last executing test programs: 3m48.437247456s ago: executing program 0 (id=1079): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000002, 0x8}, 0x6f4) r1 = socket(0xa, 0x2, 0xffffffd9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x0) getsockopt$auto(r1, 0x29, 0xcf, 0x0, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r3, &(0x7f00000003c0)={&(0x7f0000000000), 0x2}, 0x3e4) r4 = socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r5 = gettid() accept$auto(0x3, 0x0, 0x0) r6 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/state\x00', 0xa8201, 0x0) lseek$auto(r6, 0x9, 0x0) kill$auto(r5, 0x11) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00c2000f188d1b8eb9afb0c89fa8ce06a652cfbd8caf", @ANYRES16, @ANYBLOB="000429bd7000fddbdf250f00000008001d000010000005000a0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x1) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="000600bd8408cf63b582c12767f1b49a9700fcdbdf251200000004040200d90330f38d4f3b35450dcfaa03b9f76003baec863b72f9a5cf5a630b35e73b6bf176b4dab6"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x22}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x7}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xfffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000011) sysfs$auto(0x2, 0x3b, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) 3m46.358761941s ago: executing program 0 (id=1083): r0 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0xa, 0x3, 0x3b) connect$auto(r1, &(0x7f0000000000)=@generic={0x22, "0000e100"}, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) r4 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000040)="3b3cd87e8985684b145a06a68140ac2243ae4a94bc5a0ed330a4a68947befe4d79", 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r5 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) writev$auto(r5, &(0x7f00000001c0)={0x0, 0xa}, 0x8) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0xb6, r6, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x1f\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xfdef, 0x3) preadv2$auto(r6, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) sendmsg$auto_TIPC_NL_LINK_SET(r4, &(0x7f0000000200)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0400110000f628c1d9d5f4bc416a88824453c4b1af73931084dbadb8a3895cdf8bd25c964500108f97c5af9a6056b2308b5136d04ee84f4276619f28fe4f152b56bf1f0fbf2a08001c00", @ANYRES16=r0, @ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x4008040}, 0x30004091) ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0x0) dup$auto(r3) 3m44.501482795s ago: executing program 0 (id=1086): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) ioctl$auto_RNDCLEARPOOL(r1, 0x5206, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000340), 0x381240, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/virtio/drivers/virtio_snd/bind\x00', 0x48c002, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r2, 0x802064b6, r2) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3m42.283669348s ago: executing program 0 (id=1091): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000002, 0x8}, 0x6f4) r0 = socket(0xa, 0x2, 0xffffffd9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x1, 0x0) getsockopt$auto(r0, 0x29, 0xcf, 0x0, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r2, &(0x7f00000003c0)={&(0x7f0000000000), 0x2}, 0x3e4) r3 = socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r4 = gettid() accept$auto(0x3, 0x0, 0x0) r5 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/state\x00', 0xa8201, 0x0) lseek$auto(r5, 0x9, 0x0) kill$auto(r4, 0x11) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00c2000f188d1b8eb9afb0c89fa8ce06a652cfbd8caf", @ANYRES16, @ANYBLOB="000429bd7000fddbdf250f00000008001d000010000005000a0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x1) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="000600bd8408cf63b582c12767f1b49a9700fcdbdf251200000004040200d90330f38d4f3b35450dcfaa03b9f76003baec863b72f9a5cf5a630b35e73b6bf176b4dab6"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x22}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x7}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xfffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000011) sysfs$auto(0x2, 0x3b, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) 3m41.282144866s ago: executing program 0 (id=1096): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000002, 0x8}, 0x6f4) r1 = socket(0xa, 0x2, 0xffffffd9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x0) getsockopt$auto(r1, 0x29, 0xcf, 0x0, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r3, &(0x7f00000003c0)={&(0x7f0000000000), 0x2}, 0x3e4) r4 = socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) accept$auto(0x3, 0x0, 0x0) lseek$auto(0xffffffffffffffff, 0x9, 0x0) kill$auto(0x0, 0x11) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00c2000f188d1b8eb9afb0c89fa8ce06a652cfbd8caf", @ANYRES16, @ANYBLOB="000429bd7000fddbdf250f00000008001d000010000005000a0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x1) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="000600bd8408cf63b582c12767f1b49a9700fcdbdf251200000004040200d90330f38d4f3b35450dcfaa03b9f76003baec863b72f9a5cf5a630b35e73b6bf176b4dab6"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x22}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x7}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xfffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000011) sysfs$auto(0x2, 0x3b, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) 3m39.020433296s ago: executing program 0 (id=1099): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0x200000000000011, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r1, &(0x7f0000000100)={0x0, 0x82}, 0x8, 0xe637, 0x6) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) read$auto_event_trigger_fops_trace(r3, 0x0, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) read$auto(r4, 0x0, 0x1d) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f00000000c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x3}, 0xffffffff, 0xb00) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) 3m23.827977093s ago: executing program 32 (id=1099): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) socket(0x200000000000011, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r1, &(0x7f0000000100)={0x0, 0x82}, 0x8, 0xe637, 0x6) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) read$auto_event_trigger_fops_trace(r3, 0x0, 0x0) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) read$auto(r4, 0x0, 0x1d) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f00000000c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x3}, 0xffffffff, 0xb00) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) 2m36.252095533s ago: executing program 3 (id=1212): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10000000000002e, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r0, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd9\x00', 0x100, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x12080, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x73) bind$auto(0x3, 0x0, 0x6a) ptrace$auto(0x4, 0xffffffffffffffff, 0x8000000000000000, 0xfff) r2 = socket(0x2, 0x80002, 0x73) bind$auto(r2, 0x0, 0x20006b) setns(0xffffffffffffffff, 0x0) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xc0201, 0x0) write$auto_tomoyo_operations_securityfs_if(r3, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) select$auto(0x5, &(0x7f0000000180)={[0x8, 0x6, 0x40, 0x7, 0x5, 0x0, 0x9c94, 0xe3e, 0x5, 0x248f, 0x5, 0x100000001, 0x80000000, 0x0, 0x7, 0xfffffffffffffe00]}, 0x0, &(0x7f00000002c0)={[0x101, 0x8, 0x1000000000006, 0x3, 0xc2e7, 0x1, 0x0, 0xfff, 0x7fff, 0x8, 0x6, 0x1, 0x7, 0x5, 0x860, 0xa]}, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket(0x21, 0x80000, 0x0) 2m33.38506592s ago: executing program 3 (id=1217): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x1, 0xa}, 0x5, 0x108) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x940, 0x0) ioctl$auto_MEMGETBADBLOCK(r1, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_ratio\x00', 0x202, 0x0) sysfs$auto(0x2, 0x3b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(r3, r3, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) unshare$auto(0x40000080) 2m31.590602355s ago: executing program 3 (id=1222): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r0, 0x40044620, 0x0) (fail_nth: 2) 2m30.391148713s ago: executing program 3 (id=1224): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001080), 0x103c00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) connect$auto(0x3, 0x0, 0xfffffffd) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)={0xed, 0x0, [{0x9, 0x1, 0xd}, {0x40, 0xffffffff, 0x3}]}) close_range$auto(r0, r0, 0xe2da) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty19\x00', 0x200000, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000080)="159baf666bab8a160c5158df9506a300e2388cf2b88ffb1c29357a6359658e3779576bab8ed476f375c4f1cae7c71c701a44b0308c6b4b5ac4461ae2009d4bd47fb3a9305b") socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000380), 0x141280, 0x0) close_range$auto(0x2, 0x8, 0x2) r3 = socketcall$auto(0x100000a, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae90, &(0x7f0000000000)={0x75}) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, &(0x7f0000000440)=0x77b) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/cpu/cpu1/power/pm_qos_resume_latency_us\x00', 0x60681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)='5', 0x1) sysfs$auto(0x2, 0x3b, 0x0) 2m28.09274701s ago: executing program 3 (id=1227): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000002, 0x8}, 0x6f4) r1 = socket(0xa, 0x2, 0xffffffd9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x0) getsockopt$auto(r1, 0x29, 0xcf, 0x0, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) writev$auto(r3, 0x0, 0x3e4) r4 = socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r5 = gettid() accept$auto(0x3, 0x0, 0x0) r6 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/state\x00', 0xa8201, 0x0) lseek$auto(r6, 0x9, 0x0) kill$auto(r5, 0x11) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00c2000f188d1b8eb9afb0c89fa8ce06a652cfbd8caf", @ANYRES16, @ANYBLOB="000429bd7000fddbdf250f00000008001d000010000005000a0008000000"], 0x24}, 0x1, 0x0, 0x0, 0x40054}, 0x1) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="000600bd8408cf63b582c12767f1b49a9700fcdbdf251200000004040200d90330f38d4f3b35450dcfaa03b9f76003baec863b72f9a5cf5a630b35e73b6bf176b4dab6"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x22}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x7}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xfffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000011) sysfs$auto(0x2, 0x3b, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) 2m25.023566747s ago: executing program 3 (id=1232): setsockopt$auto(0xffffffffffffffff, 0x4, 0xc, 0x0, 0xa) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) ioctl$auto_FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffa) ioctl$auto(0xffffffffffffffff, 0x80045430, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:01/uevent\x00', 0x80300, 0x0) writev$auto(r0, &(0x7f00000002c0)={&(0x7f0000000480)='4r', 0x5}, 0x1) mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80eb581, 0x0) r1 = socket(0xa, 0x3, 0xf) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x100000000, 0x19) sendmmsg$auto(0x3, 0x0, 0x40009a8, 0x7000000) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/softirqs\x00', 0x8b02, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000000040)=""/28, 0x1c) mmap$auto(0x0, 0x1000000000000003, 0x4000000080df, 0x800000000040eb1, r1, 0x0) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) writev$auto(r3, &(0x7f0000000340)={0x0, 0x500000}, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, 0x0, 0x1) r4 = pipe2$auto(0x0, 0xfffffff7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8a0}, 0x8000) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x7fffffff) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) 2m9.19902829s ago: executing program 33 (id=1232): setsockopt$auto(0xffffffffffffffff, 0x4, 0xc, 0x0, 0xa) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) ioctl$auto_FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0xfffffffffffffffa) ioctl$auto(0xffffffffffffffff, 0x80045430, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:01/uevent\x00', 0x80300, 0x0) writev$auto(r0, &(0x7f00000002c0)={&(0x7f0000000480)='4r', 0x5}, 0x1) mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80eb581, 0x0) r1 = socket(0xa, 0x3, 0xf) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0x100000000, 0x19) sendmmsg$auto(0x3, 0x0, 0x40009a8, 0x7000000) r2 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/softirqs\x00', 0x8b02, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r2, &(0x7f0000000040)=""/28, 0x1c) mmap$auto(0x0, 0x1000000000000003, 0x4000000080df, 0x800000000040eb1, r1, 0x0) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000001c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) writev$auto(r3, &(0x7f0000000340)={0x0, 0x500000}, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, 0x0, 0x1) r4 = pipe2$auto(0x0, 0xfffffff7) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8a0}, 0x8000) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x7fffffff) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r4, 0x4004510d, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) 32.001733434s ago: executing program 2 (id=1365): mmap$auto(0x0, 0x20009, 0xe2, 0x2eb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) setns(0xc9, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0xd) socket(0xa, 0x5, 0x84) setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0x0) open(0x0, 0x0, 0x57e) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) arch_prctl$auto_ARCH_GET_XCOMP_PERM(0x1022, 0x0) mmap$auto(0x4, 0x400008, 0x5f, 0x9b72, r0, 0xbd) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000084) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) setfsuid$auto(0xee00) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 29.236519639s ago: executing program 2 (id=1370): mmap$auto(0x0, 0x20009, 0xe2, 0x2eb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) setns(0xc9, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0xd) socket(0xa, 0x5, 0x84) setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0x0) open(0x0, 0x0, 0x57e) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) arch_prctl$auto_ARCH_GET_XCOMP_PERM(0x1022, 0x0) mmap$auto(0x4, 0x400008, 0x5f, 0x9b72, r0, 0xbd) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000084) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) setfsuid$auto(0xee00) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 24.626328708s ago: executing program 2 (id=1374): mmap$auto(0x0, 0x20009, 0xe2, 0x2eb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) setns(0xc9, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0xd) socket(0xa, 0x5, 0x84) setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0x0) open(0x0, 0x0, 0x57e) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) arch_prctl$auto_ARCH_GET_XCOMP_PERM(0x1022, 0x0) mmap$auto(0x4, 0x400008, 0x5f, 0x9b72, r0, 0xbd) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000084) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) setfsuid$auto(0xee00) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 21.750463082s ago: executing program 1 (id=1378): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40000000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000200), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0xfd8) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) ioctl$auto_MON_IOCQ_RING_SIZE(r2, 0x9205, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/conf/ipvlan0/drop_gratuitous_arp\x00', 0x2783, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x5, 0x8d) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) semtimedop$auto(0x4, &(0x7f0000000000)={0x4, 0x76f6, 0x7fff}, 0xf7, &(0x7f0000000180)={0xffffffffffffff01, 0x3}) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) utime$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)={0xb87, 0x7}) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) 21.315979949s ago: executing program 2 (id=1379): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000500)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a63c8fa7f7d5152d4831f60eade8e3d8a508f6178de4e7e975de72c549dbc7876cb5") lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x80000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/tty5\x00', 0x78000, 0x0) ioctl$auto_TIOCMGET2(r1, 0x5415, &(0x7f0000002d00)) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) getsockopt$auto_SO_TXREHASH(r0, 0x5, 0x4a, &(0x7f0000000100)='.!![[&-#\'*T\x00', &(0x7f0000000040)=0x3) mmap$auto(0x5, 0x0, 0xe3, 0x11, 0x2, 0x7ffd) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'gretap0\x00'}) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES8=0x0], 0x30}, 0x1, 0x0, 0x0, 0x88d5}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/pci/drivers/ci_hdrc_pci/new_id\x00', 0x101242, 0x0) unshare$auto(0x40000080) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000580)=@test={0xffffffffffffffff, 0x8, 0x9, 0xffff, 0x10000, 0xfffffffbfffffffd, 0x6, 0x4, 0x35c6, 0x2, 0x109, 0x5, 0x5, 0x7, 0x7}, 0xffffffff) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) r2 = setfsgid$auto(0xee01) setresgid$auto(r2, 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x1002, 0x1, 0x5, 0x0, r2, 0x0, 0xfa9a, 0xfffffffffffffff9, 0x7ffffffffffffffe, 0x4, 0x3, 0x7fffffffffff7ffb, 0x0, 0x4007, 0x4, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) shmget$auto(0x0, 0x7b, 0xfd) madvise$auto(0x108000, 0x2, 0xa) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5404, 0x0) 19.188295116s ago: executing program 1 (id=1382): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x18, 0xc, 0xe3, 0x4000000002, 0x8}, 0x6f4) r1 = socket(0xa, 0x2, 0xffffffd9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x1, 0x0) getsockopt$auto(r1, 0x29, 0xcf, 0x0, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) writev$auto(r3, &(0x7f00000003c0)={&(0x7f0000000000), 0x2}, 0x3e4) r4 = socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) r5 = gettid() accept$auto(0x3, 0x0, 0x0) r6 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/state\x00', 0xa8201, 0x0) lseek$auto(r6, 0x9, 0x0) kill$auto(r5, 0x11) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r4, 0x0, 0x1) sendmsg$auto_NFC_CMD_DISABLE_SE(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="000600bd8408cf63b582c12767f1b49a9700fcdbdf251200000004040200d90330f38d4f3b35450dcfaa03b9f76003baec863b72f9a5cf5a630b35e73b6bf176b4dab6"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x22}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x7}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x5}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0xfffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc001}, 0x20000011) sysfs$auto(0x2, 0x3b, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) 18.97482093s ago: executing program 2 (id=1383): readv$auto(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)="d0c2ad1d606ce0d6cb6501d5825fd7ce4ae8c60722d5159113179d8b256feed10d72132a0ab78988c152fec362ef13ca50ab07286fd2256da56f5eff6840b1d8b023f1885b5ee8c0e35e94acdde28f00e672e152abc98e37e7bdfc195a767a747b61d71c3b79b36839519e83edb6dc468ae8db18de7cb28ce0fb7181b3b6b894d055cacb8e20050fb76b5c0d51039be28d3f4dd898e49bc20988997f34a7a05dd9", 0xe0}, 0x2) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x6) mmap$auto(0x40000000000, 0x5, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffd) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x529003, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x800, 0x9) r1 = socket(0xf, 0x3, 0x2) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(0xffffffffffffffff, r1, 0x0, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x103041, 0x0) write$auto(r2, &(0x7f0000000240)='0\x00\xa6\xcc?