000003 R09: 0000000000000000 [ 674.137233][T12680] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 674.137247][T12680] R13: 0000000000000000 R14: 00007fc3a15b6080 R15: 00007ffdb76c9718 [ 674.137278][T12680] [ 677.824682][T12745] Invalid ELF header magic: != ELF [ 680.827809][T12792] Invalid ELF header magic: != ELF [ 684.039687][T12846] Invalid ELF header magic: != ELF [ 684.180648][T12851] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k/[k 18 [ 748.315569][T13803] Process accounting paused [ 749.697093][T13836] Invalid ELF header magic: != ELF [ 749.735028][T13838] Invalid ELF header magic: != ELF [ 751.103623][T13856] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k/[k/[k/[k/[k [ 794.904577][T14465] dump_stack_lvl+0x16c/0x1f0 [ 794.904627][T14465] should_fail_ex+0x512/0x640 [ 794.904673][T14465] should_fail_alloc_page+0xe7/0x130 [ 794.904704][T14465] prepare_alloc_pages+0x3c2/0x610 [ 794.904744][T14465] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 794.904793][T14465] ? stack_trace_save+0x8e/0xc0 [ 794.904826][T14465] ? __pfx_stack_trace_save+0x10/0x10 [ 794.904858][T14465] ? stack_depot_save_flags+0x28/0xa40 [ 794.904910][T14465] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 794.904956][T14465] ? kasan_save_stack+0x33/0x60 [ 794.904998][T14465] ? __kasan_kmalloc+0xaa/0xb0 [ 794.905037][T14465] ? ring_buffer_read_prepare+0x101/0x320 [ 794.905067][T14465] ? tracing_open+0xbe8/0xf90 [ 794.905096][T14465] ? do_dentry_open+0x744/0x1c10 [ 794.905138][T14465] ? vfs_open+0x82/0x3f0 [ 794.905165][T14465] ? path_openat+0x1de4/0x2cb0 [ 794.905204][T14465] ? do_filp_open+0x20b/0x470 [ 794.905275][T14465] ? ring_buffer_read_prepare+0x171/0x320 [ 794.905318][T14465] __alloc_pages_noprof+0xb/0x1b0 [ 794.905363][T14465] ___kmalloc_large_node+0x84/0x1e0 [ 794.905407][T14465] ? ring_buffer_read_prepare+0x171/0x320 [ 794.905440][T14465] __kmalloc_large_node_noprof+0x1c/0x70 [ 794.905482][T14465] __kmalloc_noprof.cold+0xc/0x61 [ 794.905531][T14465] ? kasan_save_track+0x14/0x30 [ 794.905579][T14465] ring_buffer_read_prepare+0x171/0x320 [ 794.905621][T14465] tracing_open+0xbe8/0xf90 [ 794.905663][T14465] do_dentry_open+0x744/0x1c10 [ 794.905709][T14465] ? __pfx_tracing_open+0x10/0x10 [ 794.905752][T14465] vfs_open+0x82/0x3f0 [ 794.905792][T14465] path_openat+0x1de4/0x2cb0 [ 794.905851][T14465] ? __pfx_path_openat+0x10/0x10 [ 794.905894][T14465] ? __lock_acquire+0xb8a/0x1c90 [ 794.905938][T14465] do_filp_open+0x20b/0x470 [ 794.905978][T14465] ? __pfx_do_filp_open+0x10/0x10 [ 794.906057][T14465] ? alloc_fd+0x471/0x7d0 [ 794.906117][T14465] do_sys_openat2+0x11b/0x1d0 [ 794.906150][T14465] ? __pfx_do_sys_openat2+0x10/0x10 [ 794.906205][T14465] __x64_sys_openat+0x174/0x210 [ 794.906239][T14465] ? __pfx___x64_sys_openat+0x10/0x10 [ 794.906306][T14465] do_syscall_64+0xcd/0x490 [ 794.906357][T14465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.906388][T14465] RIP: 0033:0x7f6f6038e929 [ 794.906413][T14465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.906442][T14465] RSP: 002b:00007f6f61127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 794.906471][T14465] RAX: ffffffffffffffda RBX: 00007f6f605b6080 RCX: 00007f6f6038e929 [ 794.906491][T14465] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 794.906510][T14465] RBP: 00007f6f60410b39 R08: 0000000000000000 R09: 0000000000000000 [ 794.906528][T14465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.906546][T14465] R13: 0000000000000000 R14: 00007f6f605b6080 R15: 00007ffc68775638 [ 794.906587][T14465] [ 796.001220][T14477] debugfs: Directory '!PjE r҄y*"l-y–L̓]' with parent 'ieee80211' already present! [ 797.260366][T14501] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k/[k/[k/[k 1 [ 805.305714][T12493] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 805.314174][T12493] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 805.331237][T12493] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 805.341615][T12493] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 805.875845][T14609] chnl_net:caif_netlink_parms(): no params data found [ 806.205875][T14609] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.263269][T14609] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.284787][T14609] bridge_slave_0: entered allmulticast mode [ 806.314175][T14609] bridge_slave_0: entered promiscuous mode [ 806.351033][T14609] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.392130][T14609] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.407722][T14609] bridge_slave_1: entered allmulticast mode [ 806.421326][T14609] bridge_slave_1: entered promiscuous mode [ 806.557931][T14609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.651581][T14609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.362696][T14609] team0: Port device team_slave_0 added [ 807.432305][T12493] Bluetooth: hci4: command tx timeout [ 807.493393][T14609] team0: Port device team_slave_1 added [ 807.602063][T14609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.609257][T14609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.640756][T14609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.685735][T14609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.706838][T14609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 807.783408][T14609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.031120][T14609] hsr_slave_0: entered promiscuous mode [ 808.044624][T14609] hsr_slave_1: entered promiscuous mode [ 808.063676][T14609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 808.080123][T14609] Cannot create hsr debugfs directory [ 808.110969][T14647] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k/[k 1 [ 823.451506][T13789] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 823.460887][T13789] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 823.472568][T13789] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 823.481108][T13789] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 823.984214][T14819] chnl_net:caif_netlink_parms(): no params data found [ 824.312048][ T31] INFO: task kworker/u10:2:12499 blocked for more than 143 seconds. [ 824.330492][ T31] Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 [ 824.348616][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 824.371163][ T31] task:kworker/u10:2 state:D stack:26952 pid:12499 tgid:12499 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 824.400564][ T31] Workqueue: netns cleanup_net [ 824.412063][ T31] Call Trace: [ 824.419903][ T31] [ 824.441833][ T31] __schedule+0x116a/0x5de0 [ 824.446988][ T31] ? __pfx___schedule+0x10/0x10 [ 824.452470][ T31] ? find_held_lock+0x2b/0x80 [ 824.457458][ T31] ? schedule+0x2d7/0x3a0 [ 824.462387][ T31] schedule+0xe7/0x3a0 [ 824.466785][ T31] schedule_timeout+0x257/0x290 [ 824.472269][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 824.477845][ T31] ? mark_held_locks+0x49/0x80 [ 824.489657][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 824.495380][ T31] __wait_for_common+0x2ff/0x4e0 [ 824.500631][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 824.506574][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 824.512736][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 824.518325][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 824.524718][ T31] __flush_workqueue+0x3e2/0x1230 [ 824.530095][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 824.536159][ T31] ? rxrpc_discard_prealloc+0xb6/0x9b0 [ 824.545175][ T31] ? rxrpc_release+0x568/0x670 [ 824.557379][ T31] ? rxrpc_release_calls_on_socket+0x18a/0x300 [ 824.572270][ T31] rxrpc_release+0x27a/0x670 [ 824.580332][ T31] sock_release+0x91/0x1d0 [ 824.590181][ T31] afs_close_socket+0x21b/0x3e0 [ 824.602232][ T31] ? afs_wait_for_servers+0xec/0x220 [ 824.612370][ T31] ? __pfx_afs_close_socket+0x10/0x10 [ 824.624044][ T31] ? __timer_delete_sync+0x108/0x1b0 [ 824.635152][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 824.657658][ T31] afs_net_exit+0x93/0x140 [ 824.662945][ T31] ops_undo_list+0x2eb/0xab0 [ 824.667638][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 824.681880][ T31] ? __local_bh_enable_ip+0xa4/0x120 [ 824.697586][ T31] cleanup_net+0x408/0x890 [ 824.702478][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 824.707451][ T31] ? rcu_is_watching+0x12/0xc0 [ 824.728978][ T31] process_one_work+0x9cc/0x1b70 [ 824.734992][ T31] ? __pfx_process_one_work+0x10/0x10 [ 824.749286][ T31] ? assign_work+0x1a0/0x250 [ 824.760401][ T31] worker_thread+0x6c8/0xf10 [ 824.769659][ T31] ? __kthread_parkme+0x19e/0x250 [ 824.779857][ T31] ? __pfx_worker_thread+0x10/0x10 [ 824.790023][ T31] kthread+0x3c5/0x780 [ 824.800174][ T31] ? __pfx_kthread+0x10/0x10 [ 824.815966][ T31] ? rcu_is_watching+0x12/0xc0 [ 824.820839][ T31] ? __pfx_kthread+0x10/0x10 [ 824.845999][ T31] ret_from_fork+0x5d4/0x6f0 [ 824.908428][ T31] ? __pfx_kthread+0x10/0x10 [ 824.913250][ T31] ret_from_fork_asm+0x1a/0x30 [ 824.918102][ T31] [ 824.922910][ T31] [ 824.922910][ T31] Showing all locks held in the system: [ 824.930672][ T31] 1 lock held by khungtaskd/31: [ 824.940905][ T31] #0: ffffffff8e5c47c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 824.976089][ T31] 1 lock held by sshd-session/5816: [ 824.981428][ T31] 2 locks held by getty/8375: [ 824.991918][ T31] #0: ffff888031d560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 825.001985][ T31] #1: ffffc900033042f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 825.012453][ T31] 3 locks held by kworker/u10:2/12499: [ 825.017942][ T31] #0: ffff88801c6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 825.028521][ T31] #1: ffffc9000c1f7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 825.038812][ T31] #2: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 825.048266][ T31] 3 locks held by kworker/u10:3/12503: [ 825.053783][ T31] #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 825.065008][ T31] #1: ffffc9000bf37d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 825.075555][ T31] #2: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 825.084851][ T31] 1 lock held by syz.1.1734/14408: [ 825.090016][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 825.099550][ T31] 1 lock held by syz.2.1787/14647: [ 825.104818][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 825.115207][ T31] 1 lock held by syz.4.1803/14729: [ 825.120415][ T31] #0: ffffffff90338250 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 825.129901][ T31] 2 locks held by syz-executor/14819: [ 825.135339][ T31] #0: ffffffff8f713ac0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 825.145030][ T31] #1: ffffffff9034e2a8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 825.154258][ T31] 2 locks held by syz.3.1832/14825: [ 825.159492][ T31] #0: ffff88803a076808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 825.170129][ T31] #1: ffffffff8e5cfdb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 825.180393][ T31] [ 825.211805][ T31] ============================================= [ 825.211805][ T31] [ 825.220292][ T31] NMI backtrace for cpu 1 [ 825.220313][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 825.220350][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 825.220366][ T31] Call Trace: [ 825.220376][ T31] [ 825.220388][ T31] dump_stack_lvl+0x116/0x1f0 [ 825.220435][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 825.220468][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 825.220510][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 825.220549][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 825.220589][ T31] watchdog+0xf70/0x12c0 [ 825.220640][ T31] ? __pfx_watchdog+0x10/0x10 [ 825.220678][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 825.220723][ T31] ? __kthread_parkme+0x19e/0x250 [ 825.220759][ T31] ? __pfx_watchdog+0x10/0x10 [ 825.220800][ T31] kthread+0x3c5/0x780 [ 825.220840][ T31] ? __pfx_kthread+0x10/0x10 [ 825.220883][ T31] ? rcu_is_watching+0x12/0xc0 [ 825.220912][ T31] ? __pfx_kthread+0x10/0x10 [ 825.220963][ T31] ret_from_fork+0x5d4/0x6f0 [ 825.221000][ T31] ? __pfx_kthread+0x10/0x10 [ 825.221041][ T31] ret_from_fork_asm+0x1a/0x30 [ 825.221094][ T31] [ 825.221105][ T31] Sending NMI from CPU 1 to CPUs 0: [ 825.348004][ C0] NMI backtrace for cpu 0 [ 825.348025][ C0] CPU: 0 UID: 0 PID: 14825 Comm: syz.3.1832 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 825.348053][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 825.348066][ C0] RIP: 0010:write_comp_data+0x8b/0x90 [ 825.348099][ C0] Code: 00 00 4a 8d 34 dd 28 00 00 00 48 39 f2 72 1b 48 83 c7 01 48 89 38 4c 89 44 30 e0 4c 89 4c 30 e8 4c 