last executing test programs: 9m41.256504962s ago: executing program 2 (id=621): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/4087, 0xff7) r1 = open(&(0x7f0000000140)='./file0\x00', 0xe5c2, 0x42) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/gro_flush_timeout\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) read$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(r1, &(0x7f0000000040)=""/28, 0x1c) ioctl$auto_BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f00000001c0)={@raw=0x9, "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"}) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r3 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r3, 0x84, 0x0, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty12\x00', 0x101440, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x4b67, r5) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r6 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) write$auto_rfkill_fops_core(r6, &(0x7f00000011c0)="f0e8d1ba1bf37eb09af8eece2f077c542cd21eacc0ab2d7b4dd6314dcceac7f924b7f7e5d81521d011fca57af907d8afe8c7b964e2635e0e5f4811d96fdc666850b3ff9338edce6f1860ff006d90495e4d734676b444ee80a3f5b34196d2945f5f52fd2ce2330ded93df0c6ac927eaa62c6e4108eaa95b16171ae3d3b39b7b7381b2ecb32e44efaf3df5ff179e0f616447d5c1dc21", 0x95) rename$auto(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00') 9m41.047488338s ago: executing program 2 (id=626): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x31d2b978) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_SNDTIMEO_OLD(r4, 0x1, 0x15, &(0x7f0000000180)='IPVS\x00', &(0x7f00000001c0)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, 0x0, 0x800) lchown$auto(&(0x7f0000000040)='./file0\x00', r2, r3) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r6 = io_uring_setup$auto(0xc, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) recvmmsg$auto(r6, 0x0, 0x4, 0x0, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r7, r8, 0x0, 0x1000200) 9m39.655566299s ago: executing program 2 (id=635): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101282, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) fchmodat2$auto(0xffffffffffffffff, 0x0, 0x9, 0x0) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff2d, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, r0, 0x8000) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000440)="af39134f893e1d21b17d5adaae0e30fef5a8b1f2167d5a2bf3a970c0805670fb6756764af7cc76127be70f91a6bd87d46af4b78c2714189029bec59f3c2e5acf36980fccdb0a572212d370770b29bf8a16e2812687c543da6666b2bc3e12a983819253f6f2eae9d99ee5131e09f4257af07a9ead4cff468ea2ec09b8b2fa189067d8ba") write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto_MADV_DODUMP(0x8, 0x5, 0x11) mmap$auto(0x0, 0x400007, 0xdf, 0x4000000000000010, 0x2, 0x8000) openat$auto_full_fops_mem(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000040)={0xb1, 0x3, 0x1}}) write$auto(r2, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x02\x00\x00\x00\x00\x00\x00\x00C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xdb\x93\xfa2\x14~h\xe1\xafk0\x05\xc6p\x05\xba\x95 \xf2\xd0\xa0\xd0\xbas\xeb\x8f\xc7f$\x1fP\xabY\xa0\xce\x13\xe6\xcdU\xbc\x7fi\xee\xe0\xcfz\xd7,&\xbfO\x84S\x7f\x11\xc94*j\xaa=\x06b<<]\x02\x9e\xb6\xa5Z\t\xc5\xbc\xfd\xe8&\x90a\x147\x84\xeb\xbc\x89\xb2\xd3\xa9\x14<\'9RJ\x9c\'\xcbp\x05\xf8\r\xa4i\x03\xda\x88\x0e', 0x100000a3d9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) 9m38.253163936s ago: executing program 2 (id=640): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0x0, 0x0, 0x7, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) personality$auto(0xfffff032) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x8) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x8e40, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) r2 = socket(0x1d, 0x1, 0x7fff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r6 = socket(0x18, 0x5, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r7, 0x5403, 0x0) connect$auto(r6, 0x0, 0x3a) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r6, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x20200, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r4) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r8, @ANYBLOB="00082abd7000fbdbdf251c0000000800a1000700", @ANYRES32=r4, @ANYBLOB="08cdcb0600000030686c26fef2acfa895b973f825a038a5160d9181fbb0cd8292b3553a1e465efd86142bebee4e8c98dcf8cbf70ca7e48147325e9f46cb583998ac82496855fd84ebb39f7d6b0a6034e7fda349ca8393e7bdbd3150c1c6889a6ed3e61363e9c605e637711130ccb7f91a13094cadb56414dc4479d56b4d95cc5194eddee8f76e52e84dbe0353f367428741b03a438c82e55eed24988d80554e084656ebf395db7fe8ea539736881b81f7bf76489c336c6e58e6fff07695947385d06b2d0cb36ccab2a09c077eda045e5f1694d9a51fdbc37d75cdd72"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 9m37.044217635s ago: executing program 2 (id=643): r0 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r0, 0x11b, 0x6, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x5, 0x0, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000480)="b1c0254bd89f8d0b259d4e8871bcc40ef2a459fe6952433ed91fdff6fccb4864597156aaf463a6ae6cf947db2b5eb166e9f91e4d770ddf1fe0790195447042848fb8f29ca7668cbad2599b3633bfb47264ae8de8b6ac16ec954b7730f5ca6ec186de435193f971c471b1a56510aaa3c4608099e4b8dcd204d8ad55a3596343e47220eeb8cdb1788378213f01"}}}, 0x2, &(0x7f0000000540)={{0xa, 0x1}, {0x5, 0x9}, 0x0, 0x0, 0xfffffffffffffffa, 0x6, 0x100, 0xfc2, 0x5, 0xf, 0x7, 0x8000004, 0xff2, 0xf47, 0x6, 0x200008c}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000009c0)={0x14, r3, 0x1, 0x70bc2f, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315, r4}, 0x1) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r6, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 9m35.066298246s ago: executing program 2 (id=651): openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x719901, 0x0) (async) r0 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x719901, 0x0) mmap$auto(0x7ffffffd, 0x10000000040000c, 0x11, 0xb6f9, r0, 0x7fff) epoll_create$auto(0x4) r1 = socket(0x1d, 0x1, 0x7fff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x20003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x203, 0x0) (async) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x203, 0x0) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, 0x0) (async) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) (async) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) socket(0x18, 0x5, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0) sendfile$auto(r5, r5, 0x0, 0x43) (async) sendfile$auto(r5, r5, 0x0, 0x43) r6 = setfsuid$auto(0xee00) setreuid$auto(r6, 0x0) r7 = setfsuid$auto(0x0) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000180)=0x9a24) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1, 0xfffffffffffffff9, 0x7, r7, 0xffffffffffffffff, 0x6, 0x0, 0x80000401, 0x1, 0x5, 0x1fc, {0x80000001, 0xfb44}, {0x5, 0x28}, {0xffffffffffffffff, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x4, 0x8, 0x5, 0xb6a, 0xdfc, [0xe32, 0x2, 0x10000080000001, 0x4, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffa, 0xe, 0x3]}) (async) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1, 0xfffffffffffffff9, 0x7, r7, 0xffffffffffffffff, 0x6, 0x0, 0x80000401, 0x1, 0x5, 0x1fc, {0x80000001, 0xfb44}, {0x5, 0x28}, {0xffffffffffffffff, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x4, 0x8, 0x5, 0xb6a, 0xdfc, [0xe32, 0x2, 0x10000080000001, 0x4, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffa, 0xe, 0x3]}) setreuid$auto(r6, r7) (async) setreuid$auto(r6, r7) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) write$auto(0x3, 0x0, 0xfdf3) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) 9m19.5702353s ago: executing program 32 (id=651): openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x719901, 0x0) (async) r0 = openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000000040), 0x719901, 0x0) mmap$auto(0x7ffffffd, 0x10000000040000c, 0x11, 0xb6f9, r0, 0x7fff) epoll_create$auto(0x4) r1 = socket(0x1d, 0x1, 0x7fff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x20003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x203, 0x0) (async) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x203, 0x0) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, 0x0) (async) ioctl$auto_SNDCTL_SEQ_NRSYNTHS(r3, 0x8004510a, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) (async) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) socket(0x18, 0x5, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0) sendfile$auto(r5, r5, 0x0, 0x43) (async) sendfile$auto(r5, r5, 0x0, 0x43) r6 = setfsuid$auto(0xee00) setreuid$auto(r6, 0x0) r7 = setfsuid$auto(0x0) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000180)=0x9a24) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1, 0xfffffffffffffff9, 0x7, r7, 0xffffffffffffffff, 0x6, 0x0, 0x80000401, 0x1, 0x5, 0x1fc, {0x80000001, 0xfb44}, {0x5, 0x28}, {0xffffffffffffffff, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x4, 0x8, 0x5, 0xb6a, 0xdfc, [0xe32, 0x2, 0x10000080000001, 0x4, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffa, 0xe, 0x3]}) (async) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1, 0xfffffffffffffff9, 0x7, r7, 0xffffffffffffffff, 0x6, 0x0, 0x80000401, 0x1, 0x5, 0x1fc, {0x80000001, 0xfb44}, {0x5, 0x28}, {0xffffffffffffffff, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x4, 0x8, 0x5, 0xb6a, 0xdfc, [0xe32, 0x2, 0x10000080000001, 0x4, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffa, 0xe, 0x3]}) setreuid$auto(r6, r7) (async) setreuid$auto(r6, r7) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) (async) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) write$auto(0x3, 0x0, 0xfdf3) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) 3m21.986890488s ago: executing program 0 (id=1831): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x6}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x2e}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {0xa, 0x0, 0xa00}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) setsockopt$auto(r0, 0x2, 0x6, &(0x7f0000000000)='\x00', 0x22d1) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x5, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m18.756487159s ago: executing program 0 (id=1827): close_range$auto(0x2, 0x8, 0x0) select$auto(0xff, &(0x7f0000000000)={[0x8, 0x7fffffff, 0x6, 0x80000000, 0x4, 0xd, 0x1, 0x5, 0x8000000000000000, 0x76, 0x1ff, 0x5, 0x5, 0x1, 0xffffffffffffffff, 0x2]}, &(0x7f0000000080)={[0xd, 0x1, 0xfd, 0x100000000, 0x8000000000000001, 0x4, 0x0, 0x3, 0x10000, 0x2, 0x4, 0x0, 0x8, 0xb, 0x9, 0x7]}, &(0x7f0000000100)={[0x11d2, 0x3, 0x4, 0x4, 0x2, 0xfffffffffffffffe, 0x1, 0x5, 0x8, 0x7fff, 0x9, 0x7, 0x2, 0x100000001, 0xff, 0xea]}, &(0x7f0000000180)={0x0, 0x800}) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) setsockopt$auto(0x3, 0x10f, 0xffff8001, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000200), r0) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc8, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, "4c9f008471c7dcfbc8534f05c0ab3d3654fe23d5baa73c17d075933152aa27dc74a5b8d69e40c72ffa3b49b2ebd266a690167da7f1da1528130b6e676f72506107b63010adfcb903a003919a0b72f7625bd6d97cfdb4f90d39dfbfadcf5462b14eaf20a17d9962d94121a16883b3f17702d6f296ff7e978ac707875c3c898415a5f2f1156a09ff2b7a469a673bed8f9bae50049cce0e2a35905e38a3b306dc295953c7ceda2111d9ac2de63c06077444161c"}, 0xc8}, 0x1, 0x0, 0x0, 0x40}, 0x880) 3m15.523665789s ago: executing program 0 (id=1830): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/ep_81/wMaxPacketSize\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/170, 0xaa) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) setgroups$auto(0x3, 0xfffffffffffffffc) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) r1 = socket(0x11, 0x80003, 0x300) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r1) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/time_for_children\x00') sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c950000cc8a864614edc53b159ced908349d2328e672210887fc4e3f4e62df17a412440c4fccd941452ba8201954affd77433beb5f0a4b55cbd989ce4b0107cbd5c3472fa", @ANYRES16=r2, @ANYBLOB="040025bd7000fbdbdf250b0000000c001700000900000000000008001d00", @ANYRES32=r3, @ANYBLOB="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"], 0x220}}, 0x4880) ioctl$auto(0x3, 0x80108907, 0x38) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'geneve0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'geneve1\x00', 0x0}) r7 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8}, 0x6a) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="13002cbd7000dddbdf272500000008000300", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x12c, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x4001) r12 = clone3$auto(&(0x7f00000000c0)={0x9, 0xf, 0x4, 0x7fffffff, 0x6b9, 0xa41, 0x756, 0xed51, 0x7, 0x9, 0x4}, 0x6) prctl$auto(0x59616d61, 0xffffffffffffffff, r12, 0x1004, 0xfffffffffffffffb) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r13 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) write$auto(r13, 0x0, 0x100082) ioctl$auto_SG_GET_NUM_WAITING(r13, 0x227d, 0x0) 3m12.355845804s ago: executing program 0 (id=1835): openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, 0x0, 0x8001, 0x0) socket(0x10, 0x6, 0x100000ec) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x6, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) quotactl$auto(0x9, 0x0, 0x62a0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) r1 = socket(0x2, 0x3, 0xa) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r1) sendmsg$auto_HWSIM_CMD_FRAME(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)={0x10e4, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x9}, @HWSIM_ATTR_COOKIE={0xc, 0x8, 0x80000000}, @HWSIM_ATTR_TX_INFO_FLAGS={0x8e, 0x15, "cd7271c47d4e646568ea383efbb3e15a279f4f92a765550fb4a7499f52ac4af17af13a186f0b170c47118b596fe244e28c0028edf6146a34c44d085573f2bb7b969003a0eb6d89705353e207f13b15a883f9d87b3365e2e6c6498e8655c95dced5ee73ce8ea321d28464bc1cad4d9c90ad5fc367744f366bf34ccf0e9f5de196b967a49e48521135f46a"}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x7fff}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0xd03}, @HWSIM_ATTR_ADDR_RECEIVER={0x1004, 0x1, "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"}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x4}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x7}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x10e4}, 0x1, 0x0, 0x0, 0x4040441}, 0x4000000) getsockopt$auto(r1, 0x0, 0x29, 0x0, 0x0) 3m11.368437982s ago: executing program 4 (id=1840): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) open(&(0x7f0000000040)='./file0\x00', 0x1e9e02, 0x61) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) timer_create$auto(0x9, 0x0, 0x0) timer_delete$auto(0x1) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) sendmsg$auto_NFSD_CMD_VERSION_GET(0xffffffffffffffff, 0x0, 0x8811) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, r0, 0xfffffffffffff09f) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) ioctl$auto(0x3, 0x80000541b, 0x38) 3m8.862089097s ago: executing program 0 (id=1841): getgroups$auto(0x1a1, 0xfffffffffffffffd) (async) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(r0, &(0x7f00000001c0)=@in={0x2, 0x3}, 0x55) (async) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x9d0820a96a5768b0, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x7355, 0x1c9}, 0x2, 0x1) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x1084) (async) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) (async) r3 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000001680)="a7", 0x80000) (async) madvise$auto(0x0, 0x20200, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) recvfrom$auto(r0, &(0x7f00000000c0)="580885bcbe00009147212f19bd641480ddb2571378143f055c1cfe0800b2b573f1dd697649eb3130404a52c65ff3e160d40975907ca5f37c7cbf6e5fc087370a1babf400515d0c2c0c3578f1289e55034c0f8627f6b442f12a680fd8962b91ee891efc779500000047b7dafc2adbd3ea3124b126a2ea4b7f2414a1cd8762a5b20babbc9dc9edf2900ff299fa6f05ba526effd3fd8f2c72891faed6d4aeb91291ae1d0f6b1c67370e4d65810d8158343544fc54", 0xfffffffffffffff6, 0x80, &(0x7f0000000380)=@hci={0x1f, 0x402, 0x3}, &(0x7f0000000480)=0x6) (async) mmap$auto(0x0, 0x1000003, 0x1000000000001, 0x8000000018011, 0x3, 0x0) mmap$auto(0x0, 0x2101, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) setsockopt$auto(r0, 0x6, 0xd, 0x0, 0x4) (async) r4 = socket(0xb, 0x2, 0x8000000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r4) (async) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r4, 0x0, 0x4004010) (async) ioperm$auto(0xaf, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@ethernet={0x0, @multicast}, 0x58) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) open(&(0x7f0000000240)='./file0/file0\x00', 0x143a03, 0x24) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0xd55a, 0x1, 0x0, 0x397, 0x32d2) (async) socket$nl_generic(0x10, 0x3, 0x10) 3m7.195132166s ago: executing program 4 (id=1844): mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffc10, 0xffffffffffffffff, 0x800008000) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fcntl$auto(0x3, 0x8, 0x9ebfffffffffffff) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xffffffffffffffff, 0x8000) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x8000000e) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r1 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000f40), 0x2100, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000f80)=[{0x3ff, 0x3, 0x8000000000000000}, {0x5, 0x5, 0x2}, {0xa6, 0x1, 0x2}]) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) 3m6.890441872s ago: executing program 0 (id=1845): mmap$auto(0x0, 0x20009, 0x2000000000000e2, 0xeb1, 0x405, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x4044000) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r2 = socket(0x2, 0x80802, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_mon_fops_binary_mon_bin(r3, 0x0, 0x2f) ioctl$auto_MON_IOCG_STATS(r3, 0x80089203, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) io_uring_setup$auto(0x800001, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/devices/platform/vhci_hcd.0/usbmon/usbmon9/power/runtime_active_time\x00', 0x169882, 0x0) sendfile$auto(r4, r4, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x16, 0x4, 0x80000001, 0x8}, 0x6f4) preadv2$auto(r2, &(0x7f0000000000)={&(0x7f0000000340)="b37d3943964e42964b4252317fe90a81d690c52831d2e00f9766836a961263c9999f5200d4890c8437622b0cd418904e282eb489e77e1ee1632a412a2d2167d2492e1be7292655f86f0083a99100cc1aaa19dab35c99cbf77438d04e26c119a6fc35bc0bf5823bb5758c63b39c95a7968e67cb2af0cba262f65abe6272824ba653169e845f68a7b74ef74c4b1d1187ed0caaadfdbe948ae66abe4e2c50e4ddf3a73f7bab60e0c094bc850d5a5bee45976faca7b51c9c474303d0b24cabfd31c66125fb02f2a45ed3e8a1219cec06f7ad380cbbf11a3092b5340805128160364ecb330182cddcbaf2873b", 0x5}, 0xfffffffffffffff2, 0x101, 0x85, 0x5) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x2803, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000040)={0x2b, 0x4d, 0xf6c3, 0xe, "60fdff0602239ee6312525b9e9c06a2611701a39633c70878eadd0d07385e999"}) io_uring_register$auto_IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000100)="dbeb29dde80cb059f62a2b0ddfe697e04040545acfeb9eee55f0e7169f38c4be7833a0da0c72c81a1a7205ec2c41e6089025f77ce166c28d1a1c38a4274b2c3333b6aa06cc04ecb88ec63dd8c2c4e8444b1aaa3c303d0b1ac86527a0136dd99ce28edf24239e1eae296b7a4f364b38c472a806cae6553c611d7db46cf056273d48e5ea671d7c2dd8ba65ce957dd016963bd3f96dee556cda0a679b9507f6d5c3ff7a6bf8dfafd149a2646353fb01b6221fd8a35ff90d478d2539800e923a6a95f74c5d", 0xb77) 3m6.383836125s ago: executing program 33 (id=1845): mmap$auto(0x0, 0x20009, 0x2000000000000e2, 0xeb1, 0x405, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, 0x0, 0x4044000) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r2 = socket(0x2, 0x80802, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_mon_fops_binary_mon_bin(r3, 0x0, 0x2f) ioctl$auto_MON_IOCG_STATS(r3, 0x80089203, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) io_uring_setup$auto(0x800001, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/devices/platform/vhci_hcd.0/usbmon/usbmon9/power/runtime_active_time\x00', 0x169882, 0x0) sendfile$auto(r4, r4, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x16, 0x4, 0x80000001, 0x8}, 0x6f4) preadv2$auto(r2, &(0x7f0000000000)={&(0x7f0000000340)="b37d3943964e42964b4252317fe90a81d690c52831d2e00f9766836a961263c9999f5200d4890c8437622b0cd418904e282eb489e77e1ee1632a412a2d2167d2492e1be7292655f86f0083a99100cc1aaa19dab35c99cbf77438d04e26c119a6fc35bc0bf5823bb5758c63b39c95a7968e67cb2af0cba262f65abe6272824ba653169e845f68a7b74ef74c4b1d1187ed0caaadfdbe948ae66abe4e2c50e4ddf3a73f7bab60e0c094bc850d5a5bee45976faca7b51c9c474303d0b24cabfd31c66125fb02f2a45ed3e8a1219cec06f7ad380cbbf11a3092b5340805128160364ecb330182cddcbaf2873b", 0x5}, 0xfffffffffffffff2, 0x101, 0x85, 0x5) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x2803, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000040)={0x2b, 0x4d, 0xf6c3, 0xe, "60fdff0602239ee6312525b9e9c06a2611701a39633c70878eadd0d07385e999"}) io_uring_register$auto_IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000100)="dbeb29dde80cb059f62a2b0ddfe697e04040545acfeb9eee55f0e7169f38c4be7833a0da0c72c81a1a7205ec2c41e6089025f77ce166c28d1a1c38a4274b2c3333b6aa06cc04ecb88ec63dd8c2c4e8444b1aaa3c303d0b1ac86527a0136dd99ce28edf24239e1eae296b7a4f364b38c472a806cae6553c611d7db46cf056273d48e5ea671d7c2dd8ba65ce957dd016963bd3f96dee556cda0a679b9507f6d5c3ff7a6bf8dfafd149a2646353fb01b6221fd8a35ff90d478d2539800e923a6a95f74c5d", 0xb77) 3m6.353825986s ago: executing program 4 (id=1847): syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) madvise$auto(0x108000, 0x800032, 0x4) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x1f) unshare$auto(0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xb3, 0xfffffffffffffffa, 0x8000) prctl$auto(0x100003e, 0xfffffffffffffffd, 0x0, 0x1, 0x2) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1c\x00', 0xa0000, 0x0) r2 = bpf$auto(0x5, &(0x7f0000000200)=@batch={0x0, 0x3, 0xffff, 0x7, 0x4, r0, 0x5, 0xb8}, 0xd) r3 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/net/rose8/duplex\x00', 0x1df84a04f35d1676, 0x0) read$auto(r4, 0x0, 0x9) writev$auto(r3, &(0x7f0000000200)={0x0, 0x3}, 