\x91Qu\x9dI\xda\x1b\xa8\x94\x9c\x8a\xe2\x00\x00OM\xb6\xa3\x00\x00\n\x1c!o\x9e\xb0\xadT\xfbR\xa1Y\x94\x9b\x86\xc3\xdcf\t\x9f}V[8\x04\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\r\xe3z#\xe5\x1c*\xed`\xed\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98j\xe3}\x10\xab\x04_\xcdd\x17\xe4\xcbA\xa5[\b\xb8T\x02tcfD\x91\na\xca>%\xf0\x1c\x14\xc6P\xa4\xfb:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0]V\x11\xcb\xdd\x81\xbe\xdeL~\xa2(\x1d\xa5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb\x00\x00\x00\x00\x00\x00\x00\x00v\x92f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) ioctl$auto_RNDCLEARPOOL(r1, 0x5206, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000340), 0x381240, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/virtio/drivers/virtio_snd/bind\x00', 0x48c002, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r2, 0x802064b6, r2) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 15.932548151s ago: executing program 1 (id=1386): pread64$auto(0xffffffffffffffff, 0x0, 0x4, 0x3a) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) r1 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci5/force_suspend\x00', 0x410000, 0x0) bind$auto(r1, 0x0, 0x6) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x101402, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x36303, 0x0) writev$auto(r2, &(0x7f0000001240)={&(0x7f0000001140), 0x9}, 0x7) r3 = socket(0x10, 0x2, 0x4) bind$auto(r3, 0x0, 0xe) bind$auto(r3, 0x0, 0x65) r4 = eventfd$auto(0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) bpf$auto(0x9c, &(0x7f0000000480)=@bpf_attr_5={@target_fd=r4, r4, 0x3, 0xb6, r4, @relative_fd=r4, 0x81}, 0x18) setgroups$auto(0xc00000000, 0xfffffffffffffffc) mmap$auto(0x0, 0x104020009, 0xffffffffffffff98, 0xeb2, 0x401, 0x8000) madvise$auto(0x0, 0x3, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1018}, 0x1, 0x0, 0x0, 0xefb7e034ab6a1498}, 0x24000084) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r5, 0xda6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) 15.424189939s ago: executing program 4 (id=1387): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(r0, r1, 0xffffffff) r4 = socketcall$auto(0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x2}) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x4) setfsuid$auto(0xee00) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20020009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x86000, 0x0) 15.146850946s ago: executing program 2 (id=1388): mmap$auto(0x0, 0x20009, 0xe2, 0x2eb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) setns(0xc9, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0xd) socket(0xa, 0x5, 0x84) setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0x0) open(0x0, 0x0, 0x57e) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) arch_prctl$auto_ARCH_GET_XCOMP_PERM(0x1022, 0x0) mmap$auto(0x4, 0x400008, 0x5f, 0x9b72, r0, 0xbd) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000084) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) setfsuid$auto(0xee00) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 13.461356787s ago: executing program 5 (id=1389): r0 = socket(0x23, 0x2, 0x42000) getsockopt$auto(r0, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000000000)="9438d5a8820f7d4ec2899023a4e5e74d500b8f173957fbfd54964907947cfba345b9753b7cc1db0d4ac7a3bdb932403d71239b474acfecba8135172a301db812cc9c47f8da2bd0e1fe26afb0eb3932fc51f1a87280", 0xd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) ioctl$auto(r2, 0x4b44, 0x1) setresgid$auto(0x0, 0x800000a0, 0x0) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) setresuid$auto(0x2, 0x7, 0x8080) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x0, 0x32, 0xfff) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xef9b) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3ffffe, 0x7, 0x11, 0xdd, 0x0) r5 = socket(0xa, 0x1, 0xff) readv$auto(r5, &(0x7f00000000c0)={&(0x7f0000000040)="5eb85ff9f26a90f14ea7d9b07ada0b6180dc59d5794e3edd7a6e7e8f9ae91cf4aa11f084e243d283826da13fda05f20a71da25fac743bab6ae0b2cb1cc266f742f9a1eaf6cf84b6e26827f7c7bc5f54b327880cf97a460ad61e2422c02bc18", 0x9}, 0x1f23916f) open(0x0, 0x22240, 0x174) lsetxattr$auto(&(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x474e, 0x3) sysfs$auto(0x2, 0x3b, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x11, 0x65, 0x0, 0x8) 11.656057665s ago: executing program 1 (id=1390): mmap$auto(0x0, 0x20009, 0xe2, 0x2eb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) setns(0xc9, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0xd) socket(0xa, 0x5, 0x84) setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0x0) open(0x0, 0x0, 0x57e) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) arch_prctl$auto_ARCH_GET_XCOMP_PERM(0x1022, 0x0) mmap$auto(0x4, 0x400008, 0x5f, 0x9b72, r0, 0xbd) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000084) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) setfsuid$auto(0xee00) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 11.316934922s ago: executing program 4 (id=1391): r0 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/mounts\x00', 0x180, 0x0) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, r0, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) getsockopt$auto_SO_SNDTIMEO_OLD(r1, 0xffff0000, 0x15, &(0x7f0000000080)='*\x00', &(0x7f0000000100)) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x94, 0xf3, 0xb0}}) 11.056375307s ago: executing program 5 (id=1392): mmap$auto(0x0, 0x20009, 0xe2, 0x2eb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) setns(0xc9, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0xd) socket(0xa, 0x5, 0x84) setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0x0) open(0x0, 0x0, 0x57e) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) arch_prctl$auto_ARCH_GET_XCOMP_PERM(0x1022, 0x0) mmap$auto(0x4, 0x400008, 0x5f, 0x9b72, r0, 0xbd) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000084) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x28, 0x1, 0x0) setfsuid$auto(0xee00) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 10.668919834s ago: executing program 4 (id=1393): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x129800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'bond_slave_1\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000038c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) getcwd$auto(&(0x7f0000000380)='&\x00', 0x7f) brk$auto(0x7fffffffafff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET2(r2, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f00000000c0)={0x1c, r3, 0x301, 0x70bd28, 0x25dfdbff, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x2) r6 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mouse0\x00', 0x14d1c2, 0x0) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)=@bpf_attr_0={0x5, 0x0, 0x7, 0x5, 0x1, r1, 0x4, "33c5decc96eb12188023d9edbd3dddbd", r5, r1, 0x6, 0x5, 0x9, 0x4, r6, r1}, 0x9) fcntl$auto(r1, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x103000, 0x101) r7 = socket(0x2, 0x3, 0xa) r8 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r7) sendmsg$auto_NFC_CMD_SE_IO(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r9, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x8880) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r9, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x4}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x40011) r10 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) landlock_create_ruleset$auto(0x0, 0x0, 0x2) read$auto_proc_iter_file_ops_compat_inode(r10, &(0x7f0000000280)=""/250, 0xfa) openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x105000, 0x40, 0x30}, 0x18) write$auto_kmsg_fops_printk(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) 9.607769945s ago: executing program 4 (id=1394): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="13fd2b"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x82, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x89f0, 0x24) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) fanotify_init$auto(0x5, 0x0) mmap$auto(0x5, 0x3fffff, 0x8, 0x11, r1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setfsuid$auto(0xee01) setfsuid$auto(0x0) r3 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x0) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee00, 0xfff, 0xc, 0x40, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x7ff, 0x3ff, 0x1, 0xa, 0xf9eb, 0x4, 0x3, 0x7, @inferred=0xffffffffffffffff, @inferred=r3}) setfsuid$auto(0xee00) setfsuid$auto(0xee01) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_CQM(r5, &(0x7f0000002f80)={0x0, 0xfffffef1, &(0x7f0000002f40)={&(0x7f0000000280)={0x90, r4, 0x100, 0x70bd21, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_6GHZ_CAPABILITY={0x79, 0x125, "33ed87064d96eb41fa85eb30a1c9d4b205e66b596b6bd64992de7fe639cb4c902ad7b9b96c540db00d4a7694f819deff145c0bf0ed305ff70ac36a9f26492665fb0f260095d0330bbbc0a5e3af043b19100f5a02cc5e4de7b38896d7f9a760d173cda4e04d4a5b0d922ec975e422a0ceabe4744620"}]}, 0x90}, 0x1, 0x0, 0x0, 0x4c815}, 0x24015884) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x44800) 4.635835617s ago: executing program 1 (id=1395): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x1, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4891c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x8, 0x45bd, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x33) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x400c891) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x17, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x200000007) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) recvmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000180)="5eee240e9ab90aaceb7ec1c8feaf9360020e13c7ce6d0e15f3bd3995435eb534e31b8f4fd7a440423beb15a5a1b78873aae58d7134525a833036063fd530673d1e4631e093a61ee122f9a78da8a078c4ebd0b6f01669eab6c7ed99c9b9b83b65", 0x800000, &(0x7f0000000380)={&(0x7f00000002c0)="cccecf96691effca4f77c0e01c9344799ebfd1c5ddf8ee6bd429fa4a70cdefcb67c461f6030e85303ebcae57372802821b0770daabd305cd232bfb28c0ca02c18ab9c8b478e387aac69a4160d933b2e429390a991525a5c1ce37a6c16b0f1630f2bddc92d0a113241de6eda54e3e00b27c3ef3e2f35793be41b352f3f0b3dd351968ac98046e3088ab438f29562bbd41b49662aec22aa6bfd08175a1eb85d4577ce5922527efe0", 0x8}, 0x10000, &(0x7f00000003c0), 0x0, 0xffffffff}, 0x10001}, 0x9, 0x8, &(0x7f0000000440)={0x663, 0x8}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x48800, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_ratio\x00', 0x202, 0x0) sendfile$auto(r3, 0x3, 0x0, 0x7ffff000) sendfile$auto(r1, r1, 0x0, 0x8) r4 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) preadv$auto(r4, &(0x7f0000000480)={0x0, 0x2}, 0x2, 0x2, 0x3) mmap$auto(0x633, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 4.545687757s ago: executing program 5 (id=1396): semget$auto(0x0, 0x2e4a, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x11, 0x5, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) unshare$auto(0x40000080) ioctl$auto_SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000000c0)="9d18b65ee37d8a7f2310d28895bcd9d926b74335b34b737d3da7a8a8709654affef3d531df7cc54bd3af4e023a93730ed40d4c13465ce6ad2e93539a435c55993c3a0195d00b19ecceb772944f01b0a0a14ebd4595140cca85c67501db6651683d66") r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) memfd_create$auto(&(0x7f0000000080)='/dev/tty0\x00', 0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) mlock$auto(0x7c88, 0x7fff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bus/usb/007/001\x00', 0x48302, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) sendmmsg$auto(r3, &(0x7f00000005c0)={{&(0x7f0000000140)="b70a3f0bb7391bf03643ce9a2d87efb5ca914a0da4979de1a0b81c097a95cf650bb40bab0262dd963463e5bc109eb3ff8cc09c183c8db9d2b612f45f", 0x7, &(0x7f0000000300)={&(0x7f00000002c0)="18f7f20879261be39853f225de44f8dc7e7173b019887a17e5ce506a6790", 0xb19}, 0x4, &(0x7f0000000500)="0df5175624a5f27c1908ea38a7e31347253aaf397c6ee9ecdc1f7a64e18b589bfd280c3a532d9e8a9b792b414723bfc8cf547d5b84c3ba6c0d5af09d4795075818a624badc8f7f07d70a3b1c52a199f7a628154ca082d609a5d117a0256801189cbb765cdd7850b3769d6f30b8b3fd407ecd9279ba55852ab7c6ce241687e44a70", 0x6}, 0x2}, 0xe0000, 0x9) write$auto(r3, &(0x7f0000000200)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0\xbe5\xbe\xa8\x89\xc2\xc2o', 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) 4.420847959s ago: executing program 4 (id=1397): semget$auto(0x0, 0x2e4a, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x11, 0x5, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) unshare$auto(0x40000080) ioctl$auto_SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000000c0)="9d18b65ee37d8a7f2310d28895bcd9d926b74335b34b737d3da7a8a8709654affef3d531df7cc54bd3af4e023a93730ed40d4c13465ce6ad2e93539a435c55993c3a0195d00b19ecceb772944f01b0a0a14ebd4595140cca85c67501db6651683d66") r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) memfd_create$auto(&(0x7f0000000080)='/dev/tty0\x00', 0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) mlock$auto(0x7c88, 0x7fff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/bus/usb/007/001\x00', 0x48302, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) sendmmsg$auto(r3, &(0x7f00000005c0)={{&(0x7f0000000140)="b70a3f0bb7391bf03643ce9a2d87efb5ca914a0da4979de1a0b81c097a95cf650bb40bab0262dd963463e5bc109eb3ff8cc09c183c8db9d2b612f45f", 0x7, &(0x7f0000000300)={&(0x7f00000002c0)="18f7f20879261be39853f225de44f8dc7e7173b019887a17e5ce506a6790", 0xb19}, 0x4, &(0x7f0000000500)="0df5175624a5f27c1908ea38a7e31347253aaf397c6ee9ecdc1f7a64e18b589bfd280c3a532d9e8a9b792b414723bfc8cf547d5b84c3ba6c0d5af09d4795075818a624badc8f7f07d70a3b1c52a199f7a628154ca082d609a5d117a0256801189cbb765cdd7850b3769d6f30b8b3fd407ecd9279ba55852a", 0x6}, 0x2}, 0xe0000, 0x9) write$auto(r3, &(0x7f0000000200)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0\xbe5\xbe\xa8\x89\xc2\xc2o', 0x5) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) 1.149560084s ago: executing program 5 (id=1398): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd10406fcf6eb9bb66bf56ed75") prctl$auto(0x2f, 0x4, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x3) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek$auto(r0, 0xfffffffffffffffd, 0xfffffffd) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000c00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xfffffffa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x40010) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x6}, 0x1) socket(0x8, 0x2, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4aa) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) write$auto(r4, &(0x7f0000000080)='/dev/audio\x00', 0x80000000) open(&(0x7f0000000200)='./file0\x00', 0x22241, 0x147) execve$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_NOTIFY_RADAR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="004faf41a954dca3f5f940e8a7f7516c76274f83608a5cc7de6cb10e08da9d314928eccd00a5000500"/57], 0x38}, 0x1, 0x0, 0x0, 0x4040855}, 0x40) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x420001, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd15/mq/0/nr_reserved_tags\x00', 0x2280, 0x0) read$auto(r6, 0x0, 0x20) 882.093782ms ago: executing program 1 (id=1399): mmap$auto(0x0, 0x20009, 0xe2, 0x2eb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) setns(0xc9, 0x0) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0xd) socket(0xa, 0x5, 0x84) setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0x0) open(0x0, 0x0, 0x57e) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bus/usb/010/001\x00', 0x80d00, 0x0) arch_prctl$auto_ARCH_GET_XCOMP_PERM(0x1022, 0x0) mmap$auto(0x4, 0x400008, 0x5f, 0x9b72, r0, 0xbd) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000084) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x28, 0x1, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) setfsuid$auto(0xee00) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 610.201687ms ago: executing program 4 (id=1400): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000040)=0x3f80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) r1 = syz_clone3(&(0x7f0000000440)={0x40101000, &(0x7f00000004c0), &(0x7f00000001c0), &(0x7f0000000400), {0x43}, &(0x7f0000000280)=""/147, 0x93, &(0x7f0000000340)=""/158, &(0x7f0000000640)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x5}, 0x58) fcntl$auto(r0, 0xb, r1) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x6, 0x0) unshare$auto(0x60000080) unshare$auto(0x40000080) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x8fea, 0x400000000018) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) madvise$auto(0x6, 0x4, 0x3) rseq$auto(0x0, 0x20, 0x0, 0xe) msync$auto(0x110c230000, 0x200001, 0x6) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x4e940, 0x0) mq_timedsend$auto(r2, &(0x7f0000000000)='(.,\r^[\x00', 0x5, 0x2b3, &(0x7f0000000040)={0x1, 0x1}) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000180), 0x44101, 0x0) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r3, &(0x7f0000000440)="110000000500"/16, 0x10) sysfs$auto(0x2, 0x3b, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400000000005) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 0s ago: executing program 5 (id=1401): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x26, 0x80000, 0x403) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/dummy0\x00', 0x109800, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/class/firmware/timeout\x00', 0x1a1942, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\xa5$sj\x9a%Y\xbd\xb8 )\x03\xcb\x12\xfa\b\x1c\tk', 