last executing test programs: 2m42.764944764s ago: executing program 1 (id=2935): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x15, 0x800, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x4, 0x6, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) read$auto(0x3, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x1}}) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(0xffffffffffffffff, 0x550c, 0x0) 2m40.830223114s ago: executing program 0 (id=2939): statmount$auto(0x0, &(0x7f0000000180)={0xb, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x8009, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x27, 0x20, 0x309, 0x6, 0x1ff, 0x0, 0x200000, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0xa, 0xbd7, 0x0, 0x0, 0x2, 0x0, 0x7, 0x10, 0x0, 0x7, 0x26c2dc2]}, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000010, 0x400, 0x2}]}) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x4102, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/stats\x00', 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) ptrace$auto(0xffffffffffffffff, r2, 0xfffffffffffffffe, 0x53) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/sys/net/mptcp/blackhole_timeout\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r5, 0x7005, 0x0) readv$auto(r5, &(0x7f00000004c0)={0x0, 0x4}, 0x5) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2m40.163614672s ago: executing program 1 (id=2940): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) socket(0xa, 0x3, 0x3b) 2m39.559617009s ago: executing program 0 (id=2941): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x84) setsockopt$auto(r0, 0x84, 0x15, 0x0, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) getpid() mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) semctl$auto_SEM_STAT(0x2, 0x400, 0x12, 0x1) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) ioctl$auto_BCH_IOCTL_DISK_RESIZE(r2, 0x4018bc0e, &(0x7f00000000c0)={0x7ff, 0x0, 0x101, 0x9d75}) write$auto(r1, &(0x7f0000000040)='/dev/audio1\x00', 0x100000a3d1) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x1) write$auto_proc_projid_map_operations_base(0xffffffffffffffff, 0x0, 0x0) socket(0x18, 0xc000c, 0x2fe) 2m38.234203796s ago: executing program 0 (id=2944): mmap$auto(0xebb7, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) mlock$auto(0xfbe8, 0x4) mlock$auto(0x837, 0x7) mlock$auto(0x3, 0x2) r0 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$auto(r0, &(0x7f0000000180)='1l80211\x00', 0x1) mlock$auto(0x10000, 0x5) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2003, 0x0) mmap$auto(0x0, 0x20009, 0x4, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x0, 0x8, 0x9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x48000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/247, 0xf7) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) semctl$auto_IPC_INFO(0x576d, 0x3, 0x3, 0xfffffffffffffffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hugepages-64kB/stats/nr_anon\x00', 0x0, 0x0) sendmsg$auto_OVS_DP_CMD_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032bbd7000fbdbdf25040000000a0001002cb02d5e7d000000080007000000000008000200", @ANYRES32=0x0, @ANYBLOB="9021a38aa22cbc35dad256304e7a6b70269bf0e69bd2d37b9e77db0c9ba511db57d6a7c7e58fb841cee83cebcd0b07791c91f1b55bd12fbcf5ecc602195151065a10f0d3c72e355fe8051c9ad1758e"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24000895) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) read$auto(0x3, 0x0, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r6, &(0x7f0000000400)={0x0, 0x1f00, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r8, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2m37.680972836s ago: executing program 1 (id=2945): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/190, 0xbe) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f00000001c0)=0x6) unshare$auto(0x40000080) socket(0x15, 0x800, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x4, 0x6, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) tgkill$auto(0x0, 0x1, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x14a402, 0x0) read$auto(0x3, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0x15, 0x3, 0x1}}) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(0xffffffffffffffff, 0x550c, 0x0) 2m35.980723382s ago: executing program 0 (id=2947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0xbb) mmap$auto(0x2000000002, 0x6, 0x2, 0x110, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) getpid() r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r4, 0x0, 0x20040800) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) socket(0xa, 0x1, 0xfffffeff) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x2, 0x2, 0x7fff7ffb, 0x81, 0x8, 0x9, 0x3]}, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m35.014086777s ago: executing program 1 (id=2949): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810000, 0x1, 0x8000000008011, 0x3, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x81fe, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x2000000003}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x4, 0x0) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r1, 0x0, 0x100000002, 0x100000001) pipe$auto(&(0x7f0000000040)=r0) bpf$auto(0xeb, &(0x7f0000001840)=@query={@target_fd=r0, 0x1, 0xbadd, 0x7, 0x656, @count=0x4, 0x0, 0xfff, 0x19e, 0x8, 0x1}, 0x10) write$auto_tracing_mark_raw_fops_trace(r2, &(0x7f0000000080)="832814e318e918ecca892a4b584ed48f8d7bcea32fcbdc92f54e7cb50a037976bce7ed8d0d47badf84409329ae76e04ab1281461ca4c485db3d8fcca79526877bfc99871b4ccbdf7ed6bc8dae4acd52f2b19330b707bcb03969f3a1dfc39ce6a37a763af4c0ca287be46549bb6b7e265e0cf1bc4c6ed1e14cda4344d93a3a72c2bd8806eeb63c991c40c1f73b40791a18b0577d2399e83044cef0c7b2643b48981448c0cedf9feb5c11adaa35029bfd895b1dcffbcec8263e5d92b373cf8a4ae53224fa7d92b96af764679", 0xcb) msync$auto(0x477, 0xfffffffffffffff9, 0xff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m34.186922206s ago: executing program 0 (id=2950): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4000000000fc2}, 0x8, 0x0, 0x7, 0x5}, 0xb30}, 0x7, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@_si_pad}) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x89, 0x4, 0x0, 0x0, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x10b201, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000081, 0xf8, 0xfffffffffffffffa, 0x8000) write$auto(r0, 0x0, 0x996) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x30b142, 0x0) umount2$auto(&(0x7f0000000040)='/proc/\x00\x18s/fs/bin\xe6mt_\xe9\xdf\xe2%\f\x16#9\x00\x00\x00\x00\x00\x00\xbe\xe6]\x01\x18|T\x9ev\x15\xdcEM*\t\x91\xbbb\xc9X\xee<\xc4T\xc2dRw\xb6*A\x97\xf6\xf8\xeb\a\xf9\x06\x13\xdf)0\xef\xec\x1c\xc4\xf3\x02\xdf\xeea\x95>O\xa5\x03\x00'/102, 0x8) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4c094) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) writev$auto(r4, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x8188aea6, 0x0) 2m32.551820296s ago: executing program 0 (id=2953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0xbb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) getpid() r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r4, 0x0, 0x20040800) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) socket(0xa, 0x1, 0xfffffeff) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x2, 0x2, 0x7fff7ffb, 0x81, 0x8, 0x9, 0x3]}, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m32.160991912s ago: executing program 1 (id=2955): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) open(&(0x7f00000001c0)='./file0\x00', 0x40c4c0, 0x168) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x9, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) connect$auto(0x3, 0x0, 0x10) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) close_range$auto(0x2, 0xa, 0x0) bind$auto(r1, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x10}, 0x3) r2 = socket(0xa, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) close_range$auto(0x2, 0x8, 0x0) socket(0xb, 0x3, 0x1f) getsockname$auto(0x3, 0x0, 0x0) open(0x0, 0x62240, 0x154) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m30.70958848s ago: executing program 1 (id=2957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) mmap$auto(0x2000000002, 0x6, 0x2, 0x110, r2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r4, 0x0, 0x20040800) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) socket(0xa, 0x1, 0xfffffeff) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x2, 0x2, 0x7fff7ffb, 0x81, 0x8, 0x9, 0x3]}, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m17.491792998s ago: executing program 32 (id=2953): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0xbb) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) getpid() r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r4, 0x0, 0x20040800) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) socket(0xa, 0x1, 0xfffffeff) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x2, 0x2, 0x7fff7ffb, 0x81, 0x8, 0x9, 0x3]}, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m15.599306976s ago: executing program 33 (id=2957): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) mmap$auto(0x2000000002, 0x6, 0x2, 0x110, r2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r4, 0x0, 0x20040800) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) socket(0xa, 0x1, 0xfffffeff) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x2, 0x2, 0x7fff7ffb, 0x81, 0x8, 0x9, 0x3]}, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m31.952448942s ago: executing program 4 (id=3047): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) unshare$auto(0x40000080) socket(0xa, 0x1, 0x100) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) socket(0xa, 0x3, 0x3b) 1m28.280025846s ago: executing program 4 (id=3053): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/ext4/sda1/mb_groups\x00', 0x109180, 0x0) pread64$auto(r0, 0x0, 0x682c3390, 0xcff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr11/tx_queue_len\x00', 0x2000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc0c00, 0x0) adjtimex$auto(0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, 0x0, 0x88d4) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mbind$auto(0x2, 0x80, 0x3, &(0x7f0000000200)=0xff, 0x3, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/fail_io_timeout/probability\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r3, 0x0, 0x9) socket(0xa, 0x6, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0x800, 0x4) 1m26.076767322s ago: executing program 4 (id=3058): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r0, 0xc0686611, &(0x7f0000000340)={0x18, 0x0, 0x4, 0x1, 0x8, 0x1, 0x0, 0x6, 0x5, 0x1fd, 0xffff7ffe, 0x80000000, 0x7ff, 0x7, 0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x1, 0x2, 0x3c52, 0x13, 0xffffffffffffffff, 0x40) close_range$auto(0x2, 0xa, 0x0) socket(0x2b, 0x1, 0x0) socket(0xa, 0x3, 0xff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x6, 0x101, 0x1, 0xfffffffffffffff1, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) listmount$auto(&(0x7f0000000100)={0xfffffffc, @raw=0xffffffff, 0x844, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/bus/pnp/drivers/rtc_cmos/unbind\x00', 0x84582, 0x0) write$auto(r2, 0x0, 0x2b6) syz_clone3(&(0x7f0000000140)={0xe0000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, &(0x7f00000004c0)}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm_amd/parameters/pause_filter_thresh\x00', 0x200, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/input/event2\x00', 0x40800, 0x0) ioctl$auto_EVIOCSKEYCODE(r3, 0x40084504, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1m23.779909387s ago: executing program 4 (id=3059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec31\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r1, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) r2 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/printk_formats\x00', 0xc0002, 0x0) pread64$auto(r2, 0x0, 0x1, 0xb29e) ioctl$auto_CEC_DQEVENT(r1, 0xc0506107, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0x7ff, 0x8000, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) read$auto(r0, &(0x7f0000000200)='i8\xc7\xf5\x80H\xeff\x9f!\x9c\xb1\xbd7\xb3\xa6\x1c\xeeVY\t\x88\xf2]\xae\xd2\x8ef!\xfc\xec\xf7u\x98\xc0\xef\xf7G\x0f_:\xc8Pv\x96\xd8\xdfR7\a\a\xb2\'\xd7v2je\xd4\xa3=u\xf7]\xd1\xc6\x84\x06%\xee\xb2\x00\x8a=\xff\'\tg\xbb|\x8f\n\xe9X\xbe\x04\'\xdd\xbcw\xe3i\xeex2\xac\xec\xc0\x7f\x02\xa0\xdb\x17\x02gh\xbfL\x02\xf5\xeaF\x7fj\xf9\x9b\x93q\xf8\xe6W\xf5\xa3\x98\xb1%\xf2\xd4\xe4\x85>\xd3\xfbYmO\xb55\x05i\x9fqB\xa8\xd1\x04d\x94\xbc\x9f=\xc2\x86k#\xed3\x9e\xc2\x809*NG', 0x5) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x1a3780, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/soft_watchdog\x00', 0x101201, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x3, 0x80000000, 0x5f, 0x7ffffffd, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x814) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRESDEC=r4], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40044010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), 0xffffffffffffffff) 1m19.729717872s ago: executing program 4 (id=3068): ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000040)={0x0, &(0x7f0000000000)={0xffff, 0x5, 0x7, @raw=0x1}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x101780, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000002600)={0x0, r2}) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r4 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000200)=0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) bpf$auto(0x40000000, &(0x7f0000000100)=@task_fd_query={0x0, r2, 0x200, 0x2d, 0x7, 0x3, r3, 0x3, 0x401}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r4, 0x84, 0x1d, 0x0, 0x0) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) getpid() r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) 1m16.382315039s ago: executing program 4 (id=3080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0xbb) mmap$auto(0x2000000002, 0x6, 0x2, 0x110, r2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) getpid() r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r5, 0x0, 0x20040800) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r4, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) socket(0xa, 0x1, 0xfffffeff) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x2, 0x2, 0x7fff7ffb, 0x81, 0x8, 0x9, 0x3]}, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m1.258440068s ago: executing program 34 (id=3080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0xbb) mmap$auto(0x2000000002, 0x6, 0x2, 0x110, r2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) getpid() r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r5, 0x0, 0x20040800) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r4, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) socket(0xa, 0x1, 0xfffffeff) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x2, 0x2, 0x7fff7ffb, 0x81, 0x8, 0x9, 0x3]}, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 25.364302877s ago: executing program 5 (id=3167): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4000000000fc2}, 0x8, 0x0, 0x7, 0x5}, 0xb30}, 0x7, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@_si_pad}) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x89, 0x4, 0x0, 0x0, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x10b201, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000081, 0xf8, 0xfffffffffffffffa, 0x8000) write$auto(r0, 0x0, 0x996) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x30b142, 0x0) umount2$auto(&(0x7f0000000040)='/proc/\x00\x18s/fs/bin\xe6mt_\xe9\xdf\xe2%\f\x16#9\x00\x00\x00\x00\x00\x00\xbe\xe6]\x01\x18|T\x9ev\x15\xdcEM*\t\x91\xbbb\xc9X\xee<\xc4T\xc2dRw\xb6*A\x97\xf6\xf8\xeb\a\xf9\x06\x13\xdf)0\xef\xec\x1c\xc4\xf3\x02\xdf\xeea\x95>O\xa5\x03\x00'/102, 0x8) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4c094) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) writev$auto(r4, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x14, r6, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x8188aea6, 0x0) 23.632708179s ago: executing program 5 (id=3170): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r1, &(0x7f0000000080)=""/78, 0x4e) read$auto_full_fops_mem(r1, &(0x7f0000000000)=""/12, 0xc) shutdown$auto(0x200000003, 0x2) ioctl$auto_IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f00000004c0)={@config_section=&(0x7f0000000440)={"00b4c63748a1d903ae89c8bdc28973abfa4bdcf07b3f056578ce3ee7195255a6227262d4f902a270e9d355a5a61075e9d44f0325278ed00ed2cd58cf9ad83a2e", @params=&(0x7f0000000300)={"91f702fbce88e7d8663258a6235f153e24a3878eb6a17ac4ae86b7fc6938d0ca500d8d4bef284fa454994e67d4fc569aa24f0d9e4b93c447d1172e76f3dcef42", "dee7ebc6c09670d8349f2620de46715712a350408aba5ac5d1b27669834bc2ec63a1a4811d83123bfd7c80e4c98baf57404332f1547afad44b9920d2ff1f2b64", @next=&(0x7f0000000240)={"173a449fc731a638daf8303415aa38d038be041c696d48b13f143f26a79e713df9f84a119ea7376ead12439fe9bbbb1c869da04caeba6cdc4cb81a8f6b62f11b", "0d4fb79ecffc7756ce40716707002436d7bae497b4717899c7a5d0160f2ce622414941209f2681157b38213e1b46d78213ae3992cb4b3b739d1339ac612c23f8", @next=&(0x7f0000000180)={"727c6b38e9867671a9e95ed8d6c8cc3d305cf4cd405f0b607c7521af9da2c3e242e4c73730f4c78aded5cc9a5899278f81a38672ff26355fc5f3f2e510ad164f", "006d67d9e96723126a1f08bb1d66a04d1c73fa9c193a6bb6cd29d085663d6d4a3d4ded65f2cbddaa5d0e1dc4b80d59cb3e02a5c9192be568af3860d68bf622ae", @next, 0x1}, 0x1}, 0x2}, @next=&(0x7f00000003c0)={"08c6a8b39a2d2f93458d04a48a693e02ffe03faf03333b778efe60385dd20f7e3c32efada54f037145f183575b8d9b95bb7378ffbecccdb38d1cb4aa5892ba18", @padding1, @padding3}}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020008, 0x7, 0xb9, 0xfffffffffffffffa, 0x9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) socket(0x25, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) read$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000040)=""/1, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 21.337232852s ago: executing program 3 (id=3173): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x0, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0xf, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) ioperm$auto(0x7, 0x75, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) select$auto(0x2, &(0x7f0000000100)={[0x3, 0x7ff, 0x1, 0x8, 0x94c1, 0x0, 0x5, 0x14, 0x9, 0x2, 0x1, 0x7, 0xd11, 0x420, 0x4, 0x27de]}, &(0x7f0000000180)={[0x7fffffffffffffff, 0x586, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x7, 0x40, 0x7fffffffffffffff, 0x0, 0x1, 0x5c, 0x8, 0x6]}, &(0x7f0000000200)={[0x96c, 0xb, 0x8000000000000001, 0x7, 0x10000, 0xf50, 0xcb20, 0x1, 0x8, 0x8000, 0x2, 0x7f, 0x6df, 0x8ad5, 0x2, 0x3]}, &(0x7f0000000040)={0x7fffffff, 0x800000003}) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0x3b, 0x5, 0x8) 20.062268064s ago: executing program 3 (id=3175): socket(0x2, 0x800, 0x73) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) select$auto(0x1, &(0x7f0000000240)={[0x3, 0x9, 0x81, 0x80000001000000, 0x6, 0x0, 0x6, 0xffff, 0x7621, 0x3, 0x711e, 0xd, 0x2, 0x3, 0x6, 0x80000001]}, &(0x7f0000000340)={[0x8, 0x0, 0x0, 0x0, 0x100, 0x1, 0x4, 0x10001, 0x317, 0x8001, 0xaa4, 0x5, 0xd0f, 0xf, 0x2]}, &(0x7f0000000440)={[0x4, 0xffff, 0x5, 0x4, 0x4, 0x1c842721, 0x1, 0x30a, 0x8000000000000001, 0x7, 0x2, 0x7555, 0x1ff, 0x32a, 0x1, 0x5b12]}, &(0x7f00000003c0)={0x3, 0x5c2}) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r3, 0x220, 0x70bd26, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004814}, 0x144) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xfffffffffffffffc, 0xcc34, 0xd3e, 0x1, 0x1, 0x8, 0x95f4da0b, 0x10001, 0x3, 0x2f, 0x7ffffffe, 0x7, 0x6d3f, 0x4c, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000001240)='4', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCGPTPEER2(r5, 0x5441, 0x0) 19.174032597s ago: executing program 3 (id=3179): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x6, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x400, 0x4020009, 0x0, 0x19, 0x401, 0x1928000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x149c82, 0x0) write$auto(r2, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) io_uring_register$auto(0xffffffffffffffff, 0x19, 0x0, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0xffffffffffffffff, 0x4, 0x4000000000e3, 0x20000040eb2, 0xffffffffffffffff, 0x300000000000) madvise$auto(0x0, 0x8000000000000000, 0x15) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) 17.503532564s ago: executing program 3 (id=3180): mmap$auto(0x0, 0x0, 0xc00000072, 0xfffffffffffffff7, 0x1000000002, 0x8000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x28, 0x4, 0xffffffc0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0x100000007, 0x800000000000000d, 0x8fd6, 0x19486, 0x3, 0x8, 0x7d, 0x6, 0x1, 0x8, 0x5, 0x1, 0x9, 0x400000000000001, 0xfffffffffffffffe]}, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x128e2, 0x0) write$auto(r1, &(0x7f00000001c0)='\b\x1c\xc7\x00\x80\x00\x00\x00\x00\x00\x00\x00', 0x81) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x10, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) splice$auto(0xffffffffffffffff, &(0x7f0000000200)=0x2, r1, &(0x7f0000000240)=0x9, 0x4dc0000000000000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) unshare$auto(0x40000080) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f00000004c0)={{0x1, 0x0, 0x0, 0x9, 0x5c, 0x4, 0xffff}, &(0x7f0000000440)=0xf8, &(0x7f0000000480)=0x6, 0x2, 