last executing test programs: 7m14.836720979s ago: executing program 1 (id=203): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/stat/synproxy\x00', 0xc0a00, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/projid_map\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000500)=@in={0x2, 0x0, @local}, 0x55) sendfile$auto(0x1, 0x3, 0x0, 0xc01) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0xf86, 0x1, 0xfffffffe, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @raw=0xfffffffe}, 0x2, 0x5, 0x4, @inferred, @integer64={0x4, 0x5, 0x1}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd}}}) socket(0x11, 0x3, 0x9) 7m13.805439259s ago: executing program 1 (id=208): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) poll$auto(0x0, 0x6, 0x8) socketpair$auto(0x20, 0x5, 0x4000, 0x0) read$auto(0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0xb53) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0x4, 0x15) r1 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x3, 0x40000002) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) socket(0x11, 0xa, 0x300) socket(0x2, 0xa, 0x106) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(r0, 0x5, 0x5f3, 0x3, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xbf) futex$auto(0x0, 0x6, 0x4b, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x0, 0x15, 0x0, 0x28) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000000)="31145f", 0x3) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x2, &(0x7f0000000080)={@_si_pad}) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, 0x0) 7m12.529292163s ago: executing program 1 (id=212): msgctl$auto_IPC_INFO(0xfffffff7, 0x3, &(0x7f0000000100)={{0xfffffffc, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x17, 0x3, 0x5030}, &(0x7f0000000000)=0x1, &(0x7f00000000c0)=0xf0, 0x1, 0x3, 0x23, 0xaed5, 0x400, 0x0, 0x2, 0x9a4c, @raw=0x14b5, @raw=0x7}) setresgid$auto(0x0, 0x0, r0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x2000000000000017, 0x401, 0x0, 0x2, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0xa2902, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x2) ioctl$auto_EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) ioctl$auto_VHOST_SET_VRING_ERR2(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x3}) mmap$auto(0x10, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x2de) unshare$auto(0x40000080) 7m11.751059996s ago: executing program 1 (id=215): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), r1) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000ffdbdf2500000000fbffffffffffffff0000000000000000000000aa0600060009000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x5, 0x0) sendto$auto(0x3, 0x0, 0xe70, 0x3, &(0x7f0000000200), 0xfffffffc) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) r3 = socket(0x2, 0x1, 0x106) getsockopt$auto(r3, 0x29, 0x21, 0x0, 0x0) close_range$auto(r0, r3, 0x2) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0x2) socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000240), r4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0xa, 0x801, 0x84) getsockopt$auto(r5, 0x40000000029, 0xb, 0xfffffffffffffffe, 0x0) bpf$auto(0x2, 0x0, 0x206) r6 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r6, 0x0, 0x20000000001, 0x7fff) io_uring_register$auto_IORING_REGISTER_FILES(r6, 0x2, 0x0, 0x7f) 7m9.144188368s ago: executing program 1 (id=224): r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000000), r0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0xc3ff}, 0x40000) 7m8.916996405s ago: executing program 1 (id=225): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0x4004af08, r0) mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x9b72, 0x2, 0x8200) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mincore$auto(0x7, 0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) get_mempolicy$auto(0x0, &(0x7f0000000140)=0x1, 0x2, 0x86, 0x9) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x1e, 0x4, 0x3, 0x8}, 0x6f4) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x100, 0x0) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r1, 0x4004af07, &(0x7f0000000080)=r1) r4 = socket(0x2c, 0x1, 0x40) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0\x00'}) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x40383d0c, 0x0) 6m53.117956685s ago: executing program 32 (id=225): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0x4004af08, r0) mmap$auto(0xfffffffffffffff9, 0x400008, 0xdf, 0x9b72, 0x2, 0x8200) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mincore$auto(0x7, 0xc, 0x0) close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) get_mempolicy$auto(0x0, &(0x7f0000000140)=0x1, 0x2, 0x86, 0x9) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x1e, 0x4, 0x3, 0x8}, 0x6f4) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC1D0c\x00', 0x100, 0x0) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r1, 0x4004af07, &(0x7f0000000080)=r1) r4 = socket(0x2c, 0x1, 0x40) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0\x00'}) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x40383d0c, 0x0) 11.603736731s ago: executing program 4 (id=1473): socket(0x26, 0x4, 0x2) r0 = socket(0x10, 0x2, 0x0) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/netdevsim3/ioam6_id_wide\x00', 0xc0001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0xfe5c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0x204b01, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x200000006, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip6_tables_targets\x00', 0x43102, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(r3, 0x0, 0x0) mmap$auto(0x2, 0x3, 0x200009, 0x10010, 0xfffffffffffffffa, 0x2) bpf$auto(0x9, &(0x7f00000001c0)=@test={r1, 0x7fff, 0x0, 0x1000, 0x106, 0x0, 0x0, 0xfff, 0x10000, 0x9, 0x6dd4, 0x4, 0x7, 0x2, 0x7fff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYBLOB="00989213fdc385583125826638d88a32adae94f3d8943ff597ad1e3e166fd0b47177f50f0a8b7de9170cfac73ebbb8150e2405e2864faec1b319dcb515f47a857068a29783a6e8fc9f231dffb421772d37340a60e5e23606a9a9e307"], 0x1ac}}, 0x20040000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) mmap$auto(0x0, 0x4020009, 0xde, 0xeb1, 0x200000000000404, 0x7) 10.96736967s ago: executing program 3 (id=1476): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/dev\x00', 0x488981, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r0 = socket(0x3, 0x3, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/block/nbd0/hctx0/sched_tags\x00', 0x64300, 0x0) read$auto(r3, &(0x7f0000000040)='\x00', 0x3) mmap$auto(0x0, 0x400008, 0x7d3, 0x9b72, r0, 0x5cd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, 0x0, 0x7, 0x4008) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r5, 0x0, 0x8, 0xffff) madvise$auto(0x0, 0x200007, 0x8) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon9\x00', 0x80000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x4b, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x100242, 0x0) 9.898453228s ago: executing program 4 (id=1479): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r0 = open(0x0, 0x591002, 0x408) syz_genetlink_get_family_id$auto_nfc(0x0, r0) socket(0x2, 0x1, 0x10e) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x240c44c4) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x7}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x598}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x44000) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb1\x00', 0xa8200, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r3}, 0x18) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r4 = socket(0x1d, 0x2, 0x7) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r4, &(0x7f0000000000)=@can={0x1d, r6}, 0x6a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r7}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x3, 0x8, 0x5, 0x2, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3bc}, 0x1fe, 0x5) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) r8 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 7.891234312s ago: executing program 4 (id=1481): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/rose9/ifindex\x00', 0x0, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff0400000001004000"]) setsockopt$auto_SO_SNDBUF(r0, 0x6, 0x7, &(0x7f0000000000)='/sys/devices/virtual/net/rose9/ifindex\x00', 0x800) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) ioctl$auto_USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000080)={0x0, 0x9, "77916b52cc45a7e8f598f608108d6008db90489d7ae5083918afcf755de1bdc73062cc3396f1de22cc433d00477d936879f2db3810933faf3dc181b24fc432fd6d351a096c21e07dedeee746b797a9305ba843fc50b6989100ca672234ea02904c5fb6b05479d9a34d55781685dc7790a335ff13d4af"}) rseq$auto(&(0x7f0000000300)={0xd, 0x401, 0x0, 0x20000006, 0xe, 0x80000}, 0x8002, 0x1, 0x2) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x630001, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open_by_handle_at$auto(r2, 0x0, 0x7d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0x7, 0x6, 0x2) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYRES16], 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) read$auto(r4, 0x0, 0xb4d3) 7.769490977s ago: executing program 0 (id=1482): mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb1, 0x401, 0x300000000000) openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_clone(0x4240080, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x591002, 0x408) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/bareudp/parameters/log_ecn_error\x00', 0x46af41, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x498402, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0x5452, &(0x7f0000000080)={0xc0, 0xdb09}) close_range$auto(r0, r1, 0x70) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6a982, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0x2, 0x1, 0x7ff) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) socket(0x6, 0x81a, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x10039) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r4, 0xc040563d, r3) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000001c0)="6247684d3232564d5729bb39c809e6525ec40a3d739129d9782cef73eebef39cb89b52736ed595b57d88c63879daa00f83cfc290ae21c3d7b3db7d926d31158980ae3bc04dde0906223b93c2d5a366caea2f040f2cf5a4b4d78f3fc9c18fc97355cbf51dbda4925b76b324af00e1269113cd76d49b68bef5568d31820de793aa28b8df99cfd164e7dbf4ea7a25697c8a09d2f78a18716d6224afd3b571281af5ddb7941b0f6cf83e1a39940110c6157c53bc76c4a07e2dac3c8bc9811e773b6ed2f765c6ee199c6108387dabe99e2e585b4c84fd0f59cfc6", 0xd8) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x88002, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0xffffffffffffffff, 0x5, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{0xa, 0x6, 0x7fffffff}, {0x7, 0x316, 0x8}, {0x10, 0xffff8000, 0x3ff}]}) acct$auto(&(0x7f00000000c0)='/dev/input/event1\x00') move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 7.759849055s ago: executing program 3 (id=1483): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0x11, 0x80003, 0x300) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_FS_IOC_FIEMAP(r0, 0xc020660b, 0x9) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) write$auto(0x3, 0x0, 0xfffffdef) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000b00)={0x14, r2, 0xf1b, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x8040) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0xa, 0x106) 7.275571211s ago: executing program 2 (id=1484): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r0, &(0x7f0000000240)=""/177, 0xb1) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x4, 0x4}, {0x0, 0x83}}, 0x0) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x8, 0x5, 0x2, 0x8001, 0xae, 0x9, 0x925, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x10, 