0x5b33734d) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0x11, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x6, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x27, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db", @ANYRES32=r3, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) setfsuid$auto(0xee01) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) kernel console output (not intermixed with test programs): /0x90 [ 372.830677][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.830706][T10447] RIP: 0033:0x7fda0555e84e [ 372.830728][T10447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 372.830755][T10447] RSP: 002b:00007fda06479fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.830781][T10447] RAX: ffffffffffffffda RBX: 00007fda0647a6c0 RCX: 00007fda0555e84e [ 372.830799][T10447] RDX: 000000000000000f RSI: 00007fda0647a0a0 RDI: 0000000000000005 [ 372.830815][T10447] RBP: 00007fda0647a090 R08: 0000000000000000 R09: 0000000000000000 [ 372.830832][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.830848][T10447] R13: 00007fda058263f8 R14: 00007fda05826360 R15: 00007ffe18d74908 [ 372.830883][T10447] [ 373.709291][T10461] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 373.816532][T10208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.027853][T10208] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.326995][ T9686] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.334316][ T9686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.435493][ T9686] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.442785][ T9686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.907633][T10506] net_ratelimit: 106 callbacks suppressed [ 375.907653][T10506] netlink: zone id is out of range [ 375.933844][T10506] netlink: zone id is out of range [ 375.954359][T10506] netlink: zone id is out of range [ 375.968621][T10506] netlink: zone id is out of range [ 375.979300][T10506] netlink: zone id is out of range [ 375.991922][T10506] netlink: zone id is out of range [ 376.005320][T10506] netlink: zone id is out of range [ 376.038360][T10506] netlink: zone id is out of range [ 376.063980][T10506] netlink: zone id is out of range [ 376.069583][T10506] netlink: zone id is out of range [ 377.692753][T10208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.138358][T10208] veth0_vlan: entered promiscuous mode [ 378.184189][T10208] veth1_vlan: entered promiscuous mode [ 378.243863][T10208] veth0_macvtap: entered promiscuous mode [ 378.264067][T10208] veth1_macvtap: entered promiscuous mode [ 378.293391][T10208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.320063][T10208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.381319][ T9839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.447493][ T9839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.475171][ T9839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.485706][ T9839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.665074][ T9839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.687603][ T9839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.704557][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.711957][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.827267][ T9839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.845427][ T9839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.682131][T10588] usbip-vudc usbip-vudc.0: gadget not bound [ 379.717989][T10590] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 383.855934][ T9717] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.072822][ T30] audit: type=1807 audit(4294967308.615:116): UNKNOWN= res=0 [ 384.106778][ T30] audit: type=1802 audit(4294967308.625:117): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.639" res=0 errno=0 [ 384.214696][ T9717] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.477648][ T9717] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.562901][T10635] ima: policy update failed [ 384.576135][ T30] audit: type=1802 audit(4294967309.116:118): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.639" res=0 errno=0 [ 384.718062][ T9798] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 384.733265][ T9798] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 384.745033][ T9798] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 384.764591][ T9798] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 384.775269][ T9798] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.806906][ T9717] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.300495][ T9717] bridge_slave_1: left allmulticast mode [ 385.322509][ T9717] bridge_slave_1: left promiscuous mode [ 385.345261][ T9717] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.909763][ T9717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.926115][ T9717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.942120][ T9717] bond0 (unregistering): Released all slaves [ 386.856671][ T9708] Bluetooth: hci4: command tx timeout [ 387.142402][ T9717] hsr_slave_0: left promiscuous mode [ 387.149119][ T9717] hsr_slave_1: left promiscuous mode [ 387.155095][ T9717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.164224][ T9717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.174381][ T9717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.182865][ T9717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.197976][ T9717] veth1_macvtap: left promiscuous mode [ 387.205381][ T9717] veth0_macvtap: left promiscuous mode [ 387.213228][ T9717] veth1_vlan: left promiscuous mode [ 387.218652][ T9717] veth0_vlan: left promiscuous mode [ 387.453362][ T9717] team0 (unregistering): Port device team_slave_1 removed [ 387.470478][ T9717] team0 (unregistering): Port device team_slave_0 removed [ 387.764895][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 388.489361][T10721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.648'. [ 388.720133][T10721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.648'. [ 388.798824][T10655] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.827057][T10655] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.854001][T10655] bridge_slave_0: entered allmulticast mode [ 388.875059][T10655] bridge_slave_0: entered promiscuous mode [ 388.944003][ T9708] Bluetooth: hci4: command tx timeout [ 389.440281][T10655] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.447664][T10655] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.456038][T10655] bridge_slave_1: entered allmulticast mode [ 389.463830][T10655] bridge_slave_1: entered promiscuous mode [ 389.519663][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 389.845707][T10655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.870277][T10655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.903272][T10743] zswap: compressor not available [ 390.056584][T10655] team0: Port device team_slave_0 added [ 390.075172][T10655] team0: Port device team_slave_1 added [ 390.365433][T10655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.375512][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.412373][T10655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.573049][T10655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.611470][T10655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.649193][T10655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.015200][ T9708] Bluetooth: hci4: command tx timeout [ 391.189387][ T30] audit: type=1807 audit(4294967315.739:119): UNKNOWN= res=0 [ 391.209402][ T30] audit: type=1802 audit(4294967315.739:120): pid=10775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.652" res=0 errno=0 [ 391.615564][T10760] ima: policy update failed [ 391.625037][ T30] audit: type=1802 audit(4294967316.179:121): pid=10760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.652" res=0 errno=0 [ 391.681697][T10655] hsr_slave_0: entered promiscuous mode [ 391.718351][T10655] hsr_slave_1: entered promiscuous mode [ 391.751681][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 393.093201][ T9708] Bluetooth: hci4: command tx timeout [ 393.515034][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 393.983194][T10821] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 397.831914][T10655] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 397.868929][T10655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.268729][T10655] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 398.280173][T10655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 398.345493][T10655] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 398.368472][T10655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 398.379841][T10655] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 398.395394][T10655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.870312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 398.904308][T10655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.003832][T10655] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.065237][ T9665] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.072428][ T9665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.155826][ T9665] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.163005][ T9665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.597189][ T30] audit: type=1807 audit(4294967325.144:122): UNKNOWN= res=0 [ 400.625232][ T30] audit: type=1802 audit(4294967325.144:123): pid=10933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.665" res=0 errno=0 [ 400.904266][T10925] ima: policy update failed [ 400.918345][T10655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.941038][ T30] audit: type=1802 audit(4294967325.464:124): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.665" res=0 errno=0 [ 401.528506][T10655] veth0_vlan: entered promiscuous mode [ 401.759183][T10655] veth1_vlan: entered promiscuous mode [ 401.890107][T10655] veth0_macvtap: entered promiscuous mode [ 401.929131][T10655] veth1_macvtap: entered promiscuous mode [ 401.975235][T10655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.047458][T10655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.632949][ T9665] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.270606][ T9684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.307776][ T9680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.316627][ T9684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.336498][ T9680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.344912][ T9684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.397001][ T9681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.409732][ T9681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.254605][ T30] audit: type=1807 audit(4294967328.805:125): UNKNOWN= res=0 [ 404.282147][ T30] audit: type=1802 audit(4294967328.825:126): pid=11034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.669" res=0 errno=0 [ 404.852096][T11011] ima: policy update failed [ 404.872276][ T30] audit: type=1802 audit(4294967329.426:127): pid=11011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.669" res=0 errno=0 [ 405.221477][T11037] synth uevent: /module/null_blk: unknown uevent action string [ 406.525240][T11057] random: crng reseeded on system resumption [ 406.935158][T11050] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 408.692603][T11084] FAULT_INJECTION: forcing a failure. [ 408.692603][T11084] name failslab, interval 1, probability 0, space 0, times 0 [ 408.708895][T11084] CPU: 1 UID: 0 PID: 11084 Comm: syz.0.682 Not tainted syzkaller #0 PREEMPT(full) [ 408.708940][T11084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.708961][T11084] Call Trace: [ 408.708983][T11084] [ 408.708994][T11084] dump_stack_lvl+0x100/0x190 [ 408.709039][T11084] should_fail_ex.cold+0x5/0xa [ 408.709075][T11084] should_failslab+0xc2/0x120 [ 408.709122][T11084] __kmalloc_noprof+0xfc/0x820 [ 408.709160][T11084] ? __register_sysctl_table+0xbc8/0x1650 [ 408.709196][T11084] ? __register_sysctl_table+0xbc8/0x1650 [ 408.709230][T11084] ? __register_sysctl_table+0xbe4/0x1650 [ 408.709273][T11084] __register_sysctl_table+0xbe4/0x1650 [ 408.709317][T11084] ? __pfx___register_sysctl_table+0x10/0x10 [ 408.709352][T11084] ? is_module_address+0x69/0xf0 [ 408.709386][T11084] ? register_net_sysctl_sz+0x222/0x430 [ 408.709442][T11084] __devinet_sysctl_register+0x1b9/0x360 [ 408.709487][T11084] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 408.709534][T11084] ? __asan_memcpy+0x3c/0x60 [ 408.709569][T11084] devinet_init_net+0x303/0x8d0 [ 408.709608][T11084] ? __pfx_devinet_init_net+0x10/0x10 [ 408.709645][T11084] ops_init+0x1e2/0x5f0 [ 408.709693][T11084] setup_net+0x118/0x3a0 [ 408.709738][T11084] ? __pfx_setup_net+0x10/0x10 [ 408.709783][T11084] ? mutex_init_lockdep+0xf1/0x120 [ 408.709819][T11084] copy_net_ns+0x46f/0x7c0 [ 408.709850][T11084] create_new_namespaces+0x3ea/0xac0 [ 408.709890][T11084] unshare_nsproxy_namespaces+0xf2/0x220 [ 408.709926][T11084] ksys_unshare+0x438/0xab0 [ 408.709978][T11084] ? __pfx_ksys_unshare+0x10/0x10 [ 408.710032][T11084] __x64_sys_unshare+0x31/0x40 [ 408.710085][T11084] do_syscall_64+0x115/0x840 [ 408.710123][T11084] ? clear_bhb_loop+0x40/0x90 [ 408.710158][T11084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.710193][T11084] RIP: 0033:0x7f5ed3b9e019 [ 408.710220][T11084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.710268][T11084] RSP: 002b:00007f5ed4b43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 408.710297][T11084] RAX: ffffffffffffffda RBX: 00007f5ed3e25fa0 RCX: 00007f5ed3b9e019 [ 408.710332][T11084] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 408.710350][T11084] RBP: 00007f5ed3c3500c R08: 0000000000000000 R09: 0000000000000000 [ 408.710367][T11084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.710385][T11084] R13: 00007f5ed3e26038 R14: 00007f5ed3e25fa0 R15: 00007ffda57e63f8 [ 408.710423][T11084] [ 408.710467][T11084] sysctl could not get directory: /net/ipv4/conf/all -12 [ 410.520329][ T30] audit: type=1807 audit(4294967335.079:128): UNKNOWN= res=0 [ 410.546469][ T30] audit: type=1802 audit(4294967335.079:129): pid=11103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.683" res=0 errno=0 [ 410.988421][T11099] ima: policy update failed [ 410.994640][ T30] audit: type=1802 audit(4294967335.559:130): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.683" res=0 errno=0 [ 412.294012][ T30] audit: type=1807 audit(4294967336.849:131): UNKNOWN= res=0 [ 412.317785][ T30] audit: type=1802 audit(4294967336.849:132): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.687" res=0 errno=0 [ 412.698035][T11141] sd 0:0:1:0: PR command failed: 1026 [ 412.712481][T11141] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 412.729881][T11141] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 413.361313][T11126] ima: policy update failed [ 413.395864][ T30] audit: type=1802 audit(4294967337.960:133): pid=11126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.687" res=0 errno=0 [ 417.000063][ T30] audit: type=1807 audit(4294967341.562:134): UNKNOWN= res=0 [ 417.026010][ T30] audit: type=1802 audit(4294967341.562:135): pid=11200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.696" res=0 errno=0 [ 417.398736][T11189] ima: policy update failed [ 417.425779][ T30] audit: type=1802 audit(4294967341.992:136): pid=11189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.696" res=0 errno=0 [ 417.816229][T11208] FAULT_INJECTION: forcing a failure. [ 417.816229][T11208] name failslab, interval 1, probability 0, space 0, times 0 [ 417.840771][T11208] CPU: 1 UID: 0 PID: 11208 Comm: syz.2.701 Not tainted syzkaller #0 PREEMPT(full) [ 417.840818][T11208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 417.840839][T11208] Call Trace: [ 417.840850][T11208] [ 417.840863][T11208] dump_stack_lvl+0x100/0x190 [ 417.840913][T11208] should_fail_ex.cold+0x5/0xa [ 417.840942][T11208] should_failslab+0xc2/0x120 [ 417.840977][T11208] __kmalloc_noprof+0xfc/0x820 [ 417.841006][T11208] ? __register_sysctl_table+0xbc8/0x1650 [ 417.841032][T11208] ? __register_sysctl_table+0xbc8/0x1650 [ 417.841058][T11208] ? __register_sysctl_table+0xbe4/0x1650 [ 417.841089][T11208] __register_sysctl_table+0xbe4/0x1650 [ 417.841122][T11208] ? __pfx___register_sysctl_table+0x10/0x10 [ 417.841148][T11208] ? is_module_address+0x69/0xf0 [ 417.841179][T11208] ? register_net_sysctl_sz+0x222/0x430 [ 417.841225][T11208] __devinet_sysctl_register+0x1b9/0x360 [ 417.841263][T11208] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 417.841300][T11208] ? __asan_memcpy+0x3c/0x60 [ 417.841330][T11208] devinet_init_net+0x303/0x8d0 [ 417.841363][T11208] ? __pfx_devinet_init_net+0x10/0x10 [ 417.841395][T11208] ops_init+0x1e2/0x5f0 [ 417.841447][T11208] setup_net+0x118/0x3a0 [ 417.841484][T11208] ? __pfx_setup_net+0x10/0x10 [ 417.841531][T11208] ? mutex_init_lockdep+0xf1/0x120 [ 417.841558][T11208] copy_net_ns+0x46f/0x7c0 [ 417.841581][T11208] create_new_namespaces+0x3ea/0xac0 [ 417.841610][T11208] unshare_nsproxy_namespaces+0xf2/0x220 [ 417.841637][T11208] ksys_unshare+0x438/0xab0 [ 417.841669][T11208] ? __pfx_ksys_unshare+0x10/0x10 [ 417.841708][T11208] __x64_sys_unshare+0x31/0x40 [ 417.841737][T11208] do_syscall_64+0x115/0x840 [ 417.841766][T11208] ? clear_bhb_loop+0x40/0x90 [ 417.841793][T11208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.841816][T11208] RIP: 0033:0x7fa89bd9e019 [ 417.841834][T11208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.841856][T11208] RSP: 002b:00007fa89cbbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 417.841877][T11208] RAX: ffffffffffffffda RBX: 00007fa89c025fa0 RCX: 00007fa89bd9e019 [ 417.841892][T11208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 417.841905][T11208] RBP: 00007fa89be3500c R08: 0000000000000000 R09: 0000000000000000 [ 417.841919][T11208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.841931][T11208] R13: 00007fa89c026038 R14: 00007fa89c025fa0 R15: 00007ffddaa1de48 [ 417.841959][T11208] [ 418.252455][T11208] sysctl could not get directory: /net/ipv4/conf -12 [ 418.968549][ T30] audit: type=1807 audit(4294967343.523:137): UNKNOWN= res=0 [ 418.993746][ T30] audit: type=1802 audit(4294967343.543:138): pid=11225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.709" res=0 errno=0 [ 419.499857][T11211] ima: policy update failed [ 419.514687][ T30] audit: type=1802 audit(4294967344.073:139): pid=11211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.709" res=0 errno=0 [ 423.273720][T11285] random: crng reseeded on system resumption [ 423.334862][ T30] audit: type=1807 audit(4294967347.895:140): UNKNOWN= res=0 [ 423.356496][ T30] audit: type=1802 audit(4294967347.895:141): pid=11274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.711" res=0 errno=0 [ 424.051319][T11272] ima: policy update failed [ 424.059858][ T30] audit: type=1802 audit(4294967348.625:142): pid=11272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.711" res=0 errno=0 [ 424.724720][T11290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 