0x9) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r5, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f00000002c0)={0x6, 0xffff8001, [{r2, 0x0, 0x4, 0xfff}, {r0, 0x0, 0x81, 0x5}, {0xffffffffffffffff, 0x0, 0x7d6, 0x80000001}, {r2, 0x0, 0x4, 0x9}, {r1, 0x0, 0x8, 0x6}]}) madvise$auto(0x8200000000000003, 0x1002003e7, 0x0) mmap$auto(0xffffffffffffffff, 0x200000000002a, 0xdf, 0x9b72, 0x1000, 0x28000) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket(0x2, 0x3, 0xa) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0x591a02, 0x0) read$auto(r6, 0x0, 0x7f) 3m4.741896242s ago: executing program 4 (id=1850): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f0000000080)) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x400082, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="eb6489f2fc76999d833e1c4d40f86e0ad26422b36717c9db2d8a416aa22eff2980d19424c4571c1c14f347b4f91604d932f9f7db5409726e501c9ce4dcaf2d82ba8d7f192e30c1576fbcd144612431ea8c94a711cfdc7157cffd281af30c5c4674abd2da01276c7803d27186c9e20d14d3181619628c7550934f64a8f682e0fe37807590362a9feef3da69d300432a4646914882b5ff702f620e3a1c90c8000000000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf250600000020000180140001005e1f970f497f9f23d63e72850177cde9060002002d000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) (async) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f0000000080)) (async) socket(0xa, 0x1, 0x84) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x7, 0x2000000000000eb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) unshare$auto(0x40000080) (async) semtimedop$auto(0x0, 0x0, 0x1f4, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), 0xffffffffffffffff) (async) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x400082, 0x0) (async) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="eb6489f2fc76999d833e1c4d40f86e0ad26422b36717c9db2d8a416aa22eff2980d19424c4571c1c14f347b4f91604d932f9f7db5409726e501c9ce4dcaf2d82ba8d7f192e30c1576fbcd144612431ea8c94a711cfdc7157cffd281af30c5c4674abd2da01276c7803d27186c9e20d14d3181619628c7550934f64a8f682e0fe37807590362a9feef3da69d300432a4646914882b5ff702f620e3a1c90c8000000000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf250600000020000180140001005e1f970f497f9f23d63e72850177cde9060002002d000000"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 3m1.840459753s ago: executing program 4 (id=1853): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x29, 0x80001, 0xc4) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) write$auto_ctl_device_fops_user(r1, &(0x7f0000000300)="0afcdf8eb0d50f1dbabf32062d9b3656d7691f92d3a6925d82b8fff1c24df86c272395d09d23aeaad0db6d154e2e41a384b81c367840632b70a433ed3debb564a91d165ebd91e9fa7b564fe5044878a78648bd53b59992bb6177b85bc34f7ffa2bcf61d2f52b1e4f", 0x68) (async) fcntl$auto_F_SETLEASE(r0, 0x400, 0xffffffffffffffff) io_uring_setup$auto(0xd85, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/erspan0/gro_flush_timeout\x00', 0x100b42, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x18b842, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) sendfile$auto(r2, r2, 0x0, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r4, 0x0, 0x20) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) write$auto(r5, 0x0, 0x9) (async) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000140), 0x165100, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) write$auto(r6, 0x0, 0x0) (async) socket(0xa, 0x2, 0x0) (async) setreuid$auto(0x4, 0x8) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x2, 0x1, 0x0, 0x5, 0x7) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) tkill$auto(0x80000000000001, 0x7) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) 3m0.718584744s ago: executing program 4 (id=1855): r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="e3b7"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40008b4) socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/16s\x00', 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m0.067857163s ago: executing program 34 (id=1855): r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="e3b7"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40008b4) socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/16s\x00', 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) 16.932817633s ago: executing program 3 (id=2349): r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen\x00', 0x400000, 0x0) mmap$auto(0x0, 0x3, 0xffffffffffffffff, 0x400eb1, r0, 0x1f83ffffffff) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x81a4, 0xf) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) 16.684134751s ago: executing program 3 (id=2350): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x100400000, 0x8, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) socket(0x11, 0x80003, 0x300) r2 = socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_fd=r2, 0xd}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(0x0, 0x261c2, 0x84) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0xd8a, 0xffffffffffff0007, 0x40019) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x201, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0x201, 0x0) link$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') pipe$auto(0x0) 11.931718372s ago: executing program 3 (id=2371): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x509b42, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/veth0_macvtap/accept_source_route\x00', 0x4c8042, 0x0) sendfile$auto(r1, r0, 0x0, 0x48) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0xad00, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/seccomp/actions_logged\x00', 0x8202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x5, 0x100000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) read$auto(0x3, 0x0, 0x7fffffff) write$auto(0x3, 0x0, 0xfffffdef) 7.803982116s ago: executing program 3 (id=2386): r0 = socket(0xa, 0x3, 0x3d) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r1, 0x2, 0x0, 0x0) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r2, 0x40104d01, r2) (async) fsconfig$auto_SHMEM_HUGE_NEVER(r2, 0x7, &(0x7f0000000140)='\x00', &(0x7f0000000180), 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) (async) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) (async, rerun: 32) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) (rerun: 32) mmap$auto(0x8, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x7}, 0x8) (rerun: 64) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x2) (async) socket(0x2c, 0x3, 0x0) read$auto(0x3, 0x0, 0x80) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) (async, rerun: 32) unshare$auto(0x40000080) openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) (async) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) (async) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) 5.276013336s ago: executing program 1 (id=2394): mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x488, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x12, 0x2, 0x8000) setresuid$auto(0x2, 0x7, 0x8080) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2, 0x15) (fail_nth: 1) 5.082651531s ago: executing program 1 (id=2396): mmap$auto(0x0, 0x81, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x140242, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x10}, 0x3) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4.836394854s ago: executing program 1 (id=2399): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x6, 0x4000000000df, 0x40eb8, 0x401, 0x300000000002) socket(0xa, 0x3, 0x3b) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/dev_snmp6/ip6_vti0\x00', 0x1, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x80, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x40081271, 0x38) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r2, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x18) sendmmsg$auto(r1, 0x0, 0x8, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) socket(0xb, 0xa, 0xd9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(r3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) epoll_ctl$auto_EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) mmap$auto(0x0, 0x2, 0x4000000000df, 0x52, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x488, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x12, 0x2, 0x8000) 3.973325552s ago: executing program 5 (id=2404): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) prctl$auto(0x1000000003b, 0x401, 0x0, 0x2, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rename$auto(&(0x7f0000000500)=']\x00', &(0x7f0000000540)='.\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, 0x0, 0x80) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x105000, 0x0) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x40942, 0x1c0) write$auto(r0, &(0x7f0000000100)='\xea\x85\x92\x06(#\xc4\xb6(\x9e\xfcKG\xc2\xd4\xc0\v\x02\x9f%C\x00\x01\x00@!\xa9\xce\x10Y\xd0\xeb\xed\x7f\xc8\xdc(\xd3\xe9\xf3\xddT\x18\x16#\xfdQ5\xaeA\xc3\xeay\x99\xa2TR|js\xfd\n\xa3\x98\xc8\x91\xdd\x9e\x99}s\xe0x\a\x00\x00\x00\x00\x00\x00\x00.\xa8\xc5\xdbKx\x14l\xe6\x868\xb3\xd2\x00\xea\xf9\xd1z\x8f\xd9\x877J\"\xab\xf9\xdf\xbf\xa1\xa1ms\xaf\xd9&R\x03\x00\xc0u \xc3\xc2\xd61\x97V\xcah\r\x97M\xdb\xf9\x06\x95Z\xdfK\xbeY#/\xf5g\n\x10#\x10@Ft\x9c\xd9\xd3s\x94\x8aV\xeb\xee`e9(\xe0\x88\x06\xa6-;ZM\x9b\xe1-', 0x9) sendfile$auto(r0, r0, 0x0, 0xb5d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x6, 0x2, 0x20000000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f00000000c0)={0x0, 0x7}, 0x6) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000380)=',{5,\x00', 0x4000000) getsockopt$auto_SO_KEEPALIVE(r3, 0x0, 0x9, &(0x7f0000000280)='\x00', 0x0) ioctl$auto_BTRFS_IOC_SEND_32(r3, 0x40449426, 0x0) fsconfig$auto_XFS_DAX_NEVER(r1, 0x279ff47, 0x0, &(0x7f0000000080), 0x2) r4 = timerfd_create$auto(0x8, 0x800) read$auto_ppp_device_fops_ppp_generic(r4, 0x0, 0x0) socket(0x2, 0x2, 0x88) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/uevent\x00', 0x10b002, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) 3.805949066s ago: executing program 1 (id=2405): mmap$auto(0xf70, 0xa737, 0x1, 0x3c, 0xffffffffffffffff, 0x5) unshare$auto(0x41000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, 0x0, 0x80000000) r1 = socket(0x2, 0x2, 0x8088) mmap$auto(0x0, 0x9, 0xdf, 0x18, r1, 0x8000) socket(0x21, 0x2, 0x5) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioctl$auto_SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f0000000180)={@raw=0x3, "042f0dd3e3ae1f99dc39c466924be81165c4c40c759b50a7b71720c08c1ec969b5468b4d944d433b22498d2d80ea45f4fa6f34bb1c7a72c73f80d5ab9f8deded7f95a50e146a35ba9bd199e7eb9ede193df7d83205bc3e60a24863b9740a3809ac7495d809b8eb50e9e79b4b30d0c33fdb46f222f090f3e990aa19f6503371aa3f89ae6c0c90a7b41c1ad821f51a1333f234f01cf31c5004d19d8b7db068960bfea675c911bd56a8bb223b45402fd964fcebdf05931c1e7afbdded84848cc578b59b652642e5d926489835fd393c49717b6c6e9247286dc6d59e42994f6c501ca44e7dfb7b6e28f6ee88163b5187021193439537a1de70aae74af70565337e864a61e7dfc40fcca5f0287e1f2949f8736cb1964f7304a8c1a6839013c72d8e9877eb80ca9661608366248dab7f123ec322692c19843718935f569dea215d25c0703e08843b42fc073b7d610a82fe60ed706312f08f98c7f3373208d52c41e3f83214ade49b298f9e07d4a0fd7e67824e3e3b7b70edc2509a833288b9956f59bbd700249d608412e38a73621af9f8ad696cbba64874bff4032473676a4ed8eed3c9bee977048682593b4606c727d887083ffc43436f49e0afd4d703db685dc8e43a62205862b0e32c9d447be7d1049390c1d49001c70666fdb9ea8c15f3979397955ec2aba6cc606124c5c12832214803ac862dbc6a548e7a38cbd2eb881bb579bae7d08fdd2e266aebfce006000d7f0627cf016cf108211f4432e8b5b3263c21134f8cdcefdc34906ab5d9a84b605d65965aa813a1686296be1595bfea13ac253f871f760b5738a5bbb6f1595cfb487eda0fde581dd4f63ea6756306669dae651c7d36f59eae31a32cfc989a20155349bdf6212380ecd047b528942d1b47d13794ca890fbd31fe73e3115f09a3da63542a0cbb4118d24b5164601f01a8e6e62dff11cabab3aa7990d5be5a52082df12ccba2f0ee3442e725a19e007ad15fe1347dd4d44cfc5a99c9976f2233ac2c9ca32b2c8490e8559a74d6b63acc1a43aed21970409c926fbb8218920c822f07cb85cc867ab5c8f6d131ffb0427191c92c47a9214f3e79c1fd4a9c7311131a6180b26499ed64acfca92248d8806593c58635a28cf54351ca2e69b77a3022f2fc97b78d82e2d4045da2092fac4f29159b7d01b313552481c95f511fd550e647ec243f69d5bec0547c0220efb3bb578dda8293dfc1efa268ea7ae66625948d505f111b16b3cda9fa4770d827bd0f60c8afadcb343ec1b784e06f366c43d3143f590bf3a1c1e30e47d6c45dc980fb8167c89bd4923391f78414da86cfc66aa10008d45690120259527a9db0c2de948794ec26244178878c17c4e1eff9429c7ee253ae2070f845c20f4df51dfb2029b8a205e774a450cae514fa3924e839d134c5c8ad1b8ec0b8b55b8672e0f67ffd5b5b1eda9444b5fd7f3c4b500c780577694919d16c43ec65bf875971d1219f4f7a70e345ba1404f250148f284666c4c0526926564709328dbc4ab8c8e754448f23b985942d154f2d89a164bec7cef0d5824a5e9e2988e0cfbf791043971df1c0d901fc66df273a649cef7be6ed1cd0b9bc650ce1a962e02de0aa890abf194edb47b38c80256ba38fbd862ed8da8e01655ac025144325dd516220e6762e4c0102bd27ec7f4b7ac037ef667f7b7f14bbd9577caf4775e3708caecc7a5281fc32ccd13fae6ef1d4c708a108841ecaad5b79b49ce835e31b629b0778e80c97178e6fb7c6b38b43eaf90803f30dc0d82e5b29cc93065a12806091e3b7604c9e85073a791babf5ac2c587a6b5fd517489f51d206884c4aa63634a432c22470f2ab798048c92a4d4f401739611a2023084144d2fba60c8670e79995dba5ae04fffda190da9518f970b74acf202c053be07a61c7bf2b840b61b39005f5807296bd781061664b76a5474bd71e4981765be00a2e05db3a81afca79159e1098989e2ec59c364d81eb41833657247faad9f3c2394a71cd444a440ea74d77941a29380787dd2a7bf63e27c7577a02d32c7f3796039ce849aa4c2ce92139808c6b689f6b32d0126732fe422636d313f4994761b9a690bf1d3051ca85a4a27102e9785d4687bcbb41634ab36a21dc1a20e7e81e79daeba2af11d2a62c04ce084fd9b76b895929dc91952edaec45115815f792e71b64f0a93b82f00286be2fb1cde6fd85da2633d866f2af708c1fbec1bcf7a3136a3547f8629c784abd4786da49ae0f3d1f296afc74018d812bc1b27eaad6dfd3ed38cfd656a24233873070ff2ba69ee5315f77bd22de06194f16b10f4240d17e0fc3ef7aaa7f1de2e834b097a6a3f2477d7f5aa975be803cc3cf6b65b3a0c1df04f285ee9f74d8324bb6c4146e3772c14806c96e2b53d9785a5dd4d718f9d9f107f85d6074d99567afa8273a7be36f165587c376ea46102b532385d66f085155bb3cec8c777314a8a40763b3be7ea3067a0881d873aab07635283460f731c152ec47ed177c67788dd948723e3b065e166b7adca8ca9b911d21ed3cbd6ecf5437804433815941dca3be5cd1c025904a13e34d31c1e9e9f0e1d74dc6d0b95205c73235a0e7754e28928beebbc539a4033a2af8a4ffbf1528bb35b75089ce576ee76c7a53368f7a5b9f018c5295360b227e59f47348f10198ef60e0abdc5f00bee78482317d466e29ac5084bae3d166b1c32988433844d5cd6c23006d12b1c7c6fb88c152554f8245f1235d65470b62a5c0dda6836084b86d48ea9586e4407472533baacd8999af5e3a2bea63ca578b909769175ac4abeb7eddb387c770bbf23e5021838d9fb16bf5dba469c2966e07a6801b5872390e62b598defc2ce35e97726540c5794f1dbeefbe1d82a0c97a216ac9daca71680dba8f3fe5534a456aba3ef4190863265316c77a3e5b6dc828d76fc06950579ab4588303d99170c6596cf104b9740d4ff13ab375867abfc9b931b04b4feff0e14bbf0293b36709dbac22c37d15159b531191bc55c003c0a06285c2f8419657e4ccbd5547e513e4688dc8f23de2499eaecae2041ead8f9279c35c86980eb75b9870f5dfb5cb0e4576db74791bf97180a6d4bc208bb4a9dab7c0c005e524f3bec757dd0370b2d6dc0f1deb3693f9ac7cd903c6ebf5795a94b28bdf59a4b2b367f0689fc9ae51dcf9a50b28099f5a58920543c8ce6711631f6d13ae3abbcf7c2c025d31a8b9aa10ce76372fe7ab73a14712aee695004ea2119b1ad058bb6c0a33a4a2f636491cf25ab8c3541271c1372ae642a2223fe80c8dc629dad1937cdd7e4d6c63421b9ec431ddd07a2c2afc56dcce0dc900280b3d442e45fd736c0c3b4c80f9a1b0e99ebbdab6fb7b849c923c066c49c34ddbdb26a644e10b382ef8f1be66efa2afdd42fdc02e6fb7bd423d7418b125a86113a4b7d30af8d8dbd68b140a8798bbc3dc6c74604bcbc824b9cdae9fd1e799876aa486d37f1bdfafa3149d7040bbfd7856420433a90e2fa8715f77294d41b27c05fc056b131b3f698f876cf46edb9bb64cd62437f3b249c6de26e431ad5e914b1a330cc0cb0bbdec33279e90d6da1134f1677f75d035d9a9c37d21d27c84a223cc161057d9d9ddf0c451f601cbca1b2f7f95d587510f8d2494653a94cc540131613480bdb14353ec7b891cfbd6d1c17fd5c6af7c49b8682af317097c2fb9623fe784615ba0e577fb47836e90eb31c261de253721a3c6b763b431858a6a3ee960cd6c3e8455d765445f6603a51327d903322f266c10ff20ff52365b18117cb71dee39b0c5e905df772793940ecc09a9ac3aa5157e2d77eadc954b9963fbc14c304a562b3e1a7d7c1373a9bd90ea90e92c3bd2ad6180a2de5cc4b9b0f181d17752395902a4952ed028e908b75cf50b97fa6218e16ef9dc0d7d4bd8251bbf50e0b964dc689efa5039e1d596827da1a33d46172979839b4085d8e5a4a8446592fb9ce89b423636913abfceb63be929598813d6a2f32075c40f70e970cdd00492b611a8da2a8712316932d747cd2afc6c1eaf833d2e25c8d94df246d31b213f9e9f289139e51c8ff7f224fa6f440cda61611beaf753d793d0cc226ee8ca813ed1c7c3b08136d23c731f73d0bf64292c6175327cbfc6f647a9ead6069791e9e7b64918eb3ebded95ebd1b37c30b5a88475bed2bbb36b8d96633209737d70631c9509d2b778ea44c32bea56e8d0981a5d9d7235cf0530e139950218a5b0af2adaaedec5086278f2438cdb0d54b67816e024815595361a31144cec13655d2068819e6cab9f19eceb66d1b8e40960e3adb37a14bc25d83cb36ac275f3af833553643a2aa8eb9dfdf99e7aef29ed8315e800620a51deedceeb446539ac1f46df892adcd68d0fdb0e063bb52e9ff856643caba04802e7cd111d3a5bf84859bb787b898eb738e38ffdf93186c6811ae564f1fb50d3919011aeb65169a1b6a11c42c0917d842d32fa4f2db170c1907365ea954b5a004658850887e2c998b4d90b53317e2d92d667fc7d773a9b956560229367bba8361fdf9aba06a5fe16c4cb86ade462e7b4a6571c0e0b720d5f7a8de20d5b95dff7e8f7ee998d0a7b8e9f876e5a025946fd3fa10d8a86b99fda627fa955c351b3b110f42fce89f1638b2d43afcf8a9397416f8f45fb0437f3c313a6fa6ced712b4aa750b4971a6250ad4d2fa2c3de6fffab5e1250175731e6d5e89c6c1420e44d67667b99ff7d9b7dd6b4e29d7497ba77b543abe192641a158d23b4d6a2d595c2d638a6f14a07e248327a781e71238c8b5aacdf4f6b0c6e733dcddedb381a1ec7d5ce615c129839b65fab26c229c984f6ecbc2cd347e4478c286f6cdd056b1a19905bcf251ac4f2c0e0aa004136ef27016ba821820c1ab94cfc6ffca636509d9cdd161395224651878ddc397b43d2065ad1c758c5b74afe982210340f928745c3039e9daaf4a1dc3f2fcd6357634c2c5ca2a76a2dc1d5012aee5e5eeb978763ce797aff6803d230a476e1f911933c799bcb9c4fb21c6475c217085df9585400526afc22fad392686afd3790165d89837bfd02203bf95b454da6961dc8bd217ce1357a64433250ed34ff7b984c97eecfc21270c9f48b4209768a2a6b5bb455bb3bcd4b79c513a6b00729f381d43f2473026d765293dcb0d89a2d3cda5bcb259da14880851c03d5cee367ec51142f9c554870c06c5e55b11329df4c2f3bab292c8f47cba9fbbf8c4a813847b64b673047f0a7a036dd2c55792060d801657de1907004537633a04676b194552b7521bfde55d4c0a5118e54cc1808a7c19d6d3f23daeb62d8067b09b49f4ec42d76d02305caf03599edd7a6119dcfa3334dedafa62da3fa2c73b5a49f99dec76ab21c15b4f6a4e0777cdf3e6dc609d6038c784ee5b0baab370ab9c2628b87e28e0bddba3bb5f8c1193006469fc7e48a1a9e72f2687a64f4f0b9c803d7d4ec2e0478ca16677a20d787efc9ecf0c7967e24ed0fe9a180d3079f987e7ca695a4ceda3ae547edfcaa5d9175ca4a9a741ad0edeec2b14fbea9be2beaad3e0186e85dde9e393a2549005ad19c7335bba4cc0359653513eabdafeb596bdcf12feaddc2eaa3d265a1e2d2f2ac3c5fdaa2d8a4ec1e5821fcf21e294d9180e40e9eac9ad8f672890a6dea1ce3a2e13f0ebab37e7331638f3f87b424351db8aac80a2bc42f6aeb67f1351096183520ebc395dc0fbaa132e2ea3c9625c05bb3b2ca67f248d0e4693d15b112d6c47d398e6ef09b08da6ea002b9b1910cb8769ac231c6fba24351475f7fa9b6771270ee54b75a859bbcf220"}) close_range$auto(r1, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) close_range$auto(0x2, 0xffffffffffffffff, 0x0) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x22000, 0x0) 3.367982707s ago: executing program 3 (id=2406): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000140)='\t', 0x1) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000340)=""/215, 0xd7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/start_ro\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) 2.992288452s ago: executing program 5 (id=2409): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) read$auto(r1, 0x0, 0x4b) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x14, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram10/queue/discard_max_hw_bytes\x00', 0x68e00, 0x0) read$auto(r2, &(0x7f00000001c0)='-\'+}\']![\xd4$', 0x5) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) writev$auto(r3, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/013/001\x00', 0x341001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000180)={0x2, 0x2, 0x4a47, 0x81, 0x9f, 0x8, 0x0}) close_range$auto(0x2, 0x8, 0x0) socket(0x26, 0x5, 0x1) socket(0xa, 0x801, 0x84) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r5, 0x80044100, &(0x7f0000000240)) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/acpi/wakeup\x00', 0x101200, 0x0) pread64$auto(r6, 0x0, 0x5, 0x8d) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) 2.805407303s ago: executing program 6 (id=2410): mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x6, 0x1, 0x9, 0x20000000000e3d, 0xffffffffffffffff, 0xb2e3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) (async) mmap$auto(0x1, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x800c0, 0x0) mmap$auto(0x8, 0x6, 0x3, 0x15, 0xffffffffffffffff, 0x400) r1 = prctl$auto(0x3d, 0x40005, 0x0, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/sequencer2\x00', 0xafefa9ff3f069676, 0x0) (async) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/sequencer2\x00', 0xafefa9ff3f069676, 0x0) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000e00)) (async) ioctl$auto_SNDCTL_SEQ_THRESHOLD(r3, 0x4004510d, &(0x7f0000000e00)) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'rose0\x00', 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r7 = socketcall$auto(0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r7) (async) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_CREATE_VM(r6, 0x4004ae99, 0x0) sendmsg$auto_BATADV_CMD_GET_VLAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf2511000000080003", @ANYRES32=r5, @ANYBLOB="06000800d519008b32eabec5e544383ca7484bb403ffcfcc4419063c4517080cad212c771cb5c6a17877dc431f64a9ddc9567d6137b8ff0e70694092ddc33548519cc6f677b61dec35647401457c8b1870199398038f9fc4b7746185f49f3da8ccbec5e3d4ea6834f488e4c4273b34aedde293e582af4bb1266b3d852159e8dd67cb13"], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4008090) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) 2.454272226s ago: executing program 3 (id=2411): mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x488, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x12, 0x2, 0x8000) setresuid$auto(0x2, 0x7, 0x8080) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2, 0x15) 2.083758703s ago: executing program 6 (id=2412): mmap$auto(0x0, 0x81, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x140242, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x10}, 0x3) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) futex_wait$auto(0x0, 0x2, 0x1, 0x2, 0xfffffffffffffffe, 0x1) mmap$auto(0x0, 0x1, 0xfd5, 0x12, 0xffffffffffffffff, 0x0) 1.905470433s ago: executing program 5 (id=2413): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x22, 0x3, 0x45) fstat$auto(0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1002}, 0x7) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) r0 