0x4, 0xfffffffffffffff8, 0xd3, 0x5, 0xb, 0x101, 0x7, @inferred, @inferred=0xffffffffffffffff}) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="998389fed76e7acb14ac82cbca409d01c1999592705f167103827a555e3a5934265c91692c5cc80913e4665a730992f5d759606a44a1fa1cf41934c3b28302f6747b6e92c2cceae11efb6f4104423dc6cc3f699919857148282cd0041175d204fc2c2b000425ad104535c52d98c5d03ef27ae5e0d572ff1dfdd2c8707e0f11dcd90f18855c5654b6f24d218d99518e43dab5d07715f433ac6d208245230fcc0ba08b8c0c89d768f26b1d641aa46b9d4a1c0d8c6961593bfc38044bb1c0e3303b0ef34deba86c61f32d4c7cde35fd1509ca065cef10b65b5767074d6913", @ANYRES16=r4, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) write$auto_console_fops_tty_io(r2, &(0x7f0000000e00)="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", 0xcb6) socket(0x8, 0x2, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x2, 0x9, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 16.225822641s ago: executing program 3 (id=3184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0xbb) mmap$auto(0x2000000002, 0x6, 0x2, 0x110, r2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) getpid() r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r5, 0x0, 0x20040800) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r4, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) socket(0xa, 0x1, 0xfffffeff) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x2, 0x2, 0x7fff7ffb, 0x81, 0x8, 0x9, 0x3]}, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 15.495525892s ago: executing program 5 (id=3186): write$auto_proc_pid_attr_operations_base(0xffffffffffffffff, &(0x7f0000000200)="a597d9ce6359203d", 0x8) socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) statmount$auto(0x0, 0x0, 0x1fe, 0xd) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) bpf$auto(0x0, 0x0, 0x6f1) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000000c0), 0x55) write$auto(0x3, 0x0, 0x800) ioctl$auto(0x3, 0x80000541b, 0x38) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x100, 0x161) 15.177622106s ago: executing program 3 (id=3187): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x0, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x4, 0x2, 0x10, &(0x7f0000000040)=0x7) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x4001ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0x7, 0x6d3c, 0x4, 0x2, 0x1]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.stat\x00', 0x280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/20, 0xfffffcc4) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='\x01\x00\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47P\xb5\xfc~\x98\x1a\x13\x7f\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) 13.67087984s ago: executing program 5 (id=3189): landlock_create_ruleset$auto(0x0, 0x9, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0xa2900, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x2e2102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyu3\x00', 0x1, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0xda9) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008014, r2, 0x0) getresgid$auto(0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) mmap$auto(0x0, 0x400008, 0xd5, 0x9b72, 0x2, 0x8000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttysb\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, 0x0, 0x0) r4 = socket(0x2a, 0x2, 0x1) connect$auto(r4, 0x0, 0x55) mmap$auto(0x0, 0x8, 0x89, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) 12.868869215s ago: executing program 5 (id=3191): socket(0x2, 0x800, 0x73) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) select$auto(0x1, &(0x7f0000000240)={[0x3, 0x9, 0x81, 0x80000001000000, 0x6, 0x0, 0x6, 0xffff, 0x7621, 0x3, 0x711e, 0xd, 0x2, 0x3, 0x6, 0x80000001]}, &(0x7f0000000340)={[0x8, 0x0, 0x0, 0x0, 0x100, 0x1, 0x4, 0x10001, 0x317, 0x8001, 0xaa4, 0x5, 0xd0f, 0xf, 0x2]}, &(0x7f0000000440)={[0x4, 0xffff, 0x5, 0x4, 0x4, 0x1c842721, 0x1, 0x30a, 0x8000000000000001, 0x7, 0x2, 0x7555, 0x1ff, 0x32a, 0x1, 0x5b12]}, &(0x7f00000003c0)={0x3, 0x5c2}) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r3, 0x220, 0x70bd26, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004814}, 0x144) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xfffffffffffffffc, 0xcc34, 0xd3e, 0x1, 0x1, 0x8, 0x95f4da0b, 0x10001, 0x3, 0x2f, 0x7ffffffe, 0x7, 0x6d3f, 0x4c, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0xbab, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x80000001, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000001240)='4', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCGPTPEER2(r5, 0x5441, 0x0) 11.296090356s ago: executing program 5 (id=3195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0xbb) mmap$auto(0x2000000002, 0x6, 0x2, 0x110, r2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) getpid() r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r5, 0x0, 0x20040800) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xd0}, 0x20000400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r4, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) socket(0xa, 0x1, 0xfffffeff) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, 0x0, 0x80040, 0x0) unshare$auto(0x40000080) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x2, 0x2, 0x7fff7ffb, 0x81, 0x8, 0x9, 0x3]}, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r1, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 7.764358336s ago: executing program 2 (id=3202): socket(0x2, 0x800, 0x73) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) select$auto(0x1, &(0x7f0000000240)={[0x3, 0x9, 0x81, 0x80000001000000, 0x6, 0x0, 0x6, 0xffff, 0x7621, 0x3, 0x711e, 0xd, 0x2, 0x3, 0x6, 0x80000001]}, &(0x7f0000000340)={[0x8, 0x0, 0x0, 0x0, 0x100, 0x1, 0x4, 0x10001, 0x317, 0x8001, 0xaa4, 0x5, 0xd0f, 0xf, 0x2]}, &(0x7f0000000440)={[0x4, 0xffff, 0x5, 0x4, 0x4, 0x1c842721, 0x1, 0x30a, 0x8000000000000001, 0x7, 0x2, 0x7555, 0x1ff, 0x32a, 0x1, 0x5b12]}, &(0x7f00000003c0)={0x3, 0x5c2}) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r3, 0x220, 0x70bd26, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004814}, 0x144) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xfffffffffffffffc, 0xcc34, 0xd3e, 0x1, 0x1, 0x8, 0x95f4da0b, 0x10001, 0x3, 0x2f, 0x7ffffffe, 0x7, 0x6d3f, 0x4c, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000001240)='4', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCGPTPEER2(r5, 0x5441, 0x0) 7.683537371s ago: executing program 6 (id=3203): socket(0x2, 0x800, 0x73) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) select$auto(0x1, &(0x7f0000000240)={[0x3, 0x9, 0x81, 0x80000001000000, 0x6, 0x0, 0x6, 0xffff, 0x7621, 0x3, 0x711e, 0xd, 0x2, 0x3, 0x6, 0x80000001]}, &(0x7f0000000340)={[0x8, 0x0, 0x0, 0x0, 0x100, 0x1, 0x4, 0x10001, 0x317, 0x8001, 0xaa4, 0x5, 0xd0f, 0xf, 0x2]}, &(0x7f0000000440)={[0x4, 0xffff, 0x5, 0x4, 0x4, 0x1c842721, 0x1, 0x30a, 0x8000000000000001, 0x7, 0x2, 0x7555, 0x1ff, 0x32a, 0x1, 0x5b12]}, &(0x7f00000003c0)={0x3, 0x5c2}) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r3, 0x220, 0x70bd26, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004814}, 0x144) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xfffffffffffffffc, 0xcc34, 0xd3e, 0x1, 0x1, 0x8, 0x95f4da0b, 0x10001, 0x3, 0x2f, 0x7ffffffe, 0x7, 0x6d3f, 0x4c, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0xbab, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x80000001, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000001240)='4', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCGPTPEER2(r5, 0x5441, 0x0) 6.36850847s ago: executing program 6 (id=3204): socket(0x2, 0x800, 0x73) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) select$auto(0x1, &(0x7f0000000240)={[0x3, 0x9, 0x81, 0x80000001000000, 0x6, 0x0, 0x6, 0xffff, 0x7621, 0x3, 0x711e, 0xd, 0x2, 0x3, 0x6, 0x80000001]}, &(0x7f0000000340)={[0x8, 0x0, 0x0, 0x0, 0x100, 0x1, 0x4, 0x10001, 0x317, 0x8001, 0xaa4, 0x5, 0xd0f, 0xf, 0x2]}, &(0x7f0000000440)={[0x4, 0xffff, 0x5, 0x4, 0x4, 0x1c842721, 0x1, 0x30a, 0x8000000000000001, 0x7, 0x2, 0x7555, 0x1ff, 0x32a, 0x1, 0x5b12]}, &(0x7f00000003c0)={0x3, 0x5c2}) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r3, 0x220, 0x70bd26, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004814}, 0x144) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xfffffffffffffffc, 0xcc34, 0xd3e, 0x1, 0x1, 0x8, 0x95f4da0b, 0x10001, 0x3, 0x2f, 0x7ffffffe, 0x7, 0x6d3f, 0x4c, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0xbab, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x80000001, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000001240)='4', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCGPTPEER2(r5, 0x5441, 0x0) 6.222123766s ago: executing program 2 (id=3205): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd5/queue/iosched/prio_aging_expire\x00', 0xa0101, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, &(0x7f0000000280)={0x81, 0x80003, 0xd, @lost_msgs={0x80000000}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0xa482, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x0, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x4, 0x2, 0x10, &(0x7f0000000040)=0x7) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x400203, 0x8, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000002, 0x80000000, 0xfe1, 0x3, 0x6d3c, 0x4, 0x2, 0x1]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x8200000001, 0x0, 0x801, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/function\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000380)=""/4, 0x4) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x400000000, 0xaee, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x9, &(0x7f0000000680)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI+\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\x1e\t\xef\xe4&\x91\x8ey\x97\x00e:\v\xe6\x14\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2\x96\xf97\xe3\x05\xf7\x19\x9f\xb7r\x9b-=\\N\xc7\xc3\xbcg:\xaf\xb1\x1d\xa1\xe4\xb7\xd6\xe4\xb6\x1c\x11LE\xb7\xcb\x1bTD\xa6\v\xf8\xa5\xce%-\x06FVa\xc8\xca\xc5\xea\bF\xc2\x94\xef\nI\xe6\x04\xbe\xe8-d]Q\xfc.5 \xa7@w\xd8\xd9pEW\xe4`\x85;d\t\xd8\x10lT\x88xS{\xb9\x94P\xc3\x1f\x0f\xbc\xcb\xbc\xe9\x85zC\x86\xc976\xf8\xb3\x85lQ\xdd\x9c\xc6\x93mA\x1dH#fr2\xed \x8a\xc5\x8f\x01\x9a\x01I\x95H)rEF\xe2\x00\x11\x18\xfb\xc7N\x02Qn\x92\xa8\x8c\x87\xc4\x1c/\xf4\x15\xa6\xea\xa9A8\x99(\xfds@aq\xbeo&}\x9f`\xc1\xd3\xecYU\x11!\x8a8\xf5B6\xc6\x83\xf1\x93\xaa\x1c\x81`\xbe\xfcO\v<>\r\xcc\xd5C\x93\xe0\xcd\x125K\xb40x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) r3 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) read$auto_ocfs2_control_fops_stack_user(r3, &(0x7f0000000040)=""/1, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x700) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000240)="1c520b214b19", 0x6) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000ff, 0x400, 0x9}]}) setgroups$auto(0xe32, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.419687819s ago: executing program 2 (id=3207): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu0/topology/die_cpus_list\x00', 0x8304, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x2, 0x2) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11RTSFailureCount\x00', 0x2, 0x0) preadv$auto(0x40000000000003, &(0x7f00000000c0)={0x0, 0xff7ffffd}, 0x9, 0x8f, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x1d, 0x3, 0x1) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r2, 0x7439) creat$auto(&(0x7f0000000280)=']\\\xe8@!^).\'\x00', 0xcc38) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x30, r3, 0x1, 0x703d28, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40084}, 0x4c884) getsockopt$auto(r1, 0x65, 0x1, 0xffffffffffffffff, 0x0) r5 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x101000, 0x0) r6 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_qrtr_tun_ops_tun(r6, &(0x7f0000000300)="01000000d80746ebe4fa29705e2e654014f2bc90628546cda7e9ce67b7d2ab52b096b449a312a437bac96a8cbd5f23dc7bf6f14d15f2f273c36ef21cef7aeb39937ef4ea2f4dd48bc81624c1ed60c83c39ba4d4ebee5b273c9888dbd978927b4b89795bcfc7ce379345bea07636878f456f4e82905ddfef781fbf9825f22c3d1af4a2295e2fad62ed1a9fa2db5eff40233560c88004511ae", 0x98) write$auto_configfs_file_operations_configfs_internal(r5, &(0x7f0000000640)="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", 0x1000) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/cpuid\x00', 0x40200, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x1, 0x0) r9 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bus/usb/029/001\x00', 0x2, 0x0) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r9, 0x8008551c, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)={0x3c, r8, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfffffffffffffff7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f0000001640)={0x454, 0x0, 0x408, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@nested={0xc, 0x13f, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast1}]}]}, @NL80211_ATTR_IE_RIC={0x424, 0xb2, "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"}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6}]}, 0x454}, 0x1, 0x0, 0x0, 0x760e9c1d8b97e44b}, 0x4004) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001c00)=""/4111, 0x100f) 4.191030452s ago: executing program 2 (id=3208): socket(0x2, 0x800, 0x73) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) select$auto(0x1, &(0x7f0000000240)={[0x3, 0x9, 0x81, 0x80000001000000, 0x6, 0x0, 0x6, 0xffff, 0x7621, 0x3, 0x711e, 0xd, 0x2, 0x3, 0x6, 0x80000001]}, &(0x7f0000000340)={[0x8, 0x0, 0x0, 0x0, 0x100, 0x1, 0x4, 0x10001, 0x317, 0x8001, 0xaa4, 0x5, 0xd0f, 0xf, 0x2]}, &(0x7f0000000440)={[0x4, 0xffff, 0x5, 0x4, 0x4, 0x1c842721, 0x1, 0x30a, 0x8000000000000001, 0x7, 0x2, 0x7555, 0x1ff, 0x32a, 0x1, 0x5b12]}, &(0x7f00000003c0)={0x3, 0x5c2}) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), r0) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r3, 0x220, 0x70bd26, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004814}, 0x144) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xfffffffffffffffc, 0xcc34, 0xd3e, 0x1, 0x1, 0x8, 0x95f4da0b, 0x10001, 0x3, 0x2f, 0x7ffffffe, 0x7, 0x6d3f, 0x4c, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0xbab, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x80000001, 0x6]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000001240)='4', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCGPTPEER2(r5, 0x5441, 0x0) 4.12557216s ago: executing program 6 (id=3209): syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) socket(0x848000000015, 0x805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb4, 0xffffffffffffffff, 0x300000000000) socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) fsopen$auto(0x0, 0x3) semctl$auto(0x402af7, 0x2, 0x4, 0x10002) r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2a801, 0x0) pwrite64$auto(r0, 0x0, 0x7b05, 0x1800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0xc800) r3 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r3, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) ioctl$auto(r1, 0x4b72, r2) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) fcntl$auto(0xffffffffffffffff, 0x7, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) 3.875589316s ago: executing program 6 (id=3210): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4000000000fc2}, 0x8, 0x0, 0x7, 0x5}, 0xb30}, 0x7, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) rt_sigqueueinfo$auto(0x0, 0xc74, &(0x7f0000000000)={@_si_pad}) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) futex$auto(0x0, 0x89, 0x4, 0x0, 0x0, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x10b201, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000081, 0xf8, 0xfffffffffffffffa, 0x8000) write$auto(r0, 0x0, 0x996) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x30b142, 0x0) umount2$auto(&(0x7f0000000040)='/proc/\x00\x18s/fs/bin\xe6mt_\xe9\xdf\xe2%\f\x16#9\x00\x00\x00\x00\x00\x00\xbe\xe6]\x01\x18|T\x9ev\x15\xdcEM*\t\x91\xbbb\xc9X\xee<\xc4T\xc2dRw\xb6*A\x97\xf6\xf8\xeb\a\xf9\x06\x13\xdf)0\xef\xec\x1c\xc4\xf3\x02\xdf\xeea\x95>O\xa5\x03\x00'/102, 0x8) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x4c094) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) writev$auto(r3, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x14, r5, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_CREATE_VM(r1, 0x8188aea6, 0x0) 2.771380918s ago: executing program 6 (id=3211): r0 = socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x8, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) getsockopt$auto_SO_TXREHASH(r0, 0xced5, 0x4a, &(0x7f0000000080)='/dev/kvm\x00', &(0x7f0000000180)=0x7) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x8, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mlock$auto(0x1, 0x6) mbind$auto(0x80000000, 0x100000004, 0x5, 0x0, 0x2, 0x80000005) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket(0x2, 0x5, 0x0) 2.538148352s ago: executing program 2 (id=3212): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x9, 0x0, 0xfb3) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8000, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0xd, 0xb979, 0x8000001f, 0x1000, 0x6d3d, 0xc, 0x2, 0x8]}, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/tracing/tracing_on\x00', 0x2, 0x0) sendmsg$auto(r2, 0x0, 0x5) select$auto(0xe, &(0x7f00000000c0)={[0xeeca, 0x7, 0xb, 0x9, 0x6, 0x1fc, 0x6, 0x3, 0x2, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0xc, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) unshare$auto(0x40000080) sendmsg$auto_NFC_CMD_GET_DEVICE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000740)={0x158, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x4}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0xff}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6}, @NFC_ATTR_VENDOR_DATA={0x10c, 0x1f, "3e3fe36d2345c4a0204e78d05c864042975f4eb9e314243e49d7e98adb21c07b702a4b5d172d64253010602703b76d4ad5a4ef0a65b8b595c314c263f23bf62adaae34fb3e709d2f5dfaf9f77ed1cc0ba0215d7b170a39ab66e1ef0b72f41da7341218461f5d028d826e0dcd1fafd700943cee4934a7aa18c7b0deee0597ba303c344cfad1b65649cda9ea2667c440759f936c60abdb555eb86c93e8cd4981386b86f4c8af855bb00e00afa1437cb3d72420b6bae18e9691dc8621e1f1330952ea61dea3c66dbb782cdfff01b92929a972c395317754ba9e76a09759828d5a54784dd4df1639a729670d024b50095daabf3d4da5e9040000000000000036077aebaca627c49a4ca2"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xff}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_FIRMWARE_NAME={0xe, 0x14, '/dev/vmci\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0x48000}, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000240)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x841}, 0x200000c0) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r3, &(0x7f0000000100)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~15\x9dv\xb2H', 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) 1.429910627s ago: executing program 2 (id=3213): mmap$auto(0x0, 0x8, 0xdf, 0x9b73, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x20009, 0x8, 0xeb1, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x48041, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(r0, 0x550c, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x20204, 0x1a00) r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r1, &(0x7f0000000640)=""/188, 0xbc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x23, 0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x18080, 0x0) listmount$auto(0x0, 0x0, 0xf4240, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x337601, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x1a1080, 0x0) mkdir$auto(&(0x7f0000000080)='}[,&*}\x00', 0x6) mmap$auto(0xfffffffffffffffe, 0x40009, 0xdf, 0x8000000000000010, 0x7, 0x27ffd) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/batman_adv/parameters/routing_algo\x00', 0x8182, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x208080, 0x0) 0s ago: executing program 35 (id=3187): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x0, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x4, 0x2, 0x10, &(0x7f0000000040)=0x7) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x4001ff, 0x7, 0x6, 0x1, 0x948b, 0x3, 0x1, 0x572f14dc, 0x80000000, 0x80000000, 0x0, 0x7, 0x6d3c, 0x4, 0x2, 0x1]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.stat\x00', 0x280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/20, 0xfffffcc4) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='\x01\x00\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47P\xb5\xfc~\x98\x1a\x13\x7f\xfd\x9b\xe4\x99G\xeaS\x9a\xadu(:\x94:\xaf\x06c=3>1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                       [ 1389.537053][T21759] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1389.565158][T21759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2369'. syzkaller syzkaller login: [ 1395.832867][T21834] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1395.844786][T21834] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2380'. [ 1401.777953][T21878] random: crng reseeded on system resumption [ 1404.671134][T21922] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1404.719791][T21922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2392'. [ 1406.138164][T21940] FAULT_INJECTION: forcing a failure. [ 1406.138164][T21940] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.138200][T21940] CPU: 1 UID: 0 PID: 21940 Comm: syz.1.2395 