424.731368][T11290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 424.738629][T11290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 424.773990][T11290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 424.812507][T11290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 424.823535][T11290] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 424.877530][T11290] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 424.973498][T11290] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 425.060820][T11290] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 425.104879][T11290] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 426.155909][T11301] FAULT_INJECTION: forcing a failure. [ 426.155909][T11301] name failslab, interval 1, probability 0, space 0, times 0 [ 426.196120][T11301] CPU: 0 UID: 0 PID: 11301 Comm: syz.0.724 Not tainted syzkaller #0 PREEMPT(full) [ 426.196167][T11301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 426.196193][T11301] Call Trace: [ 426.196204][T11301] [ 426.196217][T11301] dump_stack_lvl+0x100/0x190 [ 426.196262][T11301] should_fail_ex.cold+0x5/0xa [ 426.196300][T11301] should_failslab+0xc2/0x120 [ 426.196349][T11301] kmem_cache_alloc_noprof+0x91/0x6a0 [ 426.196392][T11301] ? trace_kmem_cache_alloc+0xdd/0x100 [ 426.196442][T11301] ? security_file_alloc+0x34/0x2c0 [ 426.196498][T11301] security_file_alloc+0x34/0x2c0 [ 426.196548][T11301] init_file+0x95/0x480 [ 426.196589][T11301] alloc_empty_file_noaccount+0x45/0xd0 [ 426.196637][T11301] alloc_file_pseudo_noaccount+0x183/0x290 [ 426.196687][T11301] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 426.196740][T11301] ? iput+0x3a/0x40 [ 426.196783][T11301] bdev_file_open_by_dev+0x13a/0x210 [ 426.196851][T11301] disk_scan_partitions+0x1ef/0x320 [ 426.196894][T11301] blkdev_common_ioctl+0x12a1/0x2b80 [ 426.196936][T11301] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 426.196982][T11301] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 426.197035][T11301] ? do_vfs_ioctl+0x226/0x13e0 [ 426.197084][T11301] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 426.197143][T11301] ? find_held_lock+0x2b/0x80 [ 426.197185][T11301] ? __fget_files+0x215/0x3d0 [ 426.197221][T11301] blkdev_ioctl+0x43b/0x6f0 [ 426.197256][T11301] ? __pfx_blkdev_ioctl+0x10/0x10 [ 426.197296][T11301] ? __pfx_blkdev_ioctl+0x10/0x10 [ 426.197333][T11301] __x64_sys_ioctl+0x18e/0x210 [ 426.197385][T11301] do_syscall_64+0x115/0x840 [ 426.197430][T11301] ? clear_bhb_loop+0x40/0x90 [ 426.197472][T11301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.197508][T11301] RIP: 0033:0x7f5ed3b9e019 [ 426.197535][T11301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.197568][T11301] RSP: 002b:00007f5ed4b22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.197606][T11301] RAX: ffffffffffffffda RBX: 00007f5ed3e26090 RCX: 00007f5ed3b9e019 [ 426.197628][T11301] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000007 [ 426.197648][T11301] RBP: 00007f5ed3c3500c R08: 0000000000000000 R09: 0000000000000000 [ 426.197669][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.197689][T11301] R13: 00007f5ed3e26128 R14: 00007f5ed3e26090 R15: 00007ffda57e63f8 [ 426.197732][T11301] [ 426.678547][ T9708] Bluetooth: hci1: command 0x0419 tx timeout [ 426.757563][ T9798] Bluetooth: hci2: command 0x0c1a tx timeout [ 426.836450][ T9798] Bluetooth: hci3: command 0x0c1a tx timeout [ 426.988359][ T30] audit: type=1807 audit(4294967351.557:143): UNKNOWN= res=0 [ 426.996368][ T9798] Bluetooth: hci4: command 0x0c1a tx timeout [ 427.027973][ T30] audit: type=1802 audit(4294967351.557:144): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.718" res=0 errno=0 [ 427.267493][T11305] ima: policy update failed [ 427.280623][ T30] audit: type=1802 audit(4294967351.847:145): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.718" res=0 errno=0 [ 428.835518][ T9798] Bluetooth: hci2: command 0x0c1a tx timeout [ 428.915591][ T9798] Bluetooth: hci3: command 0x0c1a tx timeout [ 429.073693][ T30] audit: type=1807 audit(4294967353.638:146): UNKNOWN= res=0 [ 429.075321][ T9798] Bluetooth: hci4: command 0x0c1a tx timeout [ 429.098495][ T30] audit: type=1802 audit(4294967353.638:147): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.722" res=0 errno=0 [ 429.721323][T11334] ima: policy update failed [ 429.731155][ T30] audit: type=1802 audit(4294967354.298:148): pid=11334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.722" res=0 errno=0 [ 430.914365][ T9798] Bluetooth: hci2: command 0x0c1a tx timeout [ 430.998002][ T9798] Bluetooth: hci3: command 0x0c1a tx timeout [ 431.155358][ T9798] Bluetooth: hci4: command 0x0c1a tx timeout [ 434.398053][T11412] zswap: compressor not available [ 436.448237][ T30] audit: type=1807 audit(4294967361.021:149): UNKNOWN= res=0 [ 436.476829][ T30] audit: type=1802 audit(4294967361.032:150): pid=11451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.741" res=0 errno=0 [ 437.279832][T11438] ima: policy update failed [ 437.302398][ T30] audit: type=1802 audit(4294967361.882:151): pid=11438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.741" res=0 errno=0 [ 439.960484][ T30] audit: type=1807 audit(4294967364.523:152): UNKNOWN= res=0 [ 439.971993][ T30] audit: type=1802 audit(4294967364.523:153): pid=11503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.751" res=0 errno=0 [ 440.112103][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.122853][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.216675][T11496] ima: policy update failed [ 440.227621][ T30] audit: type=1802 audit(4294967364.803:154): pid=11496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.751" res=0 errno=0 [ 440.482405][T11523] WARNING! power/level is deprecated; use power/control instead [ 442.365721][ T30] audit: type=1807 audit(4294967366.934:155): UNKNOWN= res=0 [ 442.389438][ T30] audit: type=1802 audit(4294967366.934:156): pid=11556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.758" res=0 errno=0 [ 442.890449][T11536] ima: policy update failed [ 442.896651][ T30] audit: type=1802 audit(4294967367.465:157): pid=11536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.758" res=0 errno=0 [ 443.827287][ T30] audit: type=1807 audit(4294967368.395:158): UNKNOWN= res=0 [ 443.851575][ T30] audit: type=1802 audit(4294967368.395:159): pid=11567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.763" res=0 errno=0 [ 444.587066][T11564] ima: policy update failed [ 444.604131][ T30] audit: type=1802 audit(4294967369.176:160): pid=11564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.763" res=0 errno=0 [ 444.752986][T11572] netlink: 20 bytes leftover after parsing attributes in process `syz.0.764'. [ 445.925487][ T30] audit: type=1807 audit(4294967370.496:161): UNKNOWN= res=0 [ 445.943528][ T30] audit: type=1802 audit(4294967370.516:162): pid=11600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.770" res=0 errno=0 [ 446.375728][T11596] ima: policy update failed [ 446.385296][ T30] audit: type=1802 audit(4294967370.956:163): pid=11596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.770" res=0 errno=0 [ 446.916487][T11606] FAULT_INJECTION: forcing a failure. [ 446.916487][T11606] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 446.999058][T11606] CPU: 0 UID: 0 PID: 11606 Comm: syz.3.771 Not tainted syzkaller #0 PREEMPT(full) [ 446.999103][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.999125][T11606] Call Trace: [ 446.999136][T11606] [ 446.999149][T11606] dump_stack_lvl+0x100/0x190 [ 446.999193][T11606] should_fail_ex.cold+0x5/0xa [ 446.999224][T11606] ? prepare_alloc_pages+0x16d/0x5f0 [ 446.999277][T11606] should_fail_alloc_page+0xeb/0x140 [ 446.999329][T11606] prepare_alloc_pages+0x1f0/0x5f0 [ 446.999387][T11606] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 446.999434][T11606] ? stack_trace_save+0x8e/0xc0 [ 446.999491][T11606] ? __pfx_stack_trace_save+0x10/0x10 [ 446.999540][T11606] ? stack_depot_save_flags+0x27/0x9d0 [ 446.999603][T11606] ? lock_acquire+0x1b9/0x370 [ 446.999658][T11606] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 446.999706][T11606] ? __lock_acquire+0x49f/0x1a40 [ 446.999762][T11606] ? try_charge_memcg+0x365/0xdf0 [ 446.999826][T11606] ? __lock_acquire+0x49f/0x1a40 [ 446.999879][T11606] ? rcu_read_unlock+0x17/0x60 [ 446.999935][T11606] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 447.000000][T11606] ? policy_nodemask+0xed/0x4f0 [ 447.000048][T11606] alloc_pages_mpol+0x1fb/0x540 [ 447.000096][T11606] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 447.000162][T11606] ? find_held_lock+0x2b/0x80 [ 447.000203][T11606] ? __anon_vma_prepare+0x2db/0x5e0 [ 447.000236][T11606] ? __anon_vma_prepare+0x2db/0x5e0 [ 447.000305][T11606] folio_alloc_mpol_noprof+0x36/0x260 [ 447.000365][T11606] vma_alloc_folio_noprof+0xed/0x1d0 [ 447.000427][T11606] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 447.000491][T11606] ? __anon_vma_prepare+0x2e2/0x5e0 [ 447.000538][T11606] do_anonymous_page+0xb2b/0x2080 [ 447.000577][T11606] ? __pfx_pgd_none+0x10/0x10 [ 447.000622][T11606] __handle_mm_fault+0x1d2c/0x2a00 [ 447.000665][T11606] ? mt_find+0x45e/0x8e0 [ 447.000720][T11606] ? __pfx___handle_mm_fault+0x10/0x10 [ 447.000753][T11606] ? __pfx_mt_find+0x10/0x10 [ 447.000827][T11606] ? find_vma+0xbf/0x140 [ 447.000871][T11606] ? __pfx_find_vma+0x10/0x10 [ 447.000923][T11606] handle_mm_fault+0x37b/0xa30 [ 447.000968][T11606] do_user_addr_fault+0x74c/0x12f0 [ 447.001031][T11606] exc_page_fault+0x6f/0xd0 [ 447.001077][T11606] asm_exc_page_fault+0x26/0x30 [ 447.001112][T11606] RIP: 0010:__put_user_4+0xd/0x30 [ 447.001158][T11606] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 447.001191][T11606] RSP: 0018:ffffc90005277e08 EFLAGS: 00050246 [ 447.001220][T11606] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 0000000000000000 [ 447.001240][T11606] RDX: 0000000000080000 RSI: ffffffff825c16f1 RDI: ffffffff8c400a80 [ 447.001263][T11606] RBP: 1ffff92000a4efc5 R08: 0000000000000001 R09: 00000000000001c9 [ 447.001284][T11606] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000006 [ 447.001304][T11606] R13: 0000000000000007 R14: 0000000000000002 R15: dffffc0000000000 [ 447.001338][T11606] ? __might_fault+0x111/0x140 [ 447.001380][T11606] __sys_socketpair+0x120/0x5b0 [ 447.001426][T11606] ? __pfx___sys_socketpair+0x10/0x10 [ 447.001466][T11606] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 447.001537][T11606] ? xfd_validate_state+0x129/0x190 [ 447.001588][T11606] __x64_sys_socketpair+0x96/0x100 [ 447.001629][T11606] ? lockdep_hardirqs_on+0x78/0x100 [ 447.001674][T11606] do_syscall_64+0x115/0x840 [ 447.001718][T11606] ? clear_bhb_loop+0x40/0x90 [ 447.001759][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.001794][T11606] RIP: 0033:0x7fda0559e019 [ 447.001821][T11606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.001853][T11606] RSP: 002b:00007fda064fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 447.001883][T11606] RAX: ffffffffffffffda RBX: 00007fda05825fa0 RCX: 00007fda0559e019 [ 447.001905][T11606] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 447.001926][T11606] RBP: 00007fda0563500c R08: 0000000000000000 R09: 0000000000000000 [ 447.001946][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.001966][T11606] R13: 00007fda05826038 R14: 00007fda05825fa0 R15: 00007ffe18d74908 [ 447.002010][T11606] [ 448.287425][T11608] FAULT_INJECTION: forcing a failure. [ 448.287425][T11608] name failslab, interval 1, probability 0, space 0, times 0 [ 448.309890][T11608] CPU: 0 UID: 0 PID: 11608 Comm: syz.0.772 Not tainted syzkaller #0 PREEMPT(full) [ 448.309934][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.309954][T11608] Call Trace: [ 448.309963][T11608] [ 448.309974][T11608] dump_stack_lvl+0x100/0x190 [ 448.310072][T11608] should_fail_ex.cold+0x5/0xa [ 448.310139][T11608] should_failslab+0xc2/0x120 [ 448.310299][T11608] kmem_cache_alloc_noprof+0x91/0x6a0 [ 448.310627][T11608] ? ptlock_alloc+0x1f/0x70 [ 448.310656][T11608] ptlock_alloc+0x1f/0x70 [ 448.310680][T11608] pte_alloc_one+0x82/0x3d0 [ 448.310720][T11608] __pte_alloc+0x6d/0x3e0 [ 448.310753][T11608] ? __pfx___pte_alloc+0x10/0x10 [ 448.310788][T11608] ? walk_to_pmd+0x302/0x4c0 [ 448.310828][T11608] insert_pages+0x549/0x5e0 [ 448.310875][T11608] ? __pfx_insert_pages+0x10/0x10 [ 448.310912][T11608] ? __pfx_down_read_trylock+0x10/0x10 [ 448.310947][T11608] vm_insert_pages+0x138/0x440 [ 448.310989][T11608] io_uring_mmap+0x4bc/0x50b [ 448.311031][T11608] ? __pfx_io_uring_mmap+0x10/0x10 [ 448.311078][T11608] ? lockdep_init_map_type+0x5c/0x250 [ 448.311105][T11608] __mmap_region+0x13c7/0x2db0 [ 448.311137][T11608] ? __pfx___mmap_region+0x10/0x10 [ 448.311161][T11608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.311194][T11608] ? __lock_acquire+0x49f/0x1a40 [ 448.311243][T11608] ? do_raw_spin_lock+0x128/0x260 [ 448.311275][T11608] ? __lock_acquire+0x49f/0x1a40 [ 448.311464][T11608] ? __lock_acquire+0x49f/0x1a40 [ 448.311578][T11608] mmap_region+0x527/0x620 [ 448.311621][T11608] ? __pfx_mmap_region+0x10/0x10 [ 448.311667][T11608] ? bpf_lsm_capable+0x9/0x10 [ 448.311703][T11608] ? security_capable+0x80/0x260 [ 448.311743][T11608] do_mmap+0xc63/0x12f0 [ 448.311795][T11608] ? __pfx_do_mmap+0x10/0x10 [ 448.311839][T11608] ? __pfx_down_write_killable+0x10/0x10 [ 448.311892][T11608] vm_mmap_pgoff+0x29e/0x470 [ 448.311943][T11608] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 448.311985][T11608] ? __fget_files+0x215/0x3d0 [ 448.312020][T11608] ? __fget_files+0x21f/0x3d0 [ 448.312056][T11608] ksys_mmap_pgoff+0x3cb/0x610 [ 448.312102][T11608] ? __x64_sys_futex+0x358/0x4d0 [ 448.312137][T11608] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 448.312178][T11608] ? fput+0x79/0x100 [ 448.312211][T11608] ? __pfx___x64_sys_futex+0x10/0x10 [ 448.312245][T11608] ? ksys_write+0x1ac/0x250 [ 448.312274][T11608] ? __pfx_ksys_write+0x10/0x10 [ 448.312307][T11608] __x64_sys_mmap+0x125/0x190 [ 448.312349][T11608] do_syscall_64+0x115/0x840 [ 448.312400][T11608] ? clear_bhb_loop+0x40/0x90 [ 448.312438][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.312471][T11608] RIP: 0033:0x7f5ed3b9e019 [ 448.312497][T11608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.312528][T11608] RSP: 002b:00007f5ed4b43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 448.312576][T11608] RAX: ffffffffffffffda RBX: 00007f5ed3e25fa0 RCX: 00007f5ed3b9e019 [ 448.312598][T11608] RDX: 0000000000000ffb RSI: 0000000000000009 RDI: 0000000000000000 [ 448.312618][T11608] RBP: 00007f5ed3c3500c R08: 0000000000000003 R09: 0000000000000000 [ 448.312639][T11608] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000000 [ 448.312660][T11608] R13: 00007f5ed3e26038 R14: 00007f5ed3e25fa0 R15: 00007ffda57e63f8 [ 448.312701][T11608] [ 450.220459][ T30] audit: type=1807 audit(4294967374.798:164): UNKNOWN= res=0 [ 450.247971][ T30] audit: type=1802 audit(4294967374.798:165): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.780" res=0 errno=0 [ 450.526595][T11645] ima: policy update failed [ 450.538450][ T30] audit: type=1802 audit(4294967375.109:166): pid=11645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.780" res=0 errno=0 [ 451.360958][ T30] audit: type=1807 audit(4294967375.939:167): UNKNOWN= res=0 [ 451.379627][ T30] audit: type=1802 audit(4294967375.949:168): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.783" res=0 errno=0 [ 451.953148][T11669] ima: policy update failed [ 451.962565][ T30] audit: type=1802 audit(4294967376.539:169): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.783" res=0 errno=0 [ 454.050188][ T30] audit: type=1807 audit(4294967378.630:170): UNKNOWN= res=0 [ 454.073261][ T30] audit: type=1802 audit(4294967378.630:171): pid=11720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.791" res=0 errno=0 [ 454.528594][T11718] ima: policy update failed [ 454.536684][ T30] audit: type=1802 audit(4294967379.121:172): pid=11718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.791" res=0 errno=0 [ 455.316233][T11742] sysfs_service_op_store: Client not running :-5: [ 457.342875][T11773] FAULT_INJECTION: forcing a failure. [ 457.342875][T11773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.390658][T11773] CPU: 1 UID: 0 PID: 11773 Comm: syz.2.799 Not tainted syzkaller #0 PREEMPT(full) [ 457.390701][T11773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 457.390721][T11773] Call Trace: [ 457.390731][T11773] [ 457.390743][T11773] dump_stack_lvl+0x100/0x190 [ 457.390790][T11773] should_fail_ex.cold+0x5/0xa [ 457.390825][T11773] _copy_to_user+0x32/0xd0 [ 457.390881][T11773] simple_read_from_buffer+0xcb/0x170 [ 457.390940][T11773] proc_fail_nth_read+0x1af/0x230 [ 457.390986][T11773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.391035][T11773] ? rw_verify_area+0xce/0x6d0 [ 457.391092][T11773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 457.391136][T11773] vfs_read+0x1e4/0xb40 [ 457.391166][T11773] ? __pfx_vfs_read+0x10/0x10 [ 457.391190][T11773] ? __fget_files+0x215/0x3d0 [ 457.391224][T11773] ? __fget_files+0x21f/0x3d0 [ 457.391258][T11773] ksys_read+0x12a/0x250 [ 457.391284][T11773] ? __pfx_ksys_read+0x10/0x10 [ 457.391319][T11773] do_syscall_64+0x115/0x840 [ 457.391356][T11773] ? clear_bhb_loop+0x40/0x90 [ 457.391403][T11773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.391430][T11773] RIP: 0033:0x7fa89bd5e84e [ 457.391451][T11773] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 457.391489][T11773] RSP: 002b:00007fa899fb3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 457.391512][T11773] RAX: ffffffffffffffda RBX: 00007fa899fb46c0 RCX: 00007fa89bd5e84e [ 457.391529][T11773] RDX: 000000000000000f RSI: 00007fa899fb40a0 RDI: 0000000000000006 [ 457.391544][T11773] RBP: 00007fa899fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 457.391560][T11773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.391575][T11773] R13: 00007fa89c0263f8 R14: 00007fa89c026360 R15: 00007ffddaa1de48 [ 457.391607][T11773] [ 459.088108][ T30] audit: type=1807 audit(4294967383.663:173): UNKNOWN= res=0 [ 459.105043][ T30] audit: type=1802 audit(4294967383.663:174): pid=11793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.803" res=0 errno=0 [ 459.526037][T11791] ima: policy update failed [ 459.536730][ T30] audit: type=1802 audit(4294967384.113:175): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.803" res=0 errno=0 [ 463.582489][ T30] audit: type=1807 audit(4294967388.165:176): UNKNOWN= res=0 [ 463.613158][ T30] audit: type=1802 audit(4294967388.165:177): pid=11877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.815" res=0 errno=0 [ 464.003078][T11863] ima: policy update failed [ 464.018533][ T30] audit: type=1802 audit(4294967388.595:178): pid=11863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.815" res=0 errno=0 [ 466.935329][ T30] audit: type=1807 audit(4294967391.517:179): UNKNOWN= res=0 [ 466.969908][ T30] audit: type=1802 