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) poll$auto(&(0x7f0000000000)={r0, 0x2, 0x4}, 0x2, 0x5) r1 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r1, 0x0, 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x40000000001, 0x0, 0x10000000000000}, 0xfffffffd}, 0x100003, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) 1.578524275s ago: executing program 1 (id=2414): mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x40000000000a5, 0x8000) r0 = getsid$auto(0x0) r1 = pidfd_open$auto(0xffffffffffffffff, 0x9) setns(r1, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) r2 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x8, 0x8000) msgctl$auto_IPC_SET(0x8, 0x1, &(0x7f0000000280)={{0x2, 0x0, 0x0, 0x4, 0x7, 0x4}, &(0x7f0000000100)=0x3, &(0x7f00000000c0)=0x2, 0xe, 0x8, 0x8, 0x81, 0x10000, 0xe, 0x3, 0x0, @inferred=r0, @inferred=r0}) msgctl$auto_MSG_STAT(0x8, 0xb, &(0x7f0000000340)={{0x7, 0xee01, 0xee01, 0x800, 0x8001, 0x8, 0x101}, &(0x7f0000000180)=0x7, &(0x7f0000000300)=0x5, 0xbf, 0x6, 0x3, 0x6, 0x385, 0x0, 0x0, 0xffff, @raw=0x6, @inferred=r0}) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000001980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001940)={&(0x7f0000001200)=ANY=[@ANYBLOB="58060000", @ANYRES16=0x0, @ANYBLOB="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"/554, @ANYRES32=r5, @ANYBLOB="08001f00", @ANYRES32=r4, @ANYBLOB="0c000000020000000000000008004000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x658}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) r6 = socketcall$auto(0xffe, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r8 = pidfd_open$auto(0x1, 0x0) setns(r8, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4008ae6a, r6) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r10, 0xb01, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000084) unshare$auto(0x40000080) read$auto(0x3, 0x0, 0xf34) move_mount$auto(0xffffffffffffffff, 0x0, r2, 0x0, 0x273) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x3, 0x0, 0x0) 1.534769231s ago: executing program 5 (id=2415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:5/min_bytes\x00', 0x88282, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x401, 0x0) r4 = io_uring_setup$auto(0x48, 0x0) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r4, 0x1e, &(0x7f0000000000), 0x61c) r5 = socket(0xa, 0x3, 0x73) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f00000002c0)={0x7}) read$auto_tracing_buffers_fops_trace(0xffffffffffffffff, &(0x7f0000000200)=""/150, 0x96) setsockopt$auto(r5, 0xff, 0x7, 0x0, 0xfff) write$auto_rfkill_fops_core(r2, &(0x7f0000000100)="399a8cbdf020c6815d893e42ae9617d9226d1578f6e49c790ea810783e9815957fe5ae48b8c4823f66c6c9ca03e283c9288de04b923f2d698d5e55f8a7a6bcfbbd70b167e7270bbeada0a3142edf291cfb21665994c93c7b9121a4b06c806ed66d68a437d93d76924ea8d72ba1e9302ef1c67e156f4094c5bcca2577138e2dc7231f0b667e04766cfab259cf7b181ad5f211571dad41c30f56cbf7a0451c1a328709036376ea64306da4491fa7fddc709c13cba282a38fd8c6629c3f8a6cd195eae9ded4a77285e80be4369f35993080da0dbe3bc728fcab322482bc0fffe01804b72e6bdfe07acc75b20c", 0xeb) sendfile$auto(r2, r2, 0x0, 0x71) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000613201343d6fa86c94794c497eb1e96cec22fc3232385cdcf4d2c5f37872b8dc226ae1d49588a2e782c1582d30aa8cdbf82977cf47e6edc8f00b5c877608d9bfb4234af97be525c47b5145c7727142a0d43f91ec33f24ad162becfad5bba10741fcf87717d889cd5408e4584302dc621745b6245def226a7bcb54c6e1aedc511f1752d0e9b9c50e5785d34cd4af76bafe9e7c90e6fcaed63e0e29889251026a3cc1d38c81801c003eb78aa3ca9db9e2d", @ANYRES16=r1, @ANYBLOB="3b0226bd7000fbdbdf2503000000040003800c000380080003800400108012000100898771f1c19f1779048590828847000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b47, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000100), r0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r8, 0x405, 0x70bd27, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0xdab}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x9}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x20) 1.397856331s ago: executing program 6 (id=2416): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x80006, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_frmr_depth\x00', 0x40302, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xd, r1, 0x7f8, 0xd5) ioctl$auto(0x3, 0x402c542b, r0) 1.052143464s ago: executing program 6 (id=2417): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x5e21}]}, 0x64}, 0x1, 0x0, 0xff000000, 0x40000}, 0x400c004) 899.366325ms ago: executing program 1 (id=2418): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setns(0xffffffffffffffff, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0xa, 0x801, 0x84) setsockopt$auto_SO_KEEPALIVE(r1, 0x4, 0x9, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x6) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 771.019644ms ago: executing program 6 (id=2419): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) (async) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) (async) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) listen$auto(0x3, 0x81) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) write$auto(0x3, 0x0, 0xfdef) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) r2 = socket(0x2b, 0x1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x1c1041, 0x0) (async) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x1c1041, 0x0) sendfile$auto(r3, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x2, &(0x7f00000000c0), 0x1) io_uring_register$auto(0x2, 0x3, 0x0, 0x0) 395.786109ms ago: executing program 6 (id=2420): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0xbb1, 0x2, 0x7fff) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_register$auto(0xffffffffffffffff, 0x15, 0x0, 0x9) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x83, 0x0, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x3, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x40000000, 0x4800c000}, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) readv$auto(r2, &(0x7f00000002c0)={0x0, 0x8001}, 0x101) mmap$auto(0xb, 0x2000a, 0xdf, 0x13, 0x40000000000a5, 0x2008003) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/sync_on_suspend\x00', 0x8102, 0x0) read$auto(r3, 0x0, 0x20) write$auto(0x3, 0x0, 0x81) lseek$auto(r0, 0x8000000000000001, 0x1) fsync$auto(r0) socket(0x11, 0x2, 0x0) 314.062753ms ago: executing program 5 (id=2421): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) r4 = socket(0xf, 0x3, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES32=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = memfd_secret$auto(0x0) fstatfs$auto(r6, &(0x7f00000000c0)={0x4, 0x8000000000, 0x5, 0x7fff, 0x0, 0x4, 0x6, {[0x9, 0x3]}, 0x0, 0x5, 0x7, [0x9, 0x7e5, 0x9, 0x26]}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r5) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRESDEC=r4, @ANYRES64=r0], 0x68}, 0x1, 0x0, 0x0, 0x20040840}, 0x40000) epoll_ctl$auto(r5, 0x40000001, r5, &(0x7f0000000000)={0x7, 0x35e}) 0s ago: executing program 5 (id=2422): unshare$auto(0x40000080) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$auto_TUNGETIFF(r0, 0x800454d2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x4004010) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8543, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x480480, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000280)="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", 0xcfb) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) bpf$auto(0x0, 0x0, 0x6f4) madvise$auto(0x0, 0x2003f0, 0x15) ptrace$auto_ARCH_SHSTK_STATUS(0xffffffffffffffff, 0x0, 0x81, 0x5005) mkdir$auto(0x0, 0x1) read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(&(0x7f00000048c0)='./file0\x00', 0xc46e, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x0) epoll_create$auto(0x3e) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/stat\x00', 0x8c40, 0x0) read$auto_proc_single_file_operations_base(r4, &(0x7f0000000080)=""/119, 0x77) kernel console output (not intermixed with test programs): .865883][ T5837] swap_cluster_readahead+0x528/0x770 [ 759.865937][ T5837] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 759.865979][ T5837] ? __lock_acquire+0x433/0x22f0 [ 759.866016][ T5837] ? _raw_spin_unlock+0x28/0x50 [ 759.866050][ T5837] ? move_cluster+0x39d/0x560 [ 759.866103][ T5837] ? get_vma_policy+0x242/0x3c0 [ 759.866157][ T5837] swapin_readahead+0x160/0x1180 [ 759.866207][ T5837] ? __pfx_swapin_readahead+0x10/0x10 [ 759.866245][ T5837] ? find_held_lock+0x2b/0x80 [ 759.866290][ T5837] ? swap_cache_get_folio+0x267/0x8e0 [ 759.866323][ T5837] ? swap_cache_get_folio+0x267/0x8e0 [ 759.866355][ T5837] ? swap_cache_get_folio+0x267/0x8e0 [ 759.866393][ T5837] ? swap_cache_get_folio+0x267/0x8e0 [ 759.866427][ T5837] ? swap_cache_get_folio+0x293/0x8e0 [ 759.866464][ T5837] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 759.866497][ T5837] ? __pfx_get_swap_device+0x10/0x10 [ 759.866542][ T5837] ? do_swap_page+0x12c/0x64c0 [ 759.866591][ T5837] ? do_swap_page+0x78b/0x64c0 [ 759.866630][ T5837] do_swap_page+0x78b/0x64c0 [ 759.866695][ T5837] ? __pfx_do_swap_page+0x10/0x10 [ 759.866739][ T5837] ? __lock_acquire+0x433/0x22f0 [ 759.866777][ T5837] ? __pfx_default_wake_function+0x10/0x10 [ 759.866827][ T5837] ? rcu_is_watching+0x12/0xc0 [ 759.866874][ T5837] ? ___pte_offset_map+0x2ad/0x4f0 [ 759.866929][ T5837] __handle_mm_fault+0x1744/0x2a30 [ 759.866988][ T5837] ? reacquire_held_locks+0xcd/0x1f0 [ 759.867025][ T5837] ? __pfx___handle_mm_fault+0x10/0x10 [ 759.867082][ T5837] ? lock_vma_under_rcu+0x176/0x580 [ 759.867147][ T5837] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 759.867198][ T5837] handle_mm_fault+0x3fe/0xad0 [ 759.867258][ T5837] do_user_addr_fault+0x423/0xda0 [ 759.867300][ T5837] ? rcu_is_watching+0x12/0xc0 [ 759.867355][ T5837] exc_page_fault+0x64/0xc0 [ 759.867395][ T5837] asm_exc_page_fault+0x26/0x30 [ 759.867427][ T5837] RIP: 0033:0x7f942558f76a [ 759.867455][ T5837] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 7b 62 ff ff 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 32 00 00 90 [ 759.867488][ T5837] RSP: 002b:00007ffe37f2fc90 EFLAGS: 00010206 [ 759.867514][ T5837] RAX: 0000000000000000 RBX: 0000000000000695 RCX: 0000000000000000 [ 759.867535][ T5837] RDX: ef9c3c34c51ed000 RSI: 0000000000000000 RDI: 000055556cc65808 [ 759.867556][ T5837] RBP: 00007ffe37f2fcfc R08: 0000000000000000 R09: 0000000000000000 [ 759.867577][ T5837] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 759.867597][ T5837] R13: 00000000000927c0 R14: 00000000000b9270 R15: 00007ffe37f2fd50 [ 759.867643][ T5837] [ 759.867656][ T5837] memory: usage 3072kB, limit 3072kB, failcnt 84118 [ 760.455737][ T5837] memory+swap: usage 3276kB, limit 9007199254740988kB, failcnt 0 [ 760.520380][ T5837] kmem: usage 3020kB, limit 9007199254740988kB, failcnt 0 [ 760.581953][ T5837] Memory cgroup stats for /syz3: [ 760.582145][ T5837] cache 0 [ 760.582162][ T5837] rss 0 [ 760.582175][ T5837] rss_huge 0 [ 760.582188][ T5837] shmem 0 [ 760.582201][ T5837] mapped_file 0 [ 760.582215][ T5837] dirty 0 [ 760.582228][ T5837] writeback 0 [ 760.582242][ T5837] workingset_refault_anon 18694 [ 760.582257][ T5837] workingset_refault_file 11972 [ 760.582273][ T5837] swap 208896 [ 760.582286][ T5837] swapcached 4096 [ 760.582301][ T5837] pgpgin 252323 [ 760.582314][ T5837] pgpgout 259987 [ 760.582328][ T5837] pgfault 238038 [ 760.582342][ T5837] pgmajfault 15632 [ 760.582356][ T5837] inactive_anon 4096 [ 760.582370][ T5837] active_anon 0 [ 760.582383][ T5837] inactive_file 0 [ 760.582398][ T5837] active_file 0 [ 760.582411][ T5837] unevictable 0 [ 760.582425][ T5837] hierarchical_memory_limit 3145728 [ 760.582441][ T5837] hierarchical_memsw_limit 9223372036854771712 [ 760.582458][ T5837] total_cache 0 [ 760.582472][ T5837] total_rss 0 [ 760.582485][ T5837] total_rss_huge 0 [ 760.582500][ T5837] total_shmem 0 [ 760.582514][ T5837] total_mapped_file 0 [ 760.582529][ T5837] total_dirty 0 [ 760.582542][ T5837] total_writeback 0 [ 760.582556][ T5837] total_workingset_refault_anon 18694 [ 760.582572][ T5837] total_workingset_refault_file 11972 [ 760.582589][ T5837] total_swap 208896 [ 760.582602][ T5837] total_swapcached 4096 [ 760.582626][ T5837] total_pgpgin 252323 [ 760.582640][ T5837] total_pgpgout 259987 [ 760.582655][ T5837] total_pgfault 238038 [ 760.582670][ T5837] total_pgmajfault 15632 [ 760.582683][ T5837] total_inactive_anon 4096 [ 760.582698][ T5837] total_active_anon 0 [ 760.582713][ T5837] total_inactive_file 0 [ 760.588040][ T5837] total_active_file 0 [ 760.588064][ T5837] total_unevictable 0 [ 760.588078][ T5837] anon_cost 0 [ 760.588092][ T5837] file_cost 0 [ 760.588107][ T5837] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2041,pid=14411,uid=0 [ 760.588366][ T5837] Memory cgroup out of memory: Killed process 14411 (syz.3.2041) total-vm:135064kB, anon-rss:1176kB, file-rss:22592kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 763.238271][ T30] audit: type=1800 audit(1843104527.675:11): pid=14515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2067" name="version" dev="configfs" ino=52768 res=0 errno=0 [ 763.251606][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 763.568515][T14520] netlink: 'syz.6.2069': attribute type 1 has an invalid length. [ 764.273491][T14532] zswap: compressor û not available [ 764.446050][T14543] FAULT_INJECTION: forcing a failure. [ 764.446050][T14543] name failslab, interval 1, probability 0, space 0, times 0 [ 764.494679][T14543] CPU: 0 UID: 0 PID: 14543 Comm: syz.1.2075 Tainted: G U syzkaller #0 PREEMPT(full) [ 764.494736][T14543] Tainted: [U]=USER [ 764.494749][T14543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 764.494771][T14543] Call Trace: [ 764.494782][T14543] [ 764.494795][T14543] dump_stack_lvl+0x16c/0x1f0 [ 764.494842][T14543] should_fail_ex+0x512/0x640 [ 764.494882][T14543] ? kmem_cache_alloc_noprof+0x62/0x720 [ 764.494926][T14543] should_failslab+0xc2/0x120 [ 764.494978][T14543] kmem_cache_alloc_noprof+0x75/0x720 [ 764.495016][T14543] ? key_alloc+0x3e0/0x1330 [ 764.495065][T14543] ? key_alloc+0x3e0/0x1330 [ 764.495104][T14543] key_alloc+0x3e0/0x1330 [ 764.495153][T14543] ? rcu_is_watching+0x12/0xc0 [ 764.495208][T14543] ? __pfx_key_alloc+0x10/0x10 [ 764.495249][T14543] ? lsm_blob_alloc+0x68/0x90 [ 764.495284][T14543] keyring_alloc+0x44/0xc0 [ 764.495334][T14543] install_thread_keyring_to_cred+0xc1/0x140 [ 764.495376][T14543] keyctl_set_reqkey_keyring+0xcf/0x1c0 [ 764.495413][T14543] __do_sys_keyctl+0x6d/0x590 [ 764.495450][T14543] do_syscall_64+0xcd/0xf80 [ 764.495488][T14543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.495516][T14543] RIP: 0033:0x7f1bebd8f7c9 [ 764.495540][T14543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 764.495569][T14543] RSP: 002b:00007f1becbaa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 764.495598][T14543] RAX: ffffffffffffffda RBX: 00007f1bebfe6180 RCX: 00007f1bebd8f7c9 [ 764.495617][T14543] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 764.495634][T14543] RBP: 00007f1bebe13f91 R08: 0000000000000008 R09: 0000000000000000 [ 764.495651][T14543] R10: 0000000000005eaf R11: 0000000000000246 R12: 0000000000000000 [ 764.495668][T14543] R13: 00007f1bebfe6218 R14: 00007f1bebfe6180 R15: 00007fffc8579b68 [ 764.495703][T14543] [ 765.185187][T14558] FAULT_INJECTION: forcing a failure. [ 765.185187][T14558] name failslab, interval 1, probability 0, space 0, times 0 [ 765.230694][T14558] CPU: 1 UID: 0 PID: 14558 Comm: syz.5.2079 Tainted: G U syzkaller #0 PREEMPT(full) [ 765.230735][T14558] Tainted: [U]=USER [ 765.230743][T14558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 765.230759][T14558] Call Trace: [ 765.230767][T14558] [ 765.230777][T14558] dump_stack_lvl+0x16c/0x1f0 [ 765.230811][T14558] should_fail_ex+0x512/0x640 [ 765.230840][T14558] ? __kmalloc_noprof+0xca/0x870 [ 765.230867][T14558] should_failslab+0xc2/0x120 [ 765.230905][T14558] __kmalloc_noprof+0xdd/0x870 [ 765.230929][T14558] ? lsm_blob_alloc+0x68/0x90 [ 765.230957][T14558] ? lsm_blob_alloc+0x68/0x90 [ 765.230980][T14558] lsm_blob_alloc+0x68/0x90 [ 765.231004][T14558] security_sk_alloc+0x30/0x270 [ 765.231036][T14558] sk_prot_alloc+0x1c7/0x2a0 [ 765.231073][T14558] sk_alloc+0x36/0xb80 [ 765.231098][T14558] pptp_create+0x32/0x340 [ 765.231140][T14558] pppox_create+0x15c/0x2c0 [ 765.231178][T14558] __sock_create+0x339/0x8a0 [ 765.231219][T14558] __sys_socket+0x153/0x2d0 [ 765.231256][T14558] ? __pfx___sys_socket+0x10/0x10 [ 765.231293][T14558] ? xfd_validate_state+0x61/0x180 [ 765.231363][T14558] __x64_sys_socket+0x72/0xb0 [ 765.231410][T14558] ? lockdep_hardirqs_on+0x7c/0x110 [ 765.231451][T14558] do_syscall_64+0xcd/0xf80 [ 765.231492][T14558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.231526][T14558] RIP: 0033:0x7f580db8f7c9 [ 765.231552][T14558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.231587][T14558] RSP: 002b:00007f580bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 765.231619][T14558] RAX: ffffffffffffffda RBX: 00007f580dde5fa0 RCX: 00007f580db8f7c9 [ 765.231641][T14558] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000018 [ 765.231661][T14558] RBP: 00007f580dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 765.231682][T14558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.231702][T14558] R13: 00007f580dde6038 R14: 00007f580dde5fa0 R15: 00007fff713922d8 [ 765.231747][T14558] [ 765.447103][ C1] vkms_vblank_simulate: vblank timer overrun [ 765.853498][T14564] svc: failed to register nfsdv3 RPC service (errno 111). [ 765.885707][T14564] svc: failed to register nfsaclv3 RPC service (errno 111). [ 766.602236][T13166] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 766.610309][T13166] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 766.621315][T13166] CPU: 0 UID: 0 PID: 13166 Comm: kworker/u11:3 Tainted: G U syzkaller #0 PREEMPT(full) [ 766.621368][T13166] Tainted: [U]=USER [ 766.621380][T13166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.621406][T13166] Workqueue: hci3 hci_rx_work [ 766.621447][T13166] Call Trace: [ 766.621459][T13166] [ 766.621473][T13166] dump_stack_lvl+0x16c/0x1f0 [ 766.621517][T13166] sysfs_warn_dup+0x7f/0xa0 [ 766.621556][T13166] sysfs_create_dir_ns+0x24b/0x2b0 [ 766.621596][T13166] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 766.621633][T13166] ? find_held_lock+0x2b/0x80 [ 766.621691][T13166] ? do_raw_spin_unlock+0x172/0x230 [ 766.621740][T13166] kobject_add_internal+0x2c4/0x9b0 [ 766.621794][T13166] kobject_add+0x16e/0x240 [ 766.621841][T13166] ? __pfx_kobject_add+0x10/0x10 [ 766.621891][T13166] ? do_raw_spin_unlock+0x172/0x230 [ 766.621937][T13166] ? kobject_put+0xab/0x590 [ 766.621988][T13166] device_add+0x288/0x1950 [ 766.622034][T13166] ? __pfx_dev_set_name+0x10/0x10 [ 766.622076][T13166] ? __pfx_device_add+0x10/0x10 [ 766.622115][T13166] ? mgmt_send_event_skb+0x2fb/0x460 [ 766.622166][T13166] hci_conn_add_sysfs+0x17e/0x230 [ 766.622213][T13166] le_conn_complete_evt+0x1260/0x2150 [ 766.622262][T13166] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 766.622301][T13166] ? bt_warn+0xe4/0x120 [ 766.622333][T13166] ? __pfx_bt_warn+0x10/0x10 [ 766.622378][T13166] hci_le_conn_complete_evt+0x23c/0x370 [ 766.622428][T13166] hci_le_meta_evt+0x357/0x5e0 [ 766.622469][T13166] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 766.622514][T13166] hci_event_packet+0x685/0x11c0 [ 766.622553][T13166] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 766.622598][T13166] ? __pfx_hci_event_packet+0x10/0x10 [ 766.622643][T13166] ? kcov_remote_start+0x384/0x670 [ 766.622692][T13166] ? lockdep_hardirqs_on+0x7c/0x110 [ 766.622745][T13166] hci_rx_work+0x2c9/0xeb0 [ 766.622790][T13166] process_one_work+0x9ba/0x1b20 [ 766.622848][T13166] ? __pfx_process_one_work+0x10/0x10 [ 766.622901][T13166] ? assign_work+0x1a0/0x250 [ 766.622944][T13166] worker_thread+0x6c8/0xf10 [ 766.622998][T13166] ? __kthread_parkme+0x19e/0x250 [ 766.623062][T13166] ? __pfx_worker_thread+0x10/0x10 [ 766.623104][T13166] kthread+0x3c5/0x780 [ 766.623144][T13166] ? __pfx_kthread+0x10/0x10 [ 766.623184][T13166] ? rcu_is_watching+0x12/0xc0 [ 766.623236][T13166] ? __pfx_kthread+0x10/0x10 [ 766.623275][T13166] ret_from_fork+0x983/0xb10 [ 766.623308][T13166] ? __pfx_ret_from_fork+0x10/0x10 [ 766.623345][T13166] ? __switch_to+0x7af/0x10d0 [ 766.623388][T13166] ? __pfx_kthread+0x10/0x10 [ 766.623435][T13166] ret_from_fork_asm+0x1a/0x30 [ 766.623505][T13166] [ 766.623544][T13166] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 766.923524][T13166] Bluetooth: hci3: failed to register connection device [ 767.086195][T14578] netlink: zone id is out of range [ 767.109757][T14578] netlink: del zone limit has 4 unknown bytes [ 767.232611][T14581] Console: switching to colour VGA+ 80x25 [ 767.265230][T14578] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2083'. [ 767.269092][T14584] HfR: entered promiscuous mode [ 767.290751][T14577] netlink: set zone limit has 8 unknown bytes [ 768.963182][T13166] Bluetooth: hci3: command tx timeout [ 769.184771][T14610] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2091'. [ 769.530703][T14634] ksmbd: Unknown IPC event: 14, ignore. [ 769.653707][T14619] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 771.357175][T14660] zswap: compressor not available [ 772.013557][T14679] FAULT_INJECTION: forcing a failure. [ 772.013557][T14679] name failslab, interval 1, probability 0, space 0, times 0 [ 772.026580][T14679] CPU: 0 UID: 0 PID: 14679 Comm: syz.5.2103 Tainted: G U syzkaller #0 PREEMPT(full) [ 772.026636][T14679] Tainted: [U]=USER [ 772.026648][T14679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 772.026669][T14679] Call Trace: [ 772.026684][T14679] [ 772.026699][T14679] dump_stack_lvl+0x16c/0x1f0 [ 772.026747][T14679] should_fail_ex+0x512/0x640 [ 772.026795][T14679] ? __kmalloc_cache_noprof+0x5f/0x770 [ 772.026834][T14679] should_failslab+0xc2/0x120 [ 772.026884][T14679] __kmalloc_cache_noprof+0x72/0x770 [ 772.026919][T14679] ? vhost_net_open+0x73/0x8a0 [ 772.026958][T14679] ? __pfx_vhost_net_open+0x10/0x10 [ 772.026989][T14679] ? vhost_net_open+0x73/0x8a0 [ 772.027021][T14679] ? __pfx_vhost_net_open+0x10/0x10 [ 772.027054][T14679] vhost_net_open+0x73/0x8a0 [ 772.027087][T14679] ? __pfx_vhost_net_open+0x10/0x10 [ 772.027123][T14679] misc_open+0x26d/0x450 [ 772.027160][T14679] ? __pfx_misc_open+0x10/0x10 [ 772.027195][T14679] chrdev_open+0x234/0x6a0 [ 772.027243][T14679] ? __pfx_apparmor_file_open+0x10/0x10 [ 772.027282][T14679] ? __pfx_chrdev_open+0x10/0x10 [ 772.027335][T14679] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 772.027395][T14679] do_dentry_open+0x748/0x1590 [ 772.027441][T14679] ? __pfx_chrdev_open+0x10/0x10 [ 772.027503][T14679] vfs_open+0x82/0x3f0 [ 772.027543][T14679] path_openat+0x2078/0x3140 [ 772.027606][T14679] ? __pfx_path_openat+0x10/0x10 [ 772.027673][T14679] do_filp_open+0x20b/0x470 [ 772.027724][T14679] ? __pfx_do_filp_open+0x10/0x10 [ 772.027812][T14679] ? alloc_fd+0x471/0x7d0 [ 772.027873][T14679] do_sys_openat2+0x11f/0x280 [ 772.027910][T14679] ? __pfx_do_sys_openat2+0x10/0x10 [ 772.027962][T14679] __x64_sys_openat+0x174/0x210 [ 772.028000][T14679] ? __pfx___x64_sys_openat+0x10/0x10 [ 772.028056][T14679] do_syscall_64+0xcd/0xf80 [ 772.028100][T14679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.028136][T14679] RIP: 0033:0x7f580db8f7c9 [ 772.028166][T14679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.028201][T14679] RSP: 002b:00007f580bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 772.028234][T14679] RAX: ffffffffffffffda RBX: 00007f580dde5fa0 RCX: 00007f580db8f7c9 [ 772.028258][T14679] RDX: 0000000000101600 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 772.028281][T14679] RBP: 00007f580dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 772.028303][T14679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.028324][T14679] R13: 00007f580dde6038 R14: 00007f580dde5fa0 R15: 00007fff713922d8 [ 772.028371][T14679] [ 772.653139][T14684] FAULT_INJECTION: forcing a failure. [ 772.653139][T14684] name failslab, interval 1, probability 0, space 0, times 0 [ 772.768657][T14684] CPU: 1 UID: 0 PID: 14684 Comm: syz.6.2105 Tainted: G U syzkaller #0 PREEMPT(full) [ 772.768712][T14684] Tainted: [U]=USER [ 772.768724][T14684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 772.768745][T14684] Call Trace: [ 772.768757][T14684] [ 772.768769][T14684] dump_stack_lvl+0x16c/0x1f0 [ 772.768816][T14684] should_fail_ex+0x512/0x640 [ 772.768855][T14684] ? __kmalloc_noprof+0xca/0x870 [ 772.768893][T14684] should_failslab+0xc2/0x120 [ 772.768942][T14684] __kmalloc_noprof+0xdd/0x870 [ 772.768973][T14684] ? realloc_user_queue+0x288/0x320 [ 772.769034][T14684] ? realloc_user_queue+0x288/0x320 [ 772.769087][T14684] realloc_user_queue+0x288/0x320 [ 772.769143][T14684] ? __pfx_snd_timer_user_open+0x10/0x10 [ 772.769195][T14684] snd_timer_user_open+0xfc/0x180 [ 772.769249][T14684] snd_open+0x22d/0x4c0 [ 772.769296][T14684] ? __pfx_snd_open+0x10/0x10 [ 772.769338][T14684] chrdev_open+0x234/0x6a0 [ 772.769395][T14684] ? __pfx_apparmor_file_open+0x10/0x10 [ 772.769437][T14684] ? __pfx_chrdev_open+0x10/0x10 [ 772.769501][T14684] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 772.769562][T14684] do_dentry_open+0x748/0x1590 [ 772.769609][T14684] ? __pfx_chrdev_open+0x10/0x10 [ 772.769670][T14684] vfs_open+0x82/0x3f0 [ 772.769708][T14684] path_openat+0x2078/0x3140 [ 772.769771][T14684] ? __pfx_path_openat+0x10/0x10 [ 772.769837][T14684] do_filp_open+0x20b/0x470 [ 772.769887][T14684] ? __pfx_do_filp_open+0x10/0x10 [ 772.769967][T14684] ? alloc_fd+0x471/0x7d0 [ 772.770032][T14684] do_sys_openat2+0x11f/0x280 [ 772.770068][T14684] ? __pfx_do_sys_openat2+0x10/0x10 [ 772.770121][T14684] __x64_sys_openat+0x174/0x210 [ 772.770160][T14684] ? __pfx___x64_sys_openat+0x10/0x10 [ 772.770216][T14684] do_syscall_64+0xcd/0xf80 [ 772.770259][T14684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.770293][T14684] RIP: 0033:0x7fc9e8f8f7c9 [ 772.770321][T14684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.770355][T14684] RSP: 002b:00007fc9e9e9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 772.770388][T14684] RAX: ffffffffffffffda RBX: 00007fc9e91e5fa0 RCX: 00007fc9e8f8f7c9 [ 772.770411][T14684] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 772.770434][T14684] RBP: 00007fc9e9013f91 R08: 0000000000000000 R09: 0000000000000000 [ 772.770462][T14684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.770484][T14684] R13: 00007fc9e91e6038 R14: 00007fc9e91e5fa0 R15: 00007ffca0831448 [ 772.770529][T14684] [ 773.134393][ T30] audit: type=1800 audit(1843104537.520:12): pid=14684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2105" name="file0" dev="tmpfs" ino=493 res=0 errno=0 [ 774.445160][T14710] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2112'. [ 774.879603][T14725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 777.335428][T14765] FAULT_INJECTION: forcing a failure. [ 777.335428][T14765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 777.349710][T14765] CPU: 0 UID: 0 PID: 14765 Comm: syz.1.2124 Tainted: G U syzkaller #0 PREEMPT(full) [ 777.349760][T14765] Tainted: [U]=USER [ 777.349769][T14765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 777.349784][T14765] Call Trace: [ 777.349792][T14765] [ 777.349801][T14765] dump_stack_lvl+0x16c/0x1f0 [ 777.349835][T14765] should_fail_ex+0x512/0x640 [ 777.349867][T14765] should_fail_alloc_page+0xe7/0x130 [ 777.349905][T14765] prepare_alloc_pages+0x3c2/0x610 [ 777.349940][T14765] ? rcu_is_watching+0x12/0xc0 [ 777.350014][T14765] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 777.350046][T14765] ? __lock_acquire+0x433/0x22f0 [ 777.350074][T14765] ? finish_task_switch.isra.0+0x202/0xbc0 [ 777.350123][T14765] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 777.350153][T14765] ? __might_fault+0xe3/0x190 [ 777.350177][T14765] ? __might_fault+0xe3/0x190 [ 777.350199][T14765] ? __might_fault+0x13b/0x190 [ 777.350231][T14765] ? _copy_from_iter+0x161/0x16c0 [ 777.350264][T14765] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 777.350304][T14765] ? policy_nodemask+0xea/0x4e0 [ 777.350342][T14765] alloc_pages_mpol+0x1fb/0x550 [ 777.350378][T14765] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 777.350422][T14765] alloc_pages_noprof+0x12d/0x180 [ 777.350458][T14765] anon_pipe_write+0xecb/0x1990 [ 777.350507][T14765] ? __pfx_anon_pipe_write+0x10/0x10 [ 777.350543][T14765] ? common_file_perm+0x1b1/0x500 [ 777.350576][T14765] ? futex_wake+0x1ad/0x530 [ 777.350611][T14765] ? bpf_lsm_file_permission+0x9/0x10 [ 777.350637][T14765] ? security_file_permission+0x71/0x210 [ 777.350675][T14765] ? rw_verify_area+0xcf/0x6c0 [ 777.350707][T14765] vfs_write+0x7d3/0x11d0 [ 777.350741][T14765] ? __pfx_anon_pipe_write+0x10/0x10 [ 777.350779][T14765] ? __pfx_vfs_write+0x10/0x10 [ 777.350811][T14765] ? find_held_lock+0x2b/0x80 [ 777.350865][T14765] ksys_write+0x1f8/0x250 [ 777.350898][T14765] ? __pfx_ksys_write+0x10/0x10 [ 777.350931][T14765] ? syscall_user_dispatch+0x78/0x140 [ 777.350974][T14765] do_syscall_64+0xcd/0xf80 [ 777.351016][T14765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.351046][T14765] RIP: 0033:0x7f1bebd8f7c9 [ 777.351067][T14765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.351092][T14765] RSP: 002b:00007f1becbcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 777.351115][T14765] RAX: ffffffffffffffda RBX: 00007f1bebfe6090 RCX: 00007f1bebd8f7c9 [ 777.351132][T14765] RDX: 0000000004000000 RSI: 0000200000000380 RDI: 0000000000000000 [ 777.351147][T14765] RBP: 00007f1bebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 777.351163][T14765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.351178][T14765] R13: 00007f1bebfe6128 R14: 00007f1bebfe6090 R15: 00007fffc8579b68 [ 777.351210][T14765] [ 778.138549][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2127'. [ 778.259334][T14779] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2128'. [ 779.589005][T14803] capability: warning: `syz.5.2134' uses deprecated v2 capabilities in a way that may be insecure [ 779.629108][T14783] FAULT_INJECTION: forcing a failure. [ 779.629108][T14783] name failslab, interval 1, probability 0, space 0, times 0 [ 779.725013][T14783] CPU: 1 UID: 0 PID: 14783 Comm: syz.6.2130 Tainted: G U syzkaller #0 PREEMPT(full) [ 779.725072][T14783] Tainted: [U]=USER [ 779.725084][T14783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.725105][T14783] Call Trace: [ 779.725117][T14783] [ 779.725130][T14783] dump_stack_lvl+0x16c/0x1f0 [ 779.725177][T14783] should_fail_ex+0x512/0x640 [ 779.725215][T14783] ? __kmalloc_node_track_caller_noprof+0xcb/0x890 [ 779.725266][T14783] should_failslab+0xc2/0x120 [ 779.725317][T14783] __kmalloc_node_track_caller_noprof+0xde/0x890 [ 779.725363][T14783] ? kasprintf+0xc7/0x100 [ 779.725413][T14783] ? kvasprintf+0xbc/0x150 [ 779.725452][T14783] kvasprintf+0xbc/0x150 [ 779.725492][T14783] ? __pfx_kvasprintf+0x10/0x10 [ 779.725537][T14783] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 779.725575][T14783] ? lockdep_hardirqs_on+0x7c/0x110 [ 779.725616][T14783] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 779.725659][T14783] kasprintf+0xc7/0x100 [ 779.725712][T14783] ? __pfx_kasprintf+0x10/0x10 [ 779.725786][T14783] ieee80211_alloc_led_names+0x243/0x420 [ 779.725840][T14783] ieee80211_alloc_hw_nm+0x197c/0x22b0 [ 779.725896][T14783] mac80211_hwsim_new_radio+0x1d3/0x5080 [ 779.725958][T14783] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 779.726016][T14783] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 779.726076][T14783] hwsim_new_radio_nl+0xba2/0x1330 [ 779.726124][T14783] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 779.726182][T14783] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 779.726235][T14783] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 779.726295][T14783] genl_family_rcv_msg_doit+0x209/0x2f0 [ 779.726347][T14783] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 779.726394][T14783] ? genl_get_cmd+0x194/0x580 [ 779.726447][T14783] ? bpf_lsm_capable+0x9/0x10 [ 779.726484][T14783] ? security_capable+0x7e/0x260 [ 779.726523][T14783] ? ns_capable+0xd7/0x110 [ 779.726571][T14783] genl_rcv_msg+0x55c/0x800 [ 779.726625][T14783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.726673][T14783] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 779.726733][T14783] netlink_rcv_skb+0x158/0x420 [ 779.726782][T14783] ? __pfx_genl_rcv_msg+0x10/0x10 [ 779.726836][T14783] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 779.726897][T14783] ? netlink_deliver_tap+0x1ae/0xd30 [ 779.726945][T14783] genl_rcv+0x28/0x40 [ 779.726988][T14783] netlink_unicast+0x5aa/0x870 [ 779.727038][T14783] ? __pfx_netlink_unicast+0x10/0x10 [ 779.727098][T14783] netlink_sendmsg+0x8c8/0xdd0 [ 779.727149][T14783] ? __pfx_netlink_sendmsg+0x10/0x10 [ 779.727197][T14783] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 779.727243][T14783] ____sys_sendmsg+0xa5d/0xc30 [ 779.727292][T14783] ? copy_msghdr_from_user+0x10a/0x160 [ 779.727329][T14783] ? __pfx_____sys_sendmsg+0x10/0x10 [ 779.727387][T14783] ? __pfx_futex_wake_mark+0x10/0x10 [ 779.727441][T14783] ___sys_sendmsg+0x134/0x1d0 [ 779.727476][T14783] ? find_held_lock+0x2b/0x80 [ 779.727526][T14783] ? __pfx____sys_sendmsg+0x10/0x10 [ 779.727563][T14783] ? __lock_acquire+0x433/0x22f0 [ 779.727649][T14783] __sys_sendmsg+0x16d/0x220 [ 779.727690][T14783] ? __pfx___sys_sendmsg+0x10/0x10 [ 779.727724][T14783] ? __x64_sys_futex+0x1e0/0x4c0 [ 779.727795][T14783] do_syscall_64+0xcd/0xf80 [ 779.727839][T14783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.727874][T14783] RIP: 0033:0x7fc9e8f8f7c9 [ 779.727902][T14783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 779.727938][T14783] RSP: 002b:00007fc9e9e9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.727971][T14783] RAX: ffffffffffffffda RBX: 00007fc9e91e5fa0 RCX: 00007fc9e8f8f7c9 [ 779.727994][T14783] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000006 [ 779.728017][T14783] RBP: 00007fc9e9013f91 R08: 0000000000000000 R09: 0000000000000000 [ 779.728038][T14783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.728058][T14783] R13: 00007fc9e91e6038 R14: 00007fc9e91e5fa0 R15: 00007ffca0831448 [ 779.728104][T14783] [ 780.121987][ C1] vkms_vblank_simulate: vblank timer overrun [ 781.446854][T14822] can: request_module (can-proto-0) failed. [ 782.294128][T14841] netlink: 1896 bytes leftover after parsing attributes in process `syz.6.2143'. [ 782.795166][T14850] FAULT_INJECTION: forcing a failure. [ 782.795166][T14850] name failslab, interval 1, probability 0, space 0, times 0 [ 782.818943][T14850] CPU: 1 UID: 0 PID: 14850 Comm: syz.5.2146 Tainted: G U syzkaller #0 PREEMPT(full) [ 782.818995][T14850] Tainted: [U]=USER [ 782.819007][T14850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 782.819026][T14850] Call Trace: [ 782.819037][T14850] [ 782.819051][T14850] dump_stack_lvl+0x16c/0x1f0 [ 782.819095][T14850] should_fail_ex+0x512/0x640 [ 782.819133][T14850] ? __kmalloc_noprof+0xca/0x870 [ 782.819164][T14850] should_failslab+0xc2/0x120 [ 782.819213][T14850] __kmalloc_noprof+0xdd/0x870 [ 782.819243][T14850] ? realloc_user_queue+0x288/0x320 [ 782.819308][T14850] ? realloc_user_queue+0x288/0x320 [ 782.819357][T14850] realloc_user_queue+0x288/0x320 [ 782.819409][T14850] ? __pfx_snd_timer_user_open+0x10/0x10 [ 782.819463][T14850] snd_timer_user_open+0xfc/0x180 [ 782.819526][T14850] snd_open+0x22d/0x4c0 [ 782.819574][T14850] ? __pfx_snd_open+0x10/0x10 [ 782.819618][T14850] chrdev_open+0x234/0x6a0 [ 782.819665][T14850] ? __pfx_apparmor_file_open+0x10/0x10 [ 782.819705][T14850] ? __pfx_chrdev_open+0x10/0x10 [ 782.819759][T14850] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 782.819819][T14850] do_dentry_open+0x748/0x1590 [ 782.819864][T14850] ? __pfx_chrdev_open+0x10/0x10 [ 782.819927][T14850] vfs_open+0x82/0x3f0 [ 782.819965][T14850] path_openat+0x2078/0x3140 [ 782.820028][T14850] ? __pfx_path_openat+0x10/0x10 [ 782.820092][T14850] do_filp_open+0x20b/0x470 [ 782.820141][T14850] ? __pfx_do_filp_open+0x10/0x10 [ 782.820222][T14850] ? alloc_fd+0x471/0x7d0 [ 782.820280][T14850] do_sys_openat2+0x11f/0x280 [ 782.820313][T14850] ? __pfx_do_sys_openat2+0x10/0x10 [ 782.820363][T14850] __x64_sys_openat+0x174/0x210 [ 782.820398][T14850] ? __pfx___x64_sys_openat+0x10/0x10 [ 782.820447][T14850] do_syscall_64+0xcd/0xf80 [ 782.820498][T14850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.820534][T14850] RIP: 0033:0x7f580db8f7c9 [ 782.820561][T14850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.820595][T14850] RSP: 002b:00007f580bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 782.820627][T14850] RAX: ffffffffffffffda RBX: 00007f580dde5fa0 RCX: 00007f580db8f7c9 [ 782.820650][T14850] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 782.820672][T14850] RBP: 00007f580dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 782.820693][T14850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.820713][T14850] R13: 00007f580dde6038 R14: 00007f580dde5fa0 R15: 00007fff713922d8 [ 782.820756][T14850] [ 783.361205][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2148'. [ 783.762157][ T5837] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 783.829920][ T5837] CPU: 1 UID: 0 PID: 5837 Comm: syz-executor Tainted: G U syzkaller #0 PREEMPT(full) [ 783.829985][ T5837] Tainted: [U]=USER [ 783.829995][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 783.830012][ T5837] Call Trace: [ 783.830022][ T5837] [ 783.830033][ T5837] dump_stack_lvl+0x16c/0x1f0 [ 783.830074][ T5837] dump_header+0x101/0x930 [ 783.830125][ T5837] oom_kill_process+0x272/0xa40 [ 783.830174][ T5837] out_of_memory+0x350/0x1700 [ 783.830212][ T5837] ? __pfx_out_of_memory+0x10/0x10 [ 783.830248][ T5837] mem_cgroup_out_of_memory+0x118/0x130 [ 783.830283][ T5837] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 783.830327][ T5837] ? do_raw_spin_unlock+0x172/0x230 [ 783.830376][ T5837] try_charge_memcg+0x689/0xd40 [ 783.830444][ T5837] ? __pfx_try_charge_memcg+0x10/0x10 [ 783.830499][ T5837] ? find_held_lock+0x2b/0x80 [ 783.830552][ T5837] charge_memcg+0x8a/0x230 [ 783.830599][ T5837] mem_cgroup_swapin_charge_folio+0xd7/0x450 [ 783.830656][ T5837] __read_swap_cache_async+0x397/0x500 [ 783.830697][ T5837] ? __pfx___read_swap_cache_async+0x10/0x10 [ 783.830735][ T5837] ? finish_task_switch.isra.0+0x202/0xbc0 [ 783.830787][ T5837] ? finish_task_switch.isra.0+0x207/0xbc0 [ 783.830850][ T5837] ? lockdep_hardirqs_on+0x7c/0x110 [ 783.830895][ T5837] swap_cluster_readahead+0x432/0x770 [ 783.830928][ T5837] ? trace_sched_exit_tp+0xd1/0x110 [ 783.830968][ T5837] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 783.831023][ T5837] ? set_next_entity+0x11a/0x9d0 [ 783.831063][ T5837] ? get_vma_policy+0x242/0x3c0 [ 783.831115][ T5837] swapin_readahead+0x160/0x1180 [ 783.831152][ T5837] ? __lock_acquire+0x433/0x22f0 [ 783.831194][ T5837] ? __pfx_swapin_readahead+0x10/0x10 [ 783.831232][ T5837] ? find_held_lock+0x2b/0x80 [ 783.831275][ T5837] ? swap_cache_get_folio+0x267/0x8e0 [ 783.831306][ T5837] ? swap_cache_get_folio+0x267/0x8e0 [ 783.831337][ T5837] ? swap_cache_get_folio+0x267/0x8e0 [ 783.831373][ T5837] ? swap_cache_get_folio+0x267/0x8e0 [ 783.831412][ T5837] ? swap_cache_get_folio+0x293/0x8e0 [ 783.831447][ T5837] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 783.831479][ T5837] ? __pfx_get_swap_device+0x10/0x10 [ 783.831523][ T5837] ? do_swap_page+0x12c/0x64c0 [ 783.831569][ T5837] ? do_swap_page+0x78b/0x64c0 [ 783.831605][ T5837] do_swap_page+0x78b/0x64c0 [ 783.831670][ T5837] ? __pfx_do_swap_page+0x10/0x10 [ 783.831713][ T5837] ? __lock_acquire+0x433/0x22f0 [ 783.831749][ T5837] ? __pfx_default_wake_function+0x10/0x10 [ 783.831798][ T5837] ? rcu_is_watching+0x12/0xc0 [ 783.831848][ T5837] ? ___pte_offset_map+0x2ad/0x4f0 [ 783.831896][ T5837] __handle_mm_fault+0x1744/0x2a30 [ 783.831956][ T5837] ? reacquire_held_locks+0xcd/0x1f0 [ 783.831994][ T5837] ? __pfx___handle_mm_fault+0x10/0x10 [ 783.832049][ T5837] ? lock_vma_under_rcu+0x176/0x580 [ 783.832113][ T5837] ? __pfx_get_timespec64+0x10/0x10 [ 783.832161][ T5837] handle_mm_fault+0x3fe/0xad0 [ 783.832220][ T5837] do_user_addr_fault+0x423/0xda0 [ 783.832261][ T5837] ? rcu_is_watching+0x12/0xc0 [ 783.832313][ T5837] exc_page_fault+0x64/0xc0 [ 783.832377][ T5837] asm_exc_page_fault+0x26/0x30 [ 783.832413][ T5837] RIP: 0033:0x7f94255b75f0 [ 783.832440][ T5837] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 783.832473][ T5837] RSP: 002b:00007ffe37f2fc48 EFLAGS: 00010246 [ 783.832500][ T5837] RAX: 0000000000000000 RBX: 00000000000006a8 RCX: 00007f94255c2085 [ 783.832522][ T5837] RDX: 00007ffe37f2fc90 RSI: 0000000000000000 RDI: 0000000000000000 [ 783.832542][ T5837] RBP: 00007ffe37f2fcfc R08: 0000000000000000 R09: 0000000000000000 [ 783.832563][ T5837] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 783.832584][ T5837] R13: 00000000000927c0 R14: 00000000000bf0ad R15: 00007ffe37f2fd50 [ 783.832627][ T5837] [ 783.832793][ T5837] memory: usage 3072kB, limit 3072kB, failcnt 89946 [ 784.237938][T14881] ubi0: attaching mtd0 [ 784.291070][T14881] ubi0: scanning is finished [ 784.326924][T14881] ubi0: empty MTD device detected [ 784.395397][T14889] FAULT_INJECTION: forcing a failure. [ 784.395397][T14889] name failslab, interval 1, probability 0, space 0, times 0 [ 784.412240][T14887] zram: Added device: zram0 [ 784.440216][T14889] CPU: 1 UID: 0 PID: 14889 Comm: syz.6.2157 Tainted: G U syzkaller #0 PREEMPT(full) [ 784.440267][T14889] Tainted: [U]=USER [ 784.440287][T14889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 784.440306][T14889] Call Trace: [ 784.440316][T14889] [ 784.440328][T14889] dump_stack_lvl+0x16c/0x1f0 [ 784.440371][T14889] should_fail_ex+0x512/0x640 [ 784.440407][T14889] ? kmem_cache_alloc_noprof+0x62/0x720 [ 784.440445][T14889] ? __pfx_filemap_map_pages+0x10/0x10 [ 784.440475][T14889] should_failslab+0xc2/0x120 [ 784.440522][T14889] kmem_cache_alloc_noprof+0x75/0x720 [ 784.440558][T14889] ? ptlock_alloc+0x1f/0x70 [ 784.440608][T14889] ? __pfx_filemap_map_pages+0x10/0x10 [ 784.440638][T14889] ? ptlock_alloc+0x1f/0x70 [ 784.440685][T14889] ptlock_alloc+0x1f/0x70 [ 784.440732][T14889] pte_alloc_one+0x84/0x350 [ 784.440780][T14889] __do_fault+0x320/0x490 [ 784.440818][T14889] ? __pfx_filemap_map_pages+0x10/0x10 [ 784.440849][T14889] do_pte_missing+0x1a6/0x4000 [ 784.440905][T14889] ? __pmd_alloc+0x64f/0x8b0 [ 784.440951][T14889] __handle_mm_fault+0x14ca/0x2a30 [ 784.441011][T14889] ? __pfx___handle_mm_fault+0x10/0x10 [ 784.441094][T14889] handle_mm_fault+0x3fe/0xad0 [ 784.441152][T14889] __get_user_pages+0x605/0x33c0 [ 784.441209][T14889] ? down_read_killable+0x313/0x4c0 [ 784.441257][T14889] ? __pfx___get_user_pages+0x10/0x10 [ 784.441311][T14889] ? lock_acquire+0x179/0x330 [ 784.441354][T14889] __gup_longterm_locked+0xa92/0x17e0 [ 784.441396][T14889] ? __lock_acquire+0x341/0x22f0 [ 784.441442][T14889] ? __pfx___gup_longterm_locked+0x10/0x10 [ 784.441494][T14889] ? pgd_none+0x9f/0xe0 [ 784.441527][T14889] ? __pfx_pgd_none+0x10/0x10 [ 784.441559][T14889] ? sanity_check_pinned_pages+0x23/0x11d0 [ 784.441608][T14889] gup_fast_fallback+0xe91/0x2320 [ 784.441680][T14889] ? __pfx_gup_fast_fallback+0x10/0x10 [ 784.441728][T14889] ? __blkdev_direct_IO_simple+0x6d7/0x860 [ 784.441774][T14889] ? blkdev_direct_IO+0xcc6/0x2100 [ 784.441818][T14889] ? do_iter_readv_writev+0x743/0x9e0 [ 784.441868][T14889] pin_user_pages_fast+0xa7/0xf0 [ 784.441912][T14889] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 784.441960][T14889] ? __debug_object_init+0x2de/0x3d0 [ 784.442014][T14889] iov_iter_extract_pages+0x3a2/0x1ed0 [ 784.442070][T14889] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 784.442136][T14889] ? __lock_acquire+0x433/0x22f0 [ 784.442172][T14889] ? do_raw_spin_lock+0x12c/0x2b0 [ 784.442212][T14889] ? find_held_lock+0x2b/0x80 [ 784.442264][T14889] bio_iov_iter_get_pages+0x395/0x1300 [ 784.442310][T14889] ? find_held_lock+0x2b/0x80 [ 784.442356][T14889] ? bio_associate_blkg_from_css+0x394/0x13e0 [ 784.442418][T14889] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 784.442453][T14889] ? bio_associate_blkg+0x137/0x2a0 [ 784.442509][T14889] __blkdev_direct_IO_simple+0x39f/0x860 [ 784.442557][T14889] ? __lock_acquire+0x433/0x22f0 [ 784.442597][T14889] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 784.442668][T14889] ? find_held_lock+0x2b/0x80 [ 784.442721][T14889] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 784.442754][T14889] ? is_bpf_text_address+0x94/0x1a0 [ 784.442796][T14889] ? iov_iter_npages+0xf0/0x5a0 [ 784.442832][T14889] blkdev_direct_IO+0xcc6/0x2100 [ 784.442886][T14889] ? find_held_lock+0x2b/0x80 [ 784.442931][T14889] ? aa_file_perm+0x29f/0x1560 [ 