89 54 30 f0 4a 89 4c d8 20 90 0e c4 09 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 [ 825.348120][ C0] RSP: 0018:ffffc90003437600 EFLAGS: 00000293 [ 825.348138][ C0] RAX: 0000000000000000 RBX: 00007f6f5f87f000 RCX: ffffffff8206fa93 [ 825.348152][ C0] RDX: ffff88802d661e00 RSI: 00007f6f5f9fd000 RDI: 0000000000000006 [ 825.348166][ C0] RBP: 0000000000000000 R08: 0000000000000006 R09: 00007f6f5f9fd000 [ 825.348180][ C0] R10: 00007f6f5f87f000 R11: 0000000000000001 R12: 00007f6f5f87e000 [ 825.348194][ C0] R13: ffffc90003437790 R14: dffffc0000000000 R15: 00007f6f5f9fd000 [ 825.348208][ C0] FS: 0000000000000000(0000) GS:ffff888124760000(0000) knlGS:0000000000000000 [ 825.348241][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 825.348255][ C0] CR2: 000055c09ce06000 CR3: 000000000e382000 CR4: 00000000003526f0 [ 825.348269][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 825.348282][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 825.348296][ C0] Call Trace: [ 825.348304][ C0] [ 825.348312][ C0] unmap_page_range+0xf53/0x4350 [ 825.348350][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 825.348377][ C0] ? uprobe_munmap+0x20/0x5c0 [ 825.348400][ C0] unmap_single_vma.constprop.0+0x153/0x240 [ 825.348427][ C0] unmap_vmas+0x218/0x470 [ 825.348450][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 825.348484][ C0] exit_mmap+0x1b9/0xb90 [ 825.348510][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 825.348551][ C0] __mmput+0x12a/0x410 [ 825.348575][ C0] mmput+0x62/0x70 [ 825.348596][ C0] do_exit+0x7c4/0x2bd0 [ 825.348626][ C0] ? __pfx_do_exit+0x10/0x10 [ 825.348652][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 825.348681][ C0] ? find_held_lock+0x2b/0x80 [ 825.348704][ C0] do_group_exit+0xd3/0x2a0 [ 825.348730][ C0] get_signal+0x2673/0x26d0 [ 825.348754][ C0] ? __call_rcu_common.constprop.0+0x3f0/0xa10 [ 825.348790][ C0] ? __pfx_get_signal+0x10/0x10 [ 825.348817][ C0] arch_do_signal_or_restart+0x8f/0x790 [ 825.348841][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 825.348891][ C0] ? __pfx___do_sys_close_range+0x10/0x10 [ 825.348928][ C0] exit_to_user_mode_loop+0x84/0x110 [ 825.348960][ C0] do_syscall_64+0x3f6/0x490 [ 825.348993][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.349014][ C0] RIP: 0033:0x7f6f6038e929 [ 825.349030][ C0] Code: Unable to access opcode bytes at 0x7f6f6038e8ff. [ 825.349039][ C0] RSP: 002b:00007ffc68775798 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 825.349058][ C0] RAX: 0000000000000000 RBX: 00007f6f605b7ba0 RCX: 00007f6f6038e929 [ 825.349072][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 825.349084][ C0] RBP: 00007f6f605b7ba0 R08: 000000000001e8c4 R09: 0000001768775a8f [ 825.349098][ C0] R10: 00007f6f605b7ac0 R11: 0000000000000246 R12: 00000000000c94cc [ 825.349112][ C0] R13: 00007f6f605b6160 R14: ffffffffffffffff R15: 00007ffc687758b0 [ 825.349134][ C0] [ 825.491841][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 825.491875][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 825.491913][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 825.491930][ T31] Call Trace: [ 825.491942][ T31] [ 825.491954][ T31] dump_stack_lvl+0x3d/0x1f0 [ 825.492014][ T31] panic+0x71c/0x800 [ 825.492056][ T31] ? __pfx_panic+0x10/0x10 [ 825.492095][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 825.492136][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 825.492174][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 825.492211][ T31] ? watchdog+0xdda/0x12c0 [ 825.492250][ T31] ? watchdog+0xdcd/0x12c0 [ 825.492295][ T31] watchdog+0xdeb/0x12c0 [ 825.492340][ T31] ? __pfx_watchdog+0x10/0x10 [ 825.492374][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 825.492412][ T31] ? __kthread_parkme+0x19e/0x250 [ 825.492443][ T31] ? __pfx_watchdog+0x10/0x10 [ 825.492480][ T31] kthread+0x3c5/0x780 [ 825.492517][ T31] ? __pfx_kthread+0x10/0x10 [ 825.492559][ T31] ? rcu_is_watching+0x12/0xc0 [ 825.492587][ T31] ? __pfx_kthread+0x10/0x10 [ 825.492629][ T31] ret_from_fork+0x5d4/0x6f0 [ 825.492666][ T31] ? __pfx_kthread+0x10/0x10 [ 825.492705][ T31] ret_from_fork_asm+0x1a/0x30 [ 825.492753][ T31] [ 825.493256][ T31] Kernel Offset: disabled