audit(4294967391.537:180): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.827" res=0 errno=0 [ 467.278355][T11925] ima: policy update failed [ 467.285240][ T30] audit: type=1802 audit(4294967391.867:181): pid=11925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.827" res=0 errno=0 [ 470.791959][ T30] audit: type=1807 audit(4294967395.379:182): UNKNOWN= res=0 [ 470.818266][ T30] audit: type=1802 audit(4294967395.389:183): pid=12008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.839" res=0 errno=0 [ 471.107577][T11998] ima: policy update failed [ 471.129628][ T30] audit: type=1802 audit(4294967395.719:184): pid=11998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.839" res=0 errno=0 [ 471.616633][T12017] FAULT_INJECTION: forcing a failure. [ 471.616633][T12017] name failslab, interval 1, probability 0, space 0, times 0 [ 471.674251][T12017] CPU: 0 UID: 0 PID: 12017 Comm: syz.2.840 Not tainted syzkaller #0 PREEMPT(full) [ 471.674294][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.674322][T12017] Call Trace: [ 471.674361][T12017] [ 471.674373][T12017] dump_stack_lvl+0x100/0x190 [ 471.674508][T12017] should_fail_ex.cold+0x5/0xa [ 471.674566][T12017] should_failslab+0xc2/0x120 [ 471.674642][T12017] kmem_cache_alloc_noprof+0x91/0x6a0 [ 471.674692][T12017] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 471.674817][T12017] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 471.674866][T12017] idr_get_free+0x52e/0xa00 [ 471.674930][T12017] idr_alloc_u32+0x1ac/0x320 [ 471.675018][T12017] ? __pfx_idr_alloc_u32+0x10/0x10 [ 471.675082][T12017] idr_alloc_cyclic+0x10b/0x230 [ 471.675134][T12017] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 471.675182][T12017] ? __pfx_down_write+0x10/0x10 [ 471.675271][T12017] ? rcu_is_watching+0x12/0xc0 [ 471.675339][T12017] afs_lookup_cell+0x101a/0x1940 [ 471.675446][T12017] ? __pfx_afs_lookup_cell+0x10/0x10 [ 471.675485][T12017] ? __pfx___might_resched+0x10/0x10 [ 471.675632][T12017] afs_cell_init+0x17d/0x380 [ 471.675673][T12017] afs_proc_rootcell_write+0x1c9/0x280 [ 471.675751][T12017] proc_simple_write+0x10e/0x1a0 [ 471.675823][T12017] ? __pfx_proc_simple_write+0x10/0x10 [ 471.675858][T12017] proc_reg_write+0x240/0x330 [ 471.675909][T12017] vfs_write+0x2aa/0x1050 [ 471.675949][T12017] ? __pfx_proc_reg_write+0x10/0x10 [ 471.675979][T12017] ? __pfx_vfs_write+0x10/0x10 [ 471.676004][T12017] ? __fget_files+0x215/0x3d0 [ 471.676042][T12017] ? __fget_files+0x21f/0x3d0 [ 471.676078][T12017] ksys_write+0x12a/0x250 [ 471.676104][T12017] ? __pfx_ksys_write+0x10/0x10 [ 471.676140][T12017] do_syscall_64+0x115/0x840 [ 471.676213][T12017] ? clear_bhb_loop+0x40/0x90 [ 471.676257][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.676285][T12017] RIP: 0033:0x7fa89bd9e019 [ 471.676308][T12017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.676335][T12017] RSP: 002b:00007fa899fb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.676394][T12017] RAX: ffffffffffffffda RBX: 00007fa89c026360 RCX: 00007fa89bd9e019 [ 471.676413][T12017] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000007 [ 471.676431][T12017] RBP: 00007fa899fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 471.676448][T12017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.676464][T12017] R13: 00007fa89c0263f8 R14: 00007fa89c026360 R15: 00007ffddaa1de48 [ 471.676500][T12017] [ 472.284314][T12024] sysfs_service_op_store: Client not running :-5: [ 475.061772][ T30] audit: type=1807 audit(4294967399.651:185): UNKNOWN= res=0 [ 475.088422][ T30] audit: type=1802 audit(4294967399.661:186): pid=12067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.851" res=0 errno=0 [ 475.406507][T12063] ima: policy update failed [ 475.438929][ T30] audit: type=1802 audit(4294967400.021:187): pid=12063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.851" res=0 errno=0 [ 475.780004][T12085] FAULT_INJECTION: forcing a failure. [ 475.780004][T12085] name failslab, interval 1, probability 0, space 0, times 0 [ 475.824421][T12085] CPU: 0 UID: 0 PID: 12085 Comm: syz.1.854 Not tainted syzkaller #0 PREEMPT(full) [ 475.824456][T12085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.824471][T12085] Call Trace: [ 475.824479][T12085] [ 475.824488][T12085] dump_stack_lvl+0x100/0x190 [ 475.824520][T12085] should_fail_ex.cold+0x5/0xa [ 475.824547][T12085] should_failslab+0xc2/0x120 [ 475.824583][T12085] __kmalloc_cache_noprof+0x91/0x6c0 [ 475.824611][T12085] ? do_eventfd+0x67/0x2b0 [ 475.824745][T12085] do_eventfd+0x67/0x2b0 [ 475.824785][T12085] __x64_sys_eventfd+0x32/0x50 [ 475.824825][T12085] do_syscall_64+0x115/0x840 [ 475.824859][T12085] ? clear_bhb_loop+0x40/0x90 [ 475.824890][T12085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.824916][T12085] RIP: 0033:0x7fcde0f9e019 [ 475.824937][T12085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.824961][T12085] RSP: 002b:00007fcde1da8028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 475.824984][T12085] RAX: ffffffffffffffda RBX: 00007fcde1225fa0 RCX: 00007fcde0f9e019 [ 475.825000][T12085] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 475.825015][T12085] RBP: 00007fcde103500c R08: 0000000000000000 R09: 0000000000000000 [ 475.825030][T12085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.825044][T12085] R13: 00007fcde1226038 R14: 00007fcde1225fa0 R15: 00007ffcdc6cbe08 [ 475.825076][T12085] [ 478.620580][T12117] sysfs_service_op_store: Client not running :-5: [ 479.776966][ T30] audit: type=1807 audit(4294967404.363:188): UNKNOWN= res=0 [ 479.799893][ T30] audit: type=1802 audit(4294967404.363:189): pid=12146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.863" res=0 errno=0 [ 480.297717][T12142] ima: policy update failed [ 480.371773][ T30] audit: type=1802 audit(4294967404.963:190): pid=12142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.863" res=0 errno=0 [ 484.109566][ T30] audit: type=1807 audit(4294967408.695:191): UNKNOWN= res=0 [ 484.145297][ T30] audit: type=1802 audit(4294967408.695:192): pid=12213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.873" res=0 errno=0 [ 484.541915][T12192] ima: policy update failed [ 484.556777][ T30] audit: type=1802 audit(4294967409.146:193): pid=12192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.873" res=0 errno=0 [ 488.038308][ T30] audit: type=1807 audit(4294967412.637:194): UNKNOWN= res=0 [ 488.061375][ T30] audit: type=1802 audit(4294967412.637:195): pid=12269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.884" res=0 errno=0 [ 488.460280][T12267] ima: policy update failed [ 488.469937][ T30] audit: type=1802 audit(4294967413.068:196): pid=12267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.884" res=0 errno=0 [ 492.593716][T12358] FAULT_INJECTION: forcing a failure. [ 492.593716][T12358] name failslab, interval 1, probability 0, space 0, times 0 [ 492.611977][T12358] CPU: 0 UID: 0 PID: 12358 Comm: syz.0.900 Not tainted syzkaller #0 PREEMPT(full) [ 492.612018][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.612037][T12358] Call Trace: [ 492.612047][T12358] [ 492.612060][T12358] dump_stack_lvl+0x100/0x190 [ 492.612102][T12358] should_fail_ex.cold+0x5/0xa [ 492.612137][T12358] should_failslab+0xc2/0x120 [ 492.612183][T12358] __kmalloc_noprof+0xfc/0x820 [ 492.612222][T12358] ? __pfx_inc_ucount+0x10/0x10 [ 492.612307][T12358] ? net_alloc_generic+0x1e/0x70 [ 492.612493][T12358] net_alloc_generic+0x1e/0x70 [ 492.612543][T12358] copy_net_ns+0xc6/0x7c0 [ 492.612570][T12358] ? copy_cgroup_ns+0x71/0x970 [ 492.612621][T12358] create_new_namespaces+0x3ea/0xac0 [ 492.612667][T12358] unshare_nsproxy_namespaces+0xf2/0x220 [ 492.612708][T12358] ksys_unshare+0x438/0xab0 [ 492.612760][T12358] ? __pfx_ksys_unshare+0x10/0x10 [ 492.612804][T12358] ? ksys_write+0x1ac/0x250 [ 492.612848][T12358] __x64_sys_unshare+0x31/0x40 [ 492.612891][T12358] do_syscall_64+0x115/0x840 [ 492.612935][T12358] ? clear_bhb_loop+0x40/0x90 [ 492.612977][T12358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.613011][T12358] RIP: 0033:0x7f5ed3b9e019 [ 492.613037][T12358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.613070][T12358] RSP: 002b:00007f5ed4b43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 492.613102][T12358] RAX: ffffffffffffffda RBX: 00007f5ed3e25fa0 RCX: 00007f5ed3b9e019 [ 492.613124][T12358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 492.613143][T12358] RBP: 00007f5ed4b43090 R08: 0000000000000000 R09: 0000000000000000 [ 492.613166][T12358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.613185][T12358] R13: 00007f5ed3e26038 R14: 00007f5ed3e25fa0 R15: 00007ffda57e63f8 [ 492.613224][T12358] [ 493.940853][T12374] sysfs_service_op_store: Client not running :-5: [ 497.380437][T12467] sysfs_service_op_store: Client not running :-5: [ 499.090962][T12489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.925'. [ 500.106237][ T30] audit: type=1807 audit(4294967424.703:197): UNKNOWN= res=0 [ 500.118687][ T30] audit: type=1802 audit(4294967424.703:198): pid=12502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.927" res=0 errno=0 [ 500.768207][T12498] ima: policy update failed [ 500.785678][ T30] audit: type=1802 audit(4294967425.384:199): pid=12498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.927" res=0 errno=0 [ 501.528526][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.536537][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.539369][T12574] netlink: 'syz.1.938': attribute type 4 has an invalid length. [ 504.558399][T12575] netlink: 28 bytes leftover after parsing attributes in process `syz.3.937'. [ 505.764437][ T30] audit: type=1807 audit(4294967430.366:200): UNKNOWN= res=0 [ 505.775966][ T30] audit: type=1802 audit(4294967430.366:201): pid=12592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.941" res=0 errno=0 [ 506.120182][T12589] ima: policy update failed [ 506.125352][ T30] audit: type=1802 audit(4294967430.726:202): pid=12589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.941" res=0 errno=0 [ 510.082562][ T30] audit: type=1807 audit(4294967434.688:203): UNKNOWN= res=0 [ 510.112820][ T30] audit: type=1802 audit(4294967434.708:204): pid=12658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.951" res=0 errno=0 [ 510.485700][T12650] ima: policy update failed [ 510.507654][ T30] audit: type=1802 audit(4294967435.109:205): pid=12650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.951" res=0 errno=0 [ 511.447002][ T30] audit: type=1807 audit(4294967436.059:206): UNKNOWN= res=0 [ 511.477675][ T30] audit: type=1802 audit(4294967436.059:207): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.953" res=0 errno=0 [ 512.419656][T12675] ima: policy update failed [ 512.439509][ T30] audit: type=1802 audit(4294967437.039:208): pid=12675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.953" res=0 errno=0 [ 514.845206][ T30] audit: type=1807 audit(4294967439.461:209): UNKNOWN= res=0 [ 514.892273][ T30] audit: type=1802 audit(4294967439.471:210): pid=12745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.960" res=0 errno=0 [ 515.136933][T12723] ima: policy update failed [ 515.152350][ T30] audit: type=1802 audit(4294967439.761:211): pid=12723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.960" res=0 errno=0 [ 519.487936][T12785] blktrace: Concurrent blktraces are not allowed on ram10 [ 520.272143][ T30] audit: type=1807 audit(4294967444.883:212): UNKNOWN= res=0 [ 520.289407][ T30] audit: type=1802 audit(4294967444.883:213): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.968" res=0 errno=0 [ 521.185129][T12786] ima: policy update failed [ 521.204015][ T30] audit: type=1802 audit(4294967445.814:214): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.968" res=0 errno=0 [ 523.554933][T12862] FAULT_INJECTION: forcing a failure. [ 523.554933][T12862] name failslab, interval 1, probability 0, space 0, times 0 [ 523.622823][T12862] CPU: 0 UID: 0 PID: 12862 Comm: syz.0.984 Not tainted syzkaller #0 PREEMPT(full) [ 523.622854][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 523.622868][T12862] Call Trace: [ 523.622876][T12862] [ 523.622885][T12862] dump_stack_lvl+0x100/0x190 [ 523.622916][T12862] should_fail_ex.cold+0x5/0xa [ 523.622942][T12862] should_failslab+0xc2/0x120 [ 523.622974][T12862] __kmalloc_noprof+0xfc/0x820 [ 523.623008][T12862] ? copy_splice_read+0x1a3/0xbb0 [ 523.623117][T12862] copy_splice_read+0x1a3/0xbb0 [ 523.623146][T12862] ? __pfx_copy_splice_read+0x10/0x10 [ 523.623172][T12862] ? look_up_lock_class+0x64/0x120 [ 523.623208][T12862] ? lockdep_init_map_type+0x5c/0x250 [ 523.623232][T12862] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 523.623270][T12862] ? __pfx_copy_splice_read+0x10/0x10 [ 523.623296][T12862] do_splice_read+0x285/0x370 [ 523.623323][T12862] splice_direct_to_actor+0x2a1/0xa30 [ 523.623349][T12862] ? __pfx_direct_splice_actor+0x10/0x10 [ 523.623377][T12862] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 523.623410][T12862] do_splice_direct+0x174/0x240 [ 523.623435][T12862] ? __pfx_do_splice_direct+0x10/0x10 [ 523.623460][T12862] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 523.623487][T12862] ? rw_verify_area+0xce/0x6d0 [ 523.623524][T12862] do_sendfile+0xadc/0xe20 [ 523.623564][T12862] ? __pfx_do_sendfile+0x10/0x10 [ 523.623598][T12862] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 523.623631][T12862] ? __fget_files+0x21f/0x3d0 [ 523.623659][T12862] __x64_sys_sendfile64+0x1d8/0x220 [ 523.623684][T12862] ? ksys_write+0x1ac/0x250 [ 523.623705][T12862] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 523.623739][T12862] do_syscall_64+0x115/0x840 [ 523.623769][T12862] ? clear_bhb_loop+0x40/0x90 [ 523.623802][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.623826][T12862] RIP: 0033:0x7f5ed3b9e019 [ 523.623844][T12862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.623866][T12862] RSP: 002b:00007f5ed4b43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 523.623888][T12862] RAX: ffffffffffffffda RBX: 00007f5ed3e25fa0 RCX: 00007f5ed3b9e019 [ 523.623903][T12862] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 523.623916][T12862] RBP: 00007f5ed4b43090 R08: 0000000000000000 R09: 0000000000000000 [ 523.623930][T12862] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 523.623943][T12862] R13: 00007f5ed3e26038 R14: 00007f5ed3e25fa0 R15: 00007ffda57e63f8 [ 523.623972][T12862] [ 524.061480][ T30] audit: type=1807 audit(4294967448.675:215): UNKNOWN= res=0 [ 524.096798][ T30] audit: type=1802 audit(4294967448.685:216): pid=12867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.983" res=0 errno=0 [ 524.374119][T12851] ima: policy update failed [ 524.386395][ T30] audit: type=1802 audit(4294967448.995:217): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.983" res=0 errno=0 [ 527.682766][T12914] nbd: must specify a device to reconfigure [ 528.292252][ T30] audit: type=1807 audit(4294967452.907:218): UNKNOWN= res=0 [ 528.303948][ T30] audit: type=1802 audit(4294967452.917:219): pid=12919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.994" res=0 errno=0 [ 528.354084][ T30] audit: type=1800 audit(4294967452.957:220): pid=12930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.997" name="discovery_nqn" dev="configfs" ino=65135 res=0 errno=0 [ 528.648573][T12940] input: f as /devices/virtual/input/input16 [ 528.710225][T12915] ima: policy update failed [ 528.748564][ T30] audit: type=1802 audit(4294967453.358:221): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.994" res=0 errno=0 [ 529.326412][ T9798] Bluetooth: hci1: unexpected subevent 0x01 length: 3 < 18 [ 529.681145][T12944] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 530.789470][T12970] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 531.755166][T12989] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.988596][ T30] audit: type=1807 audit(4294967456.609:222): UNKNOWN= res=0 [ 532.005969][ T30] audit: type=1802 audit(4294967456.609:223): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1008" res=0 errno=0 [ 532.181692][T12989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.408308][T12993] ima: policy update failed [ 532.421294][ T30] audit: type=1802 audit(4294967457.039:224): pid=12993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1008" res=0 errno=0 [ 532.523148][T12989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.884672][T12989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.006136][T13025] FAULT_INJECTION: forcing a failure. [ 534.006136][T13025] name failslab, interval 1, probability 0, space 0, times 0 [ 534.021967][T13025] CPU: 1 UID: 0 PID: 13025 Comm: syz.1.1012 Not tainted syzkaller #0 PREEMPT(full) [ 534.022007][T13025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.022032][T13025] Call Trace: [ 534.022040][T13025] [ 534.022048][T13025] dump_stack_lvl+0x100/0x190 [ 534.022078][T13025] should_fail_ex.cold+0x5/0xa [ 534.022104][T13025] should_failslab+0xc2/0x120 [ 534.022136][T13025] __kmalloc_noprof+0xfc/0x820 [ 534.022168][T13025] ? copy_splice_read+0x1a3/0xbb0 [ 534.022196][T13025] copy_splice_read+0x1a3/0xbb0 [ 534.022226][T13025] ? __pfx_copy_splice_read+0x10/0x10 [ 534.022271][T13025] ? look_up_lock_class+0x64/0x120 [ 534.022308][T13025] ? lockdep_init_map_type+0x5c/0x250 [ 534.022337][T13025] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 534.022377][T13025] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 534.022429][T13025] do_splice_read+0x2bd/0x370 [ 534.022479][T13025] splice_direct_to_actor+0x2a1/0xa30 [ 534.022517][T13025] ? __pfx_direct_splice_actor+0x10/0x10 [ 534.022558][T13025] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 534.022616][T13025] do_splice_direct+0x174/0x240 [ 534.022651][T13025] ? __pfx_do_splice_direct+0x10/0x10 [ 534.022708][T13025] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 534.022743][T13025] ? rw_verify_area+0xce/0x6d0 [ 534.022780][T13025] do_sendfile+0xadc/0xe20 [ 534.022823][T13025] ? __pfx_do_sendfile+0x10/0x10 [ 534.022871][T13025] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 534.022904][T13025] ? __fget_files+0x21f/0x3d0 [ 534.022932][T13025] __x64_sys_sendfile64+0x1d8/0x220 [ 534.022958][T13025] ? ksys_write+0x1ac/0x250 [ 534.022979][T13025] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 534.023013][T13025] do_syscall_64+0x115/0x840 [ 534.023043][T13025] ? clear_bhb_loop+0x40/0x90 [ 534.023071][T13025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.023094][T13025] RIP: 0033:0x7fcde0f9e019 [ 534.023113][T13025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.023136][T13025] RSP: 002b:00007fcddf1d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 534.023158][T13025] RAX: ffffffffffffffda RBX: 00007fcde1226270 RCX: 00007fcde0f9e019 [ 534.023173][T13025] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 534.023186][T13025] RBP: 00007fcddf1d5090 R08: 0000000000000000 R09: 0000000000000000 [ 534.023199][T13025] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 