784.442987][T14889] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 784.443040][T14889] ? _kstrtoull+0x145/0x200 [ 784.443089][T14889] ? __pfx_aa_file_perm+0x10/0x10 [ 784.443144][T14889] blkdev_read_iter+0x289/0x500 [ 784.443199][T14889] do_iter_readv_writev+0x743/0x9e0 [ 784.443241][T14889] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 784.443287][T14889] ? common_file_perm+0x1b1/0x500 [ 784.443333][T14889] ? bpf_lsm_file_permission+0x9/0x10 [ 784.443365][T14889] ? security_file_permission+0x71/0x210 [ 784.443418][T14889] ? rw_verify_area+0xcf/0x6c0 [ 784.443458][T14889] vfs_readv+0x4cb/0x8b0 [ 784.443507][T14889] ? __pfx_vfs_readv+0x10/0x10 [ 784.443585][T14889] ? __fget_files+0x20e/0x3c0 [ 784.443638][T14889] ? do_readv+0x132/0x340 [ 784.443674][T14889] do_readv+0x132/0x340 [ 784.443711][T14889] ? __pfx_do_readv+0x10/0x10 [ 784.443750][T14889] ? ksys_write+0x1ac/0x250 [ 784.443790][T14889] ? __pfx_ksys_write+0x10/0x10 [ 784.443838][T14889] __x64_sys_preadv2+0x11f/0x160 [ 784.443887][T14889] do_syscall_64+0xcd/0xf80 [ 784.443929][T14889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.443962][T14889] RIP: 0033:0x7fc9e8f8f7c9 [ 784.443989][T14889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 784.444023][T14889] RSP: 002b:00007fc9e9e9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 784.444055][T14889] RAX: ffffffffffffffda RBX: 00007fc9e91e5fa0 RCX: 00007fc9e8f8f7c9 [ 784.444077][T14889] RDX: 0000000000000005 RSI: 0000200000001000 RDI: 0000000000000003 [ 784.444097][T14889] RBP: 00007fc9e9e9b090 R08: 0000000000000007 R09: 000000000000002e [ 784.444117][T14889] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 784.444138][T14889] R13: 00007fc9e91e6038 R14: 00007fc9e91e5fa0 R15: 00007ffca0831448 [ 784.444182][T14889] [ 784.444939][T14887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2155'. [ 784.451716][ T5837] memory+swap: usage 3160kB, limit 9007199254740988kB, failcnt 0 [ 784.999631][ T5837] kmem: usage 3024kB, limit 9007199254740988kB, failcnt 0 [ 785.025248][ T5837] Memory cgroup stats for /syz3: [ 785.025456][ T5837] cache 0 [ 785.050830][ T5837] rss 0 [ 785.072637][ T5837] rss_huge 0 [ 785.078377][ T5837] shmem 0 [ 785.082454][ T5837] mapped_file 0 [ 785.086057][ T5837] dirty 0 [ 785.089203][ T5837] writeback 0 [ 785.101581][ T5837] workingset_refault_anon 21291 [ 785.108792][ T5837] workingset_refault_file 11973 [ 785.126336][ T5837] swap 90112 [ 785.129698][ T5837] swapcached 49152 [ 785.138981][ T5837] pgpgin 257198 [ 785.143946][T14881] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 785.160507][ T5837] pgpgout 264851 [ 785.164249][ T5837] pgfault 243357 [ 785.174385][ T5837] pgmajfault 17985 [ 785.182635][T14881] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 785.190243][ T5837] inactive_anon 49152 [ 785.194421][ T5837] active_anon 0 [ 785.197922][ T5837] inactive_file 0 [ 785.203111][T14881] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 785.210938][ T5837] active_file 0 [ 785.214735][ T5837] unevictable 0 [ 785.218277][ T5837] hierarchical_memory_limit 3145728 [ 785.223545][ T5837] hierarchical_memsw_limit 9223372036854771712 [ 785.243110][T14881] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 785.260574][ T5837] total_cache 0 [ 785.264288][T14881] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 785.280709][ T5837] total_rss 0 [ 785.290696][ T5837] total_rss_huge 0 [ 785.294494][ T5837] total_shmem 0 [ 785.298145][T14881] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 785.320630][ T5837] total_mapped_file 0 [ 785.324689][ T5837] total_dirty 0 [ 785.328181][ T5837] total_writeback 0 [ 785.335346][T14881] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1915212320 [ 785.380645][ T5837] total_workingset_refault_anon 21291 [ 785.386103][ T5837] total_workingset_refault_file 11973 [ 785.400689][T14881] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 785.415457][ T5837] total_swap 90112 [ 785.419246][ T5837] total_swapcached 49152 [ 785.440642][ T5837] total_pgpgin 257198 [ 785.450952][ T5837] total_pgpgout 264851 [ 785.452937][T14896] ubi0: background thread "ubi_bgt0d" started, PID 14896 [ 785.464796][T14885] ubi0: detaching mtd0 [ 785.465443][ T5837] total_pgfault 243357 [ 785.485736][ T5837] total_pgmajfault 17985 [ 785.490163][ T5837] total_inactive_anon 49152 [ 785.498894][T14885] ubi0: mtd0 is detached [ 785.506011][ T5837] total_active_anon 0 [ 785.510061][ T5837] total_inactive_file 0 [ 785.536028][ T5837] total_active_file 0 [ 785.560815][ T5837] total_unevictable 0 [ 785.564874][ T5837] anon_cost 0 [ 785.568210][ T5837] file_cost 0 [ 785.621449][ T5837] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2144,pid=14844,uid=0 [ 785.679051][ T5837] Memory cgroup out of memory: Killed process 14844 (syz.3.2144) total-vm:131356kB, anon-rss:1140kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 786.111819][T14910] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 786.118106][T14910] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 786.124814][T14910] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 786.143698][T14910] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 786.213122][T14910] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 786.225513][T14910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 786.242837][T14910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 786.262969][T14910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 786.272571][T14910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 786.283076][T14910] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 786.587583][T14927] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2166'. [ 786.623015][T14927] veth0_macvtap: left promiscuous mode [ 786.643044][T14927] macvtap0: entered promiscuous mode [ 786.650727][T14927] macvtap0: entered allmulticast mode [ 786.767921][T14929] zswap: compressor û not available [ 786.780697][ T30] audit: type=1800 audit(1843104551.193:13): pid=14940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2168" name="version" dev="configfs" ino=55380 res=0 errno=0 [ 787.912133][T14958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2172'. [ 787.988667][T14958] veth1_macvtap: left promiscuous mode [ 787.988705][T14958] FAULT_INJECTION: forcing a failure. [ 787.988705][T14958] name failslab, interval 1, probability 0, space 0, times 0 [ 787.988741][T14958] CPU: 0 UID: 0 PID: 14958 Comm: syz.1.2172 Tainted: G U syzkaller #0 PREEMPT(full) [ 787.988777][T14958] Tainted: [U]=USER [ 787.988785][T14958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 787.988800][T14958] Call Trace: [ 787.988809][T14958] [ 787.988818][T14958] dump_stack_lvl+0x16c/0x1f0 [ 787.988852][T14958] should_fail_ex+0x512/0x640 [ 787.988882][T14958] ? kmem_cache_alloc_node_noprof+0x65/0x7b0 [ 787.988913][T14958] should_failslab+0xc2/0x120 [ 787.988962][T14958] kmem_cache_alloc_node_noprof+0x78/0x7b0 [ 787.988990][T14958] ? __alloc_skb+0x2b2/0x380 [ 787.989020][T14958] ? __alloc_skb+0x2b2/0x380 [ 787.989042][T14958] __alloc_skb+0x2b2/0x380 [ 787.989065][T14958] ? __pfx___alloc_skb+0x10/0x10 [ 787.989093][T14958] ? if_nlmsg_size+0x475/0xaf0 [ 787.989127][T14958] rtmsg_ifinfo_build_skb+0x81/0x280 [ 787.989169][T14958] rtmsg_ifinfo+0x9f/0x1a0 [ 787.989208][T14958] netif_close_many+0x2fc/0x630 [ 787.989248][T14958] ? __pfx_netif_close_many+0x10/0x10 [ 787.989286][T14958] ? netif_close_many_and_unlock+0x24/0x270 [ 787.989328][T14958] unregister_netdevice_many_notify+0x549/0x2570 [ 787.989368][T14958] ? lockdep_hardirqs_on+0x7c/0x110 [ 787.989400][T14958] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 787.989435][T14958] ? kfree+0x29e/0x710 [ 787.989455][T14958] ? __pfx___might_resched+0x10/0x10 [ 787.989492][T14958] ? macsec_dellink+0x8f/0xb0 [ 787.989534][T14958] ? macsec_dellink+0x8f/0xb0 [ 787.989572][T14958] rtnl_dellink+0x45f/0xad0 [ 787.989601][T14958] ? __pfx_macsec_dellink+0x10/0x10 [ 787.989640][T14958] ? dev_hard_start_xmit+0x97/0x6e0 [ 787.989678][T14958] ? __dev_queue_xmit+0xa46/0x4330 [ 787.989716][T14958] ? netlink_deliver_tap+0xa87/0xd30 [ 787.989744][T14958] ? netlink_unicast+0x64c/0x870 [ 787.989775][T14958] ? __pfx_rtnl_dellink+0x10/0x10 [ 787.989802][T14958] ? __sys_sendmmsg+0x200/0x420 [ 787.989828][T14958] ? __x64_sys_sendmmsg+0x9c/0x100 [ 787.989855][T14958] ? do_syscall_64+0xcd/0xf80 [ 787.989944][T14958] ? __lock_acquire+0x433/0x22f0 [ 787.989972][T14958] ? __dev_queue_xmit+0xaf1/0x4330 [ 787.990013][T14958] ? __local_bh_enable_ip+0xa4/0x120 [ 787.990059][T14958] ? find_held_lock+0x2b/0x80 [ 787.990094][T14958] ? __pfx_rtnl_dellink+0x10/0x10 [ 787.990121][T14958] ? __pfx_rtnl_dellink+0x10/0x10 [ 787.990149][T14958] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 787.990181][T14958] ? __pfx_rtnl_dellink+0x10/0x10 [ 787.990211][T14958] rtnetlink_rcv_msg+0x95e/0xe90 [ 787.990244][T14958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 787.990283][T14958] ? ref_tracker_free+0x37c/0x830 [ 787.990318][T14958] netlink_rcv_skb+0x158/0x420 [ 787.990349][T14958] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 787.990382][T14958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 787.990424][T14958] ? netlink_deliver_tap+0x1ae/0xd30 [ 787.990460][T14958] netlink_unicast+0x5aa/0x870 [ 787.990496][T14958] ? __pfx_netlink_unicast+0x10/0x10 [ 787.990527][T14958] ? __pfx___might_resched+0x10/0x10 [ 787.990574][T14958] netlink_sendmsg+0x8c8/0xdd0 [ 787.990611][T14958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.990647][T14958] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 787.990681][T14958] ____sys_sendmsg+0xa5d/0xc30 [ 787.990716][T14958] ? copy_msghdr_from_user+0x10a/0x160 [ 787.990744][T14958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 787.990782][T14958] ? find_held_lock+0x2b/0x80 [ 787.990826][T14958] ___sys_sendmsg+0x134/0x1d0 [ 787.990855][T14958] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.990909][T14958] ? __pfx___might_resched+0x10/0x10 [ 787.990959][T14958] __sys_sendmmsg+0x200/0x420 [ 787.990991][T14958] ? __pfx___sys_sendmmsg+0x10/0x10 [ 787.991027][T14958] ? __pfx_do_futex+0x10/0x10 [ 787.991074][T14958] ? xfd_validate_state+0x61/0x180 [ 787.991120][T14958] __x64_sys_sendmmsg+0x9c/0x100 [ 787.991148][T14958] ? lockdep_hardirqs_on+0x7c/0x110 [ 787.991178][T14958] do_syscall_64+0xcd/0xf80 [ 787.991210][T14958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.991235][T14958] RIP: 0033:0x7f1bebd8f7c9 [ 787.991256][T14958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.991281][T14958] RSP: 002b:00007f1becbec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 787.991304][T14958] RAX: ffffffffffffffda RBX: 00007f1bebfe5fa0 RCX: 00007f1bebd8f7c9 [ 787.991321][T14958] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 787.991337][T14958] RBP: 00007f1bebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 787.991353][T14958] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 787.991368][T14958] R13: 00007f1bebfe6038 R14: 00007f1bebfe5fa0 R15: 00007fffc8579b68 [ 787.991401][T14958] [ 788.174515][T10300] Bluetooth: hci0: command 0x0406 tx timeout [ 788.618743][T10359] Bluetooth: hci1: command 0x0406 tx timeout [ 788.624932][T10359] Bluetooth: hci3: command 0x0c1a tx timeout [ 788.632597][T13166] Bluetooth: hci2: command 0x0c1a tx timeout [ 789.994544][T14987] FAULT_INJECTION: forcing a failure. [ 789.994544][T14987] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 790.103542][T14987] CPU: 0 UID: 0 PID: 14987 Comm: syz.1.2177 Tainted: G U syzkaller #0 PREEMPT(full) [ 790.103595][T14987] Tainted: [U]=USER [ 790.103606][T14987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 790.103624][T14987] Call Trace: [ 790.103635][T14987] [ 790.103648][T14987] dump_stack_lvl+0x16c/0x1f0 [ 790.103691][T14987] should_fail_ex+0x512/0x640 [ 790.103734][T14987] should_fail_alloc_page+0xe7/0x130 [ 790.103785][T14987] prepare_alloc_pages+0x3c2/0x610 [ 790.103839][T14987] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 790.103881][T14987] ? __lock_acquire+0x433/0x22f0 [ 790.103931][T14987] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 790.103969][T14987] ? do_raw_spin_lock+0x12c/0x2b0 [ 790.104011][T14987] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 790.104062][T14987] ? find_held_lock+0x2b/0x80 [ 790.104120][T14987] ? __lock_acquire+0x433/0x22f0 [ 790.104152][T14987] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 790.104204][T14987] ? policy_nodemask+0xea/0x4e0 [ 790.104253][T14987] alloc_pages_mpol+0x1fb/0x550 [ 790.104303][T14987] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 790.104362][T14987] folio_alloc_mpol_noprof+0x36/0xe0 [ 790.104414][T14987] shmem_alloc_folio+0x135/0x160 [ 790.104463][T14987] shmem_alloc_and_add_folio+0x494/0xc20 [ 790.104527][T14987] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 790.104582][T14987] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 790.104621][T14987] shmem_get_folio_gfp+0x67f/0x1610 [ 790.104662][T14987] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 790.104696][T14987] ? ktime_get_coarse_real_ts64_mg+0x22c/0x300 [ 790.104740][T14987] ? lockdep_hardirqs_on+0x7c/0x110 [ 790.104786][T14987] shmem_fault+0x1fe/0xa00 [ 790.104819][T14987] ? current_time+0x28f/0x380 [ 790.104871][T14987] ? __pfx_shmem_fault+0x10/0x10 [ 790.104902][T14987] ? __lock_acquire+0x433/0x22f0 [ 790.104939][T14987] ? __pfx___up_read+0x10/0x10 [ 790.104977][T14987] ? inode_to_bdi+0x9e/0x160 [ 790.105030][T14987] ? __pfx_filemap_map_pages+0x10/0x10 [ 790.105060][T14987] __do_fault+0x10d/0x490 [ 790.105097][T14987] ? __pfx_filemap_map_pages+0x10/0x10 [ 790.105127][T14987] do_pte_missing+0x1a6/0x4000 [ 790.105182][T14987] ? __handle_mm_fault+0x149d/0x2a30 [ 790.105247][T14987] __handle_mm_fault+0x14ca/0x2a30 [ 790.105309][T14987] ? __pfx___handle_mm_fault+0x10/0x10 [ 790.105361][T14987] ? __pte_offset_map_lock+0x174/0x310 [ 790.105402][T14987] ? find_held_lock+0x2b/0x80 [ 790.105461][T14987] ? follow_page_pte+0x611/0x1390 [ 790.105514][T14987] handle_mm_fault+0x3fe/0xad0 [ 790.105571][T14987] __get_user_pages+0x605/0x33c0 [ 790.105629][T14987] ? down_read_killable+0x313/0x4c0 [ 790.105679][T14987] ? __pfx___get_user_pages+0x10/0x10 [ 790.105733][T14987] __gup_longterm_locked+0xa92/0x17e0 [ 790.105790][T14987] ? __pfx___gup_longterm_locked+0x10/0x10 [ 790.105842][T14987] ? pgd_none+0x9f/0xe0 [ 790.105876][T14987] ? __pfx_pgd_none+0x10/0x10 [ 790.105909][T14987] ? sanity_check_pinned_pages+0x23/0x11d0 [ 790.105960][T14987] gup_fast_fallback+0xe91/0x2320 [ 790.106038][T14987] ? __pfx_gup_fast_fallback+0x10/0x10 [ 790.106081][T14987] ? is_bpf_text_address+0x94/0x1a0 [ 790.106123][T14987] ? kernel_text_address+0x8d/0x100 [ 790.106164][T14987] ? __kernel_text_address+0xd/0x40 [ 790.106204][T14987] ? unwind_get_return_address+0x59/0xa0 [ 790.106245][T14987] ? arch_stack_walk+0xa6/0x100 [ 790.106291][T14987] pin_user_pages_fast+0xa7/0xf0 [ 790.106337][T14987] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 790.106385][T14987] ? stack_trace_save+0x8e/0xc0 [ 790.106416][T14987] ? __pfx_stack_trace_save+0x10/0x10 [ 790.106451][T14987] iov_iter_extract_pages+0x3a2/0x1ed0 [ 790.106492][T14987] ? kasan_save_stack+0x42/0x60 [ 790.106526][T14987] ? kasan_save_stack+0x33/0x60 [ 790.106560][T14987] ? kasan_save_track+0x14/0x30 [ 790.106593][T14987] ? __kasan_kmalloc+0xaa/0xb0 [ 790.106625][T14987] ? __kmalloc_noprof+0x32f/0x870 [ 790.106649][T14987] ? __blkdev_direct_IO_simple+0x6a1/0x860 [ 790.106690][T14987] ? blkdev_direct_IO+0xcc6/0x2100 [ 790.106728][T14987] ? blkdev_read_iter+0x289/0x500 [ 790.106768][T14987] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 790.106804][T14987] ? __x64_sys_preadv2+0x11f/0x160 [ 790.106844][T14987] ? do_syscall_64+0xcd/0xf80 [ 790.106876][T14987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.106911][T14987] ? __lock_acquire+0x433/0x22f0 [ 790.106953][T14987] bio_iov_iter_get_pages+0x395/0x1300 [ 790.106987][T14987] ? find_held_lock+0x2b/0x80 [ 790.107035][T14987] ? bio_associate_blkg_from_css+0x394/0x13e0 [ 790.107088][T14987] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 790.107119][T14987] ? bio_associate_blkg+0x137/0x2a0 [ 790.107168][T14987] __blkdev_direct_IO_simple+0x39f/0x860 [ 790.107210][T14987] ? __lock_acquire+0x433/0x22f0 [ 790.107244][T14987] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 790.107305][T14987] ? find_held_lock+0x2b/0x80 [ 790.107352][T14987] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 790.107381][T14987] ? is_bpf_text_address+0x94/0x1a0 [ 790.107418][T14987] ? iov_iter_npages+0xf0/0x5a0 [ 790.107450][T14987] blkdev_direct_IO+0xcc6/0x2100 [ 790.107494][T14987] ? find_held_lock+0x2b/0x80 [ 790.107535][T14987] ? aa_file_perm+0x29f/0x1560 [ 790.107584][T14987] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 790.107629][T14987] ? _kstrtoull+0x145/0x200 [ 790.107672][T14987] ? __pfx_aa_file_perm+0x10/0x10 [ 790.107722][T14987] blkdev_read_iter+0x289/0x500 [ 790.107769][T14987] do_iter_readv_writev+0x743/0x9e0 [ 790.107809][T14987] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 790.107843][T14987] ? common_file_perm+0x1b1/0x500 [ 790.107884][T14987] ? bpf_lsm_file_permission+0x9/0x10 [ 790.107912][T14987] ? security_file_permission+0x71/0x210 [ 790.107954][T14987] ? rw_verify_area+0xcf/0x6c0 [ 790.107990][T14987] vfs_readv+0x4cb/0x8b0 [ 790.108041][T14987] ? __pfx_vfs_readv+0x10/0x10 [ 790.108100][T14987] ? __fget_files+0x20e/0x3c0 [ 790.108146][T14987] ? do_readv+0x132/0x340 [ 790.108178][T14987] do_readv+0x132/0x340 [ 790.108212][T14987] ? __pfx_do_readv+0x10/0x10 [ 790.108246][T14987] ? ksys_write+0x1ac/0x250 [ 790.108283][T14987] ? __pfx_ksys_write+0x10/0x10 [ 790.108326][T14987] __x64_sys_preadv2+0x11f/0x160 [ 790.108370][T14987] do_syscall_64+0xcd/0xf80 [ 790.108406][T14987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.108433][T14987] RIP: 0033:0x7f1bebd8f7c9 [ 790.108456][T14987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.108483][T14987] RSP: 002b:00007f1becbec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 790.108509][T14987] RAX: ffffffffffffffda RBX: 00007f1bebfe5fa0 RCX: 00007f1bebd8f7c9 [ 790.108528][T14987] RDX: 0000000000000005 RSI: 0000200000001000 RDI: 0000000000000003 [ 790.108545][T14987] RBP: 00007f1becbec090 R08: 0000000000000007 R09: 000000000000002e [ 790.108562][T14987] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 790.108580][T14987] R13: 00007f1bebfe6038 R14: 00007f1bebfe5fa0 R15: 00007fffc8579b68 [ 790.108615][T14987] [ 790.829171][T13166] Bluetooth: hci3: command 0x0c1a tx timeout [ 790.843531][T12125] Bluetooth: hci2: command 0x0c1a tx timeout [ 791.452212][ T30] audit: type=1800 audit(1843104555.861:14): pid=15010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2183" name="version" dev="configfs" ino=55578 res=0 errno=0 [ 791.570307][ T30] audit: type=1800 audit(1843104555.931:15): pid=15004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2181" name="features" dev="configfs" ino=55581 res=0 errno=0 [ 792.540618][T15023] netlink: 'syz.6.2185': attribute type 1 has an invalid length. [ 792.895245][T13166] Bluetooth: hci3: command 0x0c1a tx timeout [ 792.901379][T12125] Bluetooth: hci2: command 0x0c1a tx timeout [ 793.048254][T15025] FAULT_INJECTION: forcing a failure. [ 793.048254][T15025] name fail_futex, interval 1, probability 0, space 0, times 0 [ 793.115530][T15025] CPU: 1 UID: 0 PID: 15025 Comm: syz.6.2186 Tainted: G U syzkaller #0 PREEMPT(full) [ 793.115571][T15025] Tainted: [U]=USER [ 793.115580][T15025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 793.115595][T15025] Call Trace: [ 793.115604][T15025] [ 793.115613][T15025] dump_stack_lvl+0x16c/0x1f0 [ 793.115647][T15025] should_fail_ex+0x512/0x640 [ 793.115680][T15025] get_futex_key+0x1d0/0x15f0 [ 793.115712][T15025] ? __pfx_get_futex_key+0x10/0x10 [ 793.115749][T15025] futex_wake+0xea/0x530 [ 793.115791][T15025] ? kasan_quarantine_put+0x10a/0x240 [ 793.115825][T15025] ? __pfx_futex_wake+0x10/0x10 [ 793.115864][T15025] ? putname+0xf5/0x1a0 [ 793.115909][T15025] do_futex+0x1e3/0x350 [ 793.115939][T15025] ? __pfx_do_futex+0x10/0x10 [ 793.115978][T15025] __x64_sys_futex+0x1e0/0x4c0 [ 793.116010][T15025] ? __x64_sys_openat+0x174/0x210 [ 793.116037][T15025] ? __pfx___x64_sys_futex+0x10/0x10 [ 793.116079][T15025] do_syscall_64+0xcd/0xf80 [ 793.116112][T15025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.116137][T15025] RIP: 0033:0x7fc9e8f8f7c9 [ 793.116156][T15025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.116180][T15025] RSP: 002b:00007fc9e9e9b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 793.116203][T15025] RAX: ffffffffffffffda RBX: 00007fc9e91e5fa8 RCX: 00007fc9e8f8f7c9 [ 793.116219][T15025] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc9e91e5fac [ 793.116235][T15025] RBP: 00007fc9e91e5fa0 R08: 00007fc9e9e9c000 R09: 0000000000000000 [ 793.116251][T15025] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 793.116266][T15025] R13: 00007fc9e91e6038 R14: 00007ffca0831360 R15: 00007ffca0831448 [ 793.116297][T15025] [ 793.823383][T15028] zswap: compressor û not available [ 794.045671][T15036] FAULT_INJECTION: forcing a failure. [ 794.045671][T15036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 794.064221][T15036] CPU: 1 UID: 0 PID: 15036 Comm: syz.5.2189 Tainted: G U syzkaller #0 PREEMPT(full) [ 794.064258][T15036] Tainted: [U]=USER [ 794.064266][T15036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 794.064280][T15036] Call Trace: [ 794.064288][T15036] [ 794.064297][T15036] dump_stack_lvl+0x16c/0x1f0 [ 794.064332][T15036] should_fail_ex+0x512/0x640 [ 794.064369][T15036] should_fail_alloc_page+0xe7/0x130 [ 794.064419][T15036] prepare_alloc_pages+0x3c2/0x610 [ 794.064459][T15036] ? rcu_is_watching+0x12/0xc0 [ 794.064509][T15036] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 794.064555][T15036] ? __lock_acquire+0x433/0x22f0 [ 794.064603][T15036] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 794.064640][T15036] ? do_raw_spin_lock+0x12c/0x2b0 [ 794.064688][T15036] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 794.064730][T15036] ? find_held_lock+0x2b/0x80 [ 794.064790][T15036] ? __lock_acquire+0x433/0x22f0 [ 794.064822][T15036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 794.064877][T15036] ? policy_nodemask+0xea/0x4e0 [ 794.064924][T15036] alloc_pages_mpol+0x1fb/0x550 [ 794.064970][T15036] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 