0xd]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000025c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ADD(r2, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000006400)={&(0x7f00000027c0)={0x18, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x8840) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x3) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) mmap$auto(0x101, 0x10, 0xbf1, 0xeb1, 0xffffffffffffffff, 0x0) open(0x0, 0x149443, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f0000000040)="27611c0df27df5647126780000") mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x303002, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x5, 0x1, 0x4, 0x3, 0x9) close_range$auto(0x2, 0xa, 0x0) 7.210298443s ago: executing program 0 (id=1485): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}, 0x71) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r1 = io_uring_setup$auto(0x1, 0x0) socket(0x1f, 0x2, 0x200000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x3) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioctl$auto(0xc8, 0x800454e0, 0x5) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, &(0x7f0000000080)=[0x3, 0x4010]) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) 5.750892418s ago: executing program 3 (id=1486): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttycd/power/control\x00', 0x88282, 0x0) write$auto(r3, &(0x7f0000000000)='\x00', 0x4) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0xf, 0x0, 0x8}, {0xfffffff4, 0x6, 0x8}, {0x3, 0x8, 0x800}]}) 5.431390488s ago: executing program 2 (id=1487): r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x80101, 0x0) writev$auto(r0, &(0x7f0000000140)={0x0, 0xe4}, 0x4) 5.074679946s ago: executing program 2 (id=1488): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x48041, 0x0) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080)="fa7bee0b35135c897c786fced5f801ffa180b332d85168d3eba84d9bc92ce88e6f71effebc1fcf0b7d67291dc567e7d06a11a16ca079d8c0d1162d4179ab8d9f3eb4d9d7f3f538ff25003ffce51a67e7a7703b", 0x2, &(0x7f0000000100)="47361e1c0f2a0b88c782aeaba3b78904bbcdf37839e8c094d21197805883fbbef8b35b7c9a3c5d5ccc7510ebca5c07db724e904684821d8f08b94c1a3899cdf19404a2118468e8764d62d874cd0a78b6932038d1e9be594647dbc097ddf46aa51a47b0250aa06750080dfd1dffafad7f5fbf2cd14c56e3731a789d83ca4278625282bf56881710d3a857a3d7984c35c9880145462bf5e09ad575430cf790f0a2ceab2b6fe4232d80c4d7e2f20b960257c47f1844612f86e32ae5c418b705873ecf2170e9b2da141a1ec87567dd4aa1f2768d62b0d9956377cab904f77463a1dfbb8494836f133a617f5154ae4dfeb730496395454db8825d", 0x7, &(0x7f0000000200)="50b1039ffa341c4edd41b8d5aa4c14e7e66d6e0f6614ad961a7d516008253fbb9da53740052d36529f8b09c1d1dffe8efcc5c598c4bcc2a0a46b8e503dfad69c8f385bbd4f73bf08eb069b24e584daf5aad8eb5bf668ce843c5d2e8bb3cfaec28170444d0e61eb3fc71818", &(0x7f0000000280)=0x100}) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0c\x00', 0x200, 0x0) listen$auto(0xffffffffffffffff, 0x611e) poll$auto(0x0, 0x6, 0x8) socketpair$auto(0x20, 0x5, 0x4000, 0x0) read$auto(0xffffffffffffffff, &(0x7f00000003c0)='\x00', 0xb53) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x7ffd, 0x12) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x9, 0x3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r0 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000300), 0x2201, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000340)='/dev/mtd0\x00', 0x80, 0x0) close_range$auto(r0, r1, 0x2) getrandom$auto(0x0, 0x6000000, 0x3) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = socket(0x11, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) removexattr$auto(&(0x7f00000001c0)='}[,&*}\x00', &(0x7f0000000200)='/sys/kernel/tracing/dynamic_events\x00') socket(0x2, 0xa, 0x106) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r2, 0x0, 0x40850) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 4.916584707s ago: executing program 3 (id=1489): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getpid() ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r1, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) ppoll$auto(&(0x7f0000000000)={r0, 0x40, 0x7}, 0x10, 0x0, 0x0, 0x8) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xc, 0x2000d, 0x5, 0x3b, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) 4.791331564s ago: executing program 0 (id=1490): open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/msr/msr0/uevent\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/123, 0x7b) mmap$auto(0x200000000000000, 0x400006, 0xdf, 0x12, 0x2, 0x8001) write$auto(0x3, 0x0, 0x7fffffff) 3.716481336s ago: executing program 4 (id=1491): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r0 = socket(0xa, 0x801, 0x84) madvise$auto(0x0, 0x8000000000000000, 0x15) migrate_pages$auto(0x0, 0x3, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) socket(0x10, 0x2, 0x0) getsockopt$auto(r0, 0x84, 0x6c, 0x0, &(0x7f0000000280)=0x1000c0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x200929, 0x44b, 0x7, 0x5, 0x100717e, 0xd1, 0x7, 0x7, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x384, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x0, 0x864, 0xe, 0x22000, 0x200, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}, 0xa, 0xd) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd01, &(0x7f00000001c0)) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffffd, 0x2, 0x3, 0x9b72, r3, 0x28000) socket(0x21, 0x2, 0xa) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) inotify_init1$auto(0x3000000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 3.451934033s ago: executing program 2 (id=1492): setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0xff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r0, 0x8, 0x0) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010329bd700001dcdf250c00000008000100", @ANYRES32=r2, @ANYBLOB="f87d44b8748e57d486c87cf4b9cce4ea91c61b7b9e7016c4f3b5e806aead5791136754c4d10605d2018c51202cd27c4162806062eea62b4daa9dbf4f9dd9b3daa0bcbe274c7043d4c42ca5b67e305af3821dec751e8f8edc670d94273703d63831ce7dbfe00ffbc8ec706779f3b19f986e9a93857f410c87343a77b303f58ea01f4f70d7e5fe2319a1c419bfd5791fb39193488735f3b9a1c0eff7b709f7"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'macsec0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYBLOB="625973639f1228f331f1c880824a3926727a4a483ef1219a9b5bb25c48e07811d09a200ee9383afe2a561009fead1a1a72d054aed6922ae072bfc88233b7c6ebaf36add682d70fe18a4c4cbe239e75fbb4193f4df84ccecef0599f0375b09cb0b973e7acdac2352fcabfa994e994bbd6cf00f75e75235d975f37fe72b64b21713f3b673c51f689270be4a1a5aadb2ad5e8a923113ebab7d9ca64b3e74a3b", @ANYBLOB="000027bd7000fddbdf250100000008000100", @ANYRESOCT=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYRES16=r3, @ANYRES32, @ANYRES8, @ANYRES32=r4, @ANYRESOCT=r3], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x240408a1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r1, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000126bd7000ffdbdf252d000000"], 0x14}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x5) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) get_mempolicy$auto(0x0, 0x0, 0x443, 0x9, 0x20000000000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x324240, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) 3.094079619s ago: executing program 0 (id=1493): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000380)="ca82d9fdaf38ba4c73184622401f518fcfdabb489661c7e840cedf9eebf05d8927dac3895ff69fe9f4e5d8e42a41178a0a2fe989e394c975a266ddd4a9ab0cccd2d87b5c2d5514356655a83c511b67fef847cd646f4da15fecf4b59893a9fc132c41afd116512d6366eb276a512eb18c8d5ae9a80fe64ebc49e1dca7dd0761eabc83a29de94def659a28a79637c0a65e5f2f9df12dd2a0c686e80fd5b90f95c9c365b3d22e3e9f792b94a5d754060a8305fd4609e15a9cf9d51d7c26cb3eb3632c7ab15d1e19c5aca9b2cf1118c47d1a85beaf7cb5856b223b", 0x12, 0x0, 0x8, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = socket(0x1d, 0x80000, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x200006, 0x2, 0x40ebf, 0x602, 0x300000000000) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, 0x0, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/neigh/netdevsim0/mcast_solicit\x00', 0x10001, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0x9, 0x13, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, 0x0, 0x142, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) mmap$auto(0x80000000, 0x202000b, 0x9, 0xeb6, r2, 0x8000) write$auto(r0, 0x0, 0x100084) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmsg$auto_NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={0x0, 0x148}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) 1.957562584s ago: executing program 4 (id=1494): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/radio18\x00', 0xf74932cf302485a, 0x0) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0xf, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)='5', 0x1) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) capset$auto(&(0x7f0000000340)={0x19980330}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x203, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0x40000b, 0x1, 0x9, 0x0, 0x7ffd, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0xfffe, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x250940, 0x8) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) ioctl$auto(r2, 0x1260, 0x5) socket$nl_generic(0x10, 0x3, 0x10) 1.933090071s ago: executing program 2 (id=1495): mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) io_submit$auto(0x9c, 0x1, &(0x7f0000000080)=&(0x7f0000000040)={0x800005, 0x80000d4e, 0x8, 0x8000, 0x1, 0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0, 0x7, 0xffffffffffffffff}) close_range$auto(0x2, 0xa, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r1 = gettid() process_vm_readv$auto(r1, &(0x7f0000000180)={0x0, 0x4000000000f}, 0x7, &(0x7f00000000c0)={0x0, 0x4}, 0x7fffffff, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="000229bd0000fbdbdf35020000000800fbffffffffff07370100"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b41, 0x7) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0xd, 0x5, 0x20000000003, 0x5, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) ioctl$auto_SG_EMULATED_HOST2(r0, 0x2203, &(0x7f0000000000)="2c5ea256af52c168d49efee248335d71d1474d7511ccd10d6168d92790359e2013054513fd112a13f49edd056514d46d33c46008a3148d43") socket(0x10, 0x3, 0x2) connect$auto(0x3, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x40000}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), 0xffffffffffffffff) syz_clone(0x42000800, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) mremap$auto(0xffffffffffffffff, 0xaf0, 0x71a, 0xa8b, 0x8) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010025bd7000fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$auto_XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000003c0)={r4, 0x0, 0x14, 0xb, 0x7, 0x58, [0x9, 0x8000, 0x8, 0x3, 0x9]}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) 1.884086876s ago: executing program 0 (id=1496): r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x80101, 0x0) writev$auto(r0, &(0x7f0000000140)={0x0, 0xe4}, 0x4) 1.361908818s ago: executing program 3 (id=1497): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r0, 0x0, 0x7ff, 0xd) 907.081167ms ago: executing program 0 (id=1498): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/radio18\x00', 0xf74932cf302485a, 0x0) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0xf, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x6, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video52\x00', 0x0, 0x0) ioctl$auto(r0, 0x40085618, r0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000100)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbffb50e1a647d6a08a1b55dde5a409b4d0d3d797e4a75ff796697c7555889ab7fa2efb7490600000002eb25c6a8aeaa747e3c127bbc19fdf4cf6cbb890d1204b4ed002d9f92fb9b419c", 0x73) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)='5', 0x1) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x250940, 0x8) socket(0xa, 0x5, 0x94) close_range$auto(0x2, 