534.023213][T13025] R13: 00007fcde1226308 R14: 00007fcde1226270 R15: 00007ffcdc6cbe08 [ 534.023242][T13025] [ 535.598960][ T30] audit: type=1807 audit(4294967460.221:225): UNKNOWN= res=0 [ 535.627142][ T30] audit: type=1802 audit(4294967460.221:226): pid=13048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1017" res=0 errno=0 [ 536.127537][T13042] ima: policy update failed [ 536.138772][ T30] audit: type=1802 audit(4294967460.761:227): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1017" res=0 errno=0 [ 538.918384][ T30] audit: type=1807 audit(4294967463.533:228): UNKNOWN= res=0 [ 538.937023][ T30] audit: type=1802 audit(4294967463.543:229): pid=13119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1028" res=0 errno=0 [ 539.358374][T13111] ima: policy update failed [ 539.365084][ T30] audit: type=1802 audit(4294967463.983:230): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1028" res=0 errno=0 [ 542.247261][T13168] zswap: compressor not available [ 546.715506][T13242] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 549.466030][ T30] audit: type=1807 audit(4294967474.088:231): UNKNOWN= res=0 [ 549.513710][ T30] audit: type=1802 audit(4294967474.088:232): pid=13279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1057" res=0 errno=0 [ 549.824485][T13270] ima: policy update failed [ 549.846561][ T30] audit: type=1802 audit(4294967474.458:233): pid=13270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1057" res=0 errno=0 [ 560.285020][ T30] audit: type=1807 audit(4294967484.913:234): UNKNOWN= res=0 [ 560.326648][ T30] audit: type=1802 audit(4294967484.933:235): pid=13470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1083" res=0 errno=0 [ 561.127698][T13453] ima: policy update failed [ 561.141364][ T30] audit: type=1802 audit(4294967485.774:236): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1083" res=0 errno=0 [ 562.930564][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.941593][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.475798][T13600] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 569.987314][ T30] audit: type=1807 audit(4294967494.628:237): UNKNOWN= res=0 [ 570.007076][ T30] audit: type=1802 audit(4294967494.628:238): pid=13603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1105" res=0 errno=0 [ 570.563217][T13597] ima: policy update failed [ 570.591266][ T30] audit: type=1802 audit(4294967495.229:239): pid=13597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1105" res=0 errno=0 [ 570.982600][ T30] audit: type=1800 audit(4294967495.619:240): pid=13619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1116" name="lu_gp_id" dev="configfs" ino=70948 res=0 errno=0 [ 571.552075][T13635] FAULT_INJECTION: forcing a failure. [ 571.552075][T13635] name failslab, interval 1, probability 0, space 0, times 0 [ 571.552122][T13635] CPU: 0 UID: 0 PID: 13635 Comm: syz.1.1111 Not tainted syzkaller #0 PREEMPT(full) [ 571.552159][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.552179][T13635] Call Trace: [ 571.552189][T13635] [ 571.552201][T13635] dump_stack_lvl+0x100/0x190 [ 571.552244][T13635] should_fail_ex.cold+0x5/0xa [ 571.552282][T13635] should_failslab+0xc2/0x120 [ 571.552331][T13635] __kmalloc_noprof+0xfc/0x820 [ 571.552372][T13635] ? rcu_is_watching+0x12/0xc0 [ 571.552414][T13635] ? tomoyo_realpath_from_path+0xb6/0x690 [ 571.552601][T13635] tomoyo_realpath_from_path+0xb6/0x690 [ 571.552664][T13635] tomoyo_check_open_permission+0x2af/0x3c0 [ 571.552737][T13635] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 571.552798][T13635] ? hook_file_open+0x24f/0x8f0 [ 571.552931][T13635] ? path_get+0x61/0x80 [ 571.552975][T13635] tomoyo_file_open+0x6b/0x90 [ 571.553013][T13635] security_file_open+0xb5/0x1e0 [ 571.553115][T13635] do_dentry_open+0x588/0x14d0 [ 571.553162][T13635] vfs_open+0x82/0x3f0 [ 571.553210][T13635] path_openat+0x2873/0x4280 [ 571.553262][T13635] ? __pfx_path_openat+0x10/0x10 [ 571.553309][T13635] do_file_open+0x20e/0x430 [ 571.553347][T13635] ? __pfx_do_file_open+0x10/0x10 [ 571.553414][T13635] ? alloc_fd+0x471/0x7a0 [ 571.553451][T13635] ? do_getname+0x191/0x390 [ 571.553497][T13635] do_sys_openat2+0x10f/0x1e0 [ 571.553543][T13635] ? __pfx_do_sys_openat2+0x10/0x10 [ 571.553590][T13635] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 571.553652][T13635] __x64_sys_openat+0x12d/0x210 [ 571.553698][T13635] ? __pfx___x64_sys_openat+0x10/0x10 [ 571.553761][T13635] do_syscall_64+0x115/0x840 [ 571.553806][T13635] ? clear_bhb_loop+0x40/0x90 [ 571.553847][T13635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.553882][T13635] RIP: 0033:0x7fcde0f9e019 [ 571.553910][T13635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.553943][T13635] RSP: 002b:00007fcde1d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 571.553976][T13635] RAX: ffffffffffffffda RBX: 00007fcde1226090 RCX: 00007fcde0f9e019 [ 571.553998][T13635] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 571.554026][T13635] RBP: 00007fcde103500c R08: 0000000000000000 R09: 0000000000000000 [ 571.554046][T13635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.554066][T13635] R13: 00007fcde1226128 R14: 00007fcde1226090 R15: 00007ffcdc6cbe08 [ 571.554110][T13635] [ 571.575226][T13635] ERROR: Out of memory at tomoyo_realpath_from_path. [ 579.747946][ T30] audit: type=1807 audit(4294967299.142:241): UNKNOWN= res=0 [ 579.812930][ T30] audit: type=1802 audit(4294967299.142:242): pid=13734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1127" res=0 errno=0 [ 580.077082][T13731] ima: policy update failed [ 580.089661][ T30] audit: type=1802 audit(4294967299.482:243): pid=13731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1127" res=0 errno=0 [ 581.199928][ T30] audit: type=1807 audit(4294967300.602:244): UNKNOWN= res=0 [ 581.226638][ T30] audit: type=1802 audit(4294967300.602:245): pid=13755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1130" res=0 errno=0 [ 581.681487][T13763] futex_wake_op: syz.3.1131 tries to shift op by -2048; fix this program [ 582.013194][T13752] ima: policy update failed [ 582.018189][ T30] audit: type=1802 audit(4294967301.413:246): pid=13752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1130" res=0 errno=0 [ 582.573041][ T9708] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 582.593491][ T9708] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 582.605146][ T9708] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 582.620461][ T9708] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 582.631188][ T9708] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 583.791093][ T30] audit: type=1807 audit(4294967303.194:247): UNKNOWN= res=0 [ 583.815094][ T30] audit: type=1802 audit(4294967303.194:248): pid=13787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1135" res=0 errno=0 [ 584.517162][T13778] ima: policy update failed [ 584.538194][ T30] audit: type=1802 audit(4294967303.924:249): pid=13778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1135" res=0 errno=0 [ 584.680423][ T9798] Bluetooth: hci0: command tx timeout [ 585.816052][ T30] audit: type=1807 audit(4294967305.205:250): UNKNOWN= res=0 [ 585.855863][ T30] audit: type=1802 audit(4294967305.205:251): pid=13836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1140" res=0 errno=0 [ 585.940008][T13768] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.950783][T13768] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.959154][T13768] bridge_slave_0: entered allmulticast mode [ 585.968707][T13768] bridge_slave_0: entered promiscuous mode [ 586.092854][T13768] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.100498][T13768] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.107919][T13768] bridge_slave_1: entered allmulticast mode [ 586.118468][T13768] bridge_slave_1: entered promiscuous mode [ 586.521902][T13817] ima: policy update failed [ 586.561286][ T30] audit: type=1802 audit(4294967305.965:252): pid=13817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1140" res=0 errno=0 [ 586.756380][ T9798] Bluetooth: hci0: command tx timeout [ 586.819250][T13768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.885830][T13768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.272623][T13768] team0: Port device team_slave_0 added [ 587.412672][T13768] team0: Port device team_slave_1 added [ 587.610936][T13768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.618905][T13768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.649163][T13768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.738822][T13768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.746354][T13768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.786693][T13768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.022881][ T9684] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.387935][T13768] hsr_slave_0: entered promiscuous mode [ 588.401321][T13768] hsr_slave_1: entered promiscuous mode [ 588.408895][T13768] debugfs: 'hsr0' already exists in 'hsr' [ 588.418886][T13768] Cannot create hsr debugfs directory [ 588.589178][ T9684] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.789041][ T9684] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.836437][ T9798] Bluetooth: hci0: command tx timeout [ 589.090889][ T9684] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.010326][ T9684] bridge_slave_1: left allmulticast mode [ 590.016243][ T9684] bridge_slave_1: left promiscuous mode [ 590.022153][ T9684] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.040791][ T9684] bridge_slave_0: left allmulticast mode [ 590.047089][ T9684] bridge_slave_0: left promiscuous mode [ 590.053297][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.270629][ T9684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 590.292526][ T9684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 590.303757][ T9684] bond0 (unregistering): Released all slaves [ 590.692596][T13768] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 590.733094][T13768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 590.763085][T13768] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 590.816196][T13768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 590.882576][T13768] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 590.914316][ T9798] Bluetooth: hci0: command tx timeout [ 590.961835][T13768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 591.005186][T13768] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 591.038064][T13768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 591.262259][ T30] audit: type=1807 audit(4294967310.667:253): UNKNOWN= res=0 [ 591.292014][ T30] audit: type=1802 audit(4294967310.677:254): pid=13907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1148" res=0 errno=0 [ 591.567570][ T9684] hsr_slave_0: left promiscuous mode [ 591.580698][ T9684] hsr_slave_1: left promiscuous mode [ 591.593604][ T9684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.601666][ T9684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.622140][ T9684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.655942][ T9684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.697755][ T9684] veth1_macvtap: left promiscuous mode [ 591.733304][ T9684] veth0_macvtap: left promiscuous mode [ 591.772352][T13886] ima: policy update failed [ 591.801793][ T30] audit: type=1802 audit(4294967311.198:255): pid=13886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1148" res=0 errno=0 [ 592.376459][ T9684] team0 (unregistering): Port device team_slave_1 removed [ 592.405981][ T9684] team0 (unregistering): Port device team_slave_0 removed [ 592.854696][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 594.181812][T13950] futex_wake_op: syz.3.1154 tries to shift op by -2048; fix this program [ 594.571494][T13768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.121343][T13768] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.209915][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 595.389678][ T30] audit: type=1807 audit(4294967314.779:256): UNKNOWN= res=0 [ 595.408580][ T30] audit: type=1802 audit(4294967314.779:257): pid=13961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1155" res=0 errno=0 [ 595.618318][T12554] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.625574][T12554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.775463][T12554] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.782688][T12554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.955981][T13958] ima: policy update failed [ 595.978456][ T30] audit: type=1802 audit(4294967315.380:258): pid=13958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1155" res=0 errno=0 [ 597.089187][ T30] audit: type=1807 audit(4294967316.490:259): UNKNOWN= res=0 [ 597.113380][ T30] audit: type=1802 audit(4294967316.490:260): pid=13989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1158" res=0 errno=0 [ 597.203570][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 597.436075][T13982] ima: policy update failed [ 597.451412][ T30] audit: type=1802 audit(4294967316.860:261): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1158" res=0 errno=0 [ 598.254981][ T30] audit: type=1807 audit(4294967317.661:262): UNKNOWN= res=0 [ 598.283423][ T30] audit: type=1802 audit(4294967317.661:263): pid=14017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1159" res=0 errno=0 [ 598.935067][T14004] ima: policy update failed [ 598.962790][ T30] audit: type=1802 audit(4294967318.371:264): pid=14004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1159" res=0 errno=0 [ 599.157871][T14042] usbip-vudc usbip-vudc.0: gadget not bound [ 599.275294][T13768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.704738][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 601.024140][T13768] veth0_vlan: entered promiscuous mode [ 601.258668][T13768] veth1_vlan: entered promiscuous mode [ 601.546829][T12553] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.622833][T13768] veth0_macvtap: entered promiscuous mode [ 601.646914][T13768] veth1_macvtap: entered promiscuous mode [ 601.690816][T12553] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.748134][T13768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.802258][T12553] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.824602][T13768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.850748][ T9839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.875424][ T9839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.911793][T12553] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.981984][ T9839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.999437][ T9839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.197024][ T9684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.228637][ T9684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.409170][ T9708] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 602.425883][ T9708] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 602.438958][ T9708] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 602.456577][ T9708] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 602.467353][ T9708] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 602.514372][ T9680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.540812][ T9680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.712692][T12553] bridge_slave_1: left allmulticast mode [ 602.736179][T12553] bridge_slave_1: left promiscuous mode [ 602.761914][T12553] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.833207][T12553] bridge_slave_0: left allmulticast mode [ 602.855315][T12553] bridge_slave_0: left promiscuous mode [ 602.882705][T12553] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.912390][ T30] audit: type=1807 audit(4294967322.323:265): UNKNOWN= res=0 [ 602.930547][ T30] audit: type=1802 audit(4294967322.323:266): pid=14081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1166" res=0 errno=0 [ 603.204199][T14075] ima: policy update failed [ 603.213497][ T30] audit: type=1802 audit(4294967322.623:267): pid=14075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1166" res=0 errno=0 [ 603.253439][T12553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.286195][T12553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.315174][T12553] bond0 (unregistering): Released all slaves [ 604.085682][T12553] hsr_slave_0: left promiscuous mode [ 604.116276][T12553] hsr_slave_1: left promiscuous mode [ 604.137963][T12553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.177721][T12553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.216646][T12553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.259401][T12553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.352624][T12553] veth1_macvtap: left promiscuous mode [ 604.391443][T12553] veth0_macvtap: left promiscuous mode [ 604.413902][T12553] veth1_vlan: left promiscuous mode [ 604.440875][T12553] veth0_vlan: left promiscuous mode [ 604.511169][ T9798] Bluetooth: hci2: command tx timeout [ 604.960841][T12553] team0 (unregistering): Port device team_slave_1 removed [ 604.982193][T12553] team0 (unregistering): Port device team_slave_0 removed [ 605.202536][T14126] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [255] [ 605.297621][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 606.586350][ T9798] Bluetooth: hci2: command tx timeout [ 607.083203][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 607.395211][T14082] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.431443][T14082] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.454850][T14082] bridge_slave_0: entered allmulticast mode [ 607.474887][T14082] bridge_slave_0: entered promiscuous mode [ 607.520567][T14082] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.529719][T14082] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.547532][T14082] bridge_slave_1: entered allmulticast mode [ 607.556462][T14082] bridge_slave_1: entered promiscuous mode [ 607.665879][ T30] audit: type=1807 audit(4294967327.076:268): UNKNOWN= res=0 [ 607.693422][ T30] audit: type=1802 audit(4294967327.076:269): pid=14190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1174" res=0 errno=0 [ 608.002302][T14170] ima: policy update failed [ 608.015389][ T30] audit: type=1802 audit(4294967327.426:270): pid=14170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1174" res=0 errno=0 [ 608.043146][T14082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.071002][T14082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.283315][ T30] audit: type=1807 audit(4294967327.696:271): UNKNOWN= res=0 [ 608.304623][ T30] audit: type=1802 audit(4294967327.716:272): pid=14199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1176" res=0 errno=0 [ 608.584384][T14082] team0: Port device team_slave_0 added [ 608.627905][T14082] team0: Port device team_slave_1 added [ 608.665440][ T9798] Bluetooth: hci2: command tx timeout [ 