794.065028][T15036] folio_alloc_mpol_noprof+0x36/0xe0 [ 794.065083][T15036] shmem_alloc_folio+0x135/0x160 [ 794.065131][T15036] shmem_alloc_and_add_folio+0x494/0xc20 [ 794.065193][T15036] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 794.065249][T15036] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 794.065292][T15036] shmem_get_folio_gfp+0x67f/0x1610 [ 794.065332][T15036] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 794.065366][T15036] ? ktime_get_coarse_real_ts64_mg+0x22c/0x300 [ 794.065409][T15036] ? lockdep_hardirqs_on+0x7c/0x110 [ 794.065456][T15036] shmem_fault+0x1fe/0xa00 [ 794.065488][T15036] ? current_time+0x28f/0x380 [ 794.065537][T15036] ? __pfx_shmem_fault+0x10/0x10 [ 794.065570][T15036] ? __lock_acquire+0x433/0x22f0 [ 794.065609][T15036] ? __pfx___up_read+0x10/0x10 [ 794.065648][T15036] ? inode_to_bdi+0x9e/0x160 [ 794.065701][T15036] ? __pfx_filemap_map_pages+0x10/0x10 [ 794.065732][T15036] __do_fault+0x10d/0x490 [ 794.065771][T15036] ? __pfx_filemap_map_pages+0x10/0x10 [ 794.065800][T15036] do_pte_missing+0x1a6/0x4000 [ 794.065854][T15036] ? __handle_mm_fault+0x149d/0x2a30 [ 794.065909][T15036] __handle_mm_fault+0x14ca/0x2a30 [ 794.065971][T15036] ? __pfx___handle_mm_fault+0x10/0x10 [ 794.066025][T15036] ? __pte_offset_map_lock+0x174/0x310 [ 794.066133][T15036] ? find_held_lock+0x2b/0x80 [ 794.066206][T15036] ? follow_page_pte+0x611/0x1390 [ 794.066271][T15036] handle_mm_fault+0x3fe/0xad0 [ 794.066329][T15036] __get_user_pages+0x605/0x33c0 [ 794.066385][T15036] ? down_read_killable+0x313/0x4c0 [ 794.066435][T15036] ? __pfx___get_user_pages+0x10/0x10 [ 794.066485][T15036] ? __lock_acquire+0x433/0x22f0 [ 794.066526][T15036] __gup_longterm_locked+0xa92/0x17e0 [ 794.066585][T15036] ? __pfx___gup_longterm_locked+0x10/0x10 [ 794.066638][T15036] ? pgd_none+0x9f/0xe0 [ 794.066679][T15036] ? __pfx_pgd_none+0x10/0x10 [ 794.066714][T15036] ? sanity_check_pinned_pages+0x23/0x11d0 [ 794.066767][T15036] gup_fast_fallback+0xe91/0x2320 [ 794.066842][T15036] ? __pfx_gup_fast_fallback+0x10/0x10 [ 794.066884][T15036] ? is_bpf_text_address+0x94/0x1a0 [ 794.066927][T15036] ? kernel_text_address+0x8d/0x100 [ 794.066967][T15036] ? __kernel_text_address+0xd/0x40 [ 794.067005][T15036] ? unwind_get_return_address+0x59/0xa0 [ 794.067048][T15036] ? arch_stack_walk+0xa6/0x100 [ 794.067095][T15036] pin_user_pages_fast+0xa7/0xf0 [ 794.067141][T15036] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 794.067190][T15036] ? stack_trace_save+0x8e/0xc0 [ 794.067223][T15036] ? __pfx_stack_trace_save+0x10/0x10 [ 794.067260][T15036] iov_iter_extract_pages+0x3a2/0x1ed0 [ 794.067307][T15036] ? kasan_save_stack+0x42/0x60 [ 794.067345][T15036] ? kasan_save_stack+0x33/0x60 [ 794.067385][T15036] ? kasan_save_track+0x14/0x30 [ 794.067424][T15036] ? __kasan_kmalloc+0xaa/0xb0 [ 794.067462][T15036] ? __kmalloc_noprof+0x32f/0x870 [ 794.067491][T15036] ? __blkdev_direct_IO_simple+0x6a1/0x860 [ 794.067537][T15036] ? blkdev_direct_IO+0xcc6/0x2100 [ 794.067582][T15036] ? blkdev_read_iter+0x289/0x500 [ 794.067631][T15036] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 794.067675][T15036] ? __x64_sys_preadv2+0x11f/0x160 [ 794.067720][T15036] ? do_syscall_64+0xcd/0xf80 [ 794.067756][T15036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.067797][T15036] ? __lock_acquire+0x433/0x22f0 [ 794.067847][T15036] bio_iov_iter_get_pages+0x395/0x1300 [ 794.067886][T15036] ? find_held_lock+0x2b/0x80 [ 794.067934][T15036] ? bio_associate_blkg_from_css+0x394/0x13e0 [ 794.067999][T15036] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 794.068035][T15036] ? bio_associate_blkg+0x137/0x2a0 [ 794.068094][T15036] __blkdev_direct_IO_simple+0x39f/0x860 [ 794.068143][T15036] ? __lock_acquire+0x433/0x22f0 [ 794.068184][T15036] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 794.068266][T15036] ? find_held_lock+0x2b/0x80 [ 794.068323][T15036] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 794.068357][T15036] ? is_bpf_text_address+0x94/0x1a0 [ 794.068401][T15036] ? iov_iter_npages+0xf0/0x5a0 [ 794.068439][T15036] blkdev_direct_IO+0xcc6/0x2100 [ 794.068491][T15036] ? find_held_lock+0x2b/0x80 [ 794.068538][T15036] ? aa_file_perm+0x29f/0x1560 [ 794.068597][T15036] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 794.068651][T15036] ? _kstrtoull+0x145/0x200 [ 794.068707][T15036] ? __pfx_aa_file_perm+0x10/0x10 [ 794.068764][T15036] blkdev_read_iter+0x289/0x500 [ 794.068820][T15036] do_iter_readv_writev+0x743/0x9e0 [ 794.068864][T15036] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 794.068906][T15036] ? common_file_perm+0x1b1/0x500 [ 794.068954][T15036] ? bpf_lsm_file_permission+0x9/0x10 [ 794.068988][T15036] ? security_file_permission+0x71/0x210 [ 794.069037][T15036] ? rw_verify_area+0xcf/0x6c0 [ 794.069080][T15036] vfs_readv+0x4cb/0x8b0 [ 794.069130][T15036] ? __pfx_vfs_readv+0x10/0x10 [ 794.069199][T15036] ? __fget_files+0x20e/0x3c0 [ 794.069253][T15036] ? do_readv+0x132/0x340 [ 794.069291][T15036] do_readv+0x132/0x340 [ 794.069332][T15036] ? __pfx_do_readv+0x10/0x10 [ 794.069371][T15036] ? ksys_write+0x1ac/0x250 [ 794.069414][T15036] ? __pfx_ksys_write+0x10/0x10 [ 794.069463][T15036] __x64_sys_preadv2+0x11f/0x160 [ 794.069515][T15036] do_syscall_64+0xcd/0xf80 [ 794.069557][T15036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.069590][T15036] RIP: 0033:0x7f580db8f7c9 [ 794.069618][T15036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.069649][T15036] RSP: 002b:00007f580bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 794.069687][T15036] RAX: ffffffffffffffda RBX: 00007f580dde5fa0 RCX: 00007f580db8f7c9 [ 794.069709][T15036] RDX: 0000000000000005 RSI: 0000200000001000 RDI: 0000000000000003 [ 794.069730][T15036] RBP: 00007f580bdf6090 R08: 0000000000000007 R09: 000000000000002e [ 794.069751][T15036] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 794.069772][T15036] R13: 00007f580dde6038 R14: 00007f580dde5fa0 R15: 00007fff713922d8 [ 794.069817][T15036] [ 794.985899][T12125] Bluetooth: hci3: command 0x0c1a tx timeout [ 797.057006][T12125] Bluetooth: hci3: command 0x0c1a tx timeout [ 797.242776][T15057] FAULT_INJECTION: forcing a failure. [ 797.242776][T15057] name failslab, interval 1, probability 0, space 0, times 0 [ 797.281680][T15057] CPU: 1 UID: 0 PID: 15057 Comm: syz.5.2196 Tainted: G U syzkaller #0 PREEMPT(full) [ 797.281737][T15057] Tainted: [U]=USER [ 797.281749][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 797.281770][T15057] Call Trace: [ 797.281781][T15057] [ 797.281794][T15057] dump_stack_lvl+0x16c/0x1f0 [ 797.281843][T15057] should_fail_ex+0x512/0x640 [ 797.281880][T15057] ? __kmalloc_noprof+0xca/0x870 [ 797.281918][T15057] should_failslab+0xc2/0x120 [ 797.281967][T15057] __kmalloc_noprof+0xdd/0x870 [ 797.281999][T15057] ? realloc_user_queue+0x288/0x320 [ 797.282064][T15057] ? realloc_user_queue+0x288/0x320 [ 797.282110][T15057] realloc_user_queue+0x288/0x320 [ 797.282151][T15057] ? __pfx_snd_timer_user_open+0x10/0x10 [ 797.282192][T15057] snd_timer_user_open+0xfc/0x180 [ 797.282232][T15057] snd_open+0x22d/0x4c0 [ 797.282267][T15057] ? __pfx_snd_open+0x10/0x10 [ 797.282305][T15057] chrdev_open+0x234/0x6a0 [ 797.282341][T15057] ? __pfx_apparmor_file_open+0x10/0x10 [ 797.282372][T15057] ? __pfx_chrdev_open+0x10/0x10 [ 797.282410][T15057] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 797.282454][T15057] do_dentry_open+0x748/0x1590 [ 797.282489][T15057] ? __pfx_chrdev_open+0x10/0x10 [ 797.282533][T15057] vfs_open+0x82/0x3f0 [ 797.282561][T15057] path_openat+0x2078/0x3140 [ 797.282606][T15057] ? __pfx_path_openat+0x10/0x10 [ 797.282653][T15057] do_filp_open+0x20b/0x470 [ 797.282690][T15057] ? __pfx_do_filp_open+0x10/0x10 [ 797.282747][T15057] ? alloc_fd+0x471/0x7d0 [ 797.282789][T15057] do_sys_openat2+0x11f/0x280 [ 797.282815][T15057] ? __pfx_do_sys_openat2+0x10/0x10 [ 797.282852][T15057] __x64_sys_openat+0x174/0x210 [ 797.282879][T15057] ? __pfx___x64_sys_openat+0x10/0x10 [ 797.282918][T15057] do_syscall_64+0xcd/0xf80 [ 797.282951][T15057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.282976][T15057] RIP: 0033:0x7f580db8f7c9 [ 797.282996][T15057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.283021][T15057] RSP: 002b:00007f580bdf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 797.283044][T15057] RAX: ffffffffffffffda RBX: 00007f580dde5fa0 RCX: 00007f580db8f7c9 [ 797.283061][T15057] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 797.283077][T15057] RBP: 00007f580dc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 797.283099][T15057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 797.283114][T15057] R13: 00007f580dde6038 R14: 00007f580dde5fa0 R15: 00007fff713922d8 [ 797.283147][T15057] [ 797.541898][ T30] audit: type=1800 audit(1843104561.958:16): pid=15061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2196" name="file0" dev="tmpfs" ino=609 res=0 errno=0 [ 798.212519][T15068] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2200'. [ 799.556637][T15055] syz.3.2195 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 799.639793][T15055] CPU: 0 UID: 0 PID: 15055 Comm: syz.3.2195 Tainted: G U syzkaller #0 PREEMPT(full) [ 799.639845][T15055] Tainted: [U]=USER [ 799.639857][T15055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 799.639875][T15055] Call Trace: [ 799.639887][T15055] [ 799.639899][T15055] dump_stack_lvl+0x16c/0x1f0 [ 799.639944][T15055] dump_header+0x101/0x930 [ 799.639999][T15055] oom_kill_process+0x272/0xa40 [ 799.640056][T15055] out_of_memory+0x350/0x1700 [ 799.640096][T15055] ? __pfx_out_of_memory+0x10/0x10 [ 799.640148][T15055] mem_cgroup_out_of_memory+0x118/0x130 [ 799.640185][T15055] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 799.640232][T15055] ? do_raw_spin_unlock+0x172/0x230 [ 799.640284][T15055] try_charge_memcg+0x689/0xd40 [ 799.640342][T15055] ? __pfx_try_charge_memcg+0x10/0x10 [ 799.640387][T15055] ? find_held_lock+0x2b/0x80 [ 799.640442][T15055] ? rcu_read_unlock+0x17/0x60 [ 799.640504][T15055] obj_cgroup_charge_account+0x292/0x500 [ 799.640562][T15055] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 799.640619][T15055] ? kasan_unpoison+0x27/0x60 [ 799.640663][T15055] __kmalloc_node_track_caller_noprof+0x698/0x890 [ 799.640708][T15055] ? __devinet_sysctl_register+0xbc/0x360 [ 799.640754][T15055] ? nlmsg_notify+0x111/0x220 [ 799.640804][T15055] ? kmemdup_noprof+0x29/0x60 [ 799.640837][T15055] kmemdup_noprof+0x29/0x60 [ 799.640871][T15055] __devinet_sysctl_register+0xbc/0x360 [ 799.640924][T15055] ? rcu_is_watching+0x12/0xc0 [ 799.640973][T15055] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 799.641020][T15055] ? __kmalloc_node_track_caller_noprof+0x362/0x890 [ 799.641072][T15055] ? __asan_memcpy+0x3c/0x60 [ 799.641113][T15055] devinet_init_net+0x347/0x910 [ 799.641173][T15055] ? __pfx_devinet_init_net+0x10/0x10 [ 799.641221][T15055] ops_init+0x1e2/0x5f0 [ 799.641268][T15055] setup_net+0x11d/0x3a0 [ 799.641309][T15055] ? __pfx_setup_net+0x10/0x10 [ 799.641344][T15055] ? lockdep_init_map_type+0x5c/0x270 [ 799.641383][T15055] ? mutex_init_lockep+0x110/0x150 [ 799.641429][T15055] copy_net_ns+0x351/0x5d0 [ 799.641477][T15055] create_new_namespaces+0x3ea/0xab0 [ 799.641535][T15055] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 799.641588][T15055] ksys_unshare+0x45b/0xa40 [ 799.641621][T15055] ? __pfx_ksys_unshare+0x10/0x10 [ 799.641655][T15055] ? xfd_validate_state+0x61/0x180 [ 799.641720][T15055] __x64_sys_unshare+0x31/0x40 [ 799.641752][T15055] do_syscall_64+0xcd/0xf80 [ 799.641794][T15055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.641829][T15055] RIP: 0033:0x7f942558f7c9 [ 799.641855][T15055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 799.641888][T15055] RSP: 002b:00007f942637a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 799.641918][T15055] RAX: ffffffffffffffda RBX: 00007f94257e5fa0 RCX: 00007f942558f7c9 [ 799.641940][T15055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 799.641961][T15055] RBP: 00007f9425613f91 R08: 0000000000000000 R09: 0000000000000000 [ 799.641981][T15055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.642001][T15055] R13: 00007f94257e6038 R14: 00007f94257e5fa0 R15: 00007ffe37f2f938 [ 799.642046][T15055] [ 799.642060][T15055] memory: usage 3072kB, limit 3072kB, failcnt 92849 [ 799.990902][T15055] memory+swap: usage 3188kB, limit 9007199254740988kB, failcnt 0 [ 800.001238][T15055] kmem: usage 3044kB, limit 9007199254740988kB, failcnt 0 [ 800.009987][T15055] Memory cgroup stats for /syz3: [ 800.011281][T15055] cache 0 [ 800.021005][T15055] rss 0 [ 800.023998][T15055] rss_huge 0 [ 800.028480][T15055] shmem 0 [ 800.031515][T15055] mapped_file 0 [ 800.035044][T15055] dirty 0 [ 800.058182][T15055] writeback 0 [ 800.061697][T15055] workingset_refault_anon 22382 [ 800.072863][T15055] workingset_refault_file 11973 [ 800.078376][T15055] swap 118784 [ 800.081702][T15055] swapcached 28672 [ 800.122764][T15055] pgpgin 259567 [ 800.138982][T15055] pgpgout 267225 [ 800.142583][T15055] pgfault 246058 [ 800.146139][T15055] pgmajfault 18919 [ 800.215758][T15055] inactive_anon 0 [ 800.237802][T15055] active_anon 28672 [ 800.248508][T15055] inactive_file 0 [ 800.252190][T15055] active_file 0 [ 800.255653][T15055] unevictable 0 [ 800.268220][T15055] hierarchical_memory_limit 3145728 [ 800.314268][T15055] hierarchical_memsw_limit 9223372036854771712 [ 800.332355][T15055] total_cache 0 [ 800.403306][T15055] total_rss 0 [ 800.416644][T15055] total_rss_huge 0 [ 800.426884][T15055] total_shmem 0 [ 800.438529][T15055] total_mapped_file 0 [ 800.443942][T15101] FAULT_INJECTION: forcing a failure. [ 800.443942][T15101] name failslab, interval 1, probability 0, space 0, times 0 [ 800.471742][T15055] total_dirty 0 [ 800.475264][T15055] total_writeback 0 [ 800.488114][T15055] total_workingset_refault_anon 22382 [ 800.493771][T15055] total_workingset_refault_file 11973 [ 800.499624][T15055] total_swap 118784 [ 800.503477][T15055] total_swapcached 28672 [ 800.507904][T15055] total_pgpgin 259567 [ 800.512593][T15055] total_pgpgout 267225 [ 800.520668][T15055] total_pgfault 246058 [ 800.525070][T15055] total_pgmajfault 18919 [ 800.530135][T15055] total_inactive_anon 0 [ 800.534574][T15055] total_active_anon 28672 [ 800.550898][T15055] total_inactive_file 0 [ 800.555169][T15055] total_active_file 0 [ 800.559838][T15055] total_unevictable 0 [ 800.564171][T15055] anon_cost 0 [ 800.567636][T15055] file_cost 0 [ 800.582359][T15101] CPU: 1 UID: 0 PID: 15101 Comm: syz.1.2207 Tainted: G U syzkaller #0 PREEMPT(full) [ 800.582414][T15101] Tainted: [U]=USER [ 800.582426][T15101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 800.582447][T15101] Call Trace: [ 800.582459][T15101] [ 800.582471][T15101] dump_stack_lvl+0x16c/0x1f0 [ 800.582519][T15101] should_fail_ex+0x512/0x640 [ 800.582549][T15101] ? __kmalloc_noprof+0xca/0x870 [ 800.582575][T15101] should_failslab+0xc2/0x120 [ 800.582612][T15101] __kmalloc_noprof+0xdd/0x870 [ 800.582635][T15101] ? realloc_user_queue+0x288/0x320 [ 800.582679][T15101] ? realloc_user_queue+0x288/0x320 [ 800.582716][T15101] realloc_user_queue+0x288/0x320 [ 800.582756][T15101] ? __pfx_snd_timer_user_open+0x10/0x10 [ 800.582805][T15101] snd_timer_user_open+0xfc/0x180 [ 800.582845][T15101] snd_open+0x22d/0x4c0 [ 800.582880][T15101] ? __pfx_snd_open+0x10/0x10 [ 800.582914][T15101] chrdev_open+0x234/0x6a0 [ 800.582951][T15101] ? __pfx_apparmor_file_open+0x10/0x10 [ 800.582981][T15101] ? __pfx_chrdev_open+0x10/0x10 [ 800.583019][T15101] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 800.583065][T15101] do_dentry_open+0x748/0x1590 [ 800.583100][T15101] ? __pfx_chrdev_open+0x10/0x10 [ 800.583144][T15101] vfs_open+0x82/0x3f0 [ 800.583172][T15101] path_openat+0x2078/0x3140 [ 800.583217][T15101] ? __pfx_path_openat+0x10/0x10 [ 800.583264][T15101] do_filp_open+0x20b/0x470 [ 800.583300][T15101] ? __pfx_do_filp_open+0x10/0x10 [ 800.583357][T15101] ? alloc_fd+0x471/0x7d0 [ 800.583399][T15101] do_sys_openat2+0x11f/0x280 [ 800.583425][T15101] ? __pfx_do_sys_openat2+0x10/0x10 [ 800.583462][T15101] __x64_sys_openat+0x174/0x210 [ 800.583490][T15101] ? __pfx___x64_sys_openat+0x10/0x10 [ 800.583528][T15101] do_syscall_64+0xcd/0xf80 [ 800.583561][T15101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.583586][T15101] RIP: 0033:0x7f1bebd8f7c9 [ 800.583606][T15101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 800.583630][T15101] RSP: 002b:00007f1becbec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 800.583653][T15101] RAX: ffffffffffffffda RBX: 00007f1bebfe5fa0 RCX: 00007f1bebd8f7c9 [ 800.583670][T15101] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 800.583686][T15101] RBP: 00007f1bebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 800.583702][T15101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.583717][T15101] R13: 00007f1bebfe6038 R14: 00007f1bebfe5fa0 R15: 00007fffc8579b68 [ 800.583749][T15101] [ 800.866444][T15055] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2195,pid=15054,uid=0 [ 800.898288][T15055] Memory cgroup out of memory: Killed process 15054 (syz.3.2195) total-vm:131356kB, anon-rss:1116kB, file-rss:21540kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 800.938432][ T30] audit: type=1800 audit(1843104565.358:17): pid=15101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2207" name="file0" dev="tmpfs" ino=2655 res=0 errno=0 [ 802.033403][T15118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2212'. [ 802.775990][T15128] netlink: 'syz.6.2214': attribute type 1 has an invalid length. [ 804.169267][T15133] syz.3.2216 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 804.239025][T15133] CPU: 0 UID: 0 PID: 15133 Comm: syz.3.2216 Tainted: G U syzkaller #0 PREEMPT(full) [ 804.239084][T15133] Tainted: [U]=USER [ 804.239096][T15133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 804.239116][T15133] Call Trace: [ 804.239127][T15133] [ 804.239140][T15133] dump_stack_lvl+0x16c/0x1f0 [ 804.239185][T15133] dump_header+0x101/0x930 [ 804.239246][T15133] oom_kill_process+0x272/0xa40 [ 804.239305][T15133] out_of_memory+0x350/0x1700 [ 804.239346][T15133] ? __pfx_out_of_memory+0x10/0x10 [ 804.239389][T15133] mem_cgroup_out_of_memory+0x118/0x130 [ 804.239426][T15133] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 804.239473][T15133] ? do_raw_spin_unlock+0x172/0x230 [ 804.239525][T15133] try_charge_memcg+0x689/0xd40 [ 804.239582][T15133] ? __pfx_try_charge_memcg+0x10/0x10 [ 804.239638][T15133] ? find_held_lock+0x2b/0x80 [ 804.239698][T15133] charge_memcg+0x8a/0x230 [ 804.239746][T15133] mem_cgroup_swapin_charge_folio+0xd7/0x450 [ 804.239805][T15133] __read_swap_cache_async+0x397/0x500 [ 804.239846][T15133] ? __pfx___read_swap_cache_async+0x10/0x10 [ 804.239891][T15133] ? __xa_erase+0xee/0x150 [ 804.239939][T15133] swap_cluster_readahead+0x528/0x770 [ 804.239987][T15133] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 804.240052][T15133] ? get_vma_policy+0x242/0x3c0 [ 804.240104][T15133] swapin_readahead+0x160/0x1180 [ 804.240154][T15133] ? __pfx_swapin_readahead+0x10/0x10 [ 804.240191][T15133] ? find_held_lock+0x2b/0x80 [ 804.240236][T15133] ? swap_cache_get_folio+0x267/0x8e0 [ 804.240268][T15133] ? swap_cache_get_folio+0x267/0x8e0 [ 804.240299][T15133] ? swap_cache_get_folio+0x267/0x8e0 [ 804.240336][T15133] ? swap_cache_get_folio+0x267/0x8e0 [ 804.240369][T15133] ? swap_cache_get_folio+0x293/0x8e0 [ 804.240404][T15133] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 804.240435][T15133] ? __pfx_get_swap_device+0x10/0x10 [ 804.240482][T15133] ? do_swap_page+0x12c/0x64c0 [ 804.240531][T15133] ? do_swap_page+0x78b/0x64c0 [ 804.240571][T15133] do_swap_page+0x78b/0x64c0 [ 804.240636][T15133] ? __pfx_do_swap_page+0x10/0x10 [ 804.240690][T15133] ? __lock_acquire+0x433/0x22f0 [ 804.240727][T15133] ? __pfx_default_wake_function+0x10/0x10 [ 804.240777][T15133] ? rcu_is_watching+0x12/0xc0 [ 804.240824][T15133] ? ___pte_offset_map+0x2ad/0x4f0 [ 804.240872][T15133] __handle_mm_fault+0x1744/0x2a30 [ 804.240928][T15133] ? reacquire_held_locks+0xcd/0x1f0 [ 804.240966][T15133] ? __pfx___handle_mm_fault+0x10/0x10 [ 804.241021][T15133] ? lock_vma_under_rcu+0x176/0x580 [ 804.241086][T15133] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 804.241139][T15133] handle_mm_fault+0x3fe/0xad0 [ 804.241198][T15133] do_user_addr_fault+0x423/0xda0 [ 804.241239][T15133] ? rcu_is_watching+0x12/0xc0 [ 804.241294][T15133] exc_page_fault+0x64/0xc0 [ 804.241334][T15133] asm_exc_page_fault+0x26/0x30 [ 804.241365][T15133] RIP: 0033:0x7f9425458eae [ 804.241392][T15133] Code: 98 59 ff ff 48 8d 3d 89 be 1b 00 31 c0 e8 8a 59 ff ff 66 2e 0f 1f 84 00 00 00 00 00 41 57 41 56 41 55 41 54 55 53 48 83 ec 18 <48> 8b 47 38 48 8b 57 40 48 39 d0 0f 82 d3 01 00 00 4c 8b 67 30 48 [ 804.241423][T15133] RSP: 002b:00007ffe37f2f920 EFLAGS: 00010202 [ 804.241449][T15133] RAX: fffffffffffffeb0 RBX: 00007f9426315720 RCX: 0000000000000000 [ 804.241470][T15133] RDX: 0000000000000b05 RSI: 0000000000000008 RDI: 00007f9426315720 [ 804.241489][T15133] RBP: ffffffff81cd8b05 R08: 00007f94257e6128 R09: 00007f94257d2000 [ 804.241509][T15133] R10: 00007f9424bfd008 R11: 0000000000000001 R12: 0000000000000001 [ 804.241528][T15133] R13: 000000000000002b R14: ffffffff81cd88d0 R15: 000000000000002b [ 804.241549][T15133] ? is_bpf_text_address+0x50/0x1a0 [ 804.241591][T15133] ? bpf_prog_ksym_find+0xd5/0xe0 [ 804.241649][T15133] [ 804.241667][T15133] memory: usage 3072kB, limit 3072kB, failcnt 93381 [ 804.638184][T15133] memory+swap: usage 3188kB, limit 9007199254740988kB, failcnt 0 [ 804.645998][T15133] kmem: usage 3004kB, limit 9007199254740988kB, failcnt 0 [ 804.653239][T15133] Memory cgroup stats for /syz3: [ 804.653443][T15133] cache 0 [ 804.663357][T15133] rss 0 [ 804.666174][T15133] rss_huge 0 [ 804.669520][T15133] shmem 0 [ 804.674550][T15133] mapped_file 0 [ 804.678418][T15133] dirty 0 [ 804.681399][T15133] writeback 0 [ 804.684708][T15133] workingset_refault_anon 22546 [ 804.693803][T15133] workingset_refault_file 11973 [ 804.699148][T15133] swap 118784 [ 804.702567][T15133] swapcached 69632 [ 804.707447][T15133] pgpgin 259763 [ 804.711596][T15133] pgpgout 267411 [ 804.717753][T15133] pgfault 246294 [ 804.722536][T15133] pgmajfault 19067 [ 804.733766][T15133] inactive_anon 69632 [ 804.741535][T15133] active_anon 0 [ 804.745054][T15133] inactive_file 0 [ 804.767220][T15133] active_file 0 [ 804.777084][T15133] unevictable 0 [ 