0x8, 0x0) 513.98959ms ago: executing program 4 (id=1499): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/radio18\x00', 0xf74932cf302485a, 0x0) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0xf, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x6, 0x3, 0x5, 0x7}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyzf\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x1710, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x130, 0x7, 0x0, 0x1, [@nested={0x12a, 0x51, 0x0, 0x1, [@typed={0x58, 0x10a, 0x0, 0x0, @binary="add5f045693624596b8a3e9d67733c2806a091f16de5a84cfa91fbbd7e9a16f0578079bb420a65dd08a60d4ca461d58099b872f2084282c8d2c76ce8289cd4c458f7dcda536b6c2295e3348de8a5d5e57969bd69"}, @generic="7db63389d1116c5d2005ac9660fe119165c7ccae3e8377508088bf68baf0ca239b613fdba552c37476bcaf088fd4b89528efe2e689984846ff16b1719ef06078808b66c6957df7ed1b95cdd498360c39dc81fe0f2791d0ebf0304489d16b7170c3f35154c511e0cffb409841a55147b2443d092191ba6fb4f580a4e355eb71a5d25cdfb513854964e390809230840056d37932e4d0b043c953540c80247d7e8506b6875969291edced48", @nested={0x4, 0x14d}, @nested={0x4, 0x135}, @nested={0x4, 0x49}, @typed={0x8, 0x53, 0x0, 0x0, @pid}, @typed={0x8, 0x61, 0x0, 0x0, @str='\'\'&\x00'}, @typed={0x8, 0x77, 0x0, 0x0, @ipv4=@broadcast}]}]}, @TIPC_NLA_MEDIA={0x15cc, 0x5, 0x0, 0x1, [@generic="d86b6536490d93bb6315ef658340b0da1c3c1c96f277fca81d35a01f4acae3b5c27c92e479ffbc502836ef73e01e27c3915f055a7dc28ddfa846bea672fecf328a8acad5420f09d9f42538f4cc64a49f68fa74cae0174539783eba6370f5c60c6d76ae59e076696efa6e863fb75f0692118ce99e7ca3bd", @typed={0x14, 0x7b, 0x0, 0x0, @ipv6=@empty}, @generic, @nested={0x1d5, 0x25, 0x0, 0x1, [@generic="fb494994d83f123f204045d86564ab91f116bfddb480faa93acf62357af3c1d43fa60aa62c394075a5e8989b85ce2ecf5c13ab9bfd07a4a7b0cc0503591641975b246bb6563b821581800f3223a0f3bffbfe92", @generic="dddd0cc839912ae86c1db9b3308ceb8b193a6b639cca80ab18571eb2e48ba064de3eb21fa17b72799afe3c803c6679fe5cab43fd16c8e22b1bf41d5f45165f2d23c368d78b00c0dc3f0241dcfc092fd67cd3877d5e37f5cd98dc7b695c05c0d4475c74c99151142ad90c034f02ef3c6ecdd19b88fe559b94ee4f891ca7e45505e1eba2287e454026662b539f94d5862e79077fe9f7795b7c5240804055afbd21f3203ab659f809f9", @generic="e4a951e01a4b0c0550d4378b090ee38fbfae196952a89b512ace32a1f62c02dab3249fe9f2550116d5aa95dbec2039704e1ef0a5397b8e1317bf26d02a193abffcb0fe9036fe0c1cb0c27b67fc581da7e95b92ccfcf03067a10f1f109e33a2da9a7f8f27670783e185f88390031df352798091d1f3387c5003b0f27ac69136ef130b0f2c9719ce339a119e9b1fe1cbb4691cf0445932c85271ea7a35609be01473f0047bfd762c763c9ac4ce01d43f494b3992cf5bc0b5d3f16af9c888d365ec9efe7554eef2450eeba1fcb64a73e79fbfb2", @nested={0x4, 0x38}]}, @typed={0x29, 0x9f, 0x0, 0x0, @binary="9f65e8a3c8cac4fa0f972f427b567fb6fa14cd60e99c6e6393f2ef6c40e4c3df3b068eabd8"}, @generic="a5b9cfac55e92528c837edd4ccc39e625e9845e1fad6a36c48ad922528a9b407a8e7367f7a69c3f7346ee5b0dcbc5e5f58c8b3e241d6dc4c308b12dd25adb3a4f1d4d39a0c4f5367f17d33d2df3c1171ad797484bb2f25b99a7833102211425343ba727651d85d9a5d20adca1168de65e89f36c1a896ed4a9baf0816d03fca9b389e6bb5dcb73cef1f1f722bc76fb44862a40d1a281f96dea6e1efad59db82f5afcec4ad3b1e8ef27ad7241de8952b19", @nested={0x114c, 0x5d, 0x0, 0x1, [@generic="da332da465af6613765149b067dc252c163b4d350b983e87668d27a4c59248990aa839b9845a59abd81628e142e5adf8a041cd96148d7a70241792757d2966a970b5bf08bc81bd550e9ceb3e55919b153d57a68238affa54639aa57242d0ad8df3b6b866c6e0a3d96b47252a43001d33c19f30289eff2143b3d1baea044de32b06a4fdf614b850d2acd9c6a8c0f5816c2d2831b30478295fdca8f0df12150be7867a7a8d3c40df1a6ab1be0ad8de39612666232717fdd8965f978b48acb94ec5e6459f7cf6240e7061dbe355eafa993f3f14dc5b7a5db305670df95e254bb1ec6f1cf8d6555882b5ab4dcaf9315d360956b5ddbc07ed335ec8ca2e7108730ba8185665e52fc96236b13616cf0522e05636f401603f764e0133571cfd1983cc69854803a0a6f51273e7016d3b18b597c49780d5aff61e1f28acac56722c7b777d5360f7a1877f8742f8f77c7e147c9fba9862fbcdf35d7d74a082848bfd08a879b82f6528f9ddea6c86eb00f1a47cad3202436287bfb2db7bfe0bac0ece0bcbe22dd0375f6b1a55a0f9aee6884aede9518e9a97ed63559c13b1e7df545499c40a4113d8e258bd47d5b5c5ce19a74902dfb34a18ddecd485c01441542b5286715f8acf1b2bcfff345810c95a827c1a9effa2a3a3fed4bed8f1b237b72f85750d7664ecc8804d4f304e12b661614fa37f83cbab2e6983cecc0671db738493a991462c67f730ffc260aab0a028c8cf2820d6ba8134caceceff23df4724606ab52bf62675bf9c99dee203deeb940b1c38f6f731f4fc4b034a032c9b07974ce2faa4441d7303ca5fc4e3cc63cb3a49ed04a09566e88c1011436a2d23d8e9944f3e1a79edc507607d5a71f3c5e932eb672234beb5056570c1376550f9ad90c584ed16b8da3bfce6e2185eb39227eceef37c036c23fb674cede68b7ab88c2464b1b1975a074ea2536e21aaabb09c2635e5efae0262e79610925311ab705a3810ea55d6f5956bb0dfbd8fadf0083a6c972b70b932febaf8b92af042e72acbb35fd06045a5a3a099b8b7249085ca78e0782507e13a9f969fccf977af0df6029574775a8a05fe46396aa963e837b72fe54b62cd0bb7ad508e0f2ed858c0413be9d4811eee061b59fd2aefdc3e60ffc29d0e5b04f46a0b03d139fa4de34911d849b956ce24651429cb51a385ffae7a6600c9aa1804fbf9fb2f0bb89223ac97923c43bcf9adb8ebcbcebbd973791c643aa7efb63094506eef2547d7cb5ca54ae1e64b6e348cba07b8a60b66d3ab4d5166e8a97a1bb2ad38afebf20502400a60e899196a6afa57cc1a9cefcb75298471340b38e0516c30bd021c96b1ec954a2d3428243e8e696632c7108fee7cbf9796704cdc8d9787d939f8f37091990aacfcb4483aa3f652e703351a63d380913c951053fe4cbab1d3403a8efd0d5438416daacd3511e912234d7778f889404c64d2c51c3dbd793a3e501723253e2e24fd780c5a38d1d32c9587c87b5e0f623169899bbe65ee201d91a9bf58d1e9c8cef098b6f22383687b5957d3841e892b9bf6007239995dd552f01042924e20708c708aedea94723b5f3063f12b2fcd193cd34dbf5a0c6bddcf673920969c8ad9975864889a12a4e226bac62d8cbe25b9ce3a90dfed0384652cbeaf0304a9566a004754e9b3caa31f60d0213c794ab7e9cfa3d69b32871e0a00603f592aad3236a24c5c5bc85b76fbca59f5c46399f022df5b335f208f46734d1e6c9738d1c753ccb9452636d0caa34f621435dfd688f04d9dd3e9a33bb7a76276e36b81074a5efa49c9b97405afe414b922e28efc1fb7ffe8de93e0b224c0ec740be4880b4b9becbcbf0ad60693946fd0a901f6e1b5ec1f2c37e4a486a98b062b507f81a64f524a5b343dfb8fc533c5c03143770ff6794d9869792e172b65a21beff6a07d95383891f996e6b0f4e8db513749ac3cb109a744a070394d617df30c80f2015a0826d97d0f3693dc2a5ae4eac1374b8679c93a961b0196f617984d32be9766870b0902df13da9843d2a9ca40e77a55a72f55197aad55b25de3a81b5acb504732dcdb95663512deef80ccc3eb2c0e150421ac520686044a7f8b0a4b39491b0c3b644dc82a3c1aab8ec4d32d54d613a29fa572a11e1f2dcfb1ec7d518811ff28e5d8c9faae856d020ea6b1fe2f917f5a4d7d73e36c7ed5f255561c14d2bb3e793fe8b4012d1d06b81e418d261e3b1c7376870b33832d0be7639e1a6da9c89d71887bc0991be1801f477dfc730a606be35526e08fe06b873c4749770705fbbf4184642fbaba4336ae40013d89f09268ee2abee29c0a5715d4a42a2e262c685b6feb6bd6061f50fba80b218d137ad4fc5010bd398f6319ce9b81fc47eb8eaa1909344e47bad24d0d251a5e93f2a40542b6efb2a6ff03524c73f6192599db837ac97618bbc6a36798e9259943d87e4cf780144b19aee226901f4acc4f33fd0cc3aa9fddb805b68f2117ef62b2c51266d5da31f433875809291e30f4f091dd58dabdf909a5b9f507d3f873d04d4e72c48b49e0cea86cd049b8f42119a6123e89bb2d8c831fbf3fc84730685021750a961fd76a62c80f358d3d96ff918fac93b574ed3aca53c478aa63dcb207ee7c82dfa873f978c95d6d0484bbd6efe0725675e2732db4212a589ae08dec2c5e3029e88abc603b6418984e23e9d200edb194d41a733ac5ab9f5b152d1c67399afed02d5f3d24d88a023e04f581519727b964fa56a29f620794c4a1145d61b5c2081dd2212900ad9cdf234c7c25508001aee19aa6c04c28ea38f89939fd68def576d02530b77b7fbf006714a1e64ba28c5059714d51883b2597be18b96d49a4b03af43557492369184f20b825172e88afe484a9cd5ce63af7139a32a26df0d9be317957ae82ed4f2220674bba30dc1beca81ac30cbd26bb640ea2e328a774eddc923e4c9ec04e38d626454313c7bc739c5abf26a25a3cb72af34c5039cc5ad2bfe382a7581393ad6b72e4a67a14c92f58768e82078e4cc37377e2da07926288ed0f03d6cf30f0a0978ea92d8c36e3084030ec6761c9a5153d91359f06412a60270bedb04891fa46f92ecd67fc91ba81a743c76e9ee8b8e471a6e3be243dfe4e0a3119cfddacc980f1e8004cdd5ca6d8bcc704dd13a58d2f6856235afabc268d09f1414a89d07f2fc4f5900e6ddd28970521de2b941c225186df5062bcac07d9b6072555c25d0fc2cb88b18cb43b6a90903fe40e3e8c986a24ea9d2edd4075c27a53eac760bc0f8d3afa65e7a6998715729ab4f420249aa915c6880034dfc920f46bf411432109406a473433027273c421da9e01f63e9e073e8cb5675a02296e39aec09500d44e6f3f83fc766e69c04b649c3c5d64511c39666179b79fede5167ecb3b1acbe85df53044c19acf29ab099a2c98bf035cb40f5fd756f15ef586047e4bc70b3fcc2b6d24731e733506d3ba0cbac1619e825c4e0b71d83043af98a9fe292270e298608141deab687afa2cdfc060a6fc430a60ebab4a83e1d9ca880508e5af8e9973e1f14701a54643cdbc133f9dc65cbec4962acf200bbd2ad516c296d64e3e68b8f4ac53c5e446e40e432e921a017bf861c017568f2ac5e915f02c98ae1106373e3a344a483719532ec076715bee9087ade5fac633949ee40e787c8c43bfe4ab9ba45aa97dda29e6808256704edc4163cc5c2ed72860eea14b1724fe1510f64b1aa7b6575e44db7e898ad953bd578df2e70f4682dab69fe35f427f7cdef3eae051a13f59ceac34e87b09d1be988e47d7f2a3c103d227e9414416889bd978377f52958a36a51a69b81a69225f3d716a657b83566071c3573f90d8929d8f611a743130c8c0ef1752450ddef11f8cab2afe2e5bd4f924b9b3fbdd831aeec437762d33abf87954770f17bdd2c935f44d11573f881f827ca0ac886e2ee31f2c4e0eedb90a8f599c88084fe556bd065d44ed26219d665337840883e35c4d60aceadf27c2e2b1ff57dc082290edacf49d8b24acc46ea28b6da232d579bbca68b2a6786107ddaaf05641027c0ca67d9d6b6f5401cdec2b3af9df97d5ed59385d95a49e9f728e27b688b414290bdca863e3234e82e484cba1f48c221bf44c042c3e84b84a01744941e8c15c386a75b51931d3140f7afab606e1cee113b19cfe3cb3a9d268e1320d0938062a5cb50937633ada6f751e59d317eb0d756be189a2d020d2723eb3ebc2d95de732c000db3d2fdaedc66c916a96293aa7b7402b245cbd5ba677125b238b18babf89dca7e61d4687843ad2e1430bcfcf45d5059ec15114fdff8cdd83acad93a1efd6b25b283b9ee18dec914a07160032ccccb7e88e55e729ce268586a3de44fe9ffe03afc21dae06a92dea88ad8dfb8339b5d2ab95f692a42b25988eb5b5a431b4e600918dfb682f0e643cf731accafb146cd793cf3c53eca9d80cf57a40f01e3fc3a6181ceb535f119d005f8ae5b7e04e9e2a1938755674e95b8dbc18ce13d80de050dc6bbd601bce0c662ffb3a7cd587a66bb0e701f9d8167eb0b4d5a334e00ab56196070c4d19f40d9ec50f0a356926a77674da084d733026891cd4b0315cc78bfff5bbdc5f28aec4594efa6e9c8ffccb92037f571c22c5cd180dd0c465d66e8f334afce2f44ca37e6ab61d275e40a301cdf23081f6bfbe048d676c79b1ea39fdf06ec0218e8667650861d90d1f57f82f668beec6cb00fc021ec112c806188512d996d9aee19353cd55e05b9c02feb19bdb86cab0e2e67dd660958127e173935072a575cbebdfb6826421ad383244dd3c542e75ad27b63efc1d47878b48530363512e51d59a97d9cffaaa5bcd787426c3a603667c973e3f385fe211893c93e8712e18c62d12e299951ffb5fa43cb60ae25a0ca6d36f06932f1343d9eb91bed704b3112e856c692c174c9ddf0f9d1378dfa3bbcf65a2f1b794802cecc693ea7e4fb3521c3deb71c2b20a0ee875a4be7fe27f4bfae71be4e1f9c6ce983b565eec353607b89889ef37d44812c4d6a534b88241cf4939959e1e0c5f9dc32660646b00b6d62a93bbd12e3422e73a8464be60a4df7910914161f8a619f324b26b0689b92f41c91da0b8c6689389583c03adcfc53dfdf2970a880b6628786b7357c2878d42c2a4103866214fb8a4a050f6274898ee34f68ac8eb6c940511ce41d9221a90987d6a138eb5a3cf46255d88bd141fba4be08338fe68bd5f569d88a0cc1873297269201583416b29c10d6f0c0d7649bb1cc30e58d13d073123d5b103d5f09c0a74e8070e037e6bcf2745efa4e7a52aaf97824e81711541390dc7decf2dddd71ef8c0a622c5b38eb7f30a11a4a6e188a869ecc872b2d5cc4f6f23ddfc4eb29ecfbfeb085b03e9f04728c2081411de0458e61d09b2719f6de8881db6f8b7afe91a1948db96528aabbcd16ea7f990860ce17490de7807ecf8b851f6986ce02b495f9a9a5670baef2651f41361c14267d21bbcaf99e5406686de76644dbe13723d03103ae0e7e3ad07751c46a0cab4fbc3548072439bcff76aaeb6251d513b30253907af5685102f5074f5df1fee98d251811c864335138bb7c19158ee63a04227f950258e65cc5235123fb13a8b9e7db34faf3c1903fb0017ccbf4234517fa0c6bc60918efa3887c06c52d10de348b32df139e9952ec4417a8816aed037f8ea087cdde858e8194be53ce36995564454a07e215f3d3e6105ebee9a04944e388f52b6c02f19da544c6bec4bcec819b35994f9db65bf78619619038a02ad9ad3e9e2b86a14a2751b9eb6ba85682d540c2f8f8dd5e8ae7d880a1e", @generic="343be30ed6c03491cecae9ca9f03c6396c3d2a5f0ec9ab958271559be9ed208c4eb81f2f9d0823754822d4773bcef13b3bf2f2cbf57ed25a74768601ba6712e06d002e1ffb7a2baa06ff6dfe2b8c95f1a9820f9bd404b2174098e708d6696719928af4228b81c2e5a3e4eedaf34a4bea95f111700865f643bc98edd7b95e8bab24924d250bf511544d52691c50d0715f932b78c838b5f1571b56e5a51bc57e2113e7056344c56ea4fc24e46711c1ae74368e4c17a5545c61215750d7aa3b", @nested={0x4, 0x1e}, @nested={0x4, 0x9}, @nested={0x4, 0xfe}, @nested={0x4, 