608.760129][T14082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.790139][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.868366][T14082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.914528][T14082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.943916][T14082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.025162][T14082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.083433][T14184] ima: policy update failed [ 609.099668][ T30] audit: type=1802 audit(4294967328.516:273): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1176" res=0 errno=0 [ 609.269444][T14082] hsr_slave_0: entered promiscuous mode [ 609.302556][T14082] hsr_slave_1: entered promiscuous mode [ 609.702669][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 610.744347][ T9798] Bluetooth: hci2: command tx timeout [ 611.590224][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 613.488440][ T30] audit: type=1807 audit(4294967332.908:274): UNKNOWN= res=0 [ 613.528025][ T30] audit: type=1802 audit(4294967332.908:275): pid=14294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1185" res=0 errno=0 [ 613.840229][T14282] ima: policy update failed [ 613.851646][ T30] audit: type=1802 audit(4294967333.269:276): pid=14282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1185" res=0 errno=0 [ 615.648752][T14082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 615.707826][T14082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 615.717786][T14082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 615.731365][T14082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 615.754407][T14082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 615.777236][T14082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.816018][T14082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 615.839605][T14082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 617.761937][T14082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.833651][T14082] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.848836][T12553] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.856142][T12553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.898794][T12553] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.906118][T12553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.411669][T14082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.727681][T14082] veth0_vlan: entered promiscuous mode [ 621.795186][T14082] veth1_vlan: entered promiscuous mode [ 622.407507][T14082] veth0_macvtap: entered promiscuous mode [ 622.543064][T14082] veth1_macvtap: entered promiscuous mode [ 623.588173][T14082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.071189][T14082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.339773][T12551] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.352083][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.358782][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.477405][T12557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.711096][T12551] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.747958][T12556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.371897][T12554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.397656][T12554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.658543][ T30] audit: type=1807 audit(4294967345.085:277): UNKNOWN= res=0 [ 625.691201][ T30] audit: type=1802 audit(4294967345.095:278): pid=14548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1204" res=0 errno=0 [ 626.115430][T14540] ima: policy update failed [ 626.125183][ T30] audit: type=1802 audit(4294967345.545:279): pid=14540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1204" res=0 errno=0 [ 626.383940][T12553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.397954][T12553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.213028][T14580] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 630.149892][T14600] syz.4.1211 (14600) used obsolete PPPIOCDETACH ioctl [ 634.471164][T14658] FAULT_INJECTION: forcing a failure. [ 634.471164][T14658] name failslab, interval 1, probability 0, space 0, times 0 [ 634.471225][T14658] CPU: 1 UID: 0 PID: 14658 Comm: syz.3.1222 Not tainted syzkaller #0 PREEMPT(full) [ 634.471266][T14658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.471285][T14658] Call Trace: [ 634.471296][T14658] [ 634.471308][T14658] dump_stack_lvl+0x100/0x190 [ 634.471352][T14658] should_fail_ex.cold+0x5/0xa [ 634.471391][T14658] should_failslab+0xc2/0x120 [ 634.471440][T14658] __kmalloc_noprof+0xfc/0x820 [ 634.471501][T14658] ? tomoyo_encode2+0xfb/0x3c0 [ 634.471568][T14658] tomoyo_encode2+0xfb/0x3c0 [ 634.471619][T14658] tomoyo_encode+0x29/0x50 [ 634.471664][T14658] tomoyo_realpath_from_path+0x18c/0x690 [ 634.471722][T14658] tomoyo_path_number_perm+0x23c/0x580 [ 634.471761][T14658] ? tomoyo_path_number_perm+0x22e/0x580 [ 634.471805][T14658] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 634.471903][T14658] ? find_held_lock+0x2b/0x80 [ 634.471944][T14658] ? __fget_files+0x215/0x3d0 [ 634.471972][T14658] ? hook_file_ioctl_common+0x140/0x440 [ 634.472015][T14658] ? __fget_files+0x215/0x3d0 [ 634.472051][T14658] ? __fget_files+0x21f/0x3d0 [ 634.472086][T14658] security_file_ioctl+0xd3/0x230 [ 634.472215][T14658] __x64_sys_ioctl+0xb7/0x210 [ 634.472261][T14658] do_syscall_64+0x115/0x840 [ 634.472301][T14658] ? clear_bhb_loop+0x40/0x90 [ 634.472338][T14658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.472369][T14658] RIP: 0033:0x7fda0559e019 [ 634.472393][T14658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.472422][T14658] RSP: 002b:00007fda064dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.472450][T14658] RAX: ffffffffffffffda RBX: 00007fda05826090 RCX: 00007fda0559e019 [ 634.472469][T14658] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 634.472494][T14658] RBP: 00007fda064dd090 R08: 0000000000000000 R09: 0000000000000000 [ 634.472512][T14658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.472530][T14658] R13: 00007fda05826128 R14: 00007fda05826090 R15: 00007ffe18d74908 [ 634.472568][T14658] [ 634.509616][T14658] ERROR: Out of memory at tomoyo_realpath_from_path. [ 641.188047][T14736] input: jJǸ-9%vJ86 as /devices/virtual/input/input18 [ 642.757689][T12554] bridge_slave_1: left allmulticast mode [ 642.772841][T12554] bridge_slave_1: left promiscuous mode [ 642.796025][T12554] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.819169][T12554] bridge_slave_0: left allmulticast mode [ 642.826845][T12554] bridge_slave_0: left promiscuous mode [ 642.834474][T12554] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.196134][T12554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 643.227687][T12554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 643.247484][T12554] bond0 (unregistering): Released all slaves [ 643.532942][ T9708] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 643.553788][ T9708] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 643.563512][ T9708] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 643.580338][ T9708] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 643.589400][ T9708] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 643.974843][T12554] hsr_slave_0: left promiscuous mode [ 643.996868][T12554] hsr_slave_1: left promiscuous mode [ 644.016636][T12554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 644.035174][T12554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.060190][T12554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 644.072418][T12554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.101903][T12554] veth1_macvtap: left promiscuous mode [ 644.109446][T12554] veth0_macvtap: left promiscuous mode [ 644.410041][T12554] team0 (unregistering): Port device team_slave_1 removed [ 644.433914][T12554] team0 (unregistering): Port device team_slave_0 removed [ 645.767931][ T9798] Bluetooth: hci3: command tx timeout [ 646.802228][T14784] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 647.041830][T14752] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.058690][T14752] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.070175][T14752] bridge_slave_0: entered allmulticast mode [ 647.083546][T14752] bridge_slave_0: entered promiscuous mode [ 647.124355][T14752] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.138140][T14752] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.155723][T14752] bridge_slave_1: entered allmulticast mode [ 647.187315][T14752] bridge_slave_1: entered promiscuous mode [ 647.408563][T14752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.534173][T14752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 647.846043][ T9798] Bluetooth: hci3: command tx timeout [ 648.014659][T14752] team0: Port device team_slave_0 added [ 648.367069][T14752] team0: Port device team_slave_1 added [ 648.687220][T14752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.703392][T14752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.763120][T14752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.873331][T14752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.886936][T14752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.947100][T14752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.085897][T14752] hsr_slave_0: entered promiscuous mode [ 649.102584][T14752] hsr_slave_1: entered promiscuous mode [ 649.110447][T14752] debugfs: 'hsr0' already exists in 'hsr' [ 649.118767][T14752] Cannot create hsr debugfs directory [ 649.929146][ T9798] Bluetooth: hci3: command tx timeout [ 651.056482][T14752] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 651.085245][T14752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.302190][T14752] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 651.341282][T14752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.429428][T14752] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 651.451038][T14752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 651.469815][T14752] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 651.499161][T14752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 652.003918][ T9798] Bluetooth: hci3: command tx timeout [ 652.086301][T14752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.148432][T14752] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.210395][T12551] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.217570][T12551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.257363][T12551] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.264659][T12551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.056167][ T30] audit: type=1807 audit(4294967372.498:280): UNKNOWN= res=0 [ 653.067073][ T30] audit: type=1802 audit(4294967372.508:281): pid=14831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1242" res=0 errno=0 [ 653.733527][T14825] ima: policy update failed [ 653.755651][ T30] audit: type=1802 audit(4294967373.199:282): pid=14825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1242" res=0 errno=0 [ 654.839233][T14752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.033561][T14752] veth0_vlan: entered promiscuous mode [ 655.074806][T14752] veth1_vlan: entered promiscuous mode [ 655.169795][T14752] veth0_macvtap: entered promiscuous mode [ 655.222308][T14752] veth1_macvtap: entered promiscuous mode [ 655.277934][T14752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.320660][T14752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.491953][T12554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.530060][T12554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.564327][T12554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.793628][T12554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.868685][ T9684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.886386][ T9684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 656.638137][ T9684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.675062][ T9684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.164291][T14880] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 657.185307][T14880] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 657.195721][T14880] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 657.210297][T14880] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 657.218993][T14880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 659.285662][ T9798] Bluetooth: hci4: command tx timeout [ 659.827440][ T30] audit: type=1807 audit(4294967379.262:283): UNKNOWN= res=0 [ 659.868271][ T30] audit: type=1802 audit(4294967379.282:284): pid=14910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1252" res=0 errno=0 [ 660.536047][T14905] ima: policy update failed [ 660.571654][ T30] audit: type=1802 audit(4294967380.012:285): pid=14905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1252" res=0 errno=0 [ 661.359436][ T9798] Bluetooth: hci4: command tx timeout [ 661.528329][ T30] audit: type=1807 audit(4294967380.962:286): UNKNOWN= res=0 [ 661.553385][ T30] audit: type=1802 audit(4294967380.982:287): pid=14928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1255" res=0 errno=0 [ 662.277104][T14926] ima: policy update failed [ 662.296345][ T30] audit: type=1802 audit(4294967381.733:288): pid=14926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1255" res=0 errno=0 [ 663.437861][ T9798] Bluetooth: hci4: command tx timeout [ 664.018900][T14878] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.049234][T14878] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.075965][T14878] bridge_slave_0: entered allmulticast mode [ 664.153659][T14878] bridge_slave_0: entered promiscuous mode [ 664.321528][T14878] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.350959][T14878] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.379602][T14878] bridge_slave_1: entered allmulticast mode [ 664.413864][T14878] bridge_slave_1: entered promiscuous mode [ 665.146781][T14878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.182651][T14878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.516891][ T9798] Bluetooth: hci4: command tx timeout [ 665.659684][T14878] team0: Port device team_slave_0 added [ 665.813724][T14878] team0: Port device team_slave_1 added [ 666.304169][T14878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.324512][T14878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.408272][T14878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.504421][T14878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.521838][T14878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.562144][T14878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.117387][T14878] hsr_slave_0: entered promiscuous mode [ 667.138356][T14878] hsr_slave_1: entered promiscuous mode [ 667.162712][T14878] debugfs: 'hsr0' already exists in 'hsr' [ 667.182877][T14878] Cannot create hsr debugfs directory [ 670.592433][T14878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 670.641169][T14878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 670.669286][T14878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 670.710223][T14878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 670.754561][T14878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 670.823351][T14878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 670.866905][T14878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 670.918332][T14878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 671.679727][ T30] audit: type=1807 audit(4294967391.128:289): UNKNOWN= res=0 [ 671.711149][ T30] audit: type=1802 audit(4294967391.138:290): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1266" res=0 errno=0 [ 672.014495][T15000] ima: policy update failed [ 672.028427][ T30] audit: type=1802 audit(4294967391.478:291): pid=15000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1266" res=0 errno=0 [ 674.624242][T14878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.996521][T14878] 8021q: adding VLAN 0 to HW filter on device team0 [ 675.497429][ T9839] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.504613][ T9839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.992597][ T9839] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.999823][ T9839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.291235][T15054] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 682.467728][T14878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.810843][T14878] veth0_vlan: entered promiscuous mode [ 683.870456][T14878] veth1_vlan: entered promiscuous mode [ 684.483913][T14878] veth0_macvtap: entered promiscuous mode [ 684.758616][T14878] veth1_macvtap: entered promiscuous mode [ 685.749357][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.776027][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.450874][ T30] audit: type=1807 audit(4294967405.905:292): UNKNOWN= res=0 [ 686.607827][ T30] audit: type=1802 audit(4294967405.905:293): pid=15124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1281" res=0 errno=0 [ 686.944925][T14878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.958302][T14878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.329472][T15118] ima: policy update failed [ 688.337369][ T30] audit: type=1802 audit(4294967407.796:294): pid=15118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1281" res=0 errno=0 [ 688.938010][ T30] audit: type=1326 audit(4294967408.396:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15137 comm="syz.2.1283" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc5ba79e019 code=0x0 [ 689.465332][ T9839] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.488325][T12553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.506850][T12553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.564931][T12553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.619522][T12553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.632713][T12553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.642934][T12554] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.659975][T12554] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.834111][ T30] audit: type=1807 audit(4294967410.287:296): UNKNOWN= res=0 [ 690.878539][ T30] audit: type=1802 audit(4294967410.287:297): pid=15151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.1248" res=0 errno=0 [ 691.398062][T15145] ima: policy update failed [ 691.431687][ T30] audit: type=1802 audit(4294967410.887:298): pid=15145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1248" res=0 errno=0 [ 691.867941][T15167] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 692.361833][ T30] audit: type=1807 audit(4294967411.818:299): UNKNOWN= res=0 [ 692.405223][ T30] audit: type=1802 audit(4294967411.818:300): pid=15168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.1294" res=0 errno=0 [ 692.815992][T15163] ima: policy update failed [ 692.838412][ T30] audit: type=1802 audit(4294967412.278:301): pid=15163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1294" res=0 