804.781192][T15133] hierarchical_memory_limit 3145728 [ 804.786460][T15133] hierarchical_memsw_limit 9223372036854771712 [ 804.795294][T15133] total_cache 0 [ 804.808631][T15133] total_rss 0 [ 804.811996][T15133] total_rss_huge 0 [ 804.821741][T15133] total_shmem 0 [ 804.825733][T15133] total_mapped_file 0 [ 804.842269][T15133] total_dirty 0 [ 804.863633][T15133] total_writeback 0 [ 804.867525][T15133] total_workingset_refault_anon 22546 [ 804.888462][T15133] total_workingset_refault_file 11973 [ 804.893913][T15133] total_swap 118784 [ 804.908598][T15133] total_swapcached 69632 [ 804.913548][T15133] total_pgpgin 259763 [ 804.917582][T15133] total_pgpgout 267411 [ 804.937916][T15133] total_pgfault 246294 [ 804.944517][T15133] total_pgmajfault 19067 [ 804.952591][T15133] total_inactive_anon 69632 [ 805.000241][T15133] total_active_anon 0 [ 805.004307][T15133] total_inactive_file 0 [ 805.013032][T15133] total_active_file 0 [ 805.017096][T15133] total_unevictable 0 [ 805.024988][T15133] anon_cost 0 [ 805.029326][T15133] file_cost 0 [ 805.038116][T15133] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2216,pid=15133,uid=0 [ 805.061457][T15133] Memory cgroup out of memory: Killed process 15133 (syz.3.2216) total-vm:102164kB, anon-rss:1132kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 807.723489][T15218] Invalid ELF header magic: != ELF [ 810.047740][T15255] FAULT_INJECTION: forcing a failure. [ 810.047740][T15255] name failslab, interval 1, probability 0, space 0, times 0 [ 810.073139][T15255] CPU: 1 UID: 0 PID: 15255 Comm: syz.1.2243 Tainted: G U syzkaller #0 PREEMPT(full) [ 810.073197][T15255] Tainted: [U]=USER [ 810.073210][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 810.073231][T15255] Call Trace: [ 810.073242][T15255] [ 810.073256][T15255] dump_stack_lvl+0x16c/0x1f0 [ 810.073305][T15255] should_fail_ex+0x512/0x640 [ 810.073342][T15255] ? kmem_cache_alloc_noprof+0x62/0x720 [ 810.073396][T15255] should_failslab+0xc2/0x120 [ 810.073446][T15255] kmem_cache_alloc_noprof+0x75/0x720 [ 810.073482][T15255] ? alloc_empty_file+0x55/0x1e0 [ 810.073521][T15255] ? alloc_empty_file+0x55/0x1e0 [ 810.073554][T15255] alloc_empty_file+0x55/0x1e0 [ 810.073588][T15255] alloc_file_clone+0x5f/0x110 [ 810.073626][T15255] create_pipe_files+0x41b/0x9a0 [ 810.073680][T15255] do_pipe2+0xaf/0x1c0 [ 810.073730][T15255] ? __pfx_do_pipe2+0x10/0x10 [ 810.073777][T15255] ? xfd_validate_state+0x61/0x180 [ 810.073827][T15255] ? __pfx_ksys_write+0x10/0x10 [ 810.073882][T15255] __x64_sys_pipe+0x33/0x50 [ 810.073945][T15255] do_syscall_64+0xcd/0xf80 [ 810.073989][T15255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.074024][T15255] RIP: 0033:0x7f1bebd8f7c9 [ 810.074051][T15255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.074090][T15255] RSP: 002b:00007f1becbec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 810.074125][T15255] RAX: ffffffffffffffda RBX: 00007f1bebfe5fa0 RCX: 00007f1bebd8f7c9 [ 810.074148][T15255] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 810.074168][T15255] RBP: 00007f1bebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 810.074190][T15255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.074210][T15255] R13: 00007f1bebfe6038 R14: 00007f1bebfe5fa0 R15: 00007fffc8579b68 [ 810.074266][T15255] [ 810.966178][T15268] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2246'. [ 811.160273][T15270] zswap: compressor not available [ 811.602564][T15288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2252'. [ 811.927137][T15267] syz.3.2246 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 811.979420][T15267] CPU: 1 UID: 0 PID: 15267 Comm: syz.3.2246 Tainted: G U syzkaller #0 PREEMPT(full) [ 811.979459][T15267] Tainted: [U]=USER [ 811.979467][T15267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 811.979483][T15267] Call Trace: [ 811.979491][T15267] [ 811.979500][T15267] dump_stack_lvl+0x16c/0x1f0 [ 811.979534][T15267] dump_header+0x101/0x930 [ 811.979577][T15267] oom_kill_process+0x272/0xa40 [ 811.979620][T15267] out_of_memory+0x350/0x1700 [ 811.979649][T15267] ? __pfx_out_of_memory+0x10/0x10 [ 811.979680][T15267] mem_cgroup_out_of_memory+0x118/0x130 [ 811.979718][T15267] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 811.979751][T15267] ? do_raw_spin_unlock+0x172/0x230 [ 811.979789][T15267] try_charge_memcg+0x689/0xd40 [ 811.979830][T15267] ? __pfx_try_charge_memcg+0x10/0x10 [ 811.979872][T15267] ? find_held_lock+0x2b/0x80 [ 811.979912][T15267] charge_memcg+0x8a/0x230 [ 811.979947][T15267] mem_cgroup_swapin_charge_folio+0xd7/0x450 [ 811.979991][T15267] __read_swap_cache_async+0x397/0x500 [ 811.980021][T15267] ? __pfx___read_swap_cache_async+0x10/0x10 [ 811.980049][T15267] ? mlock_drain_local+0x150/0x4e0 [ 811.980087][T15267] swap_cluster_readahead+0x432/0x770 [ 811.980120][T15267] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 811.980150][T15267] ? __lock_acquire+0x433/0x22f0 [ 811.980176][T15267] ? _raw_spin_unlock+0x28/0x50 [ 811.980201][T15267] ? move_cluster+0x39d/0x560 [ 811.980238][T15267] ? get_vma_policy+0x242/0x3c0 [ 811.980278][T15267] swapin_readahead+0x160/0x1180 [ 811.980314][T15267] ? __pfx_swapin_readahead+0x10/0x10 [ 811.980341][T15267] ? find_held_lock+0x2b/0x80 [ 811.980375][T15267] ? swap_cache_get_folio+0x267/0x8e0 [ 811.980398][T15267] ? swap_cache_get_folio+0x267/0x8e0 [ 811.980421][T15267] ? swap_cache_get_folio+0x267/0x8e0 [ 811.980448][T15267] ? swap_cache_get_folio+0x267/0x8e0 [ 811.980472][T15267] ? swap_cache_get_folio+0x293/0x8e0 [ 811.980499][T15267] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 811.980523][T15267] ? __pfx_get_swap_device+0x10/0x10 [ 811.980557][T15267] ? do_swap_page+0x12c/0x64c0 [ 811.980592][T15267] ? do_swap_page+0x78b/0x64c0 [ 811.980622][T15267] do_swap_page+0x78b/0x64c0 [ 811.980668][T15267] ? __pfx_do_swap_page+0x10/0x10 [ 811.980705][T15267] ? __lock_acquire+0x433/0x22f0 [ 811.980733][T15267] ? __pfx_default_wake_function+0x10/0x10 [ 811.980770][T15267] ? rcu_is_watching+0x12/0xc0 [ 811.980806][T15267] ? ___pte_offset_map+0x2ad/0x4f0 [ 811.980843][T15267] __handle_mm_fault+0x1744/0x2a30 [ 811.980885][T15267] ? reacquire_held_locks+0xcd/0x1f0 [ 811.980913][T15267] ? __pfx___handle_mm_fault+0x10/0x10 [ 811.980955][T15267] ? lock_vma_under_rcu+0x176/0x580 [ 811.981003][T15267] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 811.981040][T15267] handle_mm_fault+0x3fe/0xad0 [ 811.981086][T15267] do_user_addr_fault+0x423/0xda0 [ 811.981119][T15267] ? rcu_is_watching+0x12/0xc0 [ 811.981159][T15267] exc_page_fault+0x64/0xc0 [ 811.981188][T15267] asm_exc_page_fault+0x26/0x30 [ 811.981212][T15267] RIP: 0033:0x7f94254654c0 [ 811.981231][T15267] Code: ff ff 4c 8b 84 24 a0 00 00 00 48 8d 1d f9 28 38 00 4c 89 c5 eb 14 0f 1f 40 00 48 81 c5 f0 00 00 00 48 39 dd 0f 84 ab fb ff ff <80> 7d 20 00 74 ea 8b 45 0c 85 c0 74 e3 48 89 ef e8 bb c9 ff ff eb [ 811.981256][T15267] RSP: 002b:00007ffe37f2faa0 EFLAGS: 00010287 [ 811.981275][T15267] RAX: 0000000000000000 RBX: 00007f94257e7da0 RCX: 00000000000c5ff8 [ 811.981290][T15267] RDX: 0000000000000041 RSI: 00007f942637b010 RDI: 001f779351ec4eda [ 811.981306][T15267] RBP: 00007f94257e6090 R08: 00007f94257e5fa0 R09: 00007f942637b000 [ 811.981321][T15267] R10: 0000000000000001 R11: 0000000000025c8e R12: 00007f94257e5fac [ 811.981336][T15267] R13: 00007ffe37f2fb90 R14: 00000000000c61fe R15: 00007ffe37f2fbb0 [ 811.981368][T15267] [ 811.981377][T15267] memory: usage 3072kB, limit 3072kB, failcnt 94736 [ 812.352504][T15267] memory+swap: usage 3176kB, limit 9007199254740988kB, failcnt 0 [ 812.360456][T15267] kmem: usage 3028kB, limit 9007199254740988kB, failcnt 0 [ 812.367612][T15267] Memory cgroup stats for /syz3: [ 812.367817][T15267] cache 0 [ 812.375900][T15267] rss 0 [ 812.378744][T15267] rss_huge 0 [ 812.388624][T15267] shmem 0 [ 812.391637][T15267] mapped_file 0 [ 812.395142][T15267] dirty 0 [ 812.486723][T15267] writeback 0 [ 812.492031][T15302] vhci_hcd: invalid port number 16 [ 812.497233][T15267] workingset_refault_anon 23442 [ 812.559323][T15267] workingset_refault_file 11974 [ 812.608174][T15267] swap 106496 [ 812.611506][T15267] swapcached 45056 [ 812.615227][T15267] pgpgin 260792 [ 812.638247][T15267] pgpgout 268446 [ 812.641843][T15267] pgfault 247563 [ 812.678266][T15267] pgmajfault 19845 [ 812.682039][T15267] inactive_anon 45056 [ 812.719027][T15267] active_anon 0 [ 812.754959][T15267] inactive_file 0 [ 812.767579][T15267] active_file 0 [ 812.801034][T15267] unevictable 0 [ 812.804539][T15267] hierarchical_memory_limit 3145728 [ 812.848256][T15267] hierarchical_memsw_limit 9223372036854771712 [ 812.874400][T15267] total_cache 0 [ 812.898195][T15267] total_rss 0 [ 812.914026][T15267] total_rss_huge 0 [ 812.917804][T15267] total_shmem 0 [ 812.948157][T15267] total_mapped_file 0 [ 812.972503][T15267] total_dirty 0 [ 812.976037][T15267] total_writeback 0 [ 813.000213][T15267] total_workingset_refault_anon 23442 [ 813.005675][T15267] total_workingset_refault_file 11974 [ 813.062419][T15267] total_swap 106496 [ 813.066312][T15267] total_swapcached 45056 [ 813.083118][T15267] total_pgpgin 260792 [ 813.114477][T15267] total_pgpgout 268446 [ 813.120056][T15267] total_pgfault 247563 [ 813.124186][T15267] total_pgmajfault 19845 [ 813.198106][T15267] total_inactive_anon 45056 [ 813.241861][T15267] total_active_anon 0 [ 813.261978][T15267] total_inactive_file 0 [ 813.268383][T15267] total_active_file 0 [ 813.273725][T15267] total_unevictable 0 [ 813.282204][T15267] anon_cost 0 [ 813.287511][T15267] file_cost 0 [ 813.292554][T15267] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2246,pid=15267,uid=0 [ 813.417544][T15267] Memory cgroup out of memory: Killed process 15267 (syz.3.2246) total-vm:131360kB, anon-rss:1140kB, file-rss:21672kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 814.221818][T12125] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 814.434919][T15326] netlink: 'syz.5.2259': attribute type 5 has an invalid length. [ 815.248869][T15340] bond0: no command found in slaves file - use +ifname or -ifname [ 815.334130][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2264'. [ 815.344575][T15342] netlink: 354 bytes leftover after parsing attributes in process `syz.5.2264'. [ 815.612538][T15352] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 819.303377][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.309897][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.496162][T15407] mtrr: base(0x400000) is not aligned on a size(0x0000) boundary [ 821.764138][T15430] FAULT_INJECTION: forcing a failure. [ 821.764138][T15430] name failslab, interval 1, probability 0, space 0, times 0 [ 821.807538][T15430] CPU: 0 UID: 0 PID: 15430 Comm: syz.1.2291 Tainted: G U syzkaller #0 PREEMPT(full) [ 821.807585][T15430] Tainted: [U]=USER [ 821.807594][T15430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 821.807609][T15430] Call Trace: [ 821.807618][T15430] [ 821.807628][T15430] dump_stack_lvl+0x16c/0x1f0 [ 821.807663][T15430] should_fail_ex+0x512/0x640 [ 821.807692][T15430] ? kmem_cache_alloc_noprof+0x62/0x720 [ 821.807723][T15430] should_failslab+0xc2/0x120 [ 821.807763][T15430] kmem_cache_alloc_noprof+0x75/0x720 [ 821.807794][T15430] ? mempool_init_node+0x2f7/0x6e0 [ 821.807835][T15430] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 821.807863][T15430] ? mempool_init_node+0x2f7/0x6e0 [ 821.807892][T15430] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 821.807921][T15430] mempool_init_node+0x2f7/0x6e0 [ 821.807958][T15430] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 821.807986][T15430] ? __pfx_mempool_free_slab+0x10/0x10 [ 821.808039][T15430] mempool_init_noprof+0x3a/0x50 [ 821.808085][T15430] bioset_init+0x388/0x8a0 [ 821.808117][T15430] ? __pfx_bioset_init+0x10/0x10 [ 821.808157][T15430] __alloc_disk_node+0x83/0x640 [ 821.808187][T15430] __blk_mq_alloc_disk+0x89/0x120 [ 821.808229][T15430] loop_add+0x490/0xb70 [ 821.808262][T15430] ? __pfx_loop_add+0x10/0x10 [ 821.808312][T15430] ? find_held_lock+0x2b/0x80 [ 821.808354][T15430] loop_control_ioctl+0x13e/0x630 [ 821.808387][T15430] ? __pfx_loop_control_ioctl+0x10/0x10 [ 821.808426][T15430] ? __pfx_loop_control_ioctl+0x10/0x10 [ 821.808459][T15430] __x64_sys_ioctl+0x18e/0x210 [ 821.808494][T15430] do_syscall_64+0xcd/0xf80 [ 821.808528][T15430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.808554][T15430] RIP: 0033:0x7f1bebd8f7c9 [ 821.808574][T15430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.808600][T15430] RSP: 002b:00007f1becbec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 821.808623][T15430] RAX: ffffffffffffffda RBX: 00007f1bebfe5fa0 RCX: 00007f1bebd8f7c9 [ 821.808639][T15430] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000004 [ 821.808655][T15430] RBP: 00007f1bebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 821.808670][T15430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.808685][T15430] R13: 00007f1bebfe6038 R14: 00007f1bebfe5fa0 R15: 00007fffc8579b68 [ 821.808718][T15430] [ 822.436285][T15433] __vm_enough_memory: pid: 15433, comm: syz.1.2294, bytes: 4398046511104 not enough memory for the allocation [ 822.540320][ T30] audit: type=1800 audit(1843104586.948:18): pid=15435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2295" name="version" dev="configfs" ino=56982 res=0 errno=0 [ 823.406576][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2294'. [ 823.427239][T15449] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2297'. [ 823.766948][T15457] zswap: compressor not available [ 823.852348][T15449] bond0: (slave bond_slave_1): Releasing backup interface [ 824.215976][T15466] UHID_CREATE from different security context by process 518 (syz.5.2302), this is not allowed. [ 824.253818][T15466] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 825.828584][T15485] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2309'. [ 826.035143][ T30] audit: type=1800 audit(1843104590.448:19): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2307" name="file0" dev="tmpfs" ino=2623 res=0 errno=0 [ 826.797186][T15508] netlink: 'syz.5.2315': attribute type 1 has an invalid length. [ 827.051440][T15500] syz.3.2312 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 827.094523][T15522] netlink: zone id is out of range [ 827.112857][T15523] netlink: zone id is out of range [ 827.177636][T15500] CPU: 1 UID: 0 PID: 15500 Comm: syz.3.2312 Tainted: G U syzkaller #0 PREEMPT(full) [ 827.177675][T15500] Tainted: [U]=USER [ 827.177684][T15500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 827.177699][T15500] Call Trace: [ 827.177707][T15500] [ 827.177717][T15500] dump_stack_lvl+0x16c/0x1f0 [ 827.177755][T15500] dump_header+0x101/0x930 [ 827.177799][T15500] oom_kill_process+0x272/0xa40 [ 827.177844][T15500] out_of_memory+0x350/0x1700 [ 827.177873][T15500] ? __pfx_out_of_memory+0x10/0x10 [ 827.177905][T15500] mem_cgroup_out_of_memory+0x118/0x130 [ 827.177934][T15500] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 827.177968][T15500] ? do_raw_spin_unlock+0x172/0x230 [ 827.178014][T15500] try_charge_memcg+0x689/0xd40 [ 827.178070][T15500] ? __pfx_try_charge_memcg+0x10/0x10 [ 827.178118][T15500] ? find_held_lock+0x2b/0x80 [ 827.178168][T15500] ? rcu_read_unlock+0x17/0x60 [ 827.178235][T15500] obj_cgroup_charge_account+0x292/0x500 [ 827.178291][T15500] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 827.178352][T15500] ? kasan_save_track+0x14/0x30 [ 827.178398][T15500] kmem_cache_alloc_lru_noprof+0x556/0x720 [ 827.178439][T15500] ? alloc_inode+0x64/0x240 [ 827.178482][T15500] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 827.178525][T15500] ? alloc_inode+0x64/0x240 [ 827.178564][T15500] alloc_inode+0x64/0x240 [ 827.178600][T15500] new_inode+0x22/0x1c0 [ 827.178640][T15500] __debugfs_create_file+0x11c/0x6b0 [ 827.178691][T15500] debugfs_create_file_full+0x41/0x60 [ 827.178744][T15500] kvm_dev_ioctl+0x1708/0x1a80 [ 827.178799][T15500] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 827.178856][T15500] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 827.178899][T15500] __x64_sys_ioctl+0x18e/0x210 [ 827.178941][T15500] do_syscall_64+0xcd/0xf80 [ 827.178986][T15500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.179019][T15500] RIP: 0033:0x7f942558f7c9 [ 827.179047][T15500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.179079][T15500] RSP: 002b:00007f942637a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 827.179110][T15500] RAX: ffffffffffffffda RBX: 00007f94257e5fa0 RCX: 00007f942558f7c9 [ 827.179133][T15500] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 827.179153][T15500] RBP: 00007f9425613f91 R08: 0000000000000000 R09: 0000000000000000 [ 827.179174][T15500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.179194][T15500] R13: 00007f94257e6038 R14: 00007f94257e5fa0 R15: 00007ffe37f2f938 [ 827.179242][T15500] [ 827.615457][T15500] memory: usage 3072kB, limit 3072kB, failcnt 99213 [ 827.709756][T15500] memory+swap: usage 3240kB, limit 9007199254740988kB, failcnt 0 [ 827.748707][T15500] kmem: usage 3028kB, limit 9007199254740988kB, failcnt 0 [ 827.782779][T15500] Memory cgroup stats for /syz3: [ 827.783148][T15500] cache 0 [ 827.798492][T15500] rss 0 [ 827.804136][T15500] rss_huge 0 [ 827.807505][T15500] shmem 0 [ 827.838174][T15500] mapped_file 0 [ 827.859839][T15500] dirty 0 [ 827.862943][T15500] writeback 0 [ 827.866266][T15500] workingset_refault_anon 25143 [ 827.910002][T15500] workingset_refault_file 11974 [ 827.919780][T15500] swap 172032 [ 827.923108][T15500] swapcached 45056 [ 827.926833][T15500] pgpgin 264725 [ 827.944882][T15500] pgpgout 272379 [ 827.948895][T15500] pgfault 251806 [ 827.952499][T15500] pgmajfault 21352 [ 827.962284][T15500] inactive_anon 45056 [ 827.969677][T15500] active_anon 0 [ 827.973341][T15500] inactive_file 0 [ 827.978142][T15500] active_file 0 [ 827.981666][T15500] unevictable 0 [ 827.985319][T15500] hierarchical_memory_limit 3145728 [ 827.991219][T15500] hierarchical_memsw_limit 9223372036854771712 [ 828.047897][T15500] total_cache 0 [ 828.051566][T15500] total_rss 0 [ 828.054902][T15500] total_rss_huge 0 [ 828.066619][T15500] total_shmem 0 [ 828.076564][T15500] total_mapped_file 0 [ 828.080704][T15500] total_dirty 0 [ 828.084181][T15500] total_writeback 0 [ 828.097412][T15500] total_workingset_refault_anon 25143 [ 828.116526][T15500] total_workingset_refault_file 11974 [ 828.208200][T15500] total_swap 172032 [ 828.216710][T15500] total_swapcached 45056 [ 828.225522][T15500] total_pgpgin 264725 [ 828.234162][T15500] total_pgpgout 272379 [ 828.250505][T15500] total_pgfault 251806 [ 828.275761][T15500] total_pgmajfault 21352 [ 828.286078][ T30] audit: type=1800 audit(1843104592.698:20): pid=15542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2321" name="file0" dev="tmpfs" ino=782 res=0 errno=0 [ 828.308224][T15500] total_inactive_anon 45056 [ 828.312795][T15500] total_active_anon 0 [ 828.316801][T15500] total_inactive_file 0 [ 828.338076][T15500] total_active_file 0 [ 828.342239][T15500] total_unevictable 0 [ 828.356901][T15500] anon_cost 0 [ 828.365590][T15500] file_cost 0 [ 828.377647][T15500] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2312,pid=15497,uid=0 [ 828.398427][T15500] Memory cgroup out of memory: Killed process 15497 (syz.3.2312) total-vm:104212kB, anon-rss:1268kB, file-rss:22080kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 828.880012][T15500] debugfs: out of free dentries, can not create file 'request_irq_exits' [ 829.448264][T15567] vivid-007: ================= START STATUS ================= [ 829.486289][T15567] vivid-007: Generate PTS: true [ 829.515302][T15567] vivid-007: Generate SCR: true [ 829.598211][T15567] tpg source WxH: 320x240 (Y'CbCr) [ 829.628841][T15567] tpg field: 1 [ 829.644131][T15567] tpg crop: (0,0)/320x240 [ 829.667441][T15567] tpg compose: (0,0)/320x240 [ 829.675993][T15567] tpg colorspace: 8 [ 829.680518][T15567] tpg transfer function: 0/0 [ 829.685455][T15567] tpg Y'CbCr encoding: 0/0 [ 829.690839][T15567] tpg quantization: 0/0 [ 829.695477][T15567] tpg RGB range: 0/2 [ 829.706553][T15567] vivid-007: ================== END STATUS ================== [ 829.945887][T15560] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 829.982526][T15560] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 830.028436][T15560] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 830.034546][T15560] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 830.368110][ T30] audit: type=1800 audit(1843104594.778:21): pid=15590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2334" name="file0" dev="tmpfs" ino=2841 res=0 errno=0 [ 830.612744][ T30] audit: type=1800 audit(1843104595.028:22): pid=15598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2337" name="dbroot" dev="configfs" ino=59430 res=0 errno=0 [ 830.634965][T15599] FAULT_INJECTION: forcing a failure. [ 830.634965][T15599] name failslab, interval 1, probability 0, space 0, times 0 [ 830.651777][T15599] CPU: 1 UID: 0 PID: 15599 Comm: syz.6.2336 Tainted: G U syzkaller #0 PREEMPT(full) [ 830.651829][T15599] Tainted: [U]=USER [ 830.651840][T15599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 830.651860][T15599] Call Trace: [ 830.651870][T15599] [ 830.651883][T15599] dump_stack_lvl+0x16c/0x1f0 [ 830.651930][T15599] should_fail_ex+0x512/0x640 [ 830.651966][T15599] ? __kmalloc_noprof+0xca/0x870 [ 830.652012][T15599] should_failslab+0xc2/0x120 [ 830.652062][T15599] __kmalloc_noprof+0xdd/0x870 [ 830.652094][T15599] ? realloc_user_queue+0x288/0x320 [ 830.652150][T15599] ? realloc_user_queue+0x288/0x320 [ 830.652200][T15599] realloc_user_queue+0x288/0x320 [ 830.652254][T15599] ? __pfx_snd_timer_user_open+0x10/0x10 [ 830.652304][T15599] snd_timer_user_open+0xfc/0x180 [ 830.652357][T15599] snd_open+0x22d/0x4c0 [ 830.652405][T15599] ? __pfx_snd_open+0x10/0x10 [ 830.652449][T15599] chrdev_open+0x234/0x6a0 [ 830.652503][T15599] ? __pfx_apparmor_file_open+0x10/0x10 [ 830.652543][T15599] ? __pfx_chrdev_open+0x10/0x10 [ 830.652596][T15599] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 830.652655][T15599] do_dentry_open+0x748/0x1590 [ 830.652700][T15599] ? __pfx_chrdev_open+0x10/0x10 [ 830.652761][T15599] vfs_open+0x82/0x3f0 [ 830.652800][T15599] path_openat+0x2078/0x3140 [ 830.652852][T15599] ? __pfx_path_openat+0x10/0x10 [ 830.652905][T15599] do_filp_open+0x20b/0x470 [ 830.652947][T15599] ? __pfx_do_filp_open+0x10/0x10 [ 