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1406.138230][T21940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1406.138245][T21940] Call Trace: [ 1406.138252][T21940] [ 1406.138261][T21940] dump_stack_lvl+0x16c/0x1f0 [ 1406.138295][T21940] should_fail_ex+0x512/0x640 [ 1406.138329][T21940] ? __kmalloc_noprof+0xbf/0x510 [ 1406.138359][T21940] ? vc_allocate+0x489/0x880 [ 1406.138388][T21940] should_failslab+0xc2/0x120 [ 1406.138420][T21940] __kmalloc_noprof+0xd2/0x510 [ 1406.138455][T21940] vc_allocate+0x489/0x880 [ 1406.138495][T21940] ? __pfx_vc_allocate+0x10/0x10 [ 1406.138535][T21940] con_install+0xa1/0x600 [ 1406.138568][T21940] ? __pfx_con_install+0x10/0x10 [ 1406.138605][T21940] ? __pfx_con_install+0x10/0x10 [ 1406.138636][T21940] tty_init_dev.part.0+0x9c/0x500 [ 1406.138674][T21940] tty_open+0xa50/0xf90 [ 1406.138728][T21940] ? __pfx_tty_open+0x10/0x10 [ 1406.138762][T21940] ? chrdev_open+0x10b/0x6a0 [ 1406.138804][T21940] ? __pfx_tty_open+0x10/0x10 [ 1406.138838][T21940] chrdev_open+0x231/0x6a0 [ 1406.138867][T21940] ? __pfx_apparmor_file_open+0x10/0x10 [ 1406.138893][T21940] ? __pfx_chrdev_open+0x10/0x10 [ 1406.138926][T21940] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1406.138959][T21940] do_dentry_open+0x97f/0x1530 [ 1406.138988][T21940] ? __pfx_chrdev_open+0x10/0x10 [ 1406.139025][T21940] vfs_open+0x82/0x3f0 [ 1406.139065][T21940] path_openat+0x1de4/0x2cb0 [ 1406.139103][T21940] ? __pfx_path_openat+0x10/0x10 [ 1406.139139][T21940] do_filp_open+0x20b/0x470 [ 1406.139167][T21940] ? __pfx_do_filp_open+0x10/0x10 [ 1406.139217][T21940] ? alloc_fd+0x471/0x7d0 [ 1406.139250][T21940] do_sys_openat2+0x11b/0x1d0 [ 1406.139285][T21940] ? __pfx_do_sys_openat2+0x10/0x10 [ 1406.139333][T21940] __x64_sys_openat+0x174/0x210 [ 1406.139370][T21940] ? __pfx___x64_sys_openat+0x10/0x10 [ 1406.139419][T21940] do_syscall_64+0xcd/0x490 [ 1406.139452][T21940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.139477][T21940] RIP: 0033:0x7fd4f778ebe9 [ 1406.139496][T21940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.139519][T21940] RSP: 002b:00007fd4f85ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1406.139541][T21940] RAX: ffffffffffffffda RBX: 00007fd4f79b6090 RCX: 00007fd4f778ebe9 [ 1406.139557][T21940] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1406.139572][T21940] RBP: 00007fd4f7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1406.139586][T21940] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1406.139600][T21940] R13: 00007fd4f79b6128 R14: 00007fd4f79b6090 R15: 00007ffe0a555038 [ 1406.139630][T21940] [ 1410.727744][T21993] random: crng reseeded on system resumption [ 1411.118051][T22001] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1411.143077][T22001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2405'. [ 1413.786805][T22020] delete_channel: no stack [ 1423.164387][T22149] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1423.176066][T22149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2428'. [ 1428.875546][T22217] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1429.022245][T22217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2439'. [ 1430.709042][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1430.717525][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1444.755206][T22373] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1444.775145][T22373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2460'. [ 1445.820589][T22378] random: crng reseeded on system resumption [ 1450.260566][T22436] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1450.350277][T22436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2471'. [ 1459.706246][T22549] FAULT_INJECTION: forcing a failure. [ 1459.706246][T22549] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.719333][T22549] CPU: 0 UID: 0 PID: 22549 Comm: syz.0.2486 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1459.719367][T22549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1459.719382][T22549] Call Trace: [ 1459.719390][T22549] [ 1459.719399][T22549] dump_stack_lvl+0x16c/0x1f0 [ 1459.719434][T22549] should_fail_ex+0x512/0x640 [ 1459.719475][T22549] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1459.719514][T22549] should_failslab+0xc2/0x120 [ 1459.719555][T22549] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1459.719590][T22549] ? alloc_super+0x52/0xbd0 [ 1459.719631][T22549] alloc_super+0x52/0xbd0 [ 1459.719673][T22549] ? sget_fc+0xd3/0xc20 [ 1459.719715][T22549] sget_fc+0x116/0xc20 [ 1459.719752][T22549] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1459.719786][T22549] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1459.719837][T22549] get_tree_nodev+0x28/0x190 [ 1459.719878][T22549] mqueue_get_tree+0xf1/0x130 [ 1459.719929][T22549] vfs_get_tree+0x8b/0x340 [ 1459.719959][T22549] fc_mount_longterm+0x18/0x160 [ 1459.720014][T22549] mq_init_ns+0x426/0x620 [ 1459.720052][T22549] copy_ipcs+0x383/0x610 [ 1459.720085][T22549] ? copy_utsname+0xab/0x470 [ 1459.720130][T22549] create_new_namespaces+0x20a/0xa90 [ 1459.720167][T22549] ? security_capable+0x7e/0x260 [ 1459.720202][T22549] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1459.720244][T22549] ksys_unshare+0x45b/0xa40 [ 1459.720290][T22549] ? __pfx_ksys_unshare+0x10/0x10 [ 1459.720337][T22549] ? xfd_validate_state+0x61/0x180 [ 1459.720400][T22549] __x64_sys_unshare+0x31/0x40 [ 1459.720443][T22549] do_syscall_64+0xcd/0x490 [ 1459.720487][T22549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1459.720516][T22549] RIP: 0033:0x7f647538ebe9 [ 1459.720535][T22549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1459.720565][T22549] RSP: 002b:00007f6476257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1459.720588][T22549] RAX: ffffffffffffffda RBX: 00007f64755b6180 RCX: 00007f647538ebe9 [ 1459.720604][T22549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 1459.720618][T22549] RBP: 00007f6475411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1459.720632][T22549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1459.720646][T22549] R13: 00007f64755b6218 R14: 00007f64755b6180 R15: 00007ffc2df82908 [ 1459.720682][T22549] [ 1462.015175][T22578] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 1462.100415][T22578] hub 3-0:1.0: USB hub found [ 1462.137227][T22578] hub 3-0:1.0: 1 port detected [ 1462.207084][T22578] usb usb3: authorized to connect [ 1462.632067][T22588] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1463.325857][T22594] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1470.622106][T22689] random: crng reseeded on system resumption [ 1474.232981][T22733] random: crng reseeded on system resumption [ 1475.372017][T22742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2515'. [ 1475.383010][T22742] openvswitch: HfR: Dropping previously announced user features [ 1475.477637][T22746] ACPI: Can not change Invalid GPE/Fixed Event status [ 1479.792603][T22756] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1482.013918][T22818] FAULT_INJECTION: forcing a failure. [ 1482.013918][T22818] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.075974][T22818] CPU: 1 UID: 0 PID: 22818 Comm: syz.3.2525 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1482.076021][T22818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1482.076040][T22818] Call Trace: [ 1482.076052][T22818] [ 1482.076065][T22818] dump_stack_lvl+0x16c/0x1f0 [ 1482.076114][T22818] should_fail_ex+0x512/0x640 [ 1482.076178][T22818] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1482.076224][T22818] should_failslab+0xc2/0x120 [ 1482.076269][T22818] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1482.076309][T22818] ? key_alloc+0xbd4/0x1330 [ 1482.076351][T22818] ? key_alloc+0xbef/0x1330 [ 1482.076398][T22818] key_alloc+0xbef/0x1330 [ 1482.076456][T22818] ? __pfx_key_alloc+0x10/0x10 [ 1482.076511][T22818] keyring_alloc+0x44/0xc0 [ 1482.076564][T22818] keyctl_get_persistent+0x6a8/0x8c0 [ 1482.076614][T22818] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 1482.076669][T22818] ? __x64_sys_futex+0x1e0/0x4c0 [ 1482.076710][T22818] ? __x64_sys_futex+0x1e9/0x4c0 [ 1482.076760][T22818] ? xfd_validate_state+0x61/0x180 [ 1482.076819][T22818] __do_sys_keyctl+0x1a9/0x590 [ 1482.076857][T22818] do_syscall_64+0xcd/0x490 [ 1482.076911][T22818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.076946][T22818] RIP: 0033:0x7effb9f8ebe9 [ 1482.076973][T22818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1482.077012][T22818] RSP: 002b:00007effbad12038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 1482.077044][T22818] RAX: ffffffffffffffda RBX: 00007effba1b6270 RCX: 00007effb9f8ebe9 [ 1482.077064][T22818] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000016 [ 1482.077083][T22818] RBP: 00007effba011e19 R08: 0000000000000001 R09: 0000000000000000 [ 1482.077101][T22818] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 1482.077120][T22818] R13: 00007effba1b6308 R14: 00007effba1b6270 R15: 00007fffcecacd48 [ 1482.077164][T22818] [ 1485.052240][T22846] random: crng reseeded on system resumption [ 1491.813050][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1491.856814][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1492.347405][T22944] ptrace attach of "./syz-executor exec"[5862] was attempted by "./syz-executor exec"[22944] [ 1497.898662][T22987] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1497.906736][T23010] random: crng reseeded on system resumption [ 1504.628286][T23077] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1511.647821][T23164] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1514.855130][T23192] ubi: mtd0 is already attached to ubi0 [ 1515.713956][T23194] random: crng reseeded on system resumption [ 1515.956852][T23180] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1516.641251][T23208] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1518.042530][T23221] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1518.380223][T23226] ptrace attach of "./syz-executor exec"[5869] was attempted by "./syz-executor exec"[23226] [ 1523.641170][T23285] vivid-007: ================= START STATUS ================= [ 1523.648856][T23285] vivid-007: Generate PTS: true [ 1523.675768][T23285] vivid-007: Generate SCR: true [ 1523.681017][T23287] random: crng reseeded on system resumption [ 1523.691068][T23285] tpg source WxH: 320x240 (Y'CbCr) [ 1523.746429][T23285] tpg field: 1 [ 1523.764343][T23285] tpg crop: (0,0)/320x240 [ 1523.768757][T23285] tpg compose: (0,0)/320x240 [ 1523.889815][T23285] tpg colorspace: 8 [ 1523.899735][T23285] tpg transfer function: 0/0 [ 1523.906460][T23285] tpg Y'CbCr encoding: 0/0 [ 1523.965341][T23285] tpg quantization: 0/0 [ 1523.979489][T23285] tpg RGB range: 0/2 [ 1523.983701][T23285] vivid-007: ================== END STATUS ================== [ 1524.622113][T23285] can: request_module (can-proto-3) failed. [ 1525.431482][T23317] bond0: option all_slaves_active: invalid value () [ 1533.252578][T23386] FAULT_INJECTION: forcing a failure. [ 1533.252578][T23386] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.469859][T23386] CPU: 0 UID: 0 PID: 23386 Comm: syz.0.2620 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1533.469907][T23386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1533.469928][T23386] Call Trace: [ 1533.469939][T23386] [ 1533.469952][T23386] dump_stack_lvl+0x16c/0x1f0 [ 1533.470001][T23386] should_fail_ex+0x512/0x640 [ 1533.470048][T23386] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1533.470095][T23386] should_failslab+0xc2/0x120 [ 1533.470141][T23386] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1533.470182][T23386] ? __kernfs_new_node+0xd2/0x8e0 [ 1533.470241][T23386] __kernfs_new_node+0xd2/0x8e0 [ 1533.470290][T23386] ? __pfx___kernfs_new_node+0x10/0x10 [ 1533.470351][T23386] ? find_held_lock+0x2b/0x80 [ 1533.470384][T23386] ? kernfs_root+0xee/0x2a0 [ 1533.470434][T23386] kernfs_new_node+0x13c/0x1e0 [ 1533.470490][T23386] __kernfs_create_file+0x53/0x350 [ 1533.470530][T23386] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1533.470580][T23386] internal_create_group+0x578/0xf30 [ 1533.470636][T23386] ? __pfx_internal_create_group+0x10/0x10 [ 1533.470687][T23386] ? kernfs_create_link+0x1bd/0x240 [ 1533.470728][T23386] internal_create_groups+0x9d/0x150 [ 1533.470777][T23386] device_add+0x731/0x1aa0 [ 1533.470833][T23386] ? __pfx_device_add+0x10/0x10 [ 1533.470889][T23386] ? lockdep_init_map_type+0x5c/0x280 [ 1533.470944][T23386] input_register_device+0x7e8/0x1180 [ 1533.470978][T23386] ? input_ff_create+0x256/0x350 [ 1533.471021][T23386] uinput_ioctl_handler.isra.0+0x1357/0x1df0 [ 1533.471067][T23386] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1533.471120][T23386] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1533.471174][T23386] ? find_held_lock+0x2b/0x80 [ 1533.471233][T23386] ? __pfx_uinput_ioctl+0x10/0x10 [ 1533.471277][T23386] __x64_sys_ioctl+0x18e/0x210 [ 1533.471331][T23386] do_syscall_64+0xcd/0x490 [ 1533.471376][T23386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.471408][T23386] RIP: 0033:0x7f647538ebe9 [ 1533.471433][T23386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1533.471465][T23386] RSP: 002b:00007f6476299038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1533.471496][T23386] RAX: ffffffffffffffda RBX: 00007f64755b5fa0 RCX: 00007f647538ebe9 [ 1533.471517][T23386] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1533.471537][T23386] RBP: 00007f6475411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1533.471557][T23386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1533.471578][T23386] R13: 00007f64755b6038 R14: 00007f64755b5fa0 R15: 00007ffc2df82908 [ 1533.471621][T23386] [ 1534.506638][T23406] vivid-007: ================= START STATUS ================= [ 1534.514344][T23406] vivid-007: Generate PTS: true [ 1534.520003][T23406] vivid-007: Generate SCR: true [ 1534.534346][T23406] tpg source WxH: 320x240 (Y'CbCr) [ 1534.549518][T23406] tpg field: 1 [ 1534.559584][T23406] tpg crop: (0,0)/320x240 [ 1534.601791][T23406] tpg compose: (0,0)/320x240 [ 1534.611098][T23406] tpg colorspace: 8 [ 1534.655163][T23406] tpg transfer function: 0/0 [ 1534.659919][T23406] tpg Y'CbCr encoding: 0/0 [ 1534.708585][T23406] tpg quantization: 0/0 [ 1534.712989][T23406] tpg RGB range: 0/2 [ 1534.717401][T23406] vivid-007: ================== END STATUS ================== [ 1535.247229][T23407] can: request_module (can-proto-3) failed. [ 1536.102103][T23422] ALSA: mixer_oss: invalid OSS volume '0' [ 1536.121998][T23422] ALSA: mixer_oss: invalid OSS volume '' [ 1549.798714][T23588] ALSA: mixer_oss: invalid OSS volume '0' [ 1549.807319][T23588] ALSA: mixer_oss: invalid OSS volume '' [ 1550.332277][T23590] vivid-007: ================= START STATUS ================= [ 1550.401980][T23590] vivid-007: Generate PTS: true [ 1550.512946][T23590] vivid-007: Generate SCR: true [ 1550.578385][T23590] tpg source WxH: 320x240 (Y'CbCr) [ 1550.830274][T23590] tpg field: 1 [ 1550.833849][T23590] tpg crop: (0,0)/320x240 [ 1550.838330][T23590] tpg compose: (0,0)/320x240 [ 1550.843276][T23590] tpg colorspace: 8 [ 1550.847247][T23590] tpg transfer function: 0/0 [ 1550.852071][T23590] tpg Y'CbCr encoding: 0/0 [ 1550.856662][T23590] tpg quantization: 0/0 [ 1550.861332][T23590] tpg RGB range: 0/2 [ 1550.865534][T23590] vivid-007: ================== END STATUS ================== [ 1552.835593][T23598] can: request_module (can-proto-3) failed. [ 1552.933583][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.968558][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1558.556593][T23708] vivid-007: ================= START STATUS ================= [ 1558.606353][T23708] vivid-007: Generate PTS: true [ 1558.624719][T23708] vivid-007: Generate SCR: true [ 1558.651328][T23708] tpg source WxH: 320x240 (Y'CbCr) [ 1558.659100][T23708] tpg field: 1 [ 1558.662618][T23708] tpg crop: (0,0)/320x240 [ 1558.671476][T23708] tpg compose: (0,0)/320x240 [ 1558.689279][T23708] tpg colorspace: 8 [ 1558.693182][T23708] tpg transfer function: 0/0 [ 1558.718639][T23708] tpg Y'CbCr encoding: 0/0 [ 1558.788285][T23708] tpg quantization: 0/0 [ 1558.793136][T23708] tpg RGB range: 0/2 [ 1558.797129][T23708] vivid-007: ================== END STATUS ================== [ 1559.427477][T23709] can: request_module (can-proto-3) failed. [ 1563.841938][T23767] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1563.855476][T23767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2668'. [ 1564.231387][T23780] ubi: mtd0 is already attached to ubi0 [ 1570.061789][T23822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1570.077602][T23822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1570.175394][T23822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1572.109241][T11001] Bluetooth: hci0: command 0x0c1a tx timeout [ 1572.115692][ T5182] Bluetooth: hci1: command 0x0c1a tx timeout [ 1572.188576][ T5182] Bluetooth: hci2: command 0x0c1a tx timeout [ 1575.096554][T23871] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1575.117219][T23871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2680'. [ 1580.730776][T23930] vivid-007: ================= START STATUS ================= [ 1580.744072][T23930] vivid-007: Generate PTS: true [ 1580.749028][T23930] vivid-007: Generate SCR: true [ 1580.764409][T23930] tpg source WxH: 320x240 (Y'CbCr) [ 1580.774446][T23930] tpg field: 1 [ 1580.778095][T23930] tpg crop: (0,0)/320x240 [ 1580.815967][T23930] tpg compose: (0,0)/320x240 [ 1580.820619][T23930] tpg colorspace: 8 [ 1580.845997][T23930] tpg transfer function: 0/0 [ 1580.853648][T23930] tpg Y'CbCr encoding: 0/0 [ 1580.891625][T23930] tpg quantization: 0/0 [ 1580.896309][T23930] tpg RGB range: 0/2 [ 1580.905812][T23930] vivid-007: ================== END STATUS ================== [ 1581.694812][T23934] can: request_module (can-proto-3) failed. [ 1585.051843][T23996] ALSA: mixer_oss: invalid OSS volume '0' [ 1585.057905][T23996] ALSA: mixer_oss: invalid OSS volume '' [ 1585.542742][T24004] ubi: mtd0 is already attached to ubi0 [ 1587.338638][ T30] audit: type=1800 audit(6049767540.399:246): pid=24031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2700" name="dbroot" dev="configfs" ino=64529 res=0 errno=0 [ 1587.635221][T24036] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1589.670365][T24050] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1589.677036][T24050] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1589.686201][T24050] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1591.697148][ T5182] Bluetooth: hci2: command 0x0c1a tx timeout [ 1591.703279][T11001] Bluetooth: hci1: command 0x0c1a tx timeout [ 1591.709493][T11001] Bluetooth: hci0: command 0x0c1a tx timeout [ 1593.558533][T24111] ALSA: mixer_oss: invalid OSS volume '0' [ 1593.564399][T24111] ALSA: mixer_oss: invalid OSS volume '' [ 1597.759256][T24165] vivid-003: ================= START STATUS ================= [ 1597.787448][T24165] vivid-003: Radio HW Seek Mode: Bounded [ 1597.796978][T24165] vivid-003: Radio Programmable HW Seek: false [ 1597.805018][T24165] vivid-003: RDS Rx I/O Mode: Block I/O [ 1597.811901][T24165] vivid-003: Generate RBDS Instead of RDS: false [ 1597.819042][T24165] vivid-003: RDS Reception: true [ 1597.824381][T24165] vivid-003: RDS Program Type: 0 inactive [ 1597.833686][T24165] vivid-003: RDS PS Name: inactive [ 1597.839696][T24165] vivid-003: RDS Radio Text: inactive [ 1597.846538][T24165] vivid-003: RDS Traffic Announcement: false inactive [ 1597.864379][T24165] vivid-003: RDS Traffic Program: false inactive [ 1597.874155][T24165] vivid-003: RDS Music: false inactive [ 1597.880374][T24165] vivid-003: ================== END STATUS ================== [ 1597.915949][T24169] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1597.922610][T24169] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1597.929700][T24169] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1600.028500][T24095] Bluetooth: hci2: command 0x0c1a tx timeout [ 1600.043911][T24095] Bluetooth: hci1: command 0x0c1a tx timeout [ 1600.050113][T24095] Bluetooth: hci0: command 0x0c1a tx timeout [ 1601.052974][T24214] dyndbg: bad flag-op /, at start of /proc/sel [ 1601.060700][T24214] dyndbg: flags parse failed [ 1602.188339][T24220] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 1602.205666][T24220] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 1602.540187][T24221] FAULT_INJECTION: forcing a failure. [ 1602.540187][T24221] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1602.558332][T24221] CPU: 0 UID: 0 PID: 24221 Comm: syz.1.2730 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1602.558382][T24221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1602.558402][T24221] Call Trace: [ 1602.558412][T24221] [ 1602.558425][T24221] dump_stack_lvl+0x16c/0x1f0 [ 1602.558472][T24221] should_fail_ex+0x512/0x640 [ 1602.558534][T24221] should_fail_alloc_page+0xe7/0x130 [ 1602.558583][T24221] prepare_alloc_pages+0x3c2/0x610 [ 1602.558635][T24221] ? arch_stack_walk+0xa6/0x100 [ 1602.558675][T24221] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1602.558720][T24221] ? __lock_acquire+0x62e/0x1ce0 [ 1602.558769][T24221] ? __pfx_stack_trace_save+0x10/0x10 [ 1602.558812][T24221] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1602.558851][T24221] ? __lock_acquire+0x62e/0x1ce0 [ 1602.558920][T24221] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1602.558973][T24221] ? policy_nodemask+0xea/0x4e0 [ 1602.559020][T24221] alloc_pages_mpol+0x1fb/0x550 [ 1602.559065][T24221] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1602.559113][T24221] ? __lock_acquire+0x62e/0x1ce0 [ 1602.559160][T24221] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1602.559213][T24221] vma_alloc_folio_noprof+0xed/0x1e0 [ 1602.559263][T24221] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1602.559327][T24221] do_pte_missing+0x2230/0x3ba0 [ 1602.559362][T24221] ? find_held_lock+0x2b/0x80 [ 1602.559406][T24221] __handle_mm_fault+0x152a/0x2a50 [ 1602.559445][T24221] ? mt_find+0x3ef/0xa30 [ 1602.559498][T24221] ? __pfx___handle_mm_fault+0x10/0x10 [ 1602.559529][T24221] ? __pfx_mt_find+0x10/0x10 [ 1602.559599][T24221] ? find_vma+0xbf/0x140 [ 1602.559640][T24221] ? __pfx_find_vma+0x10/0x10 [ 1602.559689][T24221] handle_mm_fault+0x589/0xd10 [ 1602.559724][T24221] ? __bpf_trace_exceptions+0x1/0x40 [ 1602.559779][T24221] do_user_addr_fault+0x7a6/0x1370 [ 1602.559837][T24221] ? rcu_is_watching+0x12/0xc0 [ 1602.559875][T24221] exc_page_fault+0x5c/0xb0 [ 1602.559914][T24221] asm_exc_page_fault+0x26/0x30 [ 1602.559946][T24221] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 1602.560000][T24221] Code: e9 14 23 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f [ 1602.560032][T24221] RSP: 0018:ffffc9000e037af0 EFLAGS: 00050206 [ 1602.560059][T24221] RAX: 0000000000000064 RBX: 0000000000000005 RCX: 0000000000000005 [ 1602.560080][T24221] RDX: ffffed10051a5001 RSI: ffff888028d28000 RDI: 0000200000003940 [ 1602.560101][T24221] RBP: 0000200000003940 R08: 0000000000000000 R09: ffffed10051a5000 [ 1602.560121][T24221] R10: ffff888028d28004 R11: 0000000000000000 R12: ffffc9000e037da0 [ 1602.560143][T24221] R13: 0000200000003945 R14: ffff888028d28000 R15: 00007ffffffff000 [ 1602.560188][T24221] _copy_to_iter+0x383/0x16f0 [ 1602.560242][T24221] ? __mutex_unlock_slowpath+0x163/0x800 [ 1602.560289][T24221] ? __pfx__copy_to_iter+0x10/0x10 [ 1602.560340][T24221] ? kernfs_seq_stop+0xcd/0x120 [ 1602.560375][T24221] ? kernfs_put_active+0x86/0xe0 [ 1602.560426][T24221] seq_read_iter+0xcf8/0x12c0 [ 1602.560496][T24221] kernfs_fop_read_iter+0x40f/0x5a0 [ 1602.560528][T24221] ? rw_verify_area+0xcf/0x6c0 [ 1602.560568][T24221] vfs_read+0x8bf/0xcf0 [ 1602.560613][T24221] ? __pfx___mutex_lock+0x10/0x10 [ 1602.560653][T24221] ? __pfx_vfs_read+0x10/0x10 [ 1602.560717][T24221] ksys_read+0x12a/0x250 [ 1602.560754][T24221] ? __pfx_ksys_read+0x10/0x10 [ 1602.560806][T24221] do_syscall_64+0xcd/0x490 [ 1602.560850][T24221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.560881][T24221] RIP: 0033:0x7fd4f778ebe9 [ 1602.560904][T24221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1602.560932][T24221] RSP: 002b:00007fd4f8620038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1602.560957][T24221] RAX: ffffffffffffffda RBX: 00007fd4f79b5fa0 RCX: 00007fd4f778ebe9 [ 1602.560976][T24221] RDX: 00000000000000cf RSI: 0000200000003940 RDI: 000000000000000b [ 1602.560994][T24221] RBP: 00007fd4f7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1602.561010][T24221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1602.561027][T24221] R13: 00007fd4f79b6038 R14: 00007fd4f79b5fa0 R15: 00007ffe0a555038 [ 1602.561062][T24221] [ 1605.534589][T24269] busy [ 1605.550096][T24263] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1606.872531][T24283] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1606.897624][T24283] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1606.911275][T24283] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1608.878740][T24095] Bluetooth: hci0: command 0x0c1a tx timeout [ 1608.957473][T24095] Bluetooth: hci2: command 0x0c1a tx timeout [ 1608.964251][T17236] Bluetooth: hci1: command 0x0c1a tx timeout [ 1612.418759][T24362] busy [ 1614.063884][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1614.081546][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1614.229717][T24372] FAULT_INJECTION: forcing a failure. [ 1614.229717][T24372] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1614.476654][T24372] CPU: 0 UID: 0 PID: 24372 Comm: syz.2.2752 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1614.476752][T24372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1614.476773][T24372] Call Trace: [ 1614.476784][T24372] [ 1614.476795][T24372] dump_stack_lvl+0x16c/0x1f0 [ 1614.476846][T24372] should_fail_ex+0x512/0x640 [ 1614.476900][T24372] should_fail_alloc_page+0xe7/0x130 [ 1614.477034][T24372] prepare_alloc_pages+0x3c2/0x610 [ 1614.477087][T24372] ? trace_sched_exit_tp+0xd1/0x120 [ 1614.477140][T24372] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1614.477184][T24372] ? check_irq_usage+0xcb/0x920 [ 1614.477235][T24372] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1614.477275][T24372] ? check_path.constprop.0+0x24/0x50 [ 1614.477327][T24372] ? lockdep_unlock+0x64/0xe0 [ 1614.477355][T24372] ? __lock_acquire+0x107f/0x1ce0 [ 1614.477399][T24372] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1614.477447][T24372] ? policy_nodemask+0xea/0x4e0 [ 1614.477489][T24372] alloc_pages_mpol+0x1fb/0x550 [ 1614.477531][T24372] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1614.477598][T24372] alloc_pages_noprof+0x131/0x390 [ 1614.477643][T24372] __pmd_alloc+0x3b/0x930 [ 1614.477698][T24372] huge_pte_alloc+0x41d/0x5b0 [ 1614.477755][T24372] hugetlb_fault+0x373/0x2f40 [ 1614.477793][T24372] ? __pfx_hugetlb_fault+0x10/0x10 [ 1614.477840][T24372] ? find_vma+0xbf/0x140 [ 1614.477880][T24372] ? __pfx_find_vma+0x10/0x10 [ 1614.477928][T24372] handle_mm_fault+0xbfa/0xd10 [ 1614.477963][T24372] ? __bpf_trace_exceptions+0x1/0x40 [ 1614.478016][T24372] do_user_addr_fault+0x7a6/0x1370 [ 1614.478071][T24372] ? rcu_is_watching+0x12/0xc0 [ 1614.478108][T24372] exc_page_fault+0x5c/0xb0 [ 1614.478146][T24372] asm_exc_page_fault+0x26/0x30 [ 1614.478178][T24372] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1614.478232][T24372] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1614.478264][T24372] RSP: 0018:ffffc90017437950 EFLAGS: 00050246 [ 1614.478291][T24372] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000008 [ 1614.478309][T24372] RDX: fffff52002e86f43 RSI: 0000000000000000 RDI: ffffc90017437a10 [ 1614.478329][T24372] RBP: 0000000000000008 R08: 0000000000000001 R09: fffff52002e86f42 [ 1614.478350][T24372] R10: ffffc90017437a17 R11: 0000000000000000 R12: 0000000000000000 [ 1614.478370][T24372] R13: ffffc90017437a10 R14: ffffffff8960b050 R15: ffff888026116f00 [ 1614.478394][T24372] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1614.478465][T24372] _copy_from_user+0x98/0xd0 [ 1614.478525][T24372] sctp_getsockopt_local_addrs+0x106/0xcd0 [ 1614.478633][T24372] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 1614.478688][T24372] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1614.478743][T24372] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1614.478796][T24372] ? __local_bh_enable_ip+0xa4/0x120 [ 1614.478839][T24372] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1614.478890][T24372] sctp_getsockopt+0x124f/0x69b0 [ 1614.478940][T24372] ? __futex_wait+0x24c/0x2f0 [ 1614.478994][T24372] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1614.479060][T24372] ? __lock_acquire+0xb97/0x1ce0 [ 1614.479125][T24372] ? find_held_lock+0x2b/0x80 [ 1614.479156][T24372] ? __might_fault+0xe3/0x190 [ 1614.479192][T24372] ? __might_fault+0xe3/0x190 [ 1614.479226][T24372] ? __might_fault+0x13b/0x190 [ 1614.479279][T24372] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1614.479327][T24372] do_sock_getsockopt+0x34a/0x440 [ 1614.479378][T24372] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1614.479424][T24372] ? __fget_files+0x204/0x3c0 [ 1614.479483][T24372] __sys_getsockopt+0x123/0x1b0 [ 1614.479534][T24372] __x64_sys_getsockopt+0xbd/0x160 [ 1614.479572][T24372] ? do_syscall_64+0x91/0x490 [ 1614.479624][T24372] ? lockdep_hardirqs_on+0x7c/0x110 [ 1614.479662][T24372] do_syscall_64+0xcd/0x490 [ 1614.479709][T24372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1614.479741][T24372] RIP: 0033:0x7f6a5ed8ebe9 [ 1614.479768][T24372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1614.479801][T24372] RSP: 002b:00007f6a5fc26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1614.479833][T24372] RAX: ffffffffffffffda RBX: 00007f6a5efb6090 RCX: 00007f6a5ed8ebe9 [ 1614.479855][T24372] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 1614.479874][T24372] RBP: 00007f6a5ee11e19 R08: 0000200000000280 R09: 0000000000000000 [ 1614.479894][T24372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1614.479913][T24372] R13: 00007f6a5efb6128 R14: 00007f6a5efb6090 R15: 00007ffea791b188 [ 1614.479958][T24372] [ 1615.919267][T24402] netlink: 'syz.3.2756': attribute type 1 has an invalid length. [ 1617.344348][T24422] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1617.378260][T24422] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2758'. [ 1618.577337][ T30] audit: type=1800 audit(6049767571.812:247): pid=24437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2761" name="dbroot" dev="configfs" ino=65614 res=0 errno=0 [ 1620.871790][T24468] vivid-007: ================= START STATUS ================= [ 1620.880233][T24468] vivid-007: Generate PTS: true [ 1620.888808][T24468] vivid-007: Generate SCR: true [ 1620.893761][T24468] tpg source WxH: 320x240 (Y'CbCr) [ 1620.903372][T24468] tpg field: 1 [ 1620.911480][T24468] tpg crop: (0,0)/320x240 [ 1620.915965][T24468] tpg compose: (0,0)/320x240 [ 1620.920595][T24468] tpg colorspace: 8 [ 1620.924423][T24468] tpg transfer function: 0/0 [ 1620.935607][T24468] tpg Y'CbCr encoding: 0/0 [ 1620.940179][T24468] tpg quantization: 0/0 [ 1620.944602][T24468] tpg RGB range: 0/2 [ 1620.948880][T24468] vivid-007: ================== END STATUS ================== [ 1621.761276][T24477] can: request_module (can-proto-3) failed. [ 1622.778411][T24498] ubi: mtd0 is already attached to ubi0 [ 1623.069910][T24502] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1623.081102][T24502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2771'. [ 1625.162596][T24527] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1625.187822][T24527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2774'. [ 1625.522008][T24526] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1625.533854][T24526] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1625.547275][T24526] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1627.580955][T17236] Bluetooth: hci2: command 0x0c1a tx timeout [ 1627.580997][ T5182] Bluetooth: hci0: command 0x0c1a tx timeout [ 1627.596151][T24095] Bluetooth: hci1: command 0x0c1a tx timeout [ 1627.710698][T24561] block nbd3: Unsupported socket: shutdown callout must be supported. [ 1628.367722][T24564] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1628.431084][T24564] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2781'. [ 1628.725698][T24570] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1628.735588][T24570] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1628.746891][T24570] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1630.763966][T24095] Bluetooth: hci2: command 0x0c1a tx timeout [ 1630.770248][T24095] Bluetooth: hci1: command 0x0c1a tx timeout [ 1630.776626][ T5182] Bluetooth: hci0: command 0x0c1a tx timeout [ 1633.281294][T24603] ALSA: mixer_oss: invalid OSS volume '0' [ 1633.409640][T24603] ALSA: mixer_oss: invalid OSS volume '' [ 1634.925493][T24633] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 1634.972091][T24633] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 1639.529013][T24703] dyndbg: bad flag-op /, at start of /proc/sel [ 1639.535246][T24703] dyndbg: flags parse failed [ 1640.800351][T24718] vivid-007: ================= START STATUS ================= [ 1640.834127][T24718] vivid-007: Generate PTS: true [ 1640.853456][T24718] vivid-007: Generate SCR: true [ 1640.874008][T24718] tpg source WxH: 320x240 (Y'CbCr) [ 1640.879198][T24718] tpg field: 1 [ 1640.911275][T24718] tpg crop: (0,0)/320x240 [ 1640.922687][T24718] tpg compose: (0,0)/320x240 [ 1640.939166][T24718] tpg colorspace: 8 [ 1640.997661][T24718] tpg transfer function: 0/0 [ 1641.004975][T24718] tpg Y'CbCr encoding: 0/0 [ 1641.012649][T24718] tpg quantization: 0/0 [ 1641.018160][T24718] tpg RGB range: 0/2 [ 1641.024726][T24718] vivid-007: ================== END STATUS ================== [ 1641.745070][T24731] can: request_module (can-proto-3) failed. [ 1646.894851][T24794] dyndbg: bad flag-op /, at start of /proc/sel [ 1646.901265][T24794] dyndbg: flags parse failed [ 1647.083199][T24800] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 1652.268980][T24880] dyndbg: bad flag-op /, at start of /proc/sel [ 1652.275564][T24880] dyndbg: flags parse failed [ 1653.227997][T24892] dyndbg: bad flag-op /, at start of /proc/sel [ 1653.234324][T24892] dyndbg: flags parse failed [ 1654.842854][T24909] syz.0.2829 (24909): /proc/24902/oom_adj is deprecated, please use /proc/24902/oom_score_adj instead. [ 1657.843835][T24942] dyndbg: bad flag-op /, at start of /proc/sel [ 1657.850226][T24942] dyndbg: flags parse failed [ 1658.897126][T24949] dyndbg: bad flag-op /, at start of /proc/sel [ 1658.903639][T24949] dyndbg: flags parse failed g&[ 1659.769186][T24957] netlink: 'syz.1.2840': attribute type 33 has an invalid length. [ 1661.984946][T24968] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1662.020788][T24968] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1662.035690][T24968] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1662.062737][T24977] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1664.031272][ T5182] Bluetooth: hci2: command 0x0c1a tx timeout [ 1664.046509][T24095] Bluetooth: hci1: command 0x0c1a tx timeout [ 1664.052564][T17236] Bluetooth: hci0: command 0x0c1a tx timeout [ 1665.457995][T25025] dyndbg: bad flag-op /, at start of /proc/sel [ 1665.464415][T25025] dyndbg: flags parse failed [ 1667.640367][T25059] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 1667.692732][T25059] tty ptyc1: uevent: failed to send synthetic uevent: -22 g&[ 1674.656464][T25123] ubi: mtd0 is already attached to ubi0 [ 1675.225608][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1675.246298][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.480064][T25140] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1676.498665][T25140] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1676.506444][T25140] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1677.278679][T25132] netlink: 'syz.2.2862': attribute type 33 has an invalid length. [ 1677.997474][T25169] FAULT_INJECTION: forcing a failure. [ 1677.997474][T25169] name failslab, interval 1, probability 0, space 0, times 0 [ 1678.115109][T25169] CPU: 1 UID: 0 PID: 25169 Comm: syz.1.2868 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1678.115165][T25169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1678.115186][T25169] Call Trace: [ 1678.115200][T25169] [ 1678.115214][T25169] dump_stack_lvl+0x16c/0x1f0 [ 1678.115268][T25169] should_fail_ex+0x512/0x640 [ 1678.115316][T25169] ? __kmalloc_noprof+0xbf/0x510 [ 1678.115360][T25169] ? constrain_params_by_rules+0x175/0xca0 [ 1678.115417][T25169] should_failslab+0xc2/0x120 [ 1678.115463][T25169] __kmalloc_noprof+0xd2/0x510 [ 1678.115500][T25169] ? kasan_quarantine_put+0x10a/0x240 [ 1678.115537][T25169] ? constrain_params_by_rules+0xa09/0xca0 [ 1678.115600][T25169] constrain_params_by_rules+0x175/0xca0 [ 1678.115674][T25169] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1678.115741][T25169] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1678.115916][T25169] ? snd_interval_refine+0x2fa/0x580 [ 1678.115962][T25169] snd_pcm_hw_refine+0x7de/0xad0 [ 1678.116021][T25169] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1678.116079][T25169] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1678.116141][T25169] ? snd_pcm_hw_param_value+0x266/0x5b0 [ 1678.116201][T25169] snd_pcm_hw_param_first+0x334/0x6f0 [ 1678.116265][T25169] snd_pcm_hw_params+0x5eb/0x1ba0 [ 1678.116310][T25169] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1678.116348][T25169] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 1678.116409][T25169] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1678.116465][T25169] ? __asan_memset+0x23/0x50 [ 1678.116504][T25169] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1678.116543][T25169] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 1678.116620][T25169] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1678.116712][T25169] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1678.116777][T25169] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1678.116813][T25169] ? hook_file_ioctl_common+0x145/0x410 [ 1678.116859][T25169] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1678.116935][T25169] ? __fget_files+0x20e/0x3c0 [ 1678.116979][T25169] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1678.117015][T25169] __x64_sys_ioctl+0x18e/0x210 [ 1678.117075][T25169] do_syscall_64+0xcd/0x490 [ 1678.117122][T25169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1678.117157][T25169] RIP: 0033:0x7fd4f778ebe9 [ 1678.117185][T25169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1678.117220][T25169] RSP: 002b:00007fd4f85ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1678.117253][T25169] RAX: ffffffffffffffda RBX: 00007fd4f79b6090 RCX: 00007fd4f778ebe9 [ 1678.117275][T25169] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000a [ 1678.117296][T25169] RBP: 00007fd4f7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1678.117317][T25169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1678.117337][T25169] R13: 00007fd4f79b6128 R14: 00007fd4f79b6090 R15: 00007ffe0a555038 [ 1678.117383][T25169] [ 1678.529783][ T5182] Bluetooth: hci1: command 0x0c1a tx timeout [ 1678.536366][ T5182] Bluetooth: hci0: command 0x0c1a tx timeout [ 1678.595316][ T5182] Bluetooth: hci2: command 0x0c1a tx timeout [ 1682.863641][T25222] dyndbg: bad flag-op /, at start of /proc/sel [ 1682.870006][T25222] dyndbg: flags parse failed [ 1686.596709][T25265] dyndbg: bad flag-op /, at start of /proc/sel [ 1686.603077][T25265] dyndbg: flags parse failed [ 1689.596897][T25316] dyndbg: bad flag-op /, at start of /proc/sel [ 1689.626715][T25316] dyndbg: flags parse failed g&[ 1690.330572][T25322] netlink: 'syz.0.2891': attribute type 33 has an invalid length. [ 1693.310375][T25363] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:7 is already present [ 1696.402272][T25405] dyndbg: bad flag-op /, at start of /proc/sel [ 1696.409013][T25405] dyndbg: flags parse failed [ 1697.414804][T25408] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 1697.628349][T25412] dyndbg: bad flag-op /, at start of /proc/sel [ 1697.635848][T25412] dyndbg: flags parse failed [ 1697.711069][T25413] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 1703.074536][T25500] FAULT_INJECTION: forcing a failure. [ 1703.074536][T25500] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.175201][T25500] CPU: 0 UID: 0 PID: 25500 Comm: syz.0.2912 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1703.175246][T25500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1703.175260][T25500] Call Trace: [ 1703.175268][T25500] [ 1703.175277][T25500] dump_stack_lvl+0x16c/0x1f0 [ 1703.175311][T25500] should_fail_ex+0x512/0x640 [ 1703.175344][T25500] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1703.175376][T25500] should_failslab+0xc2/0x120 [ 1703.175407][T25500] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1703.175434][T25500] ? __sock_create+0x335/0x8d0 [ 1703.175468][T25500] ? __sys_socket+0x14d/0x260 [ 1703.175488][T25500] ? __d_alloc+0x32/0xae0 [ 1703.175520][T25500] __d_alloc+0x32/0xae0 [ 1703.175551][T25500] d_alloc_pseudo+0x1c/0xc0 [ 1703.175586][T25500] alloc_file_pseudo+0xcf/0x230 [ 1703.175625][T25500] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1703.175678][T25500] ? alloc_fd+0x471/0x7d0 [ 1703.175732][T25500] sock_alloc_file+0x50/0x210 [ 1703.175765][T25500] __sys_socket+0x1c0/0x260 [ 1703.175787][T25500] ? __pfx___sys_socket+0x10/0x10 [ 1703.175809][T25500] ? xfd_validate_state+0x61/0x180 [ 1703.175852][T25500] __x64_sys_socket+0x72/0xb0 [ 1703.175872][T25500] ? lockdep_hardirqs_on+0x7c/0x110 [ 1703.175899][T25500] do_syscall_64+0xcd/0x490 [ 1703.175936][T25500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.175962][T25500] RIP: 0033:0x7f647538ebe9 [ 1703.175981][T25500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1703.176005][T25500] RSP: 002b:00007f6476278038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1703.176027][T25500] RAX: ffffffffffffffda RBX: 00007f64755b6090 RCX: 00007f647538ebe9 [ 1703.176043][T25500] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 1703.176056][T25500] RBP: 00007f6475411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1703.176070][T25500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1703.176085][T25500] R13: 00007f64755b6128 R14: 00007f64755b6090 R15: 00007ffc2df82908 [ 1703.176114][T25500] [ 1704.860689][T25525] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 1706.303602][T25528] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 1709.694344][T25607] dyndbg: bad flag-op /, at start of /proc/sel [ 1709.702431][T25607] dyndbg: flags parse failed [ 1710.092126][T25608] FAULT_INJECTION: forcing a failure. [ 