0x151}, @generic="a7943ffd987a3ab896148b5dd8c38263375b31e44e884d7c0b743017c21235fb63db1c6cb740acfc03819fb61a0e27a336baefc92fcdb4b4f0855b45e311af28a16096248883252c28b9c14260c3eca833f2a2dce60ec7aef1c70032be8cd6bad9fd873b01700b0a220eeb65b67d832d5d8aae59fb6f9f0888fb"]}, @generic="dad4f2c63e48305bcae44b74b86aaf98a8a8634e73199fd72ba046f54cd5a52c75d98d117a8b6855ef1c4ad3ca06f58eb1ce5b9d013f6447dc2b86351a11a59d10abb957e4604bb2d910af9b29a21a9cd8d7d07310f67aebc6eda986eaeaec14f8a8de21072d50014670c1979aedf0315a91418b3eac0008c9c172d8c8d060cfdf1a5237409df27612390371567cef1ab1a07f487a756393a1b0607199bc2c17b97cafd26270e78aba6c791c065c16ca499b6b6f237870c5d758cd0aa265ddefbde91383c20b33742c", @generic="496e145dc2744979dcf297c8a2435878fde52b19fc40223269bbf6752b79d11f5da74a0af5bd0c5efb3501d9d40cd88b687cb6ef6a87e9bc23a704227add9671fb7a57cc81fa048fcf61bd787e9f5c8642aaa5ea8b9a7358cd4673144db2a1015c5fb5122da4f8888ba6366f555c1b766060f79e"]}]}, 0x1710}, 0x1, 0x0, 0x0, 0x4004834}, 0x4808) prctl$auto_PR_SET_MM_ARG_END(0x9, 0x9, 0xffffffffffffffff, 0xd, 0x13) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)='5', 0x1) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x203, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, &(0x7f0000000200)={[0x8, 0x4, 0x2, 0x40000b, 0x1, 0x9, 0x0, 0x7ffd, 0xa, 0x193, 0xfffffffffffffff9, 0x3, 0x5e4, 0x1000, 0x1, 0x1]}, &(0x7f0000000380)={[0x8000000000000001, 0x5, 0x1, 0xfffe, 0xe, 0xf, 0x5, 0x3, 0x59fc8000, 0x200006, 0x8000000000000000, 0x3, 0x800, 0x7, 0x1ff, 0x5]}, &(0x7f0000000280)={0x6, 0xc8}) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x250940, 0x8) socket(0xa, 0x5, 0x94) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x6c800, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x309c02, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/9/smp_affinity\x00', 0x129542, 0x0) read$auto(0x3, 0x0, 0x7) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0xc) 281.039524ms ago: executing program 3 (id=1500): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) shmat$auto(0x4, &(0x7f0000000000)='\x00', 0xa3c) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x141241, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/teql0/statistics/rx_dropped\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000580)={0x0, 0x2100, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) 0s ago: executing program 2 (id=1501): mmap$auto(0x0, 0x2020009, 0x800000000000, 0xeb1, 0xfffffffffffffffa, 0xf) mmap$auto(0xfffffffffffffffd, 0x8000000020009, 0x4000000000df, 0xeb1, 0x401, 0x0) eventfd$auto(0x2200000c) socket(0x2, 0x3, 0x6) setsockopt$auto(0x4, 0x0, 0x16, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0xffffffffffefffff, 0x3fd6, 0x3, 0x7fffffffb000) ioctl$auto(0x3, 0xc0405626, 0x38) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0xfffffffffffffffc, 0x2) r0 = prctl$auto_PR_SET_MM_ARG_END(0xffffffff, 0x9, 0x0, 0x400000000010, 0x7) read$auto_hwsim_fops_rx_rssi_(r0, &(0x7f0000000140)=""/91, 0x5b) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22642, 0x0) ioctl$auto(r2, 0x400454ca, 0x38) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) r4 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) mmap$auto(0xb2, 0x8000000014, 0xffa, 0x18, r2, 0x8) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, r1, [0x1ff, 0xffff, 0x40], {0x81, 0x5, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x6, 0x0, 0x0, 0xfffffffa, 0xc}}) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(r4, &(0x7f0000000040)='\x00', 0xa5d) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x4e0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) ioctl$auto(r6, 0x5609, 0xffffffffffffffff) madvise$auto(0xffffffffffffffff, 0x20499d, 0xaf88) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                [ 551.854019][T12825] ERROR: Out of memory at tomoyo_memory_ok. [ 552.444263][T12836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1355'. [ 552.639919][T12846] busy [ 554.802284][T12869] FAULT_INJECTION: forcing a failure. [ 554.802284][T12869] name failslab, interval 1, probability 0, space 0, times 0 [ 554.860229][T12869] CPU: 0 UID: 0 PID: 12869 Comm: syz.3.1362 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 554.860291][T12869] Tainted: [I]=FIRMWARE_WORKAROUND [ 554.860301][T12869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 554.860317][T12869] Call Trace: [ 554.860325][T12869] [ 554.860334][T12869] dump_stack_lvl+0x16c/0x1f0 [ 554.860368][T12869] should_fail_ex+0x512/0x640 [ 554.860404][T12869] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 554.860433][T12869] should_failslab+0xc2/0x120 [ 554.860467][T12869] __kmalloc_cache_noprof+0x6a/0x3e0 [ 554.860493][T12869] ? resv_map_alloc+0x7e/0x400 [ 554.860549][T12869] resv_map_alloc+0x7e/0x400 [ 554.860584][T12869] hugetlb_reserve_pages+0x799/0xe10 [ 554.860630][T12869] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 554.860672][T12869] ? atime_needs_update+0x8b/0x710 [ 554.860718][T12869] hugetlbfs_file_mmap+0x4a1/0x730 [ 554.860757][T12869] __mmap_region+0x1488/0x27c0 [ 554.860790][T12869] ? __pfx___mmap_region+0x10/0x10 [ 554.860820][T12869] ? kernel_text_address+0x8d/0x100 [ 554.860873][T12869] ? stack_depot_save_flags+0x28/0xa40 [ 554.860952][T12869] ? trace_cap_capable+0x18d/0x200 [ 554.860999][T12869] mmap_region+0x1ab/0x3f0 [ 554.861027][T12869] ? __get_unmapped_area+0x267/0x440 [ 554.861065][T12869] do_mmap+0xd8e/0x11b0 [ 554.861104][T12869] ? __pfx_do_mmap+0x10/0x10 [ 554.861139][T12869] ? __pfx_down_write_killable+0x10/0x10 [ 554.861176][T12869] vm_mmap_pgoff+0x281/0x450 [ 554.861215][T12869] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 554.861251][T12869] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 554.861299][T12869] ? hugetlbfs_get_inode+0x31f/0x730 [ 554.861341][T12869] ksys_mmap_pgoff+0x1c8/0x5c0 [ 554.861382][T12869] __x64_sys_mmap+0x125/0x190 [ 554.861414][T12869] do_syscall_64+0xcd/0x490 [ 554.861445][T12869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.861470][T12869] RIP: 0033:0x7fcca618e969 [ 554.861494][T12869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.861599][T12869] RSP: 002b:00007fcca70d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 554.861626][T12869] RAX: ffffffffffffffda RBX: 00007fcca63b5fa0 RCX: 00007fcca618e969 [ 554.861643][T12869] RDX: 0000000000000002 RSI: 0000000000000009 RDI: 0000000000000000 [ 554.861658][T12869] RBP: 00007fcca6210ab1 R08: 0000000000000401 R09: 0000300000000000 [ 554.861674][T12869] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 554.861689][T12869] R13: 0000000000000000 R14: 00007fcca63b5fa0 R15: 00007ffe6fbff728 [ 554.861721][T12869] [ 555.670005][T12879] ERROR: Out of memory at tomoyo_memory_ok. [ 555.793103][T12879] FAULT_INJECTION: forcing a failure. [ 555.793103][T12879] name failslab, interval 1, probability 0, space 0, times 0 [ 555.812638][T12879] CPU: 1 UID: 0 PID: 12879 Comm: syz.4.1364 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 555.812687][T12879] Tainted: [I]=FIRMWARE_WORKAROUND [ 555.812699][T12879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.812717][T12879] Call Trace: [ 555.812727][T12879] [ 555.812738][T12879] dump_stack_lvl+0x16c/0x1f0 [ 555.812778][T12879] should_fail_ex+0x512/0x640 [ 555.812819][T12879] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 555.812856][T12879] should_failslab+0xc2/0x120 [ 555.812896][T12879] __kmalloc_cache_node_noprof+0x6d/0x420 [ 555.812929][T12879] ? sbitmap_init_node+0x2ca/0x770 [ 555.812958][T12879] ? sbitmap_queue_init_node+0x341/0x560 [ 555.812996][T12879] sbitmap_queue_init_node+0x341/0x560 [ 555.813035][T12879] blk_mq_init_tags+0x162/0x2b0 [ 555.813084][T12879] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 555.813129][T12879] ? blk_mq_map_queues+0x211/0x410 [ 555.813169][T12879] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 555.813217][T12879] blk_mq_alloc_tag_set+0x778/0x1260 [ 555.813272][T12879] loop_add+0x3b7/0xb70 [ 555.813303][T12879] ? do_vfs_ioctl+0x523/0x1a60 [ 555.813347][T12879] ? __pfx_loop_add+0x10/0x10 [ 555.813374][T12879] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 555.813442][T12879] ? find_held_lock+0x2b/0x80 [ 555.813498][T12879] loop_control_ioctl+0x13c/0x630 [ 555.813532][T12879] ? __pfx_loop_control_ioctl+0x10/0x10 [ 555.813571][T12879] ? __pfx_loop_control_ioctl+0x10/0x10 [ 555.813607][T12879] __x64_sys_ioctl+0x18e/0x210 [ 555.813653][T12879] do_syscall_64+0xcd/0x490 [ 555.813712][T12879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.813757][T12879] RIP: 0033:0x7f034e78e969 [ 555.813800][T12879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.813832][T12879] RSP: 002b:00007f034f6bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.813862][T12879] RAX: ffffffffffffffda RBX: 00007f034e9b5fa0 RCX: 00007f034e78e969 [ 555.813884][T12879] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 555.813904][T12879] RBP: 00007f034e810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 555.813924][T12879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.813944][T12879] R13: 0000000000000000 R14: 00007f034e9b5fa0 R15: 00007fffae410478 [ 555.813985][T12879] [ 555.814173][T12879] blk-mq: reduced tag depth (128 -> 64) [ 556.509062][T12893] [U]  [ 556.512235][T12893] [U] [ 556.515266][T12893] [U] [ 556.518286][T12893] [U] [ 556.521664][T12893] [U] [ 556.524686][T12893] [U] [ 556.527700][T12893] [U] [ 556.530720][T12893] [U] [ 556.560697][T12893] [U] [ 556.563751][T12893] [U] [ 556.566771][T12893] [U] [ 556.569790][T12893] [U] [ 556.639237][T12893] [U] [ 557.475630][T12903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1368'. [ 559.315101][T12926] FAULT_INJECTION: forcing a failure. [ 559.315101][T12926] name failslab, interval 1, probability 0, space 0, times 0 [ 559.349813][T12926] CPU: 0 UID: 0 PID: 12926 Comm: syz.2.1375 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 559.349862][T12926] Tainted: [I]=FIRMWARE_WORKAROUND [ 559.349872][T12926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.349889][T12926] Call Trace: [ 559.349898][T12926] [ 559.349909][T12926] dump_stack_lvl+0x16c/0x1f0 [ 559.349946][T12926] should_fail_ex+0x512/0x640 [ 559.349991][T12926] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 559.350028][T12926] should_failslab+0xc2/0x120 [ 559.350061][T12926] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 559.350091][T12926] ? dup_fd+0x6ac/0xb90 [ 559.350117][T12926] ? copy_fs_struct+0x49/0x340 [ 559.350156][T12926] copy_fs_struct+0x49/0x340 [ 559.350214][T12926] copy_process+0x3484/0x9170 [ 559.350245][T12926] ? __lock_acquire+0x622/0x1c90 [ 559.350291][T12926] ? __pfx_copy_process+0x10/0x10 [ 559.350327][T12926] ? find_held_lock+0x2b/0x80 [ 559.350361][T12926] ? __might_fault+0xe3/0x190 [ 559.350393][T12926] ? __might_fault+0xe3/0x190 [ 559.350424][T12926] ? __might_fault+0x13b/0x190 [ 559.350466][T12926] ? _copy_from_user+0x59/0xd0 [ 559.350516][T12926] kernel_clone+0xfc/0x960 [ 559.350542][T12926] ? get_pid_task+0xfc/0x250 [ 559.350574][T12926] ? __pfx_kernel_clone+0x10/0x10 [ 559.350624][T12926] __do_sys_clone3+0x212/0x290 [ 559.350651][T12926] ? __pfx___do_sys_clone3+0x10/0x10 [ 559.350698][T12926] ? __fget_files+0x20e/0x3c0 [ 559.350751][T12926] do_syscall_64+0xcd/0x490 [ 559.350786][T12926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.350816][T12926] RIP: 0033:0x7f96ac18e969 [ 559.350838][T12926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.350865][T12926] RSP: 002b:00007f96a9ff5f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 559.350892][T12926] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f96ac18e969 [ 559.350911][T12926] RDX: 00007f96a9ff5f20 RSI: 0000000000000058 RDI: 00007f96a9ff5f20 [ 559.350929][T12926] RBP: 00007f96a9ff6090 R08: 0000000000000000 R09: 0000000000000058 [ 559.350947][T12926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 559.350964][T12926] R13: 0000000000000000 R14: 00007f96ac3b5fa0 R15: 00007ffc9f9eca58 [ 559.351006][T12926] [ 559.774002][T12930] ERROR: Out of