errno=0 [ 694.914072][ T30] audit: type=1807 audit(4294967414.379:302): UNKNOWN= res=0 [ 694.940493][ T30] audit: type=1802 audit(4294967414.379:303): pid=15195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1290" res=0 errno=0 [ 696.117332][T15193] ima: policy update failed [ 696.133298][ T30] audit: type=1802 audit(4294967415.590:304): pid=15193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1290" res=0 errno=0 [ 706.434087][ T30] audit: type=1807 audit(4294967425.895:305): UNKNOWN= res=0 [ 706.491487][ T30] audit: type=1802 audit(4294967425.905:306): pid=15312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.1306" res=0 errno=0 [ 707.209978][T15294] ima: policy update failed [ 707.250721][ T30] audit: type=1802 audit(4294967426.715:307): pid=15294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1306" res=0 errno=0 [ 708.295537][T14880] Bluetooth: hci0: command 0x0406 tx timeout [ 709.847638][ T30] audit: type=1807 audit(4294967429.317:308): UNKNOWN= res=0 [ 709.871640][ T30] audit: type=1802 audit(4294967429.317:309): pid=15333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1312" res=0 errno=0 [ 710.702205][T15331] ima: policy update failed [ 710.731811][ T30] audit: type=1802 audit(4294967430.197:310): pid=15331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1312" res=0 errno=0 [ 711.394220][T15364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 713.292467][T12543] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.971281][T14880] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 713.994038][T14880] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 714.009993][T14880] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 714.026037][T14880] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 714.041585][T14880] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 714.135044][T12543] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.379802][ T30] audit: type=1807 audit(4294967433.849:311): UNKNOWN= res=0 [ 714.407939][ T30] audit: type=1802 audit(4294967433.849:312): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.5.1322" res=0 errno=0 [ 714.776534][T15378] ima: policy update failed [ 714.786481][T12543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.833798][ T30] audit: type=1802 audit(4294967434.309:313): pid=15378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1322" res=0 errno=0 [ 715.086415][T12543] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.132023][ T9798] Bluetooth: hci2: command tx timeout [ 717.616106][T12543] bridge_slave_1: left allmulticast mode [ 717.627235][T12543] bridge_slave_1: left promiscuous mode [ 717.636065][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.665647][T12543] bridge_slave_0: left allmulticast mode [ 717.672201][T12543] bridge_slave_0: left promiscuous mode [ 717.678503][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.127338][T12543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.154224][T12543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.171962][T12543] bond0 (unregistering): Released all slaves [ 718.210608][ T9798] Bluetooth: hci2: command tx timeout [ 718.480466][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 719.571114][T12543] hsr_slave_0: left promiscuous mode [ 719.604525][T12543] hsr_slave_1: left promiscuous mode [ 719.620403][T12543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.659972][T12543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.678098][T12543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.686528][T12543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.718866][T12543] veth1_macvtap: left promiscuous mode [ 719.757757][T12543] veth0_macvtap: left promiscuous mode [ 719.767587][T12543] veth1_vlan: left promiscuous mode [ 719.775624][T12543] veth0_vlan: left promiscuous mode [ 720.290215][ T9798] Bluetooth: hci2: command tx timeout [ 720.530846][T12543] team0 (unregistering): Port device team_slave_1 removed [ 720.663066][T12543] team0 (unregistering): Port device team_slave_0 removed [ 721.951205][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 722.368768][ T9798] Bluetooth: hci2: command tx timeout [ 722.938271][T15384] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.959184][T15384] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.985014][T15384] bridge_slave_0: entered allmulticast mode [ 723.011468][T15384] bridge_slave_0: entered promiscuous mode [ 723.212376][T15384] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.233490][T15384] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.260992][T15384] bridge_slave_1: entered allmulticast mode [ 723.290329][T15384] bridge_slave_1: entered promiscuous mode [ 724.118534][T15384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.225808][T15384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.309700][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 724.560401][T15384] team0: Port device team_slave_0 added [ 724.702389][T15384] team0: Port device team_slave_1 added [ 725.108844][T15384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.126943][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.176400][T15384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.311558][T15384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.335076][T15384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.441134][T15384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.968235][T15384] hsr_slave_0: entered promiscuous mode [ 725.999845][T15384] hsr_slave_1: entered promiscuous mode [ 727.192597][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 727.324803][ T30] audit: type=1807 audit(4294967446.795:314): UNKNOWN= res=0 [ 727.341554][ T30] audit: type=1802 audit(4294967446.795:315): pid=15544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1336" res=0 errno=0 [ 727.924048][T15541] ima: policy update failed [ 727.929204][ T30] audit: type=1802 audit(4294967447.406:316): pid=15541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1336" res=0 errno=0 [ 728.752014][T15554] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1338'. [ 732.726038][T15384] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 732.803794][T15384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.951861][T15384] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 732.996471][T15384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 733.032507][T15384] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 733.105462][T15384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 733.376882][T15384] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 733.445195][T15384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 735.017482][T15384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.140249][T15384] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.223648][ T9684] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.230898][ T9684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.314893][ T9680] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.322207][ T9680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.740292][T15384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 741.174479][T15384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.710308][T15384] veth0_vlan: entered promiscuous mode [ 743.771354][T15384] veth1_vlan: entered promiscuous mode [ 744.120578][T15384] veth0_macvtap: entered promiscuous mode [ 744.214121][T15384] veth1_macvtap: entered promiscuous mode [ 744.311178][T15384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.360580][T15384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.983251][T12556] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.024064][T12556] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.621764][T12553] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.163774][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.170679][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.917316][T12556] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.934601][ T9684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.946861][ T9684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.164340][T12556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.214160][T12556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.898173][T15796] random: crng reseeded on system resumption [ 749.093664][T15808] FAULT_INJECTION: forcing a failure. [ 749.093664][T15808] name failslab, interval 1, probability 0, space 0, times 0 [ 749.151818][T15808] CPU: 1 UID: 0 PID: 15808 Comm: syz.4.1359 Not tainted syzkaller #0 PREEMPT(full) [ 749.151865][T15808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 749.151886][T15808] Call Trace: [ 749.151904][T15808] [ 749.151918][T15808] dump_stack_lvl+0x100/0x190 [ 749.151965][T15808] should_fail_ex.cold+0x5/0xa [ 749.152007][T15808] should_failslab+0xc2/0x120 [ 749.152055][T15808] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 749.152101][T15808] ? _proc_mkdir+0x1a2/0x210 [ 749.152138][T15808] ? nf_lwtunnel_net_init+0x38/0xf0 [ 749.152285][T15808] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 749.152328][T15808] kmemdup_noprof+0x29/0x60 [ 749.152368][T15808] nf_lwtunnel_net_init+0x38/0xf0 [ 749.152410][T15808] ops_init+0x1e2/0x5f0 [ 749.152464][T15808] setup_net+0x118/0x3a0 [ 749.152517][T15808] ? __pfx_setup_net+0x10/0x10 [ 749.152568][T15808] ? mutex_init_lockdep+0xf1/0x120 [ 749.152610][T15808] copy_net_ns+0x46f/0x7c0 [ 749.152645][T15808] create_new_namespaces+0x3ea/0xac0 [ 749.152694][T15808] unshare_nsproxy_namespaces+0xf2/0x220 [ 749.152736][T15808] ksys_unshare+0x438/0xab0 [ 749.152782][T15808] ? __pfx_ksys_unshare+0x10/0x10 [ 749.152840][T15808] __x64_sys_unshare+0x31/0x40 [ 749.152882][T15808] do_syscall_64+0x115/0x840 [ 749.152923][T15808] ? clear_bhb_loop+0x40/0x90 [ 749.152953][T15808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.152977][T15808] RIP: 0033:0x7fe95c59e019 [ 749.152997][T15808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.153020][T15808] RSP: 002b:00007fe95d380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 749.153043][T15808] RAX: ffffffffffffffda RBX: 00007fe95c826270 RCX: 00007fe95c59e019 [ 749.153059][T15808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 749.153073][T15808] RBP: 00007fe95c63500c R08: 0000000000000000 R09: 0000000000000000 [ 749.153087][T15808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.153101][T15808] R13: 00007fe95c826308 R14: 00007fe95c826270 R15: 00007ffea486c468 [ 749.153130][T15808] [ 749.500640][ T30] audit: type=1804 audit(4294967468.946:317): pid=15811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1360" name="/newroot/sys/kernel/tracing/events/vmalloc/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 766.561780][ T30] audit: type=1807 audit(4294967486.055:318): UNKNOWN= res=0 [ 766.598453][ T30] audit: type=1802 audit(4294967486.055:319): pid=15950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.1381" res=0 errno=0 [ 767.306708][T15941] ima: policy update failed [ 767.315455][ T30] audit: type=1802 audit(4294967486.805:320): pid=15941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1381" res=0 errno=0 [ 769.711567][ T9798] Bluetooth: hci3: command 0x0406 tx timeout [ 772.016003][ T9798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 772.030563][ T9798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 772.047775][ T9798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 772.062733][ T9798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 772.071178][ T9798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 772.125762][ T9684] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.901490][ T9684] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.521626][ T9684] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.003702][ T9684] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.183342][ T9798] Bluetooth: hci3: command tx timeout [ 775.380310][ T9684] bridge_slave_1: left allmulticast mode [ 775.427048][ T9684] bridge_slave_1: left promiscuous mode [ 775.454233][ T9684] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.501379][ T9684] bridge_slave_0: left allmulticast mode [ 775.530936][ T9684] bridge_slave_0: left promiscuous mode [ 775.567641][ T9684] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.262672][ T9798] Bluetooth: hci3: command tx timeout [ 776.508709][ T9684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.597503][ T9684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.702413][ T9684] bond0 (unregistering): Released all slaves [ 777.445997][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 778.340484][ T9798] Bluetooth: hci3: command tx timeout [ 778.908289][ T9684] hsr_slave_0: left promiscuous mode [ 778.922342][ T9684] hsr_slave_1: left promiscuous mode [ 778.939996][ T9684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.962895][ T9684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.996860][ T9684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.021192][ T9684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.062762][ T9684] veth1_macvtap: left promiscuous mode [ 779.075206][ T9684] veth0_macvtap: left promiscuous mode [ 779.090736][ T9684] veth1_vlan: left promiscuous mode [ 779.107519][ T9684] veth0_vlan: left promiscuous mode [ 779.825306][ T9684] team0 (unregistering): Port device team_slave_1 removed [ 779.859315][ T9684] team0 (unregistering): Port device team_slave_0 removed [ 779.939814][ T9798] Bluetooth: hci4: command 0x0406 tx timeout [ 780.119386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 780.419800][T14880] Bluetooth: hci3: command tx timeout [ 780.442749][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 780.722712][T16001] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.765510][T16001] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.799568][T16001] bridge_slave_0: entered allmulticast mode [ 780.823467][T16001] bridge_slave_0: entered promiscuous mode [ 780.841622][T16001] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.859385][T16001] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.879886][T16001] bridge_slave_1: entered allmulticast mode [ 780.887398][T16001] bridge_slave_1: entered promiscuous mode [ 781.022062][T16001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.071193][T16001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.257574][T16001] team0: Port device team_slave_0 added [ 781.303212][T16001] team0: Port device team_slave_1 added [ 781.521230][T16001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.540431][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.591382][T16001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.643056][T16001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.717409][T16001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.795233][T16001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.556514][T16001] hsr_slave_0: entered promiscuous mode [ 782.613408][T16001] hsr_slave_1: entered promiscuous mode [ 782.653760][T16001] debugfs: 'hsr0' already exists in 'hsr' [ 782.687357][T16001] Cannot create hsr debugfs directory [ 783.047661][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 786.000635][T16158] BUG: unable to handle page fault for address: ffffc900184e1fe8 [ 786.008447][T16158] #PF: supervisor write access in kernel mode [ 786.014566][T16158] #PF: error_code(0x0002) - not-present page [ 786.020588][T16158] PGD 13fe40067 P4D 13fe40067 PUD 1cae7067 PMD 60339067 PTE 0 [ 786.028167][T16158] Oops: Oops: 0002 [#1] SMP KASAN PTI [ 786.033597][T16158] CPU: 1 UID: 0 PID: 16158 Comm: syz.4.1400 Not tainted syzkaller #0 PREEMPT(full) [ 786.043018][T16158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 786.053114][T16158] RIP: 0010:write_comp_data+0x75/0x90 [ 786.058557][T16158] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 786.078218][T16158] RSP: 0018:ffffc9000633fe78 EFLAGS: 00050257 [ 786.084329][T16158] RAX: ffffc900184e2000 RBX: 0000000000000000 RCX: ffffffff82458af5 [ 786.092338][T16158] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 786.100344][T16158] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 786.108352][T16158] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 786.116382][T16158] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 786.124393][T16158] FS: 00007fe959bcf6c0(0000) GS:ffff888123edf000(0000) knlGS:0000000000000000 [ 786.133353][T16158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.139969][T16158] CR2: ffffc900184e1fe8 CR3: 00000000511a0000 CR4: 00000000003526f0 [ 786.147976][T16158] Call Trace: [ 786.151289][T16158] [ 786.154241][T16158] rseq_register+0x115/0x350 [ 786.158935][T16158] __x64_sys_rseq+0x1b8/0x2e0 [ 786.163758][T16158] do_syscall_64+0x115/0x840 [ 786.168400][T16158] ? clear_bhb_loop+0x40/0x90 [ 786.173119][T16158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.179052][T16158] RIP: 0033:0x7fe95c59e019 [ 786.183504][T16158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.203143][T16158] RSP: 002b:00007fe959bcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000014e [ 786.211594][T16158] RAX: ffffffffffffffda RBX: 00007fe95c826450 RCX: 00007fe95c59e019 [ 786.219599][T16158] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000000 [ 786.227603][T16158] RBP: 00007fe95c63500c R08: 0000000000000000 R09: 0000000000000000 [ 786.235632][T16158] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000000 [ 786.243633][T16158] R13: 00007fe95c8264e8 R14: 00007fe95c826450 R15: 00007ffea486c468 [ 786.251662][T16158] [ 786.254732][T16158] Modules linked in: [ 786.258667][T16158] CR2: ffffc900184e1fe8 [ 786.262871][T16158] ---[ end trace 0000000000000000 ]--- [ 786.268365][T16158] RIP: 0010:write_comp_data+0x75/0x90 [ 786.273783][T16158] Code: 00 8b bf fc 16 00 00 48 8b 30 48 c1 e7 03 4c 8d 1c b5 00 00 00 00 4a 8d 14 dd 28 00 00 00 48 39 d7 72 bd 48 83 c6 01 48 89 30 <4c> 89 44 10 e0 4c 89 4c 10 e8 4c 89 54 10 f0 4a 89 4c d8 20 c3 cc [ 786.293418][T16158] RSP: 0018:ffffc9000633fe78 EFLAGS: 00050257 [ 786.299592][T16158] RAX: ffffc900184e2000 RBX: 0000000000000000 RCX: ffffffff82458af5 [ 786.307615][T16158] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000400000 [ 786.315633][T16158] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000002 [ 786.323672][T16158] R10: 0000000000000001 R11: fffffffffffffffc R12: 0000000000000020 [ 786.331670][T16158] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000001 [ 786.339681][T16158] FS: 00007fe959bcf6c0(0000) GS:ffff888123edf000(0000) knlGS:0000000000000000 [ 786.348654][T16158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 786.355268][T16158] CR2: ffffc900184e1fe8 CR3: 00000000511a0000 CR4: 00000000003526f0 [ 786.363344][T16158] Kernel panic - not syncing: Fatal exception [ 786.370054][T16158] Kernel Offset: disabled [ 786.374392][T16158] Rebooting in 86400 seconds..