1710.092126][T25608] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.105179][T25608] CPU: 0 UID: 0 PID: 25608 Comm: syz.3.2927 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1710.105222][T25608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1710.105238][T25608] Call Trace: [ 1710.105246][T25608] [ 1710.105255][T25608] dump_stack_lvl+0x16c/0x1f0 [ 1710.105289][T25608] should_fail_ex+0x512/0x640 [ 1710.105321][T25608] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1710.105348][T25608] should_failslab+0xc2/0x120 [ 1710.105379][T25608] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1710.105402][T25608] ? snd_pcm_hw_param_first+0x30d/0x6f0 [ 1710.105437][T25608] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 1710.105475][T25608] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 1710.105517][T25608] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 1710.105559][T25608] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1710.105598][T25608] ? __asan_memset+0x23/0x50 [ 1710.105618][T25608] ? calc_src_frames.isra.0+0x187/0x1d0 [ 1710.105647][T25608] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 1710.105699][T25608] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1710.105761][T25608] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1710.105804][T25608] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1710.105828][T25608] ? hook_file_ioctl_common+0x145/0x410 [ 1710.105859][T25608] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1710.105884][T25608] ? __fget_files+0x20e/0x3c0 [ 1710.105914][T25608] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1710.105938][T25608] __x64_sys_ioctl+0x18e/0x210 [ 1710.105976][T25608] do_syscall_64+0xcd/0x490 [ 1710.106009][T25608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.106032][T25608] RIP: 0033:0x7effb9f8ebe9 [ 1710.106050][T25608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1710.106074][T25608] RSP: 002b:00007effbad54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1710.106097][T25608] RAX: ffffffffffffffda RBX: 00007effba1b6090 RCX: 00007effb9f8ebe9 [ 1710.106113][T25608] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000a [ 1710.106128][T25608] RBP: 00007effba011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1710.106142][T25608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1710.106156][T25608] R13: 00007effba1b6128 R14: 00007effba1b6090 R15: 00007fffcecacd48 [ 1710.106191][T25608] [ 1716.936982][T25687] dyndbg: bad flag-op /, at start of /proc/sel [ 1717.016343][T25687] dyndbg: flags parse failed [ 1719.293593][T25721] openvswitch: HfR: Dropping previously announced user features [ 1719.393787][T25721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2944'. [ 1721.097961][T25721] HfR: left promiscuous mode [ 1721.355247][T25724] HfR: entered promiscuous mode [ 1723.759934][T25773] dyndbg: bad flag-op /, at start of /proc/sel [ 1723.766449][T25773] dyndbg: flags parse failed [ 1725.850169][T25792] dyndbg: bad flag-op /, at start of /proc/sel [ 1725.859664][T25792] dyndbg: flags parse failed [ 1725.941917][T25804] mkiss: ax0: crc mode is auto. [ 1727.155509][T25825] dyndbg: bad flag-op /, at start of /proc/sel [ 1727.242381][T25825] dyndbg: flags parse failed [ 1728.152148][T25835] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1730.892545][T25862] misc userio: No port type given on /dev/userio [ 1730.977542][T25863] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 1731.396987][T25864] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 1731.986833][T25872] FAULT_INJECTION: forcing a failure. [ 1731.986833][T25872] name failslab, interval 1, probability 0, space 0, times 0 [ 1732.018197][T25872] CPU: 1 UID: 0 PID: 25872 Comm: syz.2.2966 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1732.018245][T25872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1732.018266][T25872] Call Trace: [ 1732.018278][T25872] [ 1732.018291][T25872] dump_stack_lvl+0x16c/0x1f0 [ 1732.018339][T25872] should_fail_ex+0x512/0x640 [ 1732.018383][T25872] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1732.018438][T25872] should_failslab+0xc2/0x120 [ 1732.018484][T25872] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1732.018517][T25872] ? snd_pcm_hw_param_first+0x30d/0x6f0 [ 1732.018568][T25872] ? snd_pcm_hw_param_near.constprop.0+0x72f/0x8e0 [ 1732.018624][T25872] ? snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 1732.018684][T25872] snd_pcm_hw_param_near.constprop.0+0xbc/0x8e0 [ 1732.018746][T25872] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1732.018799][T25872] ? __asan_memset+0x23/0x50 [ 1732.018830][T25872] ? calc_src_frames.isra.0+0x187/0x1d0 [ 1732.018873][T25872] snd_pcm_oss_change_params_locked+0x13f9/0x3a30 [ 1732.018946][T25872] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1732.019035][T25872] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1732.019099][T25872] snd_pcm_oss_ioctl+0x21e9/0x37a0 [ 1732.019133][T25872] ? hook_file_ioctl_common+0x145/0x410 [ 1732.019177][T25872] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1732.019213][T25872] ? __fget_files+0x20e/0x3c0 [ 1732.019256][T25872] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1732.019290][T25872] __x64_sys_ioctl+0x18e/0x210 [ 1732.019343][T25872] do_syscall_64+0xcd/0x490 [ 1732.019386][T25872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1732.019419][T25872] RIP: 0033:0x7f6a5ed8ebe9 [ 1732.019499][T25872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1732.019531][T25872] RSP: 002b:00007f6a5fc26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1732.019561][T25872] RAX: ffffffffffffffda RBX: 00007f6a5efb6090 RCX: 00007f6a5ed8ebe9 [ 1732.019584][T25872] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 000000000000000a [ 1732.019604][T25872] RBP: 00007f6a5ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1732.019624][T25872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1732.019644][T25872] R13: 00007f6a5efb6128 R14: 00007f6a5efb6090 R15: 00007ffea791b188 [ 1732.019687][T25872] [ 1732.956995][T25879] dyndbg: bad flag-op /, at start of /proc/sel [ 1732.965091][T25879] dyndbg: flags parse failed [ 1736.300674][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.307274][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.908365][T25977] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:7 is already present [ 1741.514316][T25989] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1741.531470][T25989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1741.539931][T25989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1741.549956][T25989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1741.559250][T25989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1742.015089][T25999] FAULT_INJECTION: forcing a failure. [ 1742.015089][T25999] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.028491][T25999] CPU: 0 UID: 0 PID: 25999 Comm: syz.3.2983 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1742.028539][T25999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1742.028559][T25999] Call Trace: [ 1742.028570][T25999] [ 1742.028582][T25999] dump_stack_lvl+0x16c/0x1f0 [ 1742.028629][T25999] should_fail_ex+0x512/0x640 [ 1742.028681][T25999] should_failslab+0xc2/0x120 [ 1742.028724][T25999] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1742.028768][T25999] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1742.028819][T25999] ? tipc_group_create+0xbc/0x660 [ 1742.028861][T25999] tipc_group_create+0xbc/0x660 [ 1742.028901][T25999] tipc_setsockopt+0x7f0/0xdb0 [ 1742.028950][T25999] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1742.029013][T25999] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1742.029060][T25999] do_sock_setsockopt+0xf3/0x1d0 [ 1742.029116][T25999] __sys_setsockopt+0x120/0x1a0 [ 1742.029163][T25999] __x64_sys_setsockopt+0xbd/0x160 [ 1742.029201][T25999] ? do_syscall_64+0x91/0x490 [ 1742.029242][T25999] ? lockdep_hardirqs_on+0x7c/0x110 [ 1742.029281][T25999] do_syscall_64+0xcd/0x490 [ 1742.029325][T25999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.029356][T25999] RIP: 0033:0x7effb9f8ebe9 [ 1742.029383][T25999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1742.029416][T25999] RSP: 002b:00007effbad75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1742.029448][T25999] RAX: ffffffffffffffda RBX: 00007effba1b5fa0 RCX: 00007effb9f8ebe9 [ 1742.029470][T25999] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000006 [ 1742.029489][T25999] RBP: 00007effba011e19 R08: 0000000000000014 R09: 0000000000000000 [ 1742.029508][T25999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.029529][T25999] R13: 00007effba1b6038 R14: 00007effba1b5fa0 R15: 00007fffcecacd48 [ 1742.029571][T25999] [ 1742.625359][T25989] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1742.638797][T25989] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1742.652631][T25989] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1742.661555][T25989] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1743.219615][T25989] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1743.617907][T25989] Bluetooth: hci4: command tx timeout [ 1743.786960][T25999] kexec: Could not allocate control_code_buffer [ 1744.800322][T25987] chnl_net:caif_netlink_parms(): no params data found [ 1744.831336][T26018] dyndbg: bad flag-op /, at start of /proc/sel [ 1744.837831][T26018] dyndbg: flags parse failed [ 1745.377899][T25989] Bluetooth: hci5: command tx timeout [ 1745.628046][T26005] chnl_net:caif_netlink_parms(): no params data found [ 1745.642085][T25987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1745.657018][T25987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.672033][T25987] bridge_slave_0: entered allmulticast mode [ 1745.686459][T25989] Bluetooth: hci4: command tx timeout [ 1745.696457][T25987] bridge_slave_0: entered promiscuous mode [ 1745.709892][T25987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1745.717865][T25987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.725423][T25987] bridge_slave_1: entered allmulticast mode [ 1745.738426][T25987] bridge_slave_1: entered promiscuous mode [ 1746.089024][T25987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1746.147907][T25987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1746.332656][T26005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.373232][T26005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.380511][T26005] bridge_slave_0: entered allmulticast mode [ 1746.413186][T26005] bridge_slave_0: entered promiscuous mode [ 1746.445424][T25987] team0: Port device team_slave_0 added [ 1746.463623][T25987] team0: Port device team_slave_1 added [ 1746.472594][T26005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.479830][T26005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.493063][T26005] bridge_slave_1: entered allmulticast mode [ 1746.515302][T26005] bridge_slave_1: entered promiscuous mode [ 1746.696127][T25987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1746.711016][T25987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1746.740203][T25987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1746.761844][T26005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1746.793801][T25987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1746.802210][T25987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1746.832953][T25987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1746.864545][T26005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1747.063564][T26005] team0: Port device team_slave_0 added [ 1747.110592][T25987] hsr_slave_0: entered promiscuous mode [ 1747.117261][T25987] hsr_slave_1: entered promiscuous mode [ 1747.129480][T25987] debugfs: 'hsr0' already exists in 'hsr' [ 1747.135367][T25987] Cannot create hsr debugfs directory [ 1747.149610][T26005] team0: Port device team_slave_1 added [ 1747.382101][T26005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1747.389447][T26005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1747.417736][T26005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1747.431986][T26005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1747.439685][T26005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1747.466249][T25989] Bluetooth: hci5: command tx timeout [ 1747.473428][T26005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1747.588855][T26005] hsr_slave_0: entered promiscuous mode [ 1747.596046][T26005] hsr_slave_1: entered promiscuous mode [ 1747.606588][T26005] debugfs: 'hsr0' already exists in 'hsr' [ 1747.612581][T26005] Cannot create hsr debugfs directory [ 1747.766069][T25989] Bluetooth: hci4: command tx timeout [ 1747.867068][T25987] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1747.889198][T25987] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1747.908751][T25987] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1747.929655][T25987] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1748.024576][T26005] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1748.039843][T26005] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1748.052625][T26005] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1748.068110][T26005] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1748.200816][T25987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1748.246242][T25987] 8021q: adding VLAN 0 to HW filter on device team0 [ 1748.270042][T25885] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.277359][T25885] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1748.289898][T25885] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.297225][T25885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1748.310750][T26005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1748.358730][T26005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1748.379653][T25860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.386882][T25860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1748.411181][T25860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1748.418576][T25860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1748.888362][T25987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1748.914193][T26005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1749.499596][T26005] veth0_vlan: entered promiscuous mode [ 1749.507214][T25989] Bluetooth: hci5: command tx timeout [ 1749.531487][T26005] veth1_vlan: entered promiscuous mode [ 1749.559859][T25987] veth0_vlan: entered promiscuous mode [ 1749.575752][T25987] veth1_vlan: entered promiscuous mode [ 1749.630711][T26005] veth0_macvtap: entered promiscuous mode [ 1749.654247][T26005] veth1_macvtap: entered promiscuous mode [ 1749.662380][T25987] veth0_macvtap: entered promiscuous mode [ 1749.675287][T25987] veth1_macvtap: entered promiscuous mode [ 1749.707250][T26005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1749.732877][T25987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1749.748011][T26005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1749.763192][T25987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1749.788717][T25860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.801282][T25860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.819819][T25860] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.829453][T25989] Bluetooth: hci4: command tx timeout [ 1749.840229][T25860] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.853978][T25860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.893290][T25860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.912571][T25860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.985886][T25860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1750.081147][T25860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.101154][T25860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.117353][T25816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.139843][T25816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.151250][T25860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.167272][T25860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.230728][T25822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.240130][T25822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1751.348311][T26082] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1751.436863][T26083] random: crng reseeded on system resumption [ 1751.626715][T25989] Bluetooth: hci5: command tx timeout [ 1753.030542][T26107] dyndbg: bad flag-op /, at start of /proc/sel [ 1753.036886][T26107] dyndbg: flags parse failed [ 1756.440837][T26133] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1758.571854][T26191] dyndbg: bad flag-op /, at start of /proc/sel [ 1758.578339][T26191] dyndbg: flags parse failed [ 1760.437724][T26217] mkiss: ax0: crc mode is auto. [ 1760.823353][T26222] FAULT_INJECTION: forcing a failure. [ 1760.823353][T26222] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.208846][T26222] CPU: 0 UID: 0 PID: 26222 Comm: syz.5.3007 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1761.208882][T26222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1761.208897][T26222] Call Trace: [ 1761.208904][T26222] [ 1761.208913][T26222] dump_stack_lvl+0x16c/0x1f0 [ 1761.208948][T26222] should_fail_ex+0x512/0x640 [ 1761.208981][T26222] ? fs_reclaim_acquire+0xae/0x150 [ 1761.209020][T26222] ? tomoyo_init_log+0x1385/0x2140 [ 1761.209052][T26222] should_failslab+0xc2/0x120 [ 1761.209084][T26222] __kmalloc_noprof+0xd2/0x510 [ 1761.209111][T26222] ? __pfx_from_kuid+0x10/0x10 [ 1761.209154][T26222] tomoyo_init_log+0x1385/0x2140 [ 1761.209202][T26222] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1761.209234][T26222] ? tomoyo_profile+0x47/0x60 [ 1761.209270][T26222] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 1761.209329][T26222] tomoyo_supervisor+0x302/0x13b0 [ 1761.209373][T26222] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1761.209410][T26222] ? __pfx_vsnprintf+0x10/0x10 [ 1761.209457][T26222] ? tomoyo_encode2+0x329/0x3e0 [ 1761.209500][T26222] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 1761.209541][T26222] tomoyo_path_number_perm+0x448/0x580 [ 1761.209572][T26222] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1761.209653][T26222] ? find_held_lock+0x2b/0x80 [ 1761.209682][T26222] ? hook_file_ioctl_common+0x145/0x410 [ 1761.209726][T26222] ? __fget_files+0x20e/0x3c0 [ 1761.209757][T26222] security_file_ioctl+0x9b/0x240 [ 1761.209788][T26222] __x64_sys_ioctl+0xb7/0x210 [ 1761.209828][T26222] do_syscall_64+0xcd/0x490 [ 1761.209860][T26222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.209884][T26222] RIP: 0033:0x7f95a218ebe9 [ 1761.209902][T26222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1761.209926][T26222] RSP: 002b:00007f95a3053038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1761.209948][T26222] RAX: ffffffffffffffda RBX: 00007f95a23b5fa0 RCX: 00007f95a218ebe9 [ 1761.209963][T26222] RDX: 0000000000000003 RSI: 0000000000004b4b RDI: 0000000000000003 [ 1761.209977][T26222] RBP: 00007f95a2211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1761.209992][T26222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1761.210005][T26222] R13: 00007f95a23b6038 R14: 00007f95a23b5fa0 R15: 00007ffcbafb8fb8 [ 1761.210034][T26222] [ 1765.287080][T26271] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 1768.370254][T26276] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 1769.800613][T26315] dyndbg: bad flag-op /, at start of /proc/sel [ 1769.809926][T26315] dyndbg: flags parse failed [ 1771.156532][T26326] random: crng reseeded on system resumption [ 1778.808565][T26418] ima: policy update failed [ 1778.816035][ T30] audit: type=1802 audit(6049767732.915:248): pid=26418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.3036" res=0 errno=0 [ 1782.297216][T26469] dyndbg: bad flag-op /, at start of /proc/sel [ 1782.304012][T26469] dyndbg: flags parse failed [ 1787.426460][T26515] vivid-007: ================= START STATUS ================= [ 1787.434547][T26515] vivid-007: Generate PTS: true [ 1787.447540][T26515] vivid-007: Generate SCR: true [ 1787.459145][T26515] tpg source WxH: 320x240 (Y'CbCr) [ 1787.469528][T26515] tpg field: 1 [ 1787.472954][T26515] tpg crop: (0,0)/320x240 [ 1787.479410][T26515] tpg compose: (0,0)/320x240 [ 1787.518941][T26515] tpg colorspace: 8 [ 1787.523135][T26515] tpg transfer function: 0/0 [ 1787.527972][T26515] tpg Y'CbCr encoding: 0/0 [ 1787.537393][T26515] tpg quantization: 0/0 [ 1787.542330][T26515] tpg RGB range: 0/2 [ 1787.546243][T26515] vivid-007: ================== END STATUS ================== [ 1788.357289][T26520] can: request_module (can-proto-3) failed. [ 1791.643755][T26553] vivid-003: ================= START STATUS ================= [ 1791.674101][T26553] vivid-003: Radio HW Seek Mode: Bounded [ 1791.685973][T26553] vivid-003: Radio Programmable HW Seek: false [ 1791.701617][T26553] vivid-003: RDS Rx I/O Mode: Block I/O [ 1791.721899][T26553] vivid-003: Generate RBDS Instead of RDS: false [ 1791.743013][T26553] vivid-003: RDS Reception: true [ 1791.753169][T26553] vivid-003: RDS Program Type: 0 inactive [ 1791.759639][T26553] vivid-003: RDS PS Name: inactive [ 1791.766680][T26553] vivid-003: RDS Radio Text: inactive [ 1791.772246][T26553] vivid-003: RDS Traffic Announcement: false inactive [ 1791.780922][T26553] vivid-003: RDS Traffic Program: false inactive [ 1791.787556][T26553] vivid-003: RDS Music: false inactive [ 