memory at tomoyo_memory_ok. [ 560.686131][T12940] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.722960][T12940] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 560.803992][T12940] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 560.878841][T12940] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 560.909776][T12940] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.918382][T12940] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 560.945405][T12940] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 560.954938][T12940] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 562.718348][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 562.725310][T12979] ERROR: Out of memory at tomoyo_memory_ok. [ 562.792763][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 562.909465][T12979] FAULT_INJECTION: forcing a failure. [ 562.909465][T12979] name failslab, interval 1, probability 0, space 0, times 0 [ 562.944763][T12979] CPU: 0 UID: 0 PID: 12979 Comm: syz.0.1386 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 562.944815][T12979] Tainted: [I]=FIRMWARE_WORKAROUND [ 562.944826][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 562.944844][T12979] Call Trace: [ 562.944855][T12979] [ 562.944867][T12979] dump_stack_lvl+0x16c/0x1f0 [ 562.944909][T12979] should_fail_ex+0x512/0x640 [ 562.944951][T12979] ? __kvmalloc_node_noprof+0x122/0x620 [ 562.944988][T12979] should_failslab+0xc2/0x120 [ 562.945033][T12979] __kvmalloc_node_noprof+0x135/0x620 [ 562.945070][T12979] ? sbitmap_init_node+0x1ca/0x770 [ 562.945109][T12979] ? sbitmap_init_node+0x1ca/0x770 [ 562.945138][T12979] sbitmap_init_node+0x1ca/0x770 [ 562.945175][T12979] sbitmap_queue_init_node+0x41/0x560 [ 562.945214][T12979] blk_mq_init_tags+0x12d/0x2b0 [ 562.945264][T12979] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 562.945308][T12979] ? blk_mq_map_queues+0x211/0x410 [ 562.945348][T12979] __blk_mq_alloc_map_and_rqs+0x128/0x1f0 [ 562.945394][T12979] blk_mq_alloc_tag_set+0x778/0x1260 [ 562.945448][T12979] loop_add+0x3b7/0xb70 [ 562.945477][T12979] ? do_vfs_ioctl+0x523/0x1a60 [ 562.945519][T12979] ? __pfx_loop_add+0x10/0x10 [ 562.945545][T12979] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 562.945615][T12979] ? find_held_lock+0x2b/0x80 [ 562.945661][T12979] loop_control_ioctl+0x13c/0x630 [ 562.945694][T12979] ? __pfx_loop_control_ioctl+0x10/0x10 [ 562.945732][T12979] ? __pfx_loop_control_ioctl+0x10/0x10 [ 562.945766][T12979] __x64_sys_ioctl+0x18e/0x210 [ 562.945814][T12979] do_syscall_64+0xcd/0x490 [ 562.945853][T12979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.945882][T12979] RIP: 0033:0x7f7021f8e969 [ 562.945907][T12979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.945937][T12979] RSP: 002b:00007f7022e96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.945966][T12979] RAX: ffffffffffffffda RBX: 00007f70221b5fa0 RCX: 00007f7021f8e969 [ 562.945987][T12979] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 562.946012][T12979] RBP: 00007f7022010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 562.946031][T12979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.946050][T12979] R13: 0000000000000000 R14: 00007f70221b5fa0 R15: 00007ffe4f57f378 [ 562.946089][T12979] [ 562.946231][T12979] blk-mq: reduced tag depth (128 -> 64) [ 562.982658][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 562.987280][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 563.155092][ C0] vkms_vblank_simulate: vblank timer overrun [ 563.351935][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1389'. [ 563.829177][T12998] nfsd: Unknown parameter '^B-fb0' [ 564.794994][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 564.879415][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 564.931112][T13025] warn_alloc: 1 callbacks suppressed [ 564.931135][T13025] syz.4.1397: vmalloc error: size 1769472, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 564.954972][T13025] CPU: 0 UID: 0 PID: 13025 Comm: syz.4.1397 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 564.955026][T13025] Tainted: [I]=FIRMWARE_WORKAROUND [ 564.955039][T13025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 564.955059][T13025] Call Trace: [ 564.955069][T13025] [ 564.955094][T13025] dump_stack_lvl+0x16c/0x1f0 [ 564.955134][T13025] warn_alloc+0x248/0x3a0 [ 564.955172][T13025] ? __pfx_warn_alloc+0x10/0x10 [ 564.955211][T13025] ? alloc_pages_mpol+0x25a/0x550 [ 564.955253][T13025] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 564.955309][T13025] __vmalloc_node_range_noprof+0x12b6/0x1520 [ 564.955355][T13025] ? __snd_dma_alloc_pages+0x53/0x90 [ 564.955392][T13025] ? find_held_lock+0x2b/0x80 [ 564.955453][T13025] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 564.955495][T13025] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 564.955540][T13025] ? __snd_dma_alloc_pages+0x53/0x90 [ 564.955573][T13025] __vmalloc_node_noprof+0xad/0xf0 [ 564.955603][T13025] ? __snd_dma_alloc_pages+0x53/0x90 [ 564.955635][T13025] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 564.955676][T13025] __snd_dma_alloc_pages+0x53/0x90 [ 564.955712][T13025] snd_dma_alloc_dir_pages+0x151/0x240 [ 564.955751][T13025] do_alloc_pages+0x115/0x280 [ 564.955788][T13025] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 564.955830][T13025] snd_pcm_hw_params+0x15e1/0x1b40 [ 564.955871][T13025] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 564.955913][T13025] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 564.955970][T13025] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 564.956022][T13025] ? __asan_memset+0x23/0x50 [ 564.956058][T13025] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 564.956094][T13025] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 564.956169][T13025] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 564.956226][T13025] ? snd_pcm_oss_sync+0x30c/0x840 [ 564.956302][T13025] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 564.956356][T13025] snd_pcm_oss_sync+0x32e/0x840 [ 564.956411][T13025] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 564.956478][T13025] snd_pcm_oss_release+0x28b/0x310 [ 564.956532][T13025] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 564.956582][T13025] __fput+0x3ff/0xb70 [ 564.956637][T13025] task_work_run+0x14d/0x240 [ 564.956681][T13025] ? __pfx_task_work_run+0x10/0x10 [ 564.956723][T13025] ? __pfx___do_sys_close_range+0x10/0x10 [ 564.956770][T13025] exit_to_user_mode_loop+0xeb/0x110 [ 564.956813][T13025] do_syscall_64+0x3f6/0x490 [ 564.956857][T13025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.956899][T13025] RIP: 0033:0x7f034e78e969 [ 564.956939][T13025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.956974][T13025] RSP: 002b:00007f034f6bb038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 564.957005][T13025] RAX: 0000000000000000 RBX: 00007f034e9b5fa0 RCX: 00007f034e78e969 [ 564.957026][T13025] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 564.957046][T13025] RBP: 00007f034e810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 564.957066][T13025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.957085][T13025] R13: 0000000000000000 R14: 00007f034e9b5fa0 R15: 00007fffae410478 [ 564.957127][T13025] [ 564.957138][T13025] Mem-Info: [ 565.069049][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 565.083372][T13025] active_anon:69446 inactive_anon:0 isolated_anon:0 [ 565.083372][T13025] active_file:9792 inactive_file:46617 isolated_file:0 [ 565.083372][T13025] unevictable:4960 dirty:646 writeback:0 [ 565.083372][T13025] slab_reclaimable:11773 slab_unreclaimable:99084 [ 565.083372][T13025] mapped:30201 shmem:56122 pagetables:1252 [ 565.083372][T13025] sec_pagetables:0 bounce:0 [ 565.083372][T13025] kernel_misc_reclaimable:0 [ 565.083372][T13025] free:1267414 free_pcp:3622 free_cma:0 [ 565.277984][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 565.376815][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.482711][T13025] Node 0 active_anon:276284kB inactive_anon:0kB active_file:27668kB inactive_file:186336kB unevictable:29804kB isolated(anon):0kB isolated(file):0kB mapped:136504kB dirty:2584kB writeback:0kB shmem:215352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10940kB pagetables:4908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 565.519891][ C0] vkms_vblank_simulate: vblank timer overrun [ 565.542760][T13025] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 565.672892][T13025] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 565.776000][T13025] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 565.782445][T13025] Node 0 DMA32 free:1149360kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:262436kB inactive_anon:0kB active_file:21068kB inactive_file:180780kB unevictable:45704kB writepending:2584kB present:3129332kB managed:2541156kB mlocked:44304kB bounce:0kB free_pcp:5476kB local_pcp:1064kB free_cma:0kB [ 565.843417][T13032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1399'. [ 565.903498][T13025] lowmem_reserve[]: 0 0 1 1 1 [ 565.929093][T13025] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1556kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 565.959257][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.012063][T13025] lowmem_reserve[]: 0 0 0 0 0 [ 566.035052][T13025] Node 1 Normal free:3909588kB boost:0kB min:55788kB low:69732kB high:83676kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:13876kB local_pcp:3220kB free_cma:0kB [ 566.067481][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.102634][T13025] lowmem_reserve[]: 0 0 0 0 0 [ 566.107922][T13025] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 566.152759][T13025] Node 0 DMA32: 1635*4kB (UME) 1166*8kB (UME) 679*16kB (UME) 248*32kB (UME) 113*64kB (UME) 218*128kB (UME) 154*256kB (UME) 110*512kB (UME) 56*1024kB (UM) 29*2048kB (UM) 208*4096kB (UME) = 1134252kB [ 566.192848][T13025] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 566.231844][T13025] Node 1 Normal: 131*4kB (UME) 7*8kB (ME) 11*16kB (ME) 101*32kB (UME) 101*64kB (UME) 28*128kB (UME) 11*256kB (UM) 9*512kB (UME) 5*1024kB (UE) 4*2048kB (UE) 946*4096kB (M) = 3909588kB [ 566.252099][ C0] vkms_vblank_simulate: vblank timer overrun [ 566.315710][T13025] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.337639][T13025] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=2 hugepages_size=2048kB [ 566.363076][T13025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.385570][T13025] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 566.412818][T13025] 107137 total pagecache pages [ 566.418133][T13025] 0 pages in swap cache [ 566.424701][T13025] Free swap = 124996kB [ 566.429306][T13025] Total swap = 124996kB [ 566.451187][T13025] 2097051 pages RAM [ 566.466362][T13025] 0 pages HighMem/MovableOnly [ 566.471588][T13025] 429720 pages reserved [ 566.492592][T13025] 0 pages cma reserved [ 566.655270][T13043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1401'. [ 566.953042][T13047] FAULT_INJECTION: forcing a failure. [ 566.953042][T13047] name failslab, interval 1, probability 0, space 0, times 0 [ 566.985887][T13047] CPU: 0 UID: 0 PID: 13047 Comm: syz.3.1402 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 566.985941][T13047] Tainted: [I]=FIRMWARE_WORKAROUND [ 566.985953][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 566.985973][T13047] Call Trace: [ 566.985997][T13047] [ 566.986008][T13047] dump_stack_lvl+0x16c/0x1f0 [ 566.986048][T13047] should_fail_ex+0x512/0x640 [ 566.986103][T13047] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 566.986142][T13047] should_failslab+0xc2/0x120 [ 566.986181][T13047] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 566.986218][T13047] ? alloc_empty_file+0x55/0x1e0 [ 566.986265][T13047] alloc_empty_file+0x55/0x1e0 [ 566.986308][T13047] path_openat+0xda/0x2cb0 [ 566.986337][T13047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.986381][T13047] ? __pfx_path_openat+0x10/0x10 [ 566.986415][T13047] ? __lock_acquire+0xb8a/0x1c90 [ 566.986450][T13047] do_filp_open+0x20b/0x470 [ 566.986488][T13047] ? __pfx_do_filp_open+0x10/0x10 [ 566.986548][T13047] ? alloc_fd+0x471/0x7d0 [ 566.986589][T13047] do_sys_openat2+0x11b/0x1d0 [ 566.986632][T13047] ? __pfx_do_sys_openat2+0x10/0x10 [ 566.986690][T13047] __x64_sys_openat+0x174/0x210 [ 566.986735][T13047] ? __pfx___x64_sys_openat+0x10/0x10 [ 566.986795][T13047] do_syscall_64+0xcd/0x490 [ 566.986834][T13047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.986863][T13047] RIP: 0033:0x7fcca618d2d0 [ 566.986888][T13047] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 566.986918][T13047] RSP: 002b:00007fcca70d5f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 566.986947][T13047] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fcca618d2d0 [ 566.986966][T13047] RDX: 0000000000000002 RSI: 00007fcca70d5fa0 RDI: 00000000ffffff9c [ 566.986985][T13047] RBP: 00007fcca70d5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 566.987004][T13047] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 566.987022][T13047] R13: 0000000000000000 R14: 00007fcca63b5fa0 R15: 00007ffe6fbff728 [ 566.987059][T13047] [ 568.079839][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.079907][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.120057][T13052] tty tty48: ldisc open failed (-12), clearing slot 47 [ 568.938545][T13081] FAULT_INJECTION: forcing a failure. [ 568.938545][T13081] name failslab, interval 1, probability 0, space 0, times 0 [ 568.976736][T13081] CPU: 1 UID: 0 PID: 13081 Comm: syz.3.1409 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 568.976776][T13081] Tainted: [I]=FIRMWARE_WORKAROUND [ 568.976784][T13081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 568.976798][T13081] Call Trace: [ 568.976825][T13081] [ 568.976834][T13081] dump_stack_lvl+0x16c/0x1f0 [ 568.976867][T13081] should_fail_ex+0x512/0x640 [ 568.976899][T13081] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 568.976932][T13081] should_failslab+0xc2/0x120 [ 568.976965][T13081] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 568.976993][T13081] ? copy_sighand+0x43/0x2c0 [ 568.977031][T13081] copy_sighand+0x43/0x2c0 [ 568.977066][T13081] copy_process+0x276f/0x9170 [ 568.977090][T13081] ? __lock_acquire+0x622/0x1c90 [ 568.977127][T13081] ? __pfx_copy_process+0x10/0x10 [ 568.977156][T13081] ? find_held_lock+0x2b/0x80 [ 568.977185][T13081] ? __might_fault+0xe3/0x190 [ 568.977211][T13081] ? __might_fault+0xe3/0x190 [ 568.977235][T13081] ? __might_fault+0x13b/0x190 [ 568.977268][T13081] ? _copy_from_user+0x59/0xd0 [ 568.977308][T13081] kernel_clone+0xfc/0x960 [ 568.977328][T13081] ? get_pid_task+0xfc/0x250 [ 568.977361][T13081] ? __pfx_kernel_clone+0x10/0x10 [ 568.977400][T13081] __do_sys_clone3+0x212/0x290 [ 568.977424][T13081] ? __pfx___do_sys_clone3+0x10/0x10 [ 568.977462][T13081] ? __fget_files+0x20e/0x3c0 [ 568.977506][T13081] do_syscall_64+0xcd/0x490 [ 568.977536][T13081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.977559][T13081] RIP: 0033:0x7fcca618e969 [ 568.977578][T13081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.977603][T13081] RSP: 002b:00007fcca70d5f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 568.977624][T13081] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fcca618e969 [ 568.977639][T13081] RDX: 00007fcca70d5f20 RSI: 0000000000000058 RDI: 00007fcca70d5f20 [ 568.977654][T13081] RBP: 00007fcca70d6090 R08: 0000000000000000 R09: 0000000000000058 [ 568.977668][T13081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 568.977682][T13081] R13: 0000000000000000 R14: 00007fcca63b5fa0 R15: 00007ffe6fbff728 [ 568.977711][T13081] [ 569.494317][T13072] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 569.503845][T13072] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 569.510502][T13072] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 569.522908][T13072] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 569.746673][T13088] ERROR: Out of memory at tomoyo_memory_ok. [ 570.092894][T13094] sp0: Synchronizing with TNC [ 570.196010][T13092] FAULT_INJECTION: forcing a failure. [ 570.196010][T13092] name failslab, interval 1, probability 0, space 0, times 0 [ 570.210295][T13092] CPU: 1 UID: 0 PID: 13092 Comm: syz.3.1412 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 570.210350][T13092] Tainted: [I]=FIRMWARE_WORKAROUND [ 570.210364][T13092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 570.210384][T13092] Call Trace: [ 570.210397][T13092] [ 570.210410][T13092] dump_stack_lvl+0x16c/0x1f0 [ 570.210454][T13092] should_fail_ex+0x512/0x640 [ 570.210510][T13092] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 570.210555][T13092] should_failslab+0xc2/0x120 [ 570.210599][T13092] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 570.210638][T13092] ? find_held_lock+0x2b/0x80 [ 570.210682][T13092] ? __d_alloc+0x31/0xaa0 [ 570.210727][T13092] __d_alloc+0x31/0xaa0 [ 570.210763][T13092] ? __d_lookup+0x266/0x4a0 [ 570.210815][T13092] d_alloc+0x4a/0x1e0 [ 570.210856][T13092] lookup_one_qstr_excl_raw.part.0+0x96/0x160 [ 570.210904][T13092] ? lookup_dcache+0x66/0x170 [ 570.210953][T13092] lookup_one_qstr_excl+0x3e/0x120 [ 570.211005][T13092] filename_create+0x1e7/0x4a0 [ 570.211037][T13092] ? __pfx_filename_create+0x10/0x10 [ 570.211076][T13092] ? __might_fault+0xe3/0x190 [ 570.211113][T13092] ? __might_fault+0xe3/0x190 [ 570.211148][T13092] ? __might_fault+0x13b/0x190 [ 570.211193][T13092] do_mknodat+0x18a/0x5d0 [ 570.211248][T13092] ? __pfx_do_mknodat+0x10/0x10 [ 570.211280][T13092] ? getname_flags.part.0+0x1c5/0x550 [ 570.211336][T13092] __x64_sys_mknod+0x87/0xb0 [ 570.211373][T13092] do_syscall_64+0xcd/0x490 [ 570.211414][T13092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.211447][T13092] RIP: 0033:0x7fcca618e969 [ 570.211471][T13092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.211510][T13092] RSP: 002b:00007fcca70d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 570.211541][T13092] RAX: ffffffffffffffda RBX: 00007fcca63b5fa0 RCX: 00007fcca618e969 [ 570.211562][T13092] RDX: 0000000000008103 RSI: 00000000000080e9 RDI: 00002000000003c0 [ 570.211582][T13092] RBP: 00007fcca6210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 570.211602][T13092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.211641][T13092] R13: 0000000000000000 R14: 00007fcca63b5fa0 R15: 00007ffe6fbff728 [ 570.211685][T13092] [ 570.952708][T12983] Bluetooth: hci0: command 0x0406 tx timeout [ 571.592991][T12983] Bluetooth: hci2: command 0x0406 tx timeout [ 571.599847][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 571.600282][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 572.691465][T13141] ERROR: Out of memory at tomoyo_memory_ok. [ 572.704547][T13138] snd_aloop snd_aloop.0: control 159516449:-1124030676:-126301658:Pz/zF˷fC:0 is already present [ 572.745237][T13138] snd_aloop snd_aloop.0: control 159516449:-1124030676:-126301658:Pz/zF˷fC:0 is already present [ 572.801101][T13138] snd_aloop snd_aloop.0: control 159516449:-1124030676:-126301658:Pz/zF˷fC:0 is already present [ 572.953366][T13138] snd_aloop snd_aloop.0: control 159516449:-1124030676:-126301658:Pz/zF˷fC:0 is already present [ 573.064271][T13138] snd_aloop snd_aloop.0: control 159516449:-1124030676:-126301658:Pz/zF˷fC:0 is already present [ 573.121535][T13138] snd_aloop snd_aloop.0: control 159516449:-1124030676:-126301658:Pz/zF˷fC:0 is already present [ 573.146611][T13138] snd_aloop snd_aloop.0: control 159516449:-1124030676:-126301658:Pz/zF˷fC:0 is already present [ 573.238573][T13138] snd_aloop snd_aloop.0: control 159516449:-1124030676:-126301658:Pz/zF˷fC:0 is already present [ 573.318619][T13138] snd_aloop snd_aloop.0: control 159516449:-1124030676:-126301658:Pz/zF˷fC:0 is already present [ 575.239622][T13165] FAULT_INJECTION: forcing a failure. [ 575.239622][T13165] name failslab, interval 1, probability 0, space 0, times 0 [ 575.282840][T13165] CPU: 0 UID: 0 PID: 13165 Comm: syz.4.1427 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 575.282898][T13165] Tainted: [I]=FIRMWARE_WORKAROUND [ 575.282912][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 575.282932][T13165] Call Trace: [ 575.282943][T13165] [ 575.282957][T13165] dump_stack_lvl+0x16c/0x1f0 [ 575.283001][T13165] should_fail_ex+0x512/0x640 [ 575.283045][T13165] ? fs_reclaim_acquire+0xae/0x150 [ 575.283098][T13165] should_failslab+0xc2/0x120 [ 575.283140][T13165] __kmalloc_cache_noprof+0x6a/0x3e0 [ 575.283175][T13165] ? tomoyo_init_log+0x197/0x2140 [ 575.283232][T13165] tomoyo_init_log+0x197/0x2140 [ 575.283272][T13165] ? format_decode+0x1ad/0xd40 [ 575.283324][T13165] ? __pfx_format_decode+0x10/0x10 [ 575.283388][T13165] ? __pfx_tomoyo_init_log+0x10/0x10 [ 575.283451][T13165] tomoyo_write_log2+0x2f7/0xc10 [ 575.283515][T13165] tomoyo_supervisor+0x15e/0x13b0 [ 575.283576][T13165] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 575.283642][T13165] ? lockdep_hardirqs_on+0x7c/0x110 [ 575.283696][T13165] ? tomoyo_check_path_acl+0xad/0x210 [ 575.283730][T13165] ? tomoyo_check_acl+0x1f7/0x410 [ 575.283784][T13165] tomoyo_path_permission+0x270/0x3b0 [ 575.283821][T13165] tomoyo_check_open_permission+0x37b/0x3c0 [ 575.283856][T13165] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 575.283928][T13165] ? do_raw_spin_lock+0x12c/0x2b0 [ 575.283975][T13165] tomoyo_file_open+0x6b/0x90 [ 575.284022][T13165] security_file_open+0x84/0x1e0 [ 575.284061][T13165] do_dentry_open+0x596/0x1c10 [ 575.284107][T13165] vfs_open+0x82/0x3f0 [ 575.284154][T13165] path_openat+0x1de4/0x2cb0 [ 575.284211][T13165] ? __pfx_path_openat+0x10/0x10 [ 575.284248][T13165] ? __lock_acquire+0xb8a/0x1c90 [ 575.284284][T13165] do_filp_open+0x20b/0x470 [ 575.284318][T13165] ? __pfx_do_filp_open+0x10/0x10 [ 575.284378][T13165] ? alloc_fd+0x471/0x7d0 [ 575.284418][T13165] do_sys_openat2+0x11b/0x1d0 [ 575.284460][T13165] ? __pfx_do_sys_openat2+0x10/0x10 [ 575.284521][T13165] __x64_sys_openat+0x174/0x210 [ 575.284565][T13165] ? __pfx___x64_sys_openat+0x10/0x10 [ 575.284628][T13165] do_syscall_64+0xcd/0x490 [ 575.284667][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.284698][T13165] RIP: 0033:0x7f034e78e969 [ 575.284722][T13165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.284754][T13165] RSP: 002b:00007f034f6bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.284784][T13165] RAX: ffffffffffffffda RBX: 00007f034e9b5fa0 RCX: 00007f034e78e969 [ 575.284805][T13165] RDX: 0000000000040a40 RSI: 0000200000001d40 RDI: ffffffffffffff9c [ 575.284825][T13165] RBP: 00007f034e810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 575.284845][T13165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.284863][T13165] R13: 0000000000000000 R14: 00007f034e9b5fa0 R15: 00007fffae410478 [ 575.284903][T13165] [ 576.574991][T13180] FAULT_INJECTION: forcing a failure. [ 576.574991][T13180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 576.592764][T13180] CPU: 0 UID: 0 PID: 13180 Comm: syz.2.1430 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 576.592827][T13180] Tainted: [I]=FIRMWARE_WORKAROUND [ 576.592840][T13180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 576.592857][T13180] Call Trace: [ 576.592868][T13180] [ 576.592881][T13180] dump_stack_lvl+0x16c/0x1f0 [ 576.592923][T13180] should_fail_ex+0x512/0x640 [ 576.592973][T13180] should_fail_alloc_page+0xe7/0x130 [ 576.593016][T13180] prepare_alloc_pages+0x3c2/0x610 [ 576.593065][T13180] ? stack_trace_save+0x8e/0xc0 [ 576.593120][T13180] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 576.593165][T13180] ? kasan_save_stack+0x42/0x60 [ 576.593198][T13180] ? kasan_save_stack+0x33/0x60 [ 576.593229][T13180] ? kasan_save_track+0x14/0x30 [ 576.593261][T13180] ? __kasan_kmalloc+0xaa/0xb0 [ 576.593292][T13180] ? fuse_dev_alloc+0x8e/0x280 [ 576.593322][T13180] ? fuse_dev_alloc_install+0x13/0x40 [ 576.593352][T13180] ? cuse_channel_open+0x100/0x7f0 [ 576.593379][T13180] ? misc_open+0x35a/0x420 [ 576.593410][T13180] ? chrdev_open+0x234/0x6a0 [ 576.593442][T13180] ? do_dentry_open+0x744/0x1c10 [ 576.593473][T13180] ? vfs_open+0x82/0x3f0 [ 576.593511][T13180] ? path_openat+0x1de4/0x2cb0 [ 576.593540][T13180] ? do_filp_open+0x20b/0x470 [ 576.593571][T13180] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 576.593607][T13180] ? register_lock_class+0x41/0x4c0 [ 576.593647][T13180] ? __lock_acquire+0xb8a/0x1c90 [ 576.593683][T13180] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 576.593722][T13180] ? policy_nodemask+0xea/0x4e0 [ 576.593763][T13180] alloc_pages_mpol+0x1fb/0x550 [ 576.593802][T13180] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 576.593843][T13180] ? fuse_dev_alloc_install+0x2b/0x40 [ 576.593883][T13180] folio_alloc_noprof+0x20/0x2d0 [ 576.593926][T13180] cuse_channel_open+0x198/0x7f0 [ 576.593954][T13180] ? __pfx_cuse_channel_open+0x10/0x10 [ 576.593986][T13180] misc_open+0x35a/0x420 [ 576.594019][T13180] ? __pfx_misc_open+0x10/0x10 [ 576.594053][T13180] chrdev_open+0x234/0x6a0 [ 576.594093][T13180] ? __pfx_apparmor_file_open+0x10/0x10 [ 576.594129][T13180] ? __pfx_chrdev_open+0x10/0x10 [ 576.594167][T13180] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 576.594225][T13180] do_dentry_open+0x744/0x1c10 [ 576.594260][T13180] ? __pfx_chrdev_open+0x10/0x10 [ 576.594305][T13180] vfs_open+0x82/0x3f0 [ 576.594351][T13180] path_openat+0x1de4/0x2cb0 [ 576.594396][T13180] ? __pfx_path_openat+0x10/0x10 [ 576.594432][T13180] ? __lock_acquire+0xb8a/0x1c90 [ 576.594466][T13180] do_filp_open+0x20b/0x470 [ 576.594498][T13180] ? __pfx_do_filp_open+0x10/0x10 [ 576.594558][T13180] ? alloc_fd+0x471/0x7d0 [ 576.594599][T13180] do_sys_openat2+0x11b/0x1d0 [ 576.594642][T13180] ? __pfx_do_sys_openat2+0x10/0x10 [ 576.594699][T13180] __x64_sys_openat+0x174/0x210 [ 576.594740][T13180] ? __pfx___x64_sys_openat+0x10/0x10 [ 576.594800][T13180] do_syscall_64+0xcd/0x490 [ 576.594838][T13180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.594868][T13180] RIP: 0033:0x7f96ac18e969 [ 576.594891][T13180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.594921][T13180] RSP: 002b:00007f96a9fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 576.594949][T13180] RAX: ffffffffffffffda RBX: 00007f96ac3b6080 RCX: 00007f96ac18e969 [ 576.594969][T13180] RDX: 00000000001c1041 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 576.594989][T13180] RBP: 00007f96ac210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 576.595008][T13180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.595026][T13180] R13: 0000000000000000 R14: 00007f96ac3b6080 R15: 00007ffc9f9eca58 [ 576.595066][T13180] [ 578.155322][T13187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1431'. [ 581.012178][T13233] busy [ 581.684514][T13225] random: crng reseeded on system resumption [ 581.733754][ T36] ERROR: Out of memory at tomoyo_memory_ok. [ 581.747771][ T13] ERROR: Out of memory at tomoyo_memory_ok. [ 581.771867][T13225] FAULT_INJECTION: forcing a failure. [ 581.771867][T13225] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 581.802921][T13225] CPU: 0 UID: 0 PID: 13225 Comm: syz.2.1438 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 581.802970][T13225] Tainted: [I]=FIRMWARE_WORKAROUND [ 581.802982][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 581.803000][T13225] Call Trace: [ 581.803011][T13225] [ 581.803022][T13225] dump_stack_lvl+0x16c/0x1f0 [ 581.803065][T13225] should_fail_ex+0x512/0x640 [ 581.803112][T13225] should_fail_alloc_page+0xe7/0x130 [ 581.803155][T13225] prepare_alloc_pages+0x3c2/0x610 [ 581.803201][T13225] ? rcu_is_watching+0x12/0xc0 [ 581.803246][T13225] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 581.803292][T13225] ? stack_trace_save+0x8e/0xc0 [ 581.803335][T13225] ? __pfx_stack_trace_save+0x10/0x10 [ 581.803378][T13225] ? stack_depot_save_flags+0x28/0xa40 [ 581.803425][T13225] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 581.803476][T13225] ? kasan_save_stack+0x42/0x60 [ 581.803507][T13225] ? kasan_save_stack+0x33/0x60 [ 581.803545][T13225] ? do_dentry_open+0x744/0x1c10 [ 581.803577][T13225] ? vfs_open+0x82/0x3f0 [ 581.803615][T13225] ? path_openat+0x1de4/0x2cb0 [ 581.803644][T13225] ? do_filp_open+0x20b/0x470 [ 581.803672][T13225] ? do_sys_openat2+0x11b/0x1d0 [ 581.803713][T13225] ? __x64_sys_openat+0x174/0x210 [ 581.803756][T13225] ? do_syscall_64+0xcd/0x490 [ 581.803788][T13225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.803820][T13225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 581.803855][T13225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 581.803898][T13225] ? policy_nodemask+0xea/0x4e0 [ 581.803942][T13225] alloc_pages_mpol+0x1fb/0x550 [ 581.803983][T13225] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 581.804035][T13225] alloc_pages_noprof+0x131/0x390 [ 581.804074][T13225] get_zeroed_page_noprof+0x18/0xb0 [ 581.804118][T13225] get_image_page+0x18/0x190 [ 581.804159][T13225] alloc_rtree_node+0x3c/0xb0 [ 581.804198][T13225] memory_bm_create+0x519/0x810 [ 581.804256][T13225] create_basic_memory_bitmaps+0xb5/0x2b0 [ 581.804305][T13225] snapshot_open+0x235/0x2b0 [ 581.804352][T13225] ? __pfx_snapshot_open+0x10/0x10 [ 581.804397][T13225] misc_open+0x35a/0x420 [ 581.804433][T13225] ? __pfx_misc_open+0x10/0x10 [ 581.804482][T13225] chrdev_open+0x234/0x6a0 [ 581.804518][T13225] ? __pfx_apparmor_file_open+0x10/0x10 [ 581.804555][T13225] ? __pfx_chrdev_open+0x10/0x10 [ 581.804613][T13225] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 581.804674][T13225] do_dentry_open+0x744/0x1c10 [ 581.804711][T13225] ? __pfx_chrdev_open+0x10/0x10 [ 581.804757][T13225] vfs_open+0x82/0x3f0 [ 581.804806][T13225] path_openat+0x1de4/0x2cb0 [ 581.804855][T13225] ? __pfx_path_openat+0x10/0x10 [ 581.804893][T13225] ? __lock_acquire+0xb8a/0x1c90 [ 581.804929][T13225] do_filp_open+0x20b/0x470 [ 581.804964][T13225] ? __pfx_do_filp_open+0x10/0x10 [ 581.805028][T13225] ? alloc_fd+0x471/0x7d0 [ 581.805071][T13225] do_sys_openat2+0x11b/0x1d0 [ 581.805116][T13225] ? __pfx_do_sys_openat2+0x10/0x10 [ 581.805181][T13225] __x64_sys_openat+0x174/0x210 [ 581.805229][T13225] ? __pfx___x64_sys_openat+0x10/0x10 [ 581.805292][T13225] do_syscall_64+0xcd/0x490 [ 581.805334][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.805366][T13225] RIP: 0033:0x7f96ac18e969 [ 581.805392][T13225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.805424][T13225] RSP: 002b:00007f96a9ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 581.805532][T13225] RAX: ffffffffffffffda RBX: 00007f96ac3b5fa0 RCX: 00007f96ac18e969 [ 581.805557][T13225] RDX: 0000000000184b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 581.805579][T13225] RBP: 00007f96ac210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 581.805599][T13225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.805618][T13225] R13: 0000000000000000 R14: 00007f96ac3b5fa0 R15: 00007ffc9f9eca58 [ 581.805680][T13225] [ 587.082983][T13294] FAULT_INJECTION: forcing a failure. [ 587.082983][T13294] name failslab, interval 1, probability 0, space 0, times 0 [ 587.197280][T13294] CPU: 1 UID: 0 PID: 13294 Comm: syz.4.1450 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 587.197334][T13294] Tainted: [I]=FIRMWARE_WORKAROUND [ 587.197349][T13294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 587.197364][T13294] Call Trace: [ 587.197372][T13294] [ 587.197381][T13294] dump_stack_lvl+0x16c/0x1f0 [ 587.197414][T13294] should_fail_ex+0x512/0x640 [ 587.197449][T13294] ? fs_reclaim_acquire+0xae/0x150 [ 587.197490][T13294] should_failslab+0xc2/0x120 [ 587.197523][T13294] __kmalloc_cache_noprof+0x6a/0x3e0 [ 587.197548][T13294] ? tomoyo_init_log+0x197/0x2140 [ 587.197584][T13294] tomoyo_init_log+0x197/0x2140 [ 587.197613][T13294] ? format_decode+0x1ad/0xd40 [ 587.197653][T13294] ? __pfx_format_decode+0x10/0x10 [ 587.197701][T13294] ? __pfx_tomoyo_init_log+0x10/0x10 [ 587.197740][T13294] tomoyo_write_log2+0x2f7/0xc10 [ 587.197776][T13294] tomoyo_supervisor+0x15e/0x13b0 [ 587.197818][T13294] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 587.197868][T13294] ? lockdep_hardirqs_on+0x7c/0x110 [ 587.197900][T13294] ? tomoyo_check_path_acl+0xad/0x210 [ 587.197938][T13294] ? tomoyo_check_acl+0x1f7/0x410 [ 587.197997][T13294] tomoyo_path_permission+0x270/0x3b0 [ 587.198042][T13294] tomoyo_check_open_permission+0x37b/0x3c0 [ 587.198083][T13294] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 587.198165][T13294] ? do_raw_spin_lock+0x12c/0x2b0 [ 587.198216][T13294] tomoyo_file_open+0x6b/0x90 [ 587.198268][T13294] security_file_open+0x84/0x1e0 [ 587.198310][T13294] do_dentry_open+0x596/0x1c10 [ 587.198368][T13294] vfs_open+0x82/0x3f0 [ 587.198419][T13294] path_openat+0x1de4/0x2cb0 [ 587.198469][T13294] ? __pfx_path_openat+0x10/0x10 [ 587.198508][T13294] ? __lock_acquire+0xb8a/0x1c90 [ 587.198546][T13294] do_filp_open+0x20b/0x470 [ 587.198582][T13294] ? __pfx_do_filp_open+0x10/0x10 [ 587.198648][T13294] ? alloc_fd+0x471/0x7d0 [ 587.198691][T13294] do_sys_openat2+0x11b/0x1d0 [ 587.198736][T13294] ? __pfx_do_sys_openat2+0x10/0x10 [ 587.198798][T13294] __x64_sys_openat+0x174/0x210 [ 587.198846][T13294] ? __pfx___x64_sys_openat+0x10/0x10 [ 587.198908][T13294] do_syscall_64+0xcd/0x490 [ 587.198951][T13294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.198983][T13294] RIP: 0033:0x7f034e78e969 [ 587.199010][T13294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.199044][T13294] RSP: 002b:00007f034f69a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 587.199074][T13294] RAX: ffffffffffffffda RBX: 00007f034e9b6080 RCX: 00007f034e78e969 [ 587.199111][T13294] RDX: 0000000000040a40 RSI: 0000200000001d40 RDI: ffffffffffffff9c [ 587.199131][T13294] RBP: 00007f034e810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 587.199150][T13294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.199169][T13294] R13: 0000000000000000 R14: 00007f034e9b6080 R15: 00007fffae410478 [ 587.199207][T13294] [ 589.439652][T13317] ERROR: Out of memory at tomoyo_memory_ok. [ 590.840138][T13333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1458'. [ 591.791189][T13347] FAULT_INJECTION: forcing a failure. [ 591.791189][T13347] name failslab, interval 1, probability 0, space 0, times 0 [ 591.850813][T13347] CPU: 1 UID: 0 PID: 13347 Comm: syz.0.1462 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 591.850866][T13347] Tainted: [I]=FIRMWARE_WORKAROUND [ 591.850879][T13347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 591.850898][T13347] Call Trace: [ 591.850909][T13347] [ 591.850921][T13347] dump_stack_lvl+0x16c/0x1f0 [ 591.850964][T13347] should_fail_ex+0x512/0x640 [ 591.851009][T13347] ? fs_reclaim_acquire+0xae/0x150 [ 591.851066][T13347] ? tomoyo_init_log+0x1385/0x2140 [ 591.851105][T13347] should_failslab+0xc2/0x120 [ 591.851146][T13347] __kmalloc_noprof+0xd2/0x510 [ 591.851194][T13347] tomoyo_init_log+0x1385/0x2140 [ 591.851260][T13347] ? __pfx_tomoyo_init_log+0x10/0x10 [ 591.851314][T13347] tomoyo_write_log2+0x2f7/0xc10 [ 591.851363][T13347] tomoyo_supervisor+0x15e/0x13b0 [ 591.851417][T13347] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 591.851483][T13347] ? lockdep_hardirqs_on+0x7c/0x110 [ 591.851525][T13347] ? tomoyo_check_path_acl+0xad/0x210 [ 591.851561][T13347] ? tomoyo_check_acl+0x1f7/0x410 [ 591.851618][T13347] tomoyo_path_permission+0x270/0x3b0 [ 591.851658][T13347] tomoyo_check_open_permission+0x37b/0x3c0 [ 591.851697][T13347] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 591.851776][T13347] ? do_raw_spin_lock+0x12c/0x2b0 [ 591.851855][T13347] tomoyo_file_open+0x6b/0x90 [ 591.851935][T13347] security_file_open+0x84/0x1e0 [ 591.851995][T13347] do_dentry_open+0x596/0x1c10 [ 591.852062][T13347] vfs_open+0x82/0x3f0 [ 591.852128][T13347] path_openat+0x1de4/0x2cb0 [ 591.852189][T13347] ? __pfx_path_openat+0x10/0x10 [ 591.852246][T13347] ? __lock_acquire+0xb8a/0x1c90 [ 591.852293][T13347] do_filp_open+0x20b/0x470 [ 591.852342][T13347] ? __pfx_do_filp_open+0x10/0x10 [ 591.852441][T13347] ? alloc_fd+0x471/0x7d0 [ 591.852498][T13347] do_sys_openat2+0x11b/0x1d0 [ 591.852582][T13347] ? __pfx_do_sys_openat2+0x10/0x10 [ 591.852661][T13347] __x64_sys_openat+0x174/0x210 [ 591.852723][T13347] ? __pfx___x64_sys_openat+0x10/0x10 [ 591.852815][T13347] do_syscall_64+0xcd/0x490 [ 591.852880][T13347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.852926][T13347] RIP: 0033:0x7f7021f8e969 [ 591.852969][T13347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.853020][T13347] RSP: 002b:00007f7022e96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 591.853077][T13347] RAX: ffffffffffffffda RBX: 00007f70221b5fa0 RCX: 00007f7021f8e969 [ 591.853105][T13347] RDX: 0000000000040a40 RSI: 0000200000001d40 RDI: ffffffffffffff9c [ 591.853133][T13347] RBP: 00007f7022010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 591.853176][T13347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.853203][T13347] R13: 0000000000000000 R14: 00007f70221b5fa0 R15: 00007ffe4f57f378 [ 591.853276][T13347] [ 594.678091][T13406] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 595.238517][T13415] FAULT_INJECTION: forcing a failure. [ 595.238517][T13415] name failslab, interval 1, probability 0, space 0, times 0 [ 595.276598][T13415] CPU: 1 UID: 0 PID: 13415 Comm: syz.0.1477 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 595.276653][T13415] Tainted: [I]=FIRMWARE_WORKAROUND [ 595.276667][T13415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 595.276686][T13415] Call Trace: [ 595.276698][T13415] [ 595.276711][T13415] dump_stack_lvl+0x16c/0x1f0 [ 595.276756][T13415] should_fail_ex+0x512/0x640 [ 595.276812][T13415] ? fs_reclaim_acquire+0xae/0x150 [ 595.276870][T13415] ? tomoyo_encode2+0x100/0x3e0 [ 595.276912][T13415] should_failslab+0xc2/0x120 [ 595.276955][T13415] __kmalloc_noprof+0xd2/0x510 [ 595.276995][T13415] ? d_absolute_path+0x136/0x1a0 [ 595.277047][T13415] tomoyo_encode2+0x100/0x3e0 [ 595.277095][T13415] tomoyo_encode+0x29/0x50 [ 595.277137][T13415] tomoyo_realpath_from_path+0x18f/0x6e0 [ 595.277196][T13415] tomoyo_check_open_permission+0x2ab/0x3c0 [ 595.277236][T13415] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 595.277318][T13415] ? do_raw_spin_lock+0x12c/0x2b0 [ 595.277372][T13415] tomoyo_file_open+0x6b/0x90 [ 595.277424][T13415] security_file_open+0x84/0x1e0 [ 595.277468][T13415] do_dentry_open+0x596/0x1c10 [ 595.277519][T13415] vfs_open+0x82/0x3f0 [ 595.277572][T13415] path_openat+0x1de4/0x2cb0 [ 595.277623][T13415] ? __pfx_path_openat+0x10/0x10 [ 595.277663][T13415] ? __lock_acquire+0xb8a/0x1c90 [ 595.277701][T13415] do_filp_open+0x20b/0x470 [ 595.277739][T13415] ? __pfx_do_filp_open+0x10/0x10 [ 595.277823][T13415] ? alloc_fd+0x471/0x7d0 [ 595.277870][T13415] do_sys_openat2+0x11b/0x1d0 [ 595.277919][T13415] ? __pfx_do_sys_openat2+0x10/0x10 [ 595.277985][T13415] __x64_sys_openat+0x174/0x210 [ 595.278034][T13415] ? __pfx___x64_sys_openat+0x10/0x10 [ 595.278103][T13415] do_syscall_64+0xcd/0x490 [ 595.278147][T13415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.278181][T13415] RIP: 0033:0x7f7021f8e969 [ 595.278207][T13415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.278242][T13415] RSP: 002b:00007f7022e75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 595.278274][T13415] RAX: ffffffffffffffda RBX: 00007f70221b6080 RCX: 00007f7021f8e969 [ 595.278297][T13415] RDX: 0000000000040a40 RSI: 0000200000001d40 RDI: ffffffffffffff9c [ 595.278319][T13415] RBP: 00007f7022010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 595.278341][T13415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.278360][T13415] R13: 0000000000000000 R14: 00007f70221b6080 R15: 00007ffe4f57f378 [ 595.278405][T13415] [ 595.278438][T13415] ERROR: Out of memory at tomoyo_realpath_from_path. [ 598.582751][T13434] tc_dump_action: action bad kind [ 599.044372][T13444] mkiss: ax0: crc mode is auto. [ 599.136708][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1484'. [ 604.802649][T13498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1495'. [ 604.893901][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 605.265807][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1495'. [ 605.710209][T13530] ================================================================== [ 605.710234][T13530] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x15d4/0x17b0 [ 605.710280][T13530] Write of size 8 at addr ffffc90003ae9000 by task syz.0.1498/13530 [ 605.710310][T13530] [ 605.710329][T13530] CPU: 1 UID: 0 PID: 13530 Comm: syz.0.1498 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 605.710379][T13530] Tainted: [I]=FIRMWARE_WORKAROUND [ 605.710393][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 605.710413][T13530] Call Trace: [ 605.710425][T13530] [ 605.710438][T13530] dump_stack_lvl+0x116/0x1f0 [ 605.710479][T13530] print_report+0xcd/0x680 [ 605.710531][T13530] ? __virt_addr_valid+0x81/0x610 [ 605.710586][T13530] ? sys_fillrect+0x15d4/0x17b0 [ 605.710621][T13530] kasan_report+0xe0/0x110 [ 605.710663][T13530] ? sys_fillrect+0x15d4/0x17b0 [ 605.710705][T13530] sys_fillrect+0x15d4/0x17b0 [ 605.710747][T13530] ? __pfx_sys_fillrect+0x10/0x10 [ 605.710788][T13530] ? __pfx_bit_putcs+0x10/0x10 [ 605.710837][T13530] ? bit_cursor+0xeca/0x17e0 [ 605.710890][T13530] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 605.710934][T13530] bit_clear+0x17a/0x220 [ 605.710985][T13530] ? __pfx_bit_clear+0x10/0x10 [ 605.711034][T13530] ? __pfx___might_resched+0x10/0x10 [ 605.711082][T13530] ? fb_get_color_depth+0x120/0x250 [ 605.711137][T13530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 605.711180][T13530] ? __pfx_bit_clear+0x10/0x10 [ 605.711227][T13530] __fbcon_clear+0x603/0x780 [ 605.711290][T13530] fbcon_scroll+0x48b/0x690 [ 605.711338][T13530] con_scroll+0x45c/0x690 [ 605.711387][T13530] do_con_write+0x6869/0x7c90 [ 605.711457][T13530] ? __pfx_do_con_write+0x10/0x10 [ 605.711513][T13530] con_write+0x23/0xb0 [ 605.711558][T13530] n_tty_write+0x40f/0x1160 [ 605.711596][T13530] ? __pfx_n_tty_write+0x10/0x10 [ 605.711626][T13530] ? rcu_is_watching+0x12/0xc0 [ 605.711667][T13530] ? __pfx_woken_wake_function+0x10/0x10 [ 605.711706][T13530] ? kfree+0x24f/0x4d0 [ 605.711732][T13530] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 605.711779][T13530] ? __pfx_n_tty_write+0x10/0x10 [ 605.711811][T13530] file_tty_write.constprop.0+0x502/0x9b0 [ 605.711863][T13530] redirected_tty_write+0xd4/0x150 [ 605.711909][T13530] vfs_write+0x6c4/0x1150 [ 605.711940][T13530] ? __pfx_redirected_tty_write+0x10/0x10 [ 605.711987][T13530] ? __pfx_vfs_write+0x10/0x10 [ 605.712016][T13530] ? find_held_lock+0x2b/0x80 [ 605.712067][T13530] ksys_write+0x12a/0x250 [ 605.712100][T13530] ? __pfx_ksys_write+0x10/0x10 [ 605.712144][T13530] do_syscall_64+0xcd/0x490 [ 605.712182][T13530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.712213][T13530] RIP: 0033:0x7f7021f8e969 [ 605.712237][T13530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.712268][T13530] RSP: 002b:00007f7022e54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 605.712298][T13530] RAX: ffffffffffffffda RBX: 00007f70221b6160 RCX: 00007f7021f8e969 [ 605.712320][T13530] RDX: 0000000000000073 RSI: 0000200000000100 RDI: 0000000000000005 [ 605.712340][T13530] RBP: 00007f7022010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 605.712360][T13530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.712379][T13530] R13: 0000000000000000 R14: 00007f70221b6160 R15: 00007ffe4f57f378 [ 605.712409][T13530] [ 605.712420][T13530] [ 605.712433][T13530] The buggy address ffffc90003ae9000 belongs to a vmalloc virtual mapping [ 605.712451][T13530] Memory state around the buggy address: [ 605.712467][T13530] ffffc90003ae8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 605.712490][T13530] ffffc90003ae8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 605.712517][T13530] >ffffc90003ae9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 605.712535][T13530] ^ [ 605.712550][T13530] ffffc90003ae9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 605.712572][T13530] ffffc90003ae9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 605.712589][T13530] ================================================================== [ 605.743578][T13530] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 605.743608][T13530] CPU: 0 UID: 0 PID: 13530 Comm: syz.0.1498 Tainted: G I 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 605.743656][T13530] Tainted: [I]=FIRMWARE_WORKAROUND [ 605.743670][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 605.743689][T13530] Call Trace: [ 605.743699][T13530] [ 605.743712][T13530] dump_stack_lvl+0x3d/0x1f0 [ 605.743752][T13530] panic+0x71c/0x800 [ 605.743786][T13530] ? __pfx_panic+0x10/0x10 [ 605.743818][T13530] ? mark_held_locks+0x49/0x80 [ 605.743850][T13530] ? preempt_schedule_thunk+0x16/0x30 [ 605.743894][T13530] ? sys_fillrect+0x15d4/0x17b0 [ 605.743929][T13530] ? preempt_schedule_common+0x44/0xc0 [ 605.743967][T13530] ? sys_fillrect+0x15d4/0x17b0 [ 605.744000][T13530] check_panic_on_warn+0xab/0xb0 [ 605.744035][T13530] end_report+0x107/0x170 [ 605.744074][T13530] kasan_report+0xee/0x110 [ 605.744112][T13530] ? sys_fillrect+0x15d4/0x17b0 [ 605.744150][T13530] sys_fillrect+0x15d4/0x17b0 [ 605.744188][T13530] ? __pfx_sys_fillrect+0x10/0x10 [ 605.744225][T13530] ? __pfx_bit_putcs+0x10/0x10 [ 605.744269][T13530] ? bit_cursor+0xeca/0x17e0 [ 605.744318][T13530] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 605.744358][T13530] bit_clear+0x17a/0x220 [ 605.744403][T13530] ? __pfx_bit_clear+0x10/0x10 [ 605.744448][T13530] ? __pfx___might_resched+0x10/0x10 [ 605.744491][T13530] ? fb_get_color_depth+0x120/0x250 [ 605.744540][T13530] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 605.744578][T13530] ? __pfx_bit_clear+0x10/0x10 [ 605.744625][T13530] __fbcon_clear+0x603/0x780 [ 605.744672][T13530] fbcon_scroll+0x48b/0x690 [ 605.744716][T13530] con_scroll+0x45c/0x690 [ 605.744763][T13530] do_con_write+0x6869/0x7c90 [ 605.744820][T13530] ? __pfx_do_con_write+0x10/0x10 [ 605.744882][T13530] con_write+0x23/0xb0 [ 605.744929][T13530] n_tty_write+0x40f/0x1160 [ 605.744970][T13530] ? __pfx_n_tty_write+0x10/0x10 [ 605.745001][T13530] ? rcu_is_watching+0x12/0xc0 [ 605.745044][T13530] ? __pfx_woken_wake_function+0x10/0x10 [ 605.745085][T13530] ? kfree+0x24f/0x4d0 [ 605.745112][T13530] ? file_tty_write.constprop.0+0x6ed/0x9b0 [ 605.745159][T13530] ? __pfx_n_tty_write+0x10/0x10 [ 605.745191][T13530] file_tty_write.constprop.0+0x502/0x9b0 [ 605.745241][T13530] redirected_tty_write+0xd4/0x150 [ 605.745286][T13530] vfs_write+0x6c4/0x1150 [ 605.745317][T13530] ? __pfx_redirected_tty_write+0x10/0x10 [ 605.745365][T13530] ? __pfx_vfs_write+0x10/0x10 [ 605.745394][T13530] ? find_held_lock+0x2b/0x80 [ 605.745445][T13530] ksys_write+0x12a/0x250 [ 605.745476][T13530] ? __pfx_ksys_write+0x10/0x10 [ 605.745533][T13530] do_syscall_64+0xcd/0x490 [ 605.745573][T13530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.745607][T13530] RIP: 0033:0x7f7021f8e969 [ 605.745632][T13530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.745665][T13530] RSP: 002b:00007f7022e54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 605.745698][T13530] RAX: ffffffffffffffda RBX: 00007f70221b6160 RCX: 00007f7021f8e969 [ 605.745720][T13530] RDX: 0000000000000073 RSI: 0000200000000100 RDI: 0000000000000005 [ 605.745742][T13530] RBP: 00007f7022010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 605.745763][T13530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.745784][T13530] R13: 0000000000000000 R14: 00007f70221b6160 R15: 00007ffe4f57f378 [ 605.745817][T13530] [ 605.745971][T13530] Kernel Offset: disabled