830.653020][T15599] ? alloc_fd+0x471/0x7d0 [ 830.653069][T15599] do_sys_openat2+0x11f/0x280 [ 830.653100][T15599] ? __pfx_do_sys_openat2+0x10/0x10 [ 830.653142][T15599] __x64_sys_openat+0x174/0x210 [ 830.653174][T15599] ? __pfx___x64_sys_openat+0x10/0x10 [ 830.653220][T15599] do_syscall_64+0xcd/0xf80 [ 830.653258][T15599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.653288][T15599] RIP: 0033:0x7fc9e8f8f7c9 [ 830.653312][T15599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.653341][T15599] RSP: 002b:00007fc9e9e9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 830.653369][T15599] RAX: ffffffffffffffda RBX: 00007fc9e91e5fa0 RCX: 00007fc9e8f8f7c9 [ 830.653389][T15599] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 830.653408][T15599] RBP: 00007fc9e9013f91 R08: 0000000000000000 R09: 0000000000000000 [ 830.653426][T15599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.653443][T15599] R13: 00007fc9e91e6038 R14: 00007fc9e91e5fa0 R15: 00007ffca0831448 [ 830.653481][T15599] [ 830.964801][T15593] zswap: compressor not available [ 831.218651][T12125] Bluetooth: hci0: command 0x0406 tx timeout [ 831.346089][ T30] audit: type=1800 audit(1843104595.758:23): pid=15609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2340" name="version" dev="configfs" ino=59446 res=0 errno=0 [ 832.018400][T12125] Bluetooth: hci1: command 0x0406 tx timeout [ 832.098281][T13166] Bluetooth: hci3: command 0x0c1a tx timeout [ 832.104421][T12125] Bluetooth: hci2: command 0x0c1a tx timeout [ 832.651361][T15618] bond0: invalid ARP target specified [ 832.958726][ T30] audit: type=1800 audit(1843104597.378:24): pid=15634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2345" name="file0" dev="tmpfs" ino=2863 res=0 errno=0 [ 833.804828][T15646] zswap: compressor not available [ 833.992317][ T30] audit: type=1800 audit(1843104598.398:25): pid=15658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2351" name="version" dev="configfs" ino=58739 res=0 errno=0 [ 834.342920][T15666] futex_wake_op: syz.6.2352 tries to shift op by -2048; fix this program [ 834.388307][T15666] futex_wake_op: syz.6.2352 tries to shift op by -2048; fix this program [ 834.430150][T15665] 0x000000000001-0x000000020000 : "" [ 834.449620][T15665] ftl_cs: FTL header corrupt! [ 834.884991][T12125] Bluetooth: hci2: unexpected subevent 0x01 length: 120 > 18 [ 835.670172][T15687] mtrr: base(0x1000) is not aligned on a size(0x0000) boundary [ 836.898170][T12125] Bluetooth: hci2: command 0x0c1a tx timeout [ 837.048777][T15653] syz.3.2350 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 837.198395][T15653] CPU: 1 UID: 0 PID: 15653 Comm: syz.3.2350 Tainted: G U syzkaller #0 PREEMPT(full) [ 837.198444][T15653] Tainted: [U]=USER [ 837.198456][T15653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 837.198476][T15653] Call Trace: [ 837.198487][T15653] [ 837.198500][T15653] dump_stack_lvl+0x16c/0x1f0 [ 837.198544][T15653] dump_header+0x101/0x930 [ 837.198600][T15653] oom_kill_process+0x272/0xa40 [ 837.198657][T15653] out_of_memory+0x350/0x1700 [ 837.198696][T15653] ? __pfx_out_of_memory+0x10/0x10 [ 837.198739][T15653] mem_cgroup_out_of_memory+0x118/0x130 [ 837.198775][T15653] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 837.198820][T15653] ? do_raw_spin_unlock+0x172/0x230 [ 837.198870][T15653] try_charge_memcg+0x689/0xd40 [ 837.198927][T15653] ? __pfx_try_charge_memcg+0x10/0x10 [ 837.198973][T15653] ? find_held_lock+0x2b/0x80 [ 837.199022][T15653] ? rcu_read_unlock+0x17/0x60 [ 837.199083][T15653] __memcg_kmem_charge_page+0xda/0x420 [ 837.199138][T15653] memcg_charge_kernel_stack+0xc3/0x1f0 [ 837.199192][T15653] copy_process+0x548/0x74e0 [ 837.199263][T15653] ? __pfx_copy_process+0x10/0x10 [ 837.199319][T15653] ? rcu_is_watching+0x12/0xc0 [ 837.199366][T15653] ? ___pte_offset_map+0x2ad/0x4f0 [ 837.199420][T15653] kernel_clone+0xfc/0x910 [ 837.199472][T15653] ? __pfx_kernel_clone+0x10/0x10 [ 837.199547][T15653] __do_sys_clone+0xce/0x120 [ 837.199596][T15653] ? __pfx___do_sys_clone+0x10/0x10 [ 837.199645][T15653] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 837.199719][T15653] do_syscall_64+0xcd/0xf80 [ 837.199760][T15653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.199792][T15653] RIP: 0033:0x7f942558f7c9 [ 837.199817][T15653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.199848][T15653] RSP: 002b:00007f942637a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 837.199878][T15653] RAX: ffffffffffffffda RBX: 00007f94257e5fa0 RCX: 00007f942558f7c9 [ 837.199899][T15653] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 837.199918][T15653] RBP: 00007f9425613f91 R08: 0000000000000002 R09: 0000000000000000 [ 837.199938][T15653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 837.199958][T15653] R13: 00007f94257e6038 R14: 00007f94257e5fa0 R15: 00007ffe37f2f938 [ 837.200002][T15653] [ 837.200015][T15653] memory: usage 3072kB, limit 3072kB, failcnt 100960 [ 837.222784][T12125] Bluetooth: hci3: unexpected event 0x31 length: 19 > 6 [ 837.251598][T15653] memory+swap: usage 3432kB, limit 9007199254740988kB, failcnt 0 [ 837.464104][T15653] kmem: usage 3016kB, limit 9007199254740988kB, failcnt 0 [ 837.471443][T15653] Memory cgroup stats for /syz3: [ 837.471633][T15653] cache 0 [ 837.480389][T15653] rss 0 [ 837.483196][T15653] rss_huge 0 [ 837.486435][T15653] shmem 0 [ 837.491213][T15653] mapped_file 0 [ 837.494730][T15653] dirty 0 [ 837.497718][T15653] writeback 0 [ 837.518059][T15653] workingset_refault_anon 26151 [ 837.522989][T15653] workingset_refault_file 11974 [ 837.527883][T15653] swap 368640 [ 837.531612][T15653] swapcached 45056 [ 837.537589][T15653] pgpgin 265890 [ 837.548061][T15653] pgpgout 273544 [ 837.551672][T15653] pgfault 253135 [ 837.555251][T15653] pgmajfault 22273 [ 837.559092][T15653] inactive_anon 45056 [ 837.563277][T15653] active_anon 0 [ 837.566856][T15653] inactive_file 0 [ 837.578627][T15653] active_file 0 [ 837.582587][T15653] unevictable 0 [ 837.586114][T15653] hierarchical_memory_limit 3145728 [ 837.594555][T15653] hierarchical_memsw_limit 9223372036854771712 [ 837.608099][T15653] total_cache 0 [ 837.611654][T15653] total_rss 0 [ 837.614971][T15653] total_rss_huge 0 [ 837.628308][T15653] total_shmem 0 [ 837.631918][T15653] total_mapped_file 0 [ 837.636017][T15653] total_dirty 0 [ 837.639862][T15653] total_writeback 0 [ 837.643794][T15653] total_workingset_refault_anon 26151 [ 837.650606][T15653] total_workingset_refault_file 11974 [ 837.656034][T15653] total_swap 368640 [ 837.660150][T15653] total_swapcached 45056 [ 837.664531][T15653] total_pgpgin 265890 [ 837.669755][T15653] total_pgpgout 273544 [ 837.673876][T15653] total_pgfault 253135 [ 837.678062][T15653] total_pgmajfault 22273 [ 837.682482][T15653] total_inactive_anon 45056 [ 837.687014][T15653] total_active_anon 0 [ 837.708714][T15653] total_inactive_file 0 [ 837.713174][T15653] total_active_file 0 [ 837.717206][T15653] total_unevictable 0 [ 837.722975][T15653] anon_cost 0 [ 837.726744][T15653] file_cost 0 [ 837.730460][T15653] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2350,pid=15652,uid=0 [ 837.751466][T15653] Memory cgroup out of memory: Killed process 15652 (syz.3.2350) total-vm:131356kB, anon-rss:1140kB, file-rss:21504kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 838.031430][T15727] vivid-007: ================= START STATUS ================= [ 838.051003][T15727] vivid-007: Generate PTS: true [ 838.057171][T15727] vivid-007: Generate SCR: true [ 838.084003][T15727] tpg source WxH: 320x240 (Y'CbCr) [ 838.099996][T15727] tpg field: 1 [ 838.110179][T15727] tpg crop: (0,0)/320x240 [ 838.116879][T15727] tpg compose: (0,0)/320x240 [ 838.124677][T15727] tpg colorspace: 8 [ 838.140598][T15727] tpg transfer function: 0/0 [ 838.147763][T15727] tpg Y'CbCr encoding: 0/0 [ 838.156682][T15730] input: f¬ as /devices/virtual/input/input25 [ 838.185048][T15727] tpg quantization: 0/0 [ 838.207317][T15727] tpg RGB range: 0/2 [ 838.226431][T15727] vivid-007: ================== END STATUS ================== [ 838.373693][T15732] zram: Removed device: zram0 [ 838.767947][T15739] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 838.860951][ T30] audit: type=1800 audit(1843104603.278:26): pid=15741 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2373" name="file0" dev="tmpfs" ino=948 res=0 errno=0 [ 839.171604][ T30] audit: type=1800 audit(1843104603.578:27): pid=15744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2374" name="version" dev="configfs" ino=59749 res=0 errno=0 [ 840.613023][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2381'. [ 841.144905][ T30] audit: type=1800 audit(1843104605.558:28): pid=15790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2383" name="file0" dev="tmpfs" ino=2940 res=0 errno=0 [ 841.534579][T15800] FAULT_INJECTION: forcing a failure. [ 841.534579][T15800] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 841.595090][T15800] CPU: 1 UID: 0 PID: 15800 Comm: syz.1.2384 Tainted: G U syzkaller #0 PREEMPT(full) [ 841.595145][T15800] Tainted: [U]=USER [ 841.595156][T15800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 841.595178][T15800] Call Trace: [ 841.595190][T15800] [ 841.595203][T15800] dump_stack_lvl+0x16c/0x1f0 [ 841.595249][T15800] should_fail_ex+0x512/0x640 [ 841.595296][T15800] should_fail_alloc_page+0xe7/0x130 [ 841.595349][T15800] prepare_alloc_pages+0x3c2/0x610 [ 841.595404][T15800] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 841.595445][T15800] ? stack_trace_save+0x8e/0xc0 [ 841.595479][T15800] ? __pfx_stack_trace_save+0x10/0x10 [ 841.595510][T15800] ? rcu_is_watching+0x12/0xc0 [ 841.595560][T15800] ? stack_depot_save_flags+0x29/0x9b0 [ 841.595610][T15800] ? kasan_save_stack+0x42/0x60 [ 841.595652][T15800] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 841.595689][T15800] ? kmem_cache_alloc_noprof+0x250/0x720 [ 841.595725][T15800] ? __handle_mm_fault+0xa3c/0x2a30 [ 841.595776][T15800] ? do_user_addr_fault+0x2e4/0xda0 [ 841.595815][T15800] ? exc_page_fault+0x64/0xc0 [ 841.595850][T15800] ? asm_exc_page_fault+0x26/0x30 [ 841.595882][T15800] ? check_zeroed_user+0x90/0x1c0 [ 841.595931][T15800] ? bpf_check_uarg_tail_zero+0x16e/0x1b0 [ 841.595976][T15800] ? __sys_bpf+0x15f/0x4980 [ 841.596023][T15800] ? __x64_sys_bpf+0x78/0xc0 [ 841.596070][T15800] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 841.596126][T15800] ? policy_nodemask+0xea/0x4e0 [ 841.596177][T15800] alloc_pages_mpol+0x1fb/0x550 [ 841.596228][T15800] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 841.596289][T15800] alloc_pages_noprof+0x12d/0x180 [ 841.596338][T15800] pte_alloc_one+0x1e/0x350 [ 841.596384][T15800] do_pte_missing+0x1b47/0x4000 [ 841.596442][T15800] ? __pmd_alloc+0x64f/0x8b0 [ 841.596491][T15800] __handle_mm_fault+0x14ca/0x2a30 [ 841.596554][T15800] ? __pfx___handle_mm_fault+0x10/0x10 [ 841.596632][T15800] ? find_vma+0xbf/0x140 [ 841.596671][T15800] ? __pfx_find_vma+0x10/0x10 [ 841.596716][T15800] handle_mm_fault+0x3fe/0xad0 [ 841.596775][T15800] do_user_addr_fault+0x2e4/0xda0 [ 841.596817][T15800] ? rcu_is_watching+0x12/0xc0 [ 841.596873][T15800] exc_page_fault+0x64/0xc0 [ 841.596923][T15800] asm_exc_page_fault+0x26/0x30 [ 841.596955][T15800] RIP: 0010:check_zeroed_user+0x90/0x1c0 [ 841.596997][T15800] Code: 00 00 00 e8 42 78 1a fd 48 89 de 4c 89 ef e8 57 72 1a fd 4d 85 ff 0f 85 a5 00 00 00 e8 29 78 1a fd 0f 01 cb 0f ae e8 45 31 e4 <49> 8b 45 00 31 ff 44 89 e6 48 89 c3 e8 bf 72 1a fd 45 85 e4 75 79 [ 841.597031][T15800] RSP: 0018:ffffc9000b527b60 EFLAGS: 00050246 [ 841.597060][T15800] RAX: 000000000000000a RBX: 00000000000006f4 RCX: ffffc9000c3ba000 [ 841.597081][T15800] RDX: 0000000000080000 RSI: ffffffff84a2c7e7 RDI: 0000000000000006 [ 841.597104][T15800] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000000000a8 [ 841.597124][T15800] R10: 00000000000006f4 R11: 0000000000000000 R12: 0000000000000000 [ 841.597145][T15800] R13: 00000000000000a8 R14: 000000000000064c R15: 0000000000000000 [ 841.597180][T15800] ? check_zeroed_user+0x87/0x1c0 [ 841.597231][T15800] bpf_check_uarg_tail_zero+0x16e/0x1b0 [ 841.597278][T15800] ? __pfx_bpf_check_uarg_tail_zero+0x10/0x10 [ 841.597329][T15800] ? futex_hash+0x2c5/0x380 [ 841.597370][T15800] __sys_bpf+0x15f/0x4980 [ 841.597422][T15800] ? futex_private_hash_put+0x160/0x1b0 [ 841.597463][T15800] ? __pfx___sys_bpf+0x10/0x10 [ 841.597513][T15800] ? __pfx_futex_wait+0x10/0x10 [ 841.597576][T15800] ? __lock_acquire+0x433/0x22f0 [ 841.597619][T15800] ? do_futex+0x122/0x350 [ 841.597689][T15800] ? xfd_validate_state+0x61/0x180 [ 841.597751][T15800] __x64_sys_bpf+0x78/0xc0 [ 841.597782][T15800] ? lockdep_hardirqs_on+0x7c/0x110 [ 841.597833][T15800] do_syscall_64+0xcd/0xf80 [ 841.597878][T15800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.597922][T15800] RIP: 0033:0x7f1bebd8f7c9 [ 841.597950][T15800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.597985][T15800] RSP: 002b:00007f1becbec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 841.598017][T15800] RAX: ffffffffffffffda RBX: 00007f1bebfe5fa0 RCX: 00007f1bebd8f7c9 [ 841.598040][T15800] RDX: 00000000000006f4 RSI: 0000000000000000 RDI: 0000000000000000 [ 841.598059][T15800] RBP: 00007f1bebe13f91 R08: 0000000000000000 R09: 0000000000000000 [ 841.598078][T15800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.598098][T15800] R13: 00007f1bebfe6038 R14: 00007f1bebfe5fa0 R15: 00007fffc8579b68 [ 841.598146][T15800] [ 845.377264][T15823] zero sized request [ 845.506166][T15880] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2397'. [ 846.662702][T15913] synth uevent: /devices/pci0000:00/0000:00:03.0/virtio0: unknown uevent action string [ 846.710070][T15913] virtio_scsi virtio0: uevent: failed to send synthetic uevent: -22 [ 848.518432][T15947] FAULT_INJECTION: forcing a failure. [ 848.518432][T15947] name failslab, interval 1, probability 0, space 0, times 0 [ 848.558224][T15947] CPU: 1 UID: 0 PID: 15947 Comm: syz.6.2412 Tainted: G U syzkaller #0 PREEMPT(full) [ 848.558286][T15947] Tainted: [U]=USER [ 848.558297][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 848.558317][T15947] Call Trace: [ 848.558329][T15947] [ 848.558342][T15947] dump_stack_lvl+0x16c/0x1f0 [ 848.558387][T15947] should_fail_ex+0x512/0x640 [ 848.558427][T15947] ? fs_reclaim_acquire+0xae/0x150 [ 848.558479][T15947] should_failslab+0xc2/0x120 [ 848.558530][T15947] __kmalloc_noprof+0xdd/0x870 [ 848.558562][T15947] ? tomoyo_encode2+0x100/0x3e0 [ 848.558620][T15947] ? tomoyo_encode2+0x100/0x3e0 [ 848.558669][T15947] tomoyo_encode2+0x100/0x3e0 [ 848.558727][T15947] tomoyo_encode+0x29/0x50 [ 848.558777][T15947] tomoyo_realpath_from_path+0x18f/0x6e0 [ 848.558844][T15947] tomoyo_check_open_permission+0x2ab/0x3c0 [ 848.558893][T15947] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 848.558982][T15947] ? do_raw_spin_lock+0x12c/0x2b0 [ 848.559039][T15947] tomoyo_file_open+0x6b/0x90 [ 848.559076][T15947] security_file_open+0x84/0x1e0 [ 848.559126][T15947] do_dentry_open+0x597/0x1590 [ 848.559177][T15947] ? security_inode_permission+0xbf/0x260 [ 848.559229][T15947] vfs_open+0x82/0x3f0 [ 848.559278][T15947] path_openat+0x2078/0x3140 [ 848.559342][T15947] ? __pfx_path_openat+0x10/0x10 [ 848.559408][T15947] do_filp_open+0x20b/0x470 [ 848.559460][T15947] ? __pfx_do_filp_open+0x10/0x10 [ 848.559539][T15947] ? alloc_fd+0x471/0x7d0 [ 848.559598][T15947] do_sys_openat2+0x11f/0x280 [ 848.559633][T15947] ? __pfx_do_sys_openat2+0x10/0x10 [ 848.559685][T15947] __x64_sys_openat+0x174/0x210 [ 848.559721][T15947] ? __pfx___x64_sys_openat+0x10/0x10 [ 848.559776][T15947] do_syscall_64+0xcd/0xf80 [ 848.559820][T15947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 848.559854][T15947] RIP: 0033:0x7fc9e8f8f7c9 [ 848.559880][T15947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 848.559913][T15947] RSP: 002b:00007fc9e9e9b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 848.559945][T15947] RAX: ffffffffffffffda RBX: 00007fc9e91e5fa0 RCX: 00007fc9e8f8f7c9 [ 848.559968][T15947] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 848.559990][T15947] RBP: 00007fc9e9013f91 R08: 0000000000000000 R09: 0000000000000000 [ 848.560012][T15947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.560033][T15947] R13: 00007fc9e91e6038 R14: 00007fc9e91e5fa0 R15: 00007ffca0831448 [ 848.560079][T15947] [ 848.560110][T15947] ERROR: Out of memory at tomoyo_realpath_from_path. [ 850.512108][T15980] ================================================================== [ 850.512127][T15980] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 850.512161][T15980] Read of size 62 at addr ffff88805214716e by task syz.6.2420/15980 [ 850.512182][T15980] [ 850.512196][T15980] CPU: 1 UID: 0 PID: 15980 Comm: syz.6.2420 Tainted: G U syzkaller #0 PREEMPT(full) [ 850.512232][T15980] Tainted: [U]=USER [ 850.512241][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 850.512257][T15980] Call Trace: [ 850.512265][T15980] [ 850.512274][T15980] dump_stack_lvl+0x116/0x1f0 [ 850.512306][T15980] print_report+0xcd/0x630 [ 850.512341][T15980] ? __virt_addr_valid+0x81/0x610 [ 850.512380][T15980] ? __phys_addr+0xe8/0x180 [ 850.512418][T15980] ? fbcon_prepare_logo+0xa03/0xc70 [ 850.512444][T15980] kasan_report+0xe0/0x110 [ 850.512479][T15980] ? fbcon_prepare_logo+0xa03/0xc70 [ 850.512509][T15980] kasan_check_range+0x100/0x1b0 [ 850.512541][T15980] __asan_memcpy+0x23/0x60 [ 850.512571][T15980] fbcon_prepare_logo+0xa03/0xc70 [ 850.512603][T15980] fbcon_init+0xd77/0x1900 [ 850.512630][T15980] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 850.512659][T15980] visual_init+0x320/0x620 [ 850.512687][T15980] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 850.512725][T15980] store_bind+0x61d/0x760 [ 850.512758][T15980] ? sysfs_file_kobj+0xe4/0x290 [ 850.512782][T15980] ? __pfx_store_bind+0x10/0x10 [ 850.512814][T15980] dev_attr_store+0x58/0x80 [ 850.512837][T15980] ? __pfx_dev_attr_store+0x10/0x10 [ 850.512860][T15980] sysfs_kf_write+0xf2/0x150 [ 850.512884][T15980] kernfs_fop_write_iter+0x3af/0x570 [ 850.512920][T15980] ? __pfx_sysfs_kf_write+0x10/0x10 [ 850.512944][T15980] vfs_write+0x7d3/0x11d0 [ 850.512978][T15980] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 850.513017][T15980] ? __pfx_vfs_write+0x10/0x10 [ 850.513067][T15980] ksys_write+0x12a/0x250 [ 850.513100][T15980] ? __pfx_ksys_write+0x10/0x10 [ 850.513139][T15980] do_syscall_64+0xcd/0xf80 [ 850.513170][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.513196][T15980] RIP: 0033:0x7fc9e8f8f7c9 [ 850.513216][T15980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.513242][T15980] RSP: 002b:00007fc9e9e7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 850.513266][T15980] RAX: ffffffffffffffda RBX: 00007fc9e91e6090 RCX: 00007fc9e8f8f7c9 [ 850.513283][T15980] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 850.513299][T15980] RBP: 00007fc9e9013f91 R08: 0000000000000000 R09: 0000000000000000 [ 850.513314][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.513329][T15980] R13: 00007fc9e91e6128 R14: 00007fc9e91e6090 R15: 00007ffca0831448 [ 850.513354][T15980] [ 850.513362][T15980] [ 850.513368][T15980] Allocated by task 15761: [ 850.513380][T15980] kasan_save_stack+0x33/0x60 [ 850.513409][T15980] kasan_save_track+0x14/0x30 [ 850.513438][T15980] __kasan_kmalloc+0xaa/0xb0 [ 850.513464][T15980] __kmalloc_node_track_caller_noprof+0x345/0x890 [ 850.513495][T15980] kmemdup_noprof+0x29/0x60 [ 850.513517][T15980] cache_create_net+0x2b/0x220 [ 850.513543][T15980] nfsd_export_init+0x11f/0x250 [ 850.513575][T15980] nfsd_net_init+0x33/0x3d0 [ 850.513605][T15980] ops_init+0x1e2/0x5f0 [ 850.513631][T15980] setup_net+0x11d/0x3a0 [ 850.513656][T15980] copy_net_ns+0x351/0x5d0 [ 850.513684][T15980] create_new_namespaces+0x3ea/0xab0 [ 850.513717][T15980] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 850.513750][T15980] ksys_unshare+0x45b/0xa40 [ 850.513770][T15980] __x64_sys_unshare+0x31/0x40 [ 850.513790][T15980] do_syscall_64+0xcd/0xf80 [ 850.513825][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.513849][T15980] [ 850.513855][T15980] Freed by task 11362: [ 850.513867][T15980] kasan_save_stack+0x33/0x60 [ 850.513897][T15980] kasan_save_track+0x14/0x30 [ 850.513927][T15980] __kasan_save_free_info+0x3b/0x60 [ 850.513952][T15980] __kasan_slab_free+0x5f/0x80 [ 850.513987][T15980] kfree+0x29e/0x710 [ 850.514006][T15980] nfsd_export_shutdown+0xca/0x140 [ 850.514040][T15980] ops_undo_list+0x2ee/0xab0 [ 850.514072][T15980] cleanup_net+0x41b/0x830 [ 850.514102][T15980] process_one_work+0x9ba/0x1b20 [ 850.514129][T15980] worker_thread+0x6c8/0xf10 [ 850.514157][T15980] kthread+0x3c5/0x780 [ 850.514180][T15980] ret_from_fork+0x983/0xb10 [ 850.514201][T15980] ret_from_fork_asm+0x1a/0x30 [ 850.514233][T15980] [ 850.514239][T15980] The buggy address belongs to the object at ffff888052147000 [ 850.514239][T15980] which belongs to the cache kmalloc-512 of size 512 [ 850.514259][T15980] The buggy address is located 366 bytes inside of [ 850.514259][T15980] freed 512-byte region [ffff888052147000, ffff888052147200) [ 850.514285][T15980] [ 850.514292][T15980] The buggy address belongs to the physical page: [ 850.514309][T15980] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52144 [ 850.514332][T15980] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 850.514353][T15980] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 850.514375][T15980] page_type: f5(slab) [ 850.514397][T15980] raw: 00fff00000000040 ffff88813ffa6c80 dead000000000100 dead000000000122 [ 850.514420][T15980] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 850.514444][T15980] head: 00fff00000000040 ffff88813ffa6c80 dead000000000100 dead000000000122 [ 850.514465][T15980] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 850.514487][T15980] head: 00fff00000000002 ffffea0001485101 00000000ffffffff 00000000ffffffff [ 850.514509][T15980] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 850.514523][T15980] page dumped because: kasan: bad access detected [ 850.514538][T15980] page_owner tracks the page as allocated [ 850.514547][T15980] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6059, tgid 6059 (kworker/u8:14), ts 300853127091, free_ts 223203000066 [ 850.514588][T15980] post_alloc_hook+0x1af/0x220 [ 850.514610][T15980] get_page_from_freelist+0xd0b/0x31a0 [ 850.514634][T15980] __alloc_frozen_pages_noprof+0x25f/0x2440 [ 850.514660][T15980] alloc_pages_mpol+0x1fb/0x550 [ 850.514692][T15980] new_slab+0x24a/0x