1791.793310][T26553] vivid-003: ================== END STATUS ================== [ 1791.916854][T26558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1791.944777][T26558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1792.494901][T26558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1792.532719][T26558] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1792.582747][T26558] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1792.662316][T26561] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 1792.818861][T26558] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1792.982299][T26558] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1793.054284][T26558] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1793.200796][T26558] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1793.926157][T25989] Bluetooth: hci0: command 0x0c1a tx timeout [ 1793.995182][T25989] Bluetooth: hci1: command 0x0c1a tx timeout [ 1794.562328][T25989] Bluetooth: hci4: command 0x0c1a tx timeout [ 1794.631170][T25815] Bluetooth: hci2: command 0x0c1a tx timeout [ 1795.036644][T25989] Bluetooth: hci5: command 0x0c1a tx timeout [ 1795.954389][T26610] FAULT_INJECTION: forcing a failure. [ 1795.954389][T26610] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.972059][T26610] CPU: 0 UID: 0 PID: 26610 Comm: syz.3.3066 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1795.972111][T26610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1795.972132][T26610] Call Trace: [ 1795.972144][T26610] [ 1795.972156][T26610] dump_stack_lvl+0x16c/0x1f0 [ 1795.972206][T26610] should_fail_ex+0x512/0x640 [ 1795.972253][T26610] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1795.972304][T26610] should_failslab+0xc2/0x120 [ 1795.972351][T26610] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1795.972398][T26610] ? kstrdup_const+0x63/0x80 [ 1795.972444][T26610] kstrdup+0x53/0x100 [ 1795.972486][T26610] kstrdup_const+0x63/0x80 [ 1795.972527][T26610] __kmem_cache_create_args+0x18f/0x390 [ 1795.972570][T26610] mon_text_open+0x313/0x4f0 [ 1795.972608][T26610] ? __pfx_mon_text_open+0x10/0x10 [ 1795.972642][T26610] ? __debugfs_file_get+0x1fe/0x840 [ 1795.972695][T26610] ? __pfx_mon_text_ctor+0x10/0x10 [ 1795.972729][T26610] ? __pfx_apparmor_file_open+0x10/0x10 [ 1795.972763][T26610] ? lockdown_is_locked_down+0x3f/0x130 [ 1795.972830][T26610] ? bpf_lsm_locked_down+0x9/0x10 [ 1795.972869][T26610] ? __pfx_mon_text_open+0x10/0x10 [ 1795.972903][T26610] full_proxy_open_regular+0x1b9/0x360 [ 1795.972965][T26610] do_dentry_open+0x97f/0x1530 [ 1795.973008][T26610] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1795.973073][T26610] vfs_open+0x82/0x3f0 [ 1795.973131][T26610] path_openat+0x1de4/0x2cb0 [ 1795.973186][T26610] ? __pfx_path_openat+0x10/0x10 [ 1795.973239][T26610] do_filp_open+0x20b/0x470 [ 1795.973281][T26610] ? __pfx_do_filp_open+0x10/0x10 [ 1795.973353][T26610] ? alloc_fd+0x471/0x7d0 [ 1795.973401][T26610] do_sys_openat2+0x11b/0x1d0 [ 1795.973453][T26610] ? __pfx_do_sys_openat2+0x10/0x10 [ 1795.973524][T26610] __x64_sys_openat+0x174/0x210 [ 1795.973576][T26610] ? __pfx___x64_sys_openat+0x10/0x10 [ 1795.973648][T26610] do_syscall_64+0xcd/0x490 [ 1795.973696][T26610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.973743][T26610] RIP: 0033:0x7effb9f8ebe9 [ 1795.973771][T26610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1795.973813][T26610] RSP: 002b:00007effb79f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1795.973846][T26610] RAX: ffffffffffffffda RBX: 00007effba1b6360 RCX: 00007effb9f8ebe9 [ 1795.973867][T26610] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1795.973889][T26610] RBP: 00007effba011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1795.973910][T26610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1795.973930][T26610] R13: 00007effba1b63f8 R14: 00007effba1b6360 R15: 00007fffcecacd48 [ 1795.973975][T26610] [ 1796.379905][T26610] __kmem_cache_create_args(mon_text_ffff88802a8d5800) failed with error -12 [ 1796.407911][T26610] CPU: 0 UID: 0 PID: 26610 Comm: syz.3.3066 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1796.407962][T26610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1796.407983][T26610] Call Trace: [ 1796.407995][T26610] [ 1796.408008][T26610] dump_stack_lvl+0x16c/0x1f0 [ 1796.408056][T26610] __kmem_cache_create_args+0x125/0x390 [ 1796.408098][T26610] mon_text_open+0x313/0x4f0 [ 1796.408135][T26610] ? __pfx_mon_text_open+0x10/0x10 [ 1796.408168][T26610] ? __debugfs_file_get+0x1fe/0x840 [ 1796.408220][T26610] ? __pfx_mon_text_ctor+0x10/0x10 [ 1796.408254][T26610] ? __pfx_apparmor_file_open+0x10/0x10 [ 1796.408288][T26610] ? lockdown_is_locked_down+0x3f/0x130 [ 1796.408341][T26610] ? bpf_lsm_locked_down+0x9/0x10 [ 1796.408377][T26610] ? __pfx_mon_text_open+0x10/0x10 [ 1796.408409][T26610] full_proxy_open_regular+0x1b9/0x360 [ 1796.408491][T26610] do_dentry_open+0x97f/0x1530 [ 1796.408542][T26610] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1796.408608][T26610] vfs_open+0x82/0x3f0 [ 1796.408661][T26610] path_openat+0x1de4/0x2cb0 [ 1796.408714][T26610] ? __pfx_path_openat+0x10/0x10 [ 1796.408766][T26610] do_filp_open+0x20b/0x470 [ 1796.408805][T26610] ? __pfx_do_filp_open+0x10/0x10 [ 1796.408874][T26610] ? alloc_fd+0x471/0x7d0 [ 1796.408921][T26610] do_sys_openat2+0x11b/0x1d0 [ 1796.408970][T26610] ? __pfx_do_sys_openat2+0x10/0x10 [ 1796.409037][T26610] __x64_sys_openat+0x174/0x210 [ 1796.409089][T26610] ? __pfx___x64_sys_openat+0x10/0x10 [ 1796.409158][T26610] do_syscall_64+0xcd/0x490 [ 1796.409204][T26610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.409238][T26610] RIP: 0033:0x7effb9f8ebe9 [ 1796.409264][T26610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1796.409298][T26610] RSP: 002b:00007effb79f2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1796.409331][T26610] RAX: ffffffffffffffda RBX: 00007effba1b6360 RCX: 00007effb9f8ebe9 [ 1796.409353][T26610] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1796.409374][T26610] RBP: 00007effba011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1796.409395][T26610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1796.409416][T26610] R13: 00007effba1b63f8 R14: 00007effba1b6360 R15: 00007fffcecacd48 [ 1796.409460][T26610] [ 1796.701142][T25989] Bluetooth: hci4: command 0x0c1a tx timeout [ 1797.098946][T25989] Bluetooth: hci5: command 0x0c1a tx timeout [ 1797.439946][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.447222][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.830632][T25989] Bluetooth: hci4: command 0x0c1a tx timeout [ 1799.169643][T25989] Bluetooth: hci5: command 0x0c1a tx timeout [ 1801.907393][T26673] ptp ptp0: delete virtual clock ptp3 [ 1801.989519][T26673] ptp ptp0: delete virtual clock ptp2 [ 1802.055350][T26673] ptp ptp0: delete virtual clock ptp1 [ 1802.190340][T26673] ptp ptp0: only physical clock in use now [ 1804.289851][T26710] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 1805.371509][T26728] openvswitch: netlink: Key 0 has unexpected len 16 expected 0 [ 1806.097018][T26723] __kmem_cache_create_args(mon_text_ffff88805f2b7800) failed with error -22 [ 1806.106412][T26723] CPU: 1 UID: 0 PID: 26723 Comm: syz.3.3078 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1806.106459][T26723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1806.106478][T26723] Call Trace: [ 1806.106489][T26723] [ 1806.106501][T26723] dump_stack_lvl+0x16c/0x1f0 [ 1806.106547][T26723] __kmem_cache_create_args+0x125/0x390 [ 1806.106591][T26723] mon_text_open+0x313/0x4f0 [ 1806.106628][T26723] ? __pfx_mon_text_open+0x10/0x10 [ 1806.106665][T26723] ? __pfx_mon_text_ctor+0x10/0x10 [ 1806.106700][T26723] ? lockdown_is_locked_down+0x3f/0x130 [ 1806.106768][T26723] ? bpf_lsm_locked_down+0x9/0x10 [ 1806.106804][T26723] ? __pfx_mon_text_open+0x10/0x10 [ 1806.106836][T26723] full_proxy_open_regular+0x1b9/0x360 [ 1806.106894][T26723] do_dentry_open+0x97f/0x1530 [ 1806.106935][T26723] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 1806.107000][T26723] vfs_open+0x82/0x3f0 [ 1806.107055][T26723] path_openat+0x1de4/0x2cb0 [ 1806.107108][T26723] ? __pfx_path_openat+0x10/0x10 [ 1806.107147][T26723] ? irqentry_exit+0x3b/0x90 [ 1806.107194][T26723] do_filp_open+0x20b/0x470 [ 1806.107234][T26723] ? __pfx_do_filp_open+0x10/0x10 [ 1806.107290][T26723] ? alloc_fd+0x471/0x7d0 [ 1806.107322][T26723] do_sys_openat2+0x11b/0x1d0 [ 1806.107357][T26723] ? __pfx_do_sys_openat2+0x10/0x10 [ 1806.107404][T26723] __x64_sys_openat+0x174/0x210 [ 1806.107439][T26723] ? __pfx___x64_sys_openat+0x10/0x10 [ 1806.107488][T26723] do_syscall_64+0xcd/0x490 [ 1806.107519][T26723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.107542][T26723] RIP: 0033:0x7effb9f8ebe9 [ 1806.107561][T26723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1806.107583][T26723] RSP: 002b:00007effbad75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1806.107604][T26723] RAX: ffffffffffffffda RBX: 00007effba1b5fa0 RCX: 00007effb9f8ebe9 [ 1806.107619][T26723] RDX: 0000000000000a00 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 1806.107633][T26723] RBP: 00007effba011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1806.107646][T26723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1806.107659][T26723] R13: 00007effba1b6038 R14: 00007effba1b5fa0 R15: 00007fffcecacd48 [ 1806.107714][T26723] [ 1806.337387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1807.984451][ T30] audit: type=1804 audit(6049767762.227:249): pid=26738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3079" name="/newroot/19/file0" dev="tmpfs" ino=121 res=1 errno=0 [ 1808.480093][T26760] FAULT_INJECTION: forcing a failure. [ 1808.480093][T26760] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.494768][T26760] CPU: 1 UID: 0 PID: 26760 Comm: syz.2.3083 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1808.494824][T26760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1808.494843][T26760] Call Trace: [ 1808.494855][T26760] [ 1808.494867][T26760] dump_stack_lvl+0x16c/0x1f0 [ 1808.494914][T26760] should_fail_ex+0x512/0x640 [ 1808.494958][T26760] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1808.495004][T26760] should_failslab+0xc2/0x120 [ 1808.495048][T26760] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1808.495087][T26760] ? __pfx___might_resched+0x10/0x10 [ 1808.495119][T26760] ? alloc_vmap_area+0x645/0x29c0 [ 1808.495165][T26760] alloc_vmap_area+0x645/0x29c0 [ 1808.495226][T26760] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1808.495285][T26760] __get_vm_area_node+0x1ca/0x330 [ 1808.495346][T26760] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1808.495403][T26760] ? n_tty_open+0x1a/0x170 [ 1808.495451][T26760] ? look_up_lock_class+0x59/0x150 [ 1808.495499][T26760] ? n_tty_open+0x1a/0x170 [ 1808.495559][T26760] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1808.495613][T26760] ? console_unlock+0x184/0x210 [ 1808.495643][T26760] ? __pfx_console_unlock+0x10/0x10 [ 1808.495677][T26760] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1808.495731][T26760] ? n_tty_open+0x1a/0x170 [ 1808.495784][T26760] __vmalloc_node_noprof+0xad/0xf0 [ 1808.495848][T26760] ? n_tty_open+0x1a/0x170 [ 1808.495899][T26760] ? __pfx_n_tty_open+0x10/0x10 [ 1808.495949][T26760] n_tty_open+0x1a/0x170 [ 1808.495998][T26760] ? __pfx_n_tty_open+0x10/0x10 [ 1808.496046][T26760] tty_ldisc_open+0x9c/0x120 [ 1808.496084][T26760] tty_ldisc_setup+0x40/0x100 [ 1808.496126][T26760] tty_init_dev.part.0+0x1ec/0x500 [ 1808.496178][T26760] tty_open+0xa50/0xf90 [ 1808.496232][T26760] ? __pfx_tty_open+0x10/0x10 [ 1808.496278][T26760] ? chrdev_open+0x10b/0x6a0 [ 1808.496332][T26760] ? __pfx_tty_open+0x10/0x10 [ 1808.496374][T26760] chrdev_open+0x231/0x6a0 [ 1808.496410][T26760] ? __pfx_apparmor_file_open+0x10/0x10 [ 1808.496444][T26760] ? __pfx_chrdev_open+0x10/0x10 [ 1808.496487][T26760] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1808.496533][T26760] do_dentry_open+0x97f/0x1530 [ 1808.496572][T26760] ? __pfx_chrdev_open+0x10/0x10 [ 1808.496625][T26760] vfs_open+0x82/0x3f0 [ 1808.496678][T26760] path_openat+0x1de4/0x2cb0 [ 1808.496731][T26760] ? __pfx_path_openat+0x10/0x10 [ 1808.496783][T26760] do_filp_open+0x20b/0x470 [ 1808.496834][T26760] ? __pfx_do_filp_open+0x10/0x10 [ 1808.496907][T26760] ? alloc_fd+0x471/0x7d0 [ 1808.496957][T26760] do_sys_openat2+0x11b/0x1d0 [ 1808.497007][T26760] ? __pfx_do_sys_openat2+0x10/0x10 [ 1808.497077][T26760] __x64_sys_openat+0x174/0x210 [ 1808.497130][T26760] ? __pfx___x64_sys_openat+0x10/0x10 [ 1808.497201][T26760] do_syscall_64+0xcd/0x490 [ 1808.497248][T26760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1808.497281][T26760] RIP: 0033:0x7f6a5ed8ebe9 [ 1808.497322][T26760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1808.497358][T26760] RSP: 002b:00007f6a5fc05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1808.497390][T26760] RAX: ffffffffffffffda RBX: 00007f6a5efb6180 RCX: 00007f6a5ed8ebe9 [ 1808.497413][T26760] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1808.497436][T26760] RBP: 00007f6a5ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1808.497456][T26760] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1808.497476][T26760] R13: 00007f6a5efb6218 R14: 00007f6a5efb6180 R15: 00007ffea791b188 [ 1808.497521][T26760] [ 1808.497923][T26760] syz.2.3083: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1809.043968][T26760] CPU: 0 UID: 0 PID: 26760 Comm: syz.2.3083 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1809.044013][T26760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1809.044031][T26760] Call Trace: [ 1809.044041][T26760] [ 1809.044052][T26760] dump_stack_lvl+0x16c/0x1f0 [ 1809.044097][T26760] warn_alloc+0x248/0x3a0 [ 1809.044135][T26760] ? __pfx_warn_alloc+0x10/0x10 [ 1809.044175][T26760] ? kfree+0x2b4/0x4d0 [ 1809.044214][T26760] ? __get_vm_area_node+0x208/0x330 [ 1809.044272][T26760] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1809.044320][T26760] ? look_up_lock_class+0x59/0x150 [ 1809.044363][T26760] ? n_tty_open+0x1a/0x170 [ 1809.044416][T26760] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1809.044463][T26760] ? console_unlock+0x184/0x210 [ 1809.044490][T26760] ? __pfx_console_unlock+0x10/0x10 [ 1809.044520][T26760] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1809.044571][T26760] ? n_tty_open+0x1a/0x170 [ 1809.044612][T26760] __vmalloc_node_noprof+0xad/0xf0 [ 1809.044657][T26760] ? n_tty_open+0x1a/0x170 [ 1809.044699][T26760] ? __pfx_n_tty_open+0x10/0x10 [ 1809.044755][T26760] n_tty_open+0x1a/0x170 [ 1809.044805][T26760] ? __pfx_n_tty_open+0x10/0x10 [ 1809.044851][T26760] tty_ldisc_open+0x9c/0x120 [ 1809.044889][T26760] tty_ldisc_setup+0x40/0x100 [ 1809.044929][T26760] tty_init_dev.part.0+0x1ec/0x500 [ 1809.044981][T26760] tty_open+0xa50/0xf90 [ 1809.045036][T26760] ? __pfx_tty_open+0x10/0x10 [ 1809.045083][T26760] ? chrdev_open+0x10b/0x6a0 [ 1809.045133][T26760] ? __pfx_tty_open+0x10/0x10 [ 1809.045179][T26760] chrdev_open+0x231/0x6a0 [ 1809.045221][T26760] ? __pfx_apparmor_file_open+0x10/0x10 [ 1809.045260][T26760] ? __pfx_chrdev_open+0x10/0x10 [ 1809.045305][T26760] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1809.045350][T26760] do_dentry_open+0x97f/0x1530 [ 1809.045391][T26760] ? __pfx_chrdev_open+0x10/0x10 [ 1809.045443][T26760] vfs_open+0x82/0x3f0 [ 1809.045499][T26760] path_openat+0x1de4/0x2cb0 [ 1809.045553][T26760] ? __pfx_path_openat+0x10/0x10 [ 1809.045606][T26760] do_filp_open+0x20b/0x470 [ 1809.045645][T26760] ? __pfx_do_filp_open+0x10/0x10 [ 1809.045724][T26760] ? alloc_fd+0x471/0x7d0 [ 1809.045773][T26760] do_sys_openat2+0x11b/0x1d0 [ 1809.045823][T26760] ? __pfx_do_sys_openat2+0x10/0x10 [ 1809.045891][T26760] __x64_sys_openat+0x174/0x210 [ 1809.045943][T26760] ? __pfx___x64_sys_openat+0x10/0x10 [ 1809.046013][T26760] do_syscall_64+0xcd/0x490 [ 1809.046059][T26760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.046092][T26760] RIP: 0033:0x7f6a5ed8ebe9 [ 1809.046120][T26760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1809.046153][T26760] RSP: 002b:00007f6a5fc05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1809.046185][T26760] RAX: ffffffffffffffda RBX: 00007f6a5efb6180 RCX: 00007f6a5ed8ebe9 [ 1809.046206][T26760] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1809.046228][T26760] RBP: 00007f6a5ee11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1809.046248][T26760] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1809.046268][T26760] R13: 00007f6a5efb6218 R14: 00007f6a5efb6180 R15: 00007ffea791b188 [ 1809.046313][T26760] [ 1809.400037][T26760] Mem-Info: [ 1809.403238][T26760] active_anon:16646 inactive_anon:13 isolated_anon:0 [ 1809.403238][T26760] active_file:15449 inactive_file:43704 isolated_file:0 [ 1809.403238][T26760] unevictable:768 dirty:685 writeback:0 [ 1809.403238][T26760] slab_reclaimable:12606 slab_unreclaimable:118321 [ 1809.403238][T26760] mapped:38059 shmem:1355 pagetables:1398 [ 1809.403238][T26760] sec_pagetables:0 bounce:0 [ 1809.403238][T26760] kernel_misc_reclaimable:0 [ 1809.403238][T26760] free:1266843 free_pcp:10039 free_cma:0 [ 1809.468718][T26760] Node 0 active_anon:66584kB inactive_anon:52kB active_file:61764kB inactive_file:174556kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152096kB dirty:2732kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14372kB pagetables:5444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1809.510482][T26760] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:52kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1809.549261][T26760] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1809.578447][T26760] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1809.584334][T26760] Node 0 DMA32 free:1140896kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:67340kB inactive_anon:52kB active_file:61748kB inactive_file:173252kB unevictable:1536kB writepending:2832kB present:3129332kB managed:2539616kB mlocked:0kB bounce:0kB free_pcp:35340kB local_pcp:15016kB free_cma:0kB [ 1809.626706][T26760] lowmem_reserve[]: 0 0 1 1 1 [ 1809.631514][T26760] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:16kB inactive_file:1304kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1809.664528][T26760] lowmem_reserve[]: 0 0 0 0 0 [ 1809.669307][T26760] Node 1 Normal free:3910996kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:260kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4016kB local_pcp:0kB free_cma:0kB [ 1809.707125][T26760] lowmem_reserve[]: 0 0 0 0 0 [ 1809.714929][T26760] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1809.733716][T26760] Node 0 DMA32: 604*4kB (ME) 261*8kB (ME) 932*16kB (UME) 1089*32kB (UM) 548*64kB (UME) 293*128kB (UM) 224*256kB (UME) 146*512kB (UME) 79*1024kB (UME) 21*2048kB (UME) 185*4096kB (UM) = 1140600kB [ 1809.759326][T26760] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1809.810530][T26760] Node 1 Normal: 9*4kB (ME) 6*8kB (ME) 12*16kB (UME) 130*32kB (UME) 106*64kB (UME) 37*128kB (UME) 17*256kB (UME) 7*512kB (UM) 2*1024kB (ME) 5*2048kB (UME) 946*4096kB (M) = 3910996kB [ 1809.830756][T26760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1809.846034][T26760] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1809.859544][T26760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1809.881071][T26760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1809.891090][T26760] 60509 total pagecache pages [ 1809.898741][T26760] 6 pages in swap cache [ 1809.904987][T26760] Free swap = 124804kB [ 1809.910577][T26760] Total swap = 124996kB [ 1809.918797][T26760] 2097051 pages RAM [ 1809.923093][T26760] 0 pages HighMem/MovableOnly [ 1809.927897][T26760] 430185 pages reserved [ 1809.933759][T26760] 0 pages cma reserved [ 1809.938031][T26760] tty tty26: ldisc open failed (-12), clearing slot 25 [ 1811.569411][T26801] dyndbg: bad flag-op /, at start of /proc/sel [ 1811.575839][T26801] dyndbg: flags parse failed [ 1815.351338][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808470fc00: rx timeout, send abort [ 1815.858925][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808470fc00: abort rx timeout. Force session deactivation [ 1816.791892][T25815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1816.805598][T25815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1816.815712][T25815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1816.831226][T25815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1816.841048][T25815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1817.547401][T26850] chnl_net:caif_netlink_parms(): no params data found [ 1817.885365][T26850] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.917935][T26850] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.941432][T26850] bridge_slave_0: entered allmulticast mode [ 1817.961872][T26850] bridge_slave_0: entered promiscuous mode [ 1817.982209][T26850] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.989510][T26850] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.010462][T26850] bridge_slave_1: entered allmulticast mode [ 1818.018919][T26850] bridge_slave_1: entered promiscuous mode [ 1818.172292][T26850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1818.249948][T26850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1818.825312][T26850] team0: Port device team_slave_0 added [ 1818.852552][T26850] team0: Port device team_slave_1 added [ 1818.905669][T25815] Bluetooth: hci6: command tx timeout [ 1819.053769][T26850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1819.061180][T26850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.114515][T26850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1819.149860][T26850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1819.164298][T26850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.214076][T26850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1819.471295][T26850] hsr_slave_0: entered promiscuous mode [ 1819.502015][T26850] hsr_slave_1: entered promiscuous mode [ 1819.553113][T26850] debugfs: 'hsr0' already exists in 'hsr' [ 1819.578581][T26850] Cannot create hsr debugfs directory [ 1819.726063][T26873] vivid-007: ================= START STATUS ================= [ 1819.734508][T26873] vivid-007: Generate PTS: true [ 1819.739539][T26873] vivid-007: Generate SCR: true [ 1819.745238][T26873] tpg source WxH: 320x240 (Y'CbCr) [ 1819.750389][T26873] tpg field: 1 [ 1819.754951][T26873] tpg crop: (0,0)/320x240 [ 1819.759322][T26873] tpg compose: (0,0)/320x240 [ 1819.765435][T26873] tpg colorspace: 8 [ 1819.769286][T26873] tpg transfer function: 0/0 [ 1819.808997][T26873] tpg Y'CbCr encoding: 0/0 [ 1819.814234][T26873] tpg quantization: 0/0 [ 1819.818433][T26873] tpg RGB range: 0/2 [ 1819.822934][T26873] vivid-007: ================== END STATUS ================== [ 1820.246468][T26877] can: request_module (can-proto-3) failed. [ 1820.994752][T25815] Bluetooth: hci6: command tx timeout [ 1821.381127][T26850] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1822.349790][T26850] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1822.763448][T26850] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1822.929808][T26908] vivid-007: ================= START STATUS ================= [ 1822.964962][T26908] vivid-007: Generate PTS: true [ 1822.969903][T26908] vivid-007: Generate SCR: true [ 1822.976521][T26908] tpg source WxH: 320x240 (Y'CbCr) [ 1822.981719][T26850] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1822.984688][T26908] tpg field: 1 [ 1822.993227][T26908] tpg crop: (0,0)/320x240 [ 1822.998799][T26908] tpg compose: (0,0)/320x240 [ 1823.003656][T26908] tpg colorspace: 8 [ 1823.007575][T26908] tpg transfer function: 0/0 [ 1823.013817][T26908] tpg Y'CbCr encoding: 0/0 [ 1823.018420][T26908] tpg quantization: 0/0 [ 1823.022621][T26908] tpg RGB range: 0/2 [ 1823.031398][T26908] vivid-007: ================== END STATUS ================== [ 1823.051511][T25815] Bluetooth: hci6: command tx timeout [ 1823.672071][T26908] can: request_module (can-proto-3) failed. [ 1823.945690][T26850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1824.179479][T26850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.386429][T25816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.394019][T25816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1824.474909][T26091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.482176][T26091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1824.923997][T26935] snd_aloop snd_aloop.0: control 16781581:65539:5:'x?F/zF˷fC:7 is already present [ 1825.173291][T25815] Bluetooth: hci6: command tx timeout [ 1825.798017][T26944] dyndbg: bad flag-op /, at start of /proc/sel [ 1825.807185][T26944] dyndbg: flags parse failed [ 1826.199149][T26953] dyndbg: bad flag-op /, at start of /proc/sel [ 1826.205704][T26953] dyndbg: flags parse failed [ 1826.568498][T26850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1826.647528][T26961] FAULT_INJECTION: forcing a failure. [ 1826.647528][T26961] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1826.662291][T26961] CPU: 1 UID: 0 PID: 26961 Comm: syz.3.3117 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1826.662344][T26961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1826.662364][T26961] Call Trace: [ 1826.662456][T26961] [ 1826.662481][T26961] dump_stack_lvl+0x16c/0x1f0 [ 1826.662535][T26961] should_fail_ex+0x512/0x640 [ 1826.662588][T26961] get_futex_key+0x1d0/0x1560 [ 1826.662634][T26961] ? __pfx_get_futex_key+0x10/0x10 [ 1826.662691][T26961] futex_wait_setup+0x9d/0x550 [ 1826.662752][T26961] __futex_wait+0x194/0x2f0 [ 1826.662804][T26961] ? __pfx___futex_wait+0x10/0x10 [ 1826.662861][T26961] ? __pfx_futex_wake_mark+0x10/0x10 [ 1826.662916][T26961] ? futex_private_hash_put+0x176/0x300 [ 1826.662962][T26961] ? futex_private_hash_put+0x18a/0x300 [ 1826.663005][T26961] futex_wait+0xe8/0x380 [ 1826.663055][T26961] ? __pfx_futex_wait+0x10/0x10 [ 1826.663119][T26961] ? ksys_shmctl.constprop.0+0x1d4/0x380 [ 1826.663175][T26961] do_futex+0x229/0x350 [ 1826.663219][T26961] ? __pfx_do_futex+0x10/0x10 [ 1826.663274][T26961] __x64_sys_futex+0x1e0/0x4c0 [ 1826.663323][T26961] ? __pfx___x64_sys_futex+0x10/0x10 [ 1826.663385][T26961] do_syscall_64+0xcd/0x490 [ 1826.663440][T26961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.663473][T26961] RIP: 0033:0x7effb9f8ebe9 [ 1826.663500][T26961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1826.663532][T26961] RSP: 002b:00007effbad540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1826.663562][T26961] RAX: ffffffffffffffda RBX: 00007effba1b6098 RCX: 00007effb9f8ebe9 [ 1826.663585][T26961] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007effba1b6098 [ 1826.663606][T26961] RBP: 00007effba1b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1826.663626][T26961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1826.663647][T26961] R13: 00007effba1b6128 R14: 00007fffcecacc60 R15: 00007fffcecacd48 [ 1826.663690][T26961] [ 1826.915203][T26951] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3113'. [ 1828.395308][T26850] veth0_vlan: entered promiscuous mode [ 1828.431200][T26850] veth1_vlan: entered promiscuous mode [ 1828.492605][T26993] FAULT_INJECTION: forcing a failure. [ 1828.492605][T26993] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.510858][T26993] CPU: 1 UID: 0 PID: 26993 Comm: syz.3.3123 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1828.510902][T26993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1828.510916][T26993] Call Trace: [ 1828.510924][T26993] [ 1828.510933][T26993] dump_stack_lvl+0x16c/0x1f0 [ 1828.510967][T26993] should_fail_ex+0x512/0x640 [ 1828.511000][T26993] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 1828.511030][T26993] should_failslab+0xc2/0x120 [ 1828.511062][T26993] __kmalloc_cache_node_noprof+0x6d/0x420 [ 1828.511088][T26993] ? register_lock_class+0x41/0x4c0 [ 1828.511120][T26993] ? __get_vm_area_node+0x101/0x330 [ 1828.511160][T26993] __get_vm_area_node+0x101/0x330 [ 1828.511201][T26993] __vmalloc_node_range_noprof+0x271/0x14b0 [ 1828.511248][T26993] ? n_tty_open+0x1a/0x170 [ 1828.511284][T26993] ? look_up_lock_class+0x59/0x150 [ 1828.511319][T26993] ? n_tty_open+0x1a/0x170 [ 1828.511361][T26993] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1828.511400][T26993] ? console_unlock+0x184/0x210 [ 1828.511421][T26993] ? __pfx_console_unlock+0x10/0x10 [ 1828.511446][T26993] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1828.511487][T26993] ? n_tty_open+0x1a/0x170 [ 1828.511521][T26993] __vmalloc_node_noprof+0xad/0xf0 [ 1828.511559][T26993] ? n_tty_open+0x1a/0x170 [ 1828.511594][T26993] ? __pfx_n_tty_open+0x10/0x10 [ 1828.511630][T26993] n_tty_open+0x1a/0x170 [ 1828.511665][T26993] ? __pfx_n_tty_open+0x10/0x10 [ 1828.511700][T26993] tty_ldisc_open+0x9c/0x120 [ 1828.511727][T26993] tty_ldisc_setup+0x40/0x100 [ 1828.511755][T26993] tty_init_dev.part.0+0x1ec/0x500 [ 1828.511792][T26993] tty_open+0xa50/0xf90 [ 1828.511830][T26993] ? __pfx_tty_open+0x10/0x10 [ 1828.511862][T26993] ? chrdev_open+0x10b/0x6a0 [ 1828.511896][T26993] ? __pfx_tty_open+0x10/0x10 [ 1828.511928][T26993] chrdev_open+0x231/0x6a0 [ 1828.511957][T26993] ? __pfx_apparmor_file_open+0x10/0x10 [ 1828.511983][T26993] ? __pfx_chrdev_open+0x10/0x10 [ 1828.512015][T26993] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1828.512047][T26993] do_dentry_open+0x97f/0x1530 [ 1828.512076][T26993] ? __pfx_chrdev_open+0x10/0x10 [ 1828.512112][T26993] vfs_open+0x82/0x3f0 [ 1828.512150][T26993] path_openat+0x1de4/0x2cb0 [ 1828.512187][T26993] ? __pfx_path_openat+0x10/0x10 [ 1828.512233][T26993] do_filp_open+0x20b/0x470 [ 1828.512263][T26993] ? __pfx_do_filp_open+0x10/0x10 [ 1828.512313][T26993] ? alloc_fd+0x471/0x7d0 [ 1828.512347][T26993] do_sys_openat2+0x11b/0x1d0 [ 1828.512384][T26993] ? __pfx_do_sys_openat2+0x10/0x10 [ 1828.512431][T26993] __x64_sys_openat+0x174/0x210 [ 1828.512469][T26993] ? __pfx___x64_sys_openat+0x10/0x10 [ 1828.512518][T26993] do_syscall_64+0xcd/0x490 [ 1828.512551][T26993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.512574][T26993] RIP: 0033:0x7effb9f8ebe9 [ 1828.512594][T26993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1828.512617][T26993] RSP: 002b:00007effbad75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1828.512639][T26993] RAX: ffffffffffffffda RBX: 00007effba1b5fa0 RCX: 00007effb9f8ebe9 [ 1828.512655][T26993] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1828.512670][T26993] RBP: 00007effba011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1828.512684][T26993] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1828.512697][T26993] R13: 00007effba1b6038 R14: 00007effba1b5fa0 R15: 00007fffcecacd48 [ 1828.512727][T26993] [ 1828.512739][T26993] syz.3.3123: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1828.887746][T26850] veth0_macvtap: entered promiscuous mode [ 1828.904990][T26993] CPU: 0 UID: 0 PID: 26993 Comm: syz.3.3123 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1828.905036][T26993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1828.905057][T26993] Call Trace: [ 1828.905067][T26993] [ 1828.905079][T26993] dump_stack_lvl+0x16c/0x1f0 [ 1828.905124][T26993] warn_alloc+0x248/0x3a0 [ 1828.905165][T26993] ? __pfx_warn_alloc+0x10/0x10 [ 1828.905203][T26993] ? rcu_is_watching+0x12/0xc0 [ 1828.905237][T26993] ? trace_kmalloc+0x2b/0xd0 [ 1828.905281][T26993] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 1828.905324][T26993] ? __kasan_kmalloc+0x8a/0xb0 [ 1828.905363][T26993] ? __get_vm_area_node+0x208/0x330 [ 1828.905425][T26993] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 1828.905479][T26993] ? look_up_lock_class+0x59/0x150 [ 1828.905530][T26993] ? n_tty_open+0x1a/0x170 [ 1828.905589][T26993] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1828.905642][T26993] ? console_unlock+0x184/0x210 [ 1828.905673][T26993] ? __pfx_console_unlock+0x10/0x10 [ 1828.905709][T26993] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1828.905767][T26993] ? n_tty_open+0x1a/0x170 [ 1828.905812][T26993] __vmalloc_node_noprof+0xad/0xf0 [ 1828.905865][T26993] ? n_tty_open+0x1a/0x170 [ 1828.905939][T26993] ? __pfx_n_tty_open+0x10/0x10 [ 1828.905998][T26993] n_tty_open+0x1a/0x170 [ 1828.906046][T26993] ? __pfx_n_tty_open+0x10/0x10 [ 1828.906094][T26993] tty_ldisc_open+0x9c/0x120 [ 1828.906132][T26993] tty_ldisc_setup+0x40/0x100 [ 1828.906173][T26993] tty_init_dev.part.0+0x1ec/0x500 [ 1828.906225][T26993] tty_open+0xa50/0xf90 [ 1828.906280][T26993] ? __pfx_tty_open+0x10/0x10 [ 1828.906327][T26993] ? chrdev_open+0x10b/0x6a0 [ 1828.906376][T26993] ? __pfx_tty_open+0x10/0x10 [ 1828.906422][T26993] chrdev_open+0x231/0x6a0 [ 1828.906461][T26993] ? __pfx_apparmor_file_open+0x10/0x10 [ 1828.906498][T26993] ? __pfx_chrdev_open+0x10/0x10 [ 1828.906542][T26993] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1828.906588][T26993] do_dentry_open+0x97f/0x1530 [ 1828.906628][T26993] ? __pfx_chrdev_open+0x10/0x10 [ 1828.906680][T26993] vfs_open+0x82/0x3f0 [ 1828.906734][T26993] path_openat+0x1de4/0x2cb0 [ 1828.906788][T26993] ? __pfx_path_openat+0x10/0x10 [ 1828.906839][T26993] do_filp_open+0x20b/0x470 [ 1828.906879][T26993] ? __pfx_do_filp_open+0x10/0x10 [ 1828.906952][T26993] ? alloc_fd+0x471/0x7d0 [ 1828.907005][T26993] do_sys_openat2+0x11b/0x1d0 [ 1828.907055][T26993] ? __pfx_do_sys_openat2+0x10/0x10 [ 1828.907123][T26993] __x64_sys_openat+0x174/0x210 [ 1828.907174][T26993] ? __pfx___x64_sys_openat+0x10/0x10 [ 1828.907243][T26993] do_syscall_64+0xcd/0x490 [ 1828.907289][T26993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.907321][T26993] RIP: 0033:0x7effb9f8ebe9 [ 1828.907347][T26993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1828.907378][T26993] RSP: 002b:00007effbad75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1828.907410][T26993] RAX: ffffffffffffffda RBX: 00007effba1b5fa0 RCX: 00007effb9f8ebe9 [ 1828.907431][T26993] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1828.907451][T26993] RBP: 00007effba011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1828.907470][T26993] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1828.907490][T26993] R13: 00007effba1b6038 R14: 00007effba1b5fa0 R15: 00007fffcecacd48 [ 1828.907532][T26993] [ 1828.910229][T26993] Mem-Info: [ 1829.077073][T26850] veth1_macvtap: entered promiscuous mode [ 1829.300325][T26850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1829.314511][T26850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1829.341431][T26993] active_anon:16439 inactive_anon:13 isolated_anon:0 [ 1829.341431][T26993] active_file:13607 inactive_file:43697 isolated_file:0 [ 1829.341431][T26993] unevictable:768 dirty:561 writeback:0 [ 1829.341431][T26993] slab_reclaimable:13169 slab_unreclaimable:121634 [ 1829.341431][T26993] mapped:44286 shmem:1384 pagetables:1296 [ 1829.341431][T26993] sec_pagetables:0 bounce:0 [ 1829.341431][T26993] kernel_misc_reclaimable:0 [ 1829.341431][T26993] free:1251251 free_pcp:11481 free_cma:0 [ 1829.388154][T26993] Node 0 active_anon:65756kB inactive_anon:52kB active_file:54396kB inactive_file:174528kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:177004kB dirty:2240kB writeback:0kB shmem:4000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14712kB pagetables:5036kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1829.423163][T26993] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1829.463896][T26993] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1829.512610][T26993] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1829.519232][T25809] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.528714][T26993] Node 0 DMA32 free:1077908kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:65312kB inactive_anon:52kB active_file:54380kB inactive_file:173224kB unevictable:1536kB writepending:2240kB present:3129332kB managed:2539616kB mlocked:0kB bounce:0kB free_pcp:42932kB local_pcp:23948kB free_cma:0kB [ 1829.551582][T25809] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.581974][T26993] lowmem_reserve[]: 0 0 1 1 1 [ 1829.586825][T26993] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:16kB inactive_file:1304kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1829.638497][T25809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.638800][T26993] lowmem_reserve[]: 0 0 0 0 0 [ 1829.667744][T25809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.675550][T26993] Node 1 Normal free:3912256kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:260kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:2772kB local_pcp:2764kB free_cma:0kB [ 1829.723419][T26993] lowmem_reserve[]: 0 0 0 0 0 [ 1829.735970][T26993] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1829.772051][T26993] Node 0 DMA32: 2565*4kB (UM) 863*8kB (UM) 977*16kB (UM) 876*32kB (UM) 622*64kB (UM) 302*128kB (UME) 227*256kB (M) 144*512kB (M) 80*1024kB (M) 16*2048kB (UME) 169*4096kB (UM) = 1078044kB [ 1829.794639][T26993] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1829.811589][T26993] Node 1 Normal: 14*4kB (UME) 11*8kB (UME) 15*16kB (UME) 178*32kB (UME) 108*64kB (UME) 39*128kB (UME) 14*256kB (UE) 7*512kB (UM) 2*1024kB (ME) 5*2048kB (UME) 946*4096kB (M) = 3912256kB [ 1829.838913][T26993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.859064][T26993] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1829.873999][T26993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1829.884487][T26993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1829.896844][T26993] 58671 total pagecache pages [ 1829.905311][T26993] 8 pages in swap cache [ 1829.909881][T26993] Free swap = 122664kB [ 1829.914344][T26993] Total swap = 124996kB [ 1829.921685][T26993] 2097051 pages RAM [ 1829.925863][T26993] 0 pages HighMem/MovableOnly [ 1829.932320][T26993] 430185 pages reserved [ 1829.936592][T26993] 0 pages cma reserved [ 1829.941513][T26993] tty tty26: ldisc open failed (-12), clearing slot 25 [ 1829.951495][T26988] tty tty34: ldisc open failed (-12), clearing slot 33 [ 1829.980471][T26996] ttyS ttyS2: ldisc open failed (-12), clearing slot 2 [ 1830.184075][T27001] dyndbg: bad flag-op /, at start of /proc/sel [ 1830.213780][T27001] dyndbg: flags parse failed [ 1830.224541][T25817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.254282][T25817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.420665][T25822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.448406][T25822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1834.655509][T27072] dyndbg: bad flag-op /, at start of /proc/sel [ 1834.662041][T27072] dyndbg: flags parse failed [ 1844.698296][T27171] ptp ptp0: only physical clock in use now [ 1847.236588][T27198] dyndbg: bad flag-op /, at start of /proc/sel [ 1847.295625][T27198] dyndbg: flags parse failed [ 1850.083296][T27225] vivid-009: ================= START STATUS ================= [ 1850.098901][T27225] vivid-009: Enable Output Cropping: true grabbed [ 1850.109457][T27225] vivid-009: Enable Output Composing: true grabbed [ 1850.206028][T27237] block nbd7: not configured, cannot reconfigure [ 1850.264521][T27225] vivid-009: Enable Output Scaler: true grabbed [ 1850.314443][T27236] ubi: mtd0 is already attached to ubi0 [ 1850.332648][T27225] vivid-009: Tx RGB Quantization Range: Automatic grabbed [ 1850.339974][T27225] vivid-009: Transmit Mode: HDMI grabbed [ 1850.506311][T27225] vivid-009: Hotplug Present: 0x00000000 [ 1850.617908][T27225] vivid-009: RxSense Present: 0x00000000 [ 1850.624737][T27225] vivid-009: EDID Present: 0x00000000 [ 1850.630987][T27225] vivid-009: ================== END STATUS ================== [ 1852.432528][T27261] dyndbg: bad flag-op /, at start of /proc/sel [ 1852.438910][T27261] dyndbg: flags parse failed [ 1853.911171][T27271] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1854.101470][T27275] netlink: 25520 bytes leftover after parsing attributes in process `syz.2.3177'. [ 1854.120047][T27275] netlink: zone id is out of range [ 1854.133348][T27275] netlink: zone id is out of range [ 1854.138577][T27275] netlink: zone id is out of range [ 1854.144910][T27275] netlink: zone id is out of range [ 1854.150085][T27275] netlink: zone id is out of range [ 1854.156125][T27275] netlink: zone id is out of range [ 1854.176339][T27275] netlink: zone id is out of range [ 1854.181532][T27275] netlink: zone id is out of range [ 1854.614621][T27275] netlink: zone id is out of range [ 1854.633469][T27275] netlink: zone id is out of range [ 1857.538174][T27316] dyndbg: bad flag-op /, at start of /proc/sel [ 1857.544377][T27316] dyndbg: flags parse failed [ 1858.554694][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.562360][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.875195][T27326] FAULT_INJECTION: forcing a failure. [ 1858.875195][T27326] name failslab, interval 1, probability 0, space 0, times 0 [ 1858.894696][T27326] CPU: 1 UID: 0 PID: 27326 Comm: syz.3.3179 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1858.894743][T27326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1858.894763][T27326] Call Trace: [ 1858.894773][T27326] [ 1858.894785][T27326] dump_stack_lvl+0x16c/0x1f0 [ 1858.894831][T27326] should_fail_ex+0x512/0x640 [ 1858.894875][T27326] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1858.894930][T27326] should_failslab+0xc2/0x120 [ 1858.894974][T27326] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1858.895016][T27326] ? __mpol_dup+0x74/0x380 [ 1858.895062][T27326] ? __pfx_mas_preallocate+0x10/0x10 [ 1858.895113][T27326] __mpol_dup+0x74/0x380 [ 1858.895159][T27326] ? __pfx___mpol_dup+0x10/0x10 [ 1858.895210][T27326] ? anon_vma_name+0x81/0x2f0 [ 1858.895260][T27326] vma_dup_policy+0x42/0xc0 [ 1858.895310][T27326] __split_vma+0x36b/0x1070 [ 1858.895353][T27326] ? __pfx___split_vma+0x10/0x10 [ 1858.895398][T27326] ? __pfx_mas_prev+0x10/0x10 [ 1858.895448][T27326] vms_gather_munmap_vmas+0x3b1/0x1340 [ 1858.895494][T27326] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1858.895539][T27326] ? mas_walk+0x6f5/0x980 [ 1858.895588][T27326] __mmap_region+0x436/0x27b0 [ 1858.895630][T27326] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1858.895666][T27326] ? __pfx___mmap_region+0x10/0x10 [ 1858.895703][T27326] ? rcu_is_watching+0x12/0xc0 [ 1858.895747][T27326] ? rcu_is_watching+0x12/0xc0 [ 1858.895777][T27326] ? trace_sched_exit_tp+0xd1/0x120 [ 1858.895827][T27326] ? __schedule+0x11a3/0x5de0 [ 1858.895860][T27326] ? __lock_acquire+0x62e/0x1ce0 [ 1858.895920][T27326] ? __lock_acquire+0x62e/0x1ce0 [ 1858.895966][T27326] ? __pfx___schedule+0x10/0x10 [ 1858.896050][T27326] ? trace_cap_capable+0x18d/0x200 [ 1858.896099][T27326] mmap_region+0x1ab/0x3f0 [ 1858.896139][T27326] ? __get_unmapped_area+0x267/0x440 [ 1858.896193][T27326] do_mmap+0xa3e/0x1210 [ 1858.896248][T27326] ? __pfx_do_mmap+0x10/0x10 [ 1858.896297][T27326] ? __pfx_down_write_killable+0x10/0x10 [ 1858.896352][T27326] vm_mmap_pgoff+0x29e/0x470 [ 1858.896408][T27326] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1858.896465][T27326] ? __x64_sys_futex+0x1e0/0x4c0 [ 1858.896504][T27326] ? __x64_sys_futex+0x1e9/0x4c0 [ 1858.896553][T27326] ksys_mmap_pgoff+0x7d/0x5c0 [ 1858.896598][T27326] ? xfd_validate_state+0x61/0x180 [ 1858.896646][T27326] ? __pfx_ksys_write+0x10/0x10 [ 1858.896686][T27326] __x64_sys_mmap+0x125/0x190 [ 1858.896745][T27326] do_syscall_64+0xcd/0x490 [ 1858.896790][T27326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.896823][T27326] RIP: 0033:0x7effb9f8ebe9 [ 1858.896848][T27326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1858.896883][T27326] RSP: 002b:00007effbad75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1858.896923][T27326] RAX: ffffffffffffffda RBX: 00007effba1b5fa0 RCX: 00007effb9f8ebe9 [ 1858.896945][T27326] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1858.896966][T27326] RBP: 00007effba011e19 R08: 0000000000000401 R09: 0000000000008000 [ 1858.896988][T27326] R10: 0040000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1858.897009][T27326] R13: 00007effba1b6038 R14: 00007effba1b5fa0 R15: 00007fffcecacd48 [ 1858.897053][T27326] [ 1861.395413][T27341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3182'. [ 1861.406257][T27341] ipvlan0: entered allmulticast mode [ 1861.411704][T27341] veth0_vlan: entered allmulticast mode [ 1865.656780][T27411] nbd: nbd7 already in use [ 1865.999515][T27412] netlink: 334 bytes leftover after parsing attributes in process `syz.6.3193'. [ 1867.532214][T27438] vivid-003: ================= START STATUS ================= [ 1867.542610][T27438] vivid-003: Radio HW Seek Mode: Bounded [ 1867.558232][T27438] vivid-003: Radio Programmable HW Seek: false [ 1867.570827][T27438] vivid-003: RDS Rx I/O Mode: Block I/O [ 1867.580958][T27438] vivid-003: Generate RBDS Instead of RDS: false [ 1867.591973][T27438] vivid-003: RDS Reception: true [ 1867.603533][T27438] vivid-003: RDS Program Type: 0 inactive [ 1867.623738][T27438] vivid-003: RDS PS Name: inactive [ 1867.629097][T27438] vivid-003: RDS Radio Text: inactive [ 1867.634836][T27438] vivid-003: RDS Traffic Announcement: false inactive [ 1867.641733][T27438] vivid-003: RDS Traffic Program: false inactive [ 1867.648642][T27438] vivid-003: RDS Music: false inactive [ 1867.654969][T27438] vivid-003: ================== END STATUS ================== [ 1868.805384][T27454] dyndbg: bad flag-op /, at start of /proc/sel [ 1868.812134][T27454] dyndbg: flags parse failed [ 1873.097947][ T30] audit: type=1800 audit(6049767827.696:250): pid=27505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3207" name="members" dev="configfs" ino=82308 res=0 errno=0 [ 1873.670108][T27518] dyndbg: bad flag-op /, at start of /proc/sel [ 1873.677186][T27518] dyndbg: flags parse failed [ 1877.700954][T25989] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1877.713102][T25989] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1877.722577][T25989] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1877.732422][T25989] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1877.740439][T25989] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1878.035996][T27543] chnl_net:caif_netlink_parms(): no params data found [ 1878.218075][T27543] bridge0: port 1(bridge_slave_0) entered blocking state [ 1878.225401][T27543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1878.233813][T27543] bridge_slave_0: entered allmulticast mode [ 1878.245141][T27543] bridge_slave_0: entered promiscuous mode [ 1878.261066][T27543] bridge0: port 2(bridge_slave_1) entered blocking state [ 1878.268493][T27543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1878.276009][T27543] bridge_slave_1: entered allmulticast mode [ 1878.284756][T27543] bridge_slave_1: entered promiscuous mode [ 1878.291660][ T31] INFO: task kworker/u8:4:67 blocked for more than 143 seconds. [ 1878.300453][ T31] Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 [ 1878.308803][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1878.317621][ T31] task:kworker/u8:4 state:D stack:23560 pid:67 tgid:67 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 1878.341310][ T31] Workqueue: netns cleanup_net [ 1878.346195][ T31] Call Trace: [ 1878.349639][ T31] [ 1878.355987][ T31] __schedule+0x1190/0x5de0 [ 1878.361764][ T31] ? __pfx___schedule+0x10/0x10 [ 1878.367667][ T31] ? find_held_lock+0x2b/0x80 [ 1878.372409][ T31] ? schedule+0x2d7/0x3a0 [ 1878.376906][ T31] schedule+0xe7/0x3a0 [ 1878.381025][ T31] schedule_timeout+0x257/0x290 [ 1878.385943][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1878.391537][ T31] ? mark_held_locks+0x49/0x80 [ 1878.396420][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1878.401769][ T31] __wait_for_common+0x2fc/0x4e0 [ 1878.414305][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1878.420958][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1878.429049][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1878.434331][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1878.440324][ T31] __flush_workqueue+0x3e2/0x1230 [ 1878.445448][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1878.451618][ T31] ? rxrpc_discard_prealloc+0xb6/0x9c0 [ 1878.460565][ T31] ? rxrpc_release+0x568/0x670 [ 1878.465409][ T31] ? rxrpc_release_calls_on_socket+0x237/0x4e0 [ 1878.471816][ T31] rxrpc_release+0x27a/0x670 [ 1878.476839][ T31] sock_release+0x91/0x1d0 [ 1878.481356][ T31] afs_close_socket+0x21b/0x3e0 [ 1878.486456][ T31] ? afs_wait_for_servers+0xec/0x220 [ 1878.491818][ T31] ? __pfx_afs_close_socket+0x10/0x10 [ 1878.497625][ T31] ? __timer_delete_sync+0x108/0x1b0 [ 1878.502972][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 1878.511403][ T31] afs_net_exit+0x93/0x140 [ 1878.521371][ T31] ops_undo_list+0x2ee/0xab0 [ 1878.527370][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1878.532565][ T31] ? cleanup_net+0x334/0x890 [ 1878.539696][ T31] ? idr_destroy+0x62/0x2e0 [ 1878.544286][ T31] cleanup_net+0x408/0x890 [ 1878.549047][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1878.554277][ T31] ? rcu_is_watching+0x12/0xc0 [ 1878.562899][ T31] process_one_work+0x9cc/0x1b70 [ 1878.568498][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1878.573802][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1878.579362][ T31] ? assign_work+0x1a0/0x250 [ 1878.584130][ T31] worker_thread+0x6c8/0xf10 [ 1878.589252][ T31] ? __kthread_parkme+0x19e/0x250 [ 1878.594442][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1878.599808][ T31] kthread+0x3c5/0x780 [ 1878.603957][ T31] ? __pfx_kthread+0x10/0x10 [ 1878.608986][ T31] ? rcu_is_watching+0x12/0xc0 [ 1878.617173][ T31] ? __pfx_kthread+0x10/0x10 [ 1878.621862][ T31] ret_from_fork+0x5d7/0x6f0 [ 1878.631113][ T31] ? __pfx_kthread+0x10/0x10 [ 1878.637112][ T31] ret_from_fork_asm+0x1a/0x30 [ 1878.641988][ T31] [ 1878.649300][ T31] INFO: task syz.0.2953:25791 blocked for more than 143 seconds. [ 1878.694914][ T31] Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 [ 1878.702795][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1878.751176][ T31] task:syz.0.2953 state:D stack:26312 pid:25791 tgid:25786 ppid:5859 task_flags:0x400140 flags:0x00004006 [ 1878.777374][ T31] Call Trace: [ 1878.780864][ T31] [ 1878.783841][ T31] __schedule+0x1190/0x5de0 [ 1878.789903][ T31] ? __pfx___schedule+0x10/0x10 [ 1878.795170][ T31] ? find_held_lock+0x2b/0x80 [ 1878.799911][ T31] ? schedule+0x2d7/0x3a0 [ 1878.805283][ T31] schedule+0xe7/0x3a0 [ 1878.809433][ T31] schedule_timeout+0x257/0x290 [ 1878.818572][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1878.824523][ T31] ? mark_held_locks+0x49/0x80 [ 1878.829393][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1878.835411][ T31] __wait_for_common+0x2fc/0x4e0 [ 1878.840969][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1878.851410][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1878.859747][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1878.868815][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1878.877537][ T31] __flush_workqueue+0x3e2/0x1230 [ 1878.882674][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1878.888870][ T31] ? rxrpc_discard_prealloc+0xb6/0x9c0 [ 1878.895464][ T31] ? rxrpc_release_calls_on_socket+0x237/0x4e0 [ 1878.901797][ T31] rxrpc_release+0x27a/0x670 [ 1878.907123][ T31] sock_release+0x91/0x1d0 [ 1878.911724][ T31] afs_open_socket+0x334/0x400 [ 1878.934798][ T31] ? __pfx_afs_open_socket+0x10/0x10 [ 1878.940360][ T31] ? proc_create_net_single_write+0x149/0x1b0 [ 1878.947668][ T31] ? __pfx_proc_create_net_single_write+0x10/0x10 [ 1878.960585][ T31] afs_net_init+0x825/0xb00 [ 1878.970956][ T31] ? __pfx_afs_net_init+0x10/0x10 [ 1878.976516][ T31] ops_init+0x1e2/0x5f0 [ 1878.980959][ T31] setup_net+0x10f/0x380 [ 1878.988122][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 1878.994080][ T31] ? __pfx_setup_net+0x10/0x10 [ 1878.999011][ T31] ? debug_mutex_init+0x37/0x70 [ 1879.005013][ T31] copy_net_ns+0x2a6/0x5f0 [ 1879.009516][ T31] create_new_namespaces+0x3ea/0xa90 [ 1879.015571][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1879.024837][ T31] ksys_unshare+0x45b/0xa40 [ 1879.029466][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1879.035427][ T31] ? xfd_validate_state+0x61/0x180 [ 1879.040634][ T31] __x64_sys_unshare+0x31/0x40 [ 1879.046234][ T31] do_syscall_64+0xcd/0x490 [ 1879.050845][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1879.057518][ T31] RIP: 0033:0x7f647538ebe9 [ 1879.061995][ T31] RSP: 002b:00007f6476257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1879.081115][ T31] RAX: ffffffffffffffda RBX: 00007f64755b6180 RCX: 00007f647538ebe9 [ 1879.089666][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1879.100455][ T31] RBP: 00007f6475411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1879.109044][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1879.117481][ T31] R13: 00007f64755b6218 R14: 00007f64755b6180 R15: 00007ffc2df82908 [ 1879.128172][ T31] [ 1879.131281][ T31] INFO: task syz.1.2957:25827 blocked for more than 144 seconds. [ 1879.139140][ T31] Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 [ 1879.146898][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1879.155847][ T31] task:syz.1.2957 state:D stack:26824 pid:25827 tgid:25820 ppid:5869 task_flags:0x400140 flags:0x00004006 [ 1879.169752][ T31] Call Trace: [ 1879.173263][ T31] [ 1879.176239][ T31] __schedule+0x1190/0x5de0 [ 1879.180872][ T31] ? __pfx___schedule+0x10/0x10 [ 1879.185866][ T31] ? find_held_lock+0x2b/0x80 [ 1879.190652][ T31] ? schedule+0x2d7/0x3a0 [ 1879.195148][ T31] schedule+0xe7/0x3a0 [ 1879.199362][ T31] schedule_timeout+0x257/0x290 [ 1879.204330][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1879.209793][ T31] ? mark_held_locks+0x49/0x80 [ 1879.214720][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1879.219974][ T31] __wait_for_common+0x2fc/0x4e0 [ 1879.226260][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1879.232137][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1879.237652][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1879.242976][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1879.248981][ T31] __flush_workqueue+0x3e2/0x1230 [ 1879.254227][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1879.259761][ T31] ? rxrpc_discard_prealloc+0xb6/0x9c0 [ 1879.265296][ T31] ? rxrpc_release_calls_on_socket+0x237/0x4e0 [ 1879.271547][ T31] rxrpc_release+0x27a/0x670 [ 1879.276279][ T31] sock_release+0x91/0x1d0 [ 1879.280745][ T31] afs_open_socket+0x334/0x400 [ 1879.285841][ T31] ? __pfx_afs_open_socket+0x10/0x10 [ 1879.291272][ T31] ? proc_create_net_single_write+0x149/0x1b0 [ 1879.297518][ T31] ? __pfx_proc_create_net_single_write+0x10/0x10 [ 1879.304055][ T31] afs_net_init+0x825/0xb00 [ 1879.308606][ T31] ? __pfx_afs_net_init+0x10/0x10 [ 1879.313810][ T31] ops_init+0x1e2/0x5f0 [ 1879.318979][ T31] setup_net+0x10f/0x380 [ 1879.324448][ T31] ? lockdep_init_map_type+0x5c/0x280 [ 1879.329901][ T31] ? __pfx_setup_net+0x10/0x10 [ 1879.334779][ T31] ? debug_mutex_init+0x37/0x70 [ 1879.339706][ T31] copy_net_ns+0x2a6/0x5f0 [ 1879.344410][ T31] create_new_namespaces+0x3ea/0xa90 [ 1879.349770][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1879.355547][ T31] ksys_unshare+0x45b/0xa40 [ 1879.360119][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 1879.365254][ T31] ? xfd_validate_state+0x61/0x180 [ 1879.370621][ T31] __x64_sys_unshare+0x31/0x40 [ 1879.375510][ T31] do_syscall_64+0xcd/0x490 [ 1879.380086][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1879.386088][ T31] RIP: 0033:0x7fd4f778ebe9 [ 1879.390568][ T31] RSP: 002b:00007fd4f85de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1879.399275][ T31] RAX: ffffffffffffffda RBX: 00007fd4f79b6180 RCX: 00007fd4f778ebe9 [ 1879.407525][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1879.415587][ T31] RBP: 00007fd4f7811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1879.423655][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1879.432991][ T31] R13: 00007fd4f79b6218 R14: 00007fd4f79b6180 R15: 00007ffe0a555038 [ 1879.441132][ T31] [ 1879.444393][ T31] [ 1879.444393][ T31] Showing all locks held in the system: [ 1879.453207][ T31] 1 lock held by khungtaskd/31: [ 1879.458111][ T31] #0: ffffffff8e5c0fe0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1879.468270][ T31] 2 locks held by kworker/u9:0/51: [ 1879.494636][ T31] #0: ffff88802657d148 ((wq_completion)nbd1-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1879.520249][ T31] #1: ffffc90000bb7d10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1879.547467][ T31] 3 locks held by kworker/u8:4/67: [ 1879.553133][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1879.564338][ T31] #1: ffffc9000216fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1879.574980][ T31] #2: ffffffff9036f2f0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 1879.584914][ T31] 3 locks held by kworker/1:2/93: [ 1879.590362][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1879.601570][ T31] #1: ffffc9000261fd10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1879.611748][ T31] #2: ffffffff8e5cc578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1879.622612][ T31] 1 lock held by syz-executor/5863: [ 1879.627966][ T31] #0: ffffffff90385548 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1879.649679][ T31] 2 locks held by kworker/u9:3/5865: [ 1879.655040][ T31] #0: ffff888026442148 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1879.679467][ T31] #1: ffffc9000417fd10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1879.691384][ T31] 2 locks held by kworker/u9:5/7854: [ 1879.696912][ T31] #0: ffff888026593148 ((wq_completion)nbd2-recv){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1879.708365][ T31] #1: ffffc90018c97d10 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1879.721255][ T31] 2 locks held by getty/21755: [ 1879.726073][ T31] #0: ffff888034e9c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1879.745343][ T31] #1: ffffc900037eb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1879.758206][ T31] 1 lock held by syz.0.2953/25791: [ 1879.763756][ T31] #0: ffffffff9036f2f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1879.773929][ T31] 3 locks held by kworker/u10:0/25809: [ 1879.780888][ T31] #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1879.789227][T25989] Bluetooth: hci7: command tx timeout [ 1879.793698][ T31] #1: ffffc9001ab47d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1879.809111][ T31] #2: ffffffff90385548 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1879.818372][ T31] 1 lock held by syz.1.2957/25827: [ 1879.823660][ T31] #0: ffffffff9036f2f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1879.836249][ T31] 1 lock held by syz.4.3080/26681: [ 1879.841664][ T31] #0: ffffffff9036f2f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1879.855185][ T31] 4 locks held by syz-executor/26850: [ 1879.862581][ T31] #0: ffff88806d27cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1879.872627][ T31] #1: ffff88806d27c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1879.884709][ T31] #2: ffffffff905ed528 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1879.895000][ T31] #3: ffff88802a931338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 1879.904689][ T31] 1 lock held by syz.3.3187/27368: [ 1879.909940][ T31] #0: ffffffff9036f2f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1879.919570][ T31] 1 lock held by syz.5.3195/27427: [ 1879.924789][ T31] #0: ffffffff9036f2f0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1879.937149][ T31] 3 locks held by syz-executor/27543: [ 1879.943250][ T31] #0: ffffffff8f71cfa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 1879.957661][ T31] #1: ffffffff90385548 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 1879.968027][ T31] #2: ffffffff8e5cc578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1879.985035][ T31] [ 1879.987486][ T31] ============================================= [ 1879.987486][ T31] [ 1879.996350][ T31] NMI backtrace for cpu 0 [ 1879.996370][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1879.996404][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1879.996420][ T31] Call Trace: [ 1879.996430][ T31] [ 1879.996439][ T31] dump_stack_lvl+0x116/0x1f0 [ 1879.996478][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1879.996521][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1879.996553][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1879.996595][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1879.996643][ T31] watchdog+0xf0e/0x1260 [ 1879.996691][ T31] ? __pfx_watchdog+0x10/0x10 [ 1879.996729][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1879.996764][ T31] ? __kthread_parkme+0x19e/0x250 [ 1879.996800][ T31] ? __pfx_watchdog+0x10/0x10 [ 1879.996840][ T31] kthread+0x3c5/0x780 [ 1879.996881][ T31] ? __pfx_kthread+0x10/0x10 [ 1879.996923][ T31] ? rcu_is_watching+0x12/0xc0 [ 1879.996950][ T31] ? __pfx_kthread+0x10/0x10 [ 1879.996993][ T31] ret_from_fork+0x5d7/0x6f0 [ 1879.997042][ T31] ? __pfx_kthread+0x10/0x10 [ 1879.997083][ T31] ret_from_fork_asm+0x1a/0x30 [ 1879.997132][ T31] [ 1879.997142][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1880.126853][ C1] NMI backtrace for cpu 1 [ 1880.126877][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1880.126910][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1880.126926][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1880.126962][ C1] Code: 5c 65 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 d1 19 00 fb f4 3c 0d 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1880.126986][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 1880.127008][ C1] RAX: 000000000152456b RBX: 0000000000000001 RCX: ffffffff8b903bf9 [ 1880.127029][ C1] RDX: 0000000000000000 RSI: ffffffff8de4b9c6 RDI: ffffffff8c162900 [ 1880.127047][ C1] RBP: ffffed1003c55b40 R08: 0000000000000001 R09: ffffed10170a6655 [ 1880.127065][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1880.127084][ C1] R13: ffff88801e2ada00 R14: ffffffff90ab6b90 R15: 0000000000000000 [ 1880.127102][ C1] FS: 0000000000000000(0000) GS:ffff8881247c6000(0000) knlGS:0000000000000000 [ 1880.127128][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1880.127145][ C1] CR2: 00007fb7848e7d60 CR3: 000000007ecd0000 CR4: 00000000003526f0 [ 1880.127161][ C1] Call Trace: [ 1880.127171][ C1] [ 1880.127179][ C1] default_idle+0x13/0x20 [ 1880.127214][ C1] default_idle_call+0x6d/0xb0 [ 1880.127256][ C1] do_idle+0x391/0x510 [ 1880.127283][ C1] ? __pfx_do_idle+0x10/0x10 [ 1880.127308][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1880.127351][ C1] cpu_startup_entry+0x4f/0x60 [ 1880.127376][ C1] start_secondary+0x21d/0x2b0 [ 1880.127413][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1880.127452][ C1] common_startup_64+0x13e/0x148 [ 1880.127488][ C1] [ 1880.314557][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1880.321496][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12256-g561c80369df0 #0 PREEMPT(full) [ 1880.333064][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1880.344231][ T31] Call Trace: [ 1880.347551][ T31] [ 1880.350548][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1880.355199][ T31] vpanic+0x6e8/0x7a0 [ 1880.359422][ T31] ? __pfx_vpanic+0x10/0x10 [ 1880.364092][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 1880.370191][ T31] panic+0xca/0xd0 [ 1880.373989][ T31] ? __pfx_panic+0x10/0x10 [ 1880.378748][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1880.384195][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1880.390616][ T31] ? watchdog+0xd78/0x1260 [ 1880.395119][ T31] ? watchdog+0xd6b/0x1260 [ 1880.399636][ T31] watchdog+0xd89/0x1260 [ 1880.404047][ T31] ? __pfx_watchdog+0x10/0x10 [ 1880.408783][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1880.414138][ T31] ? __kthread_parkme+0x19e/0x250 [ 1880.419267][ T31] ? __pfx_watchdog+0x10/0x10 [ 1880.424018][ T31] kthread+0x3c5/0x780 [ 1880.428258][ T31] ? __pfx_kthread+0x10/0x10 [ 1880.432962][ T31] ? rcu_is_watching+0x12/0xc0 [ 1880.437908][ T31] ? __pfx_kthread+0x10/0x10 [ 1880.442575][ T31] ret_from_fork+0x5d7/0x6f0 [ 1880.447232][ T31] ? __pfx_kthread+0x10/0x10 [ 1880.451902][ T31] ret_from_fork_asm+0x1a/0x30 [ 1880.456757][ T31] [ 1880.460212][ T31] Kernel Offset: disabled [ 1880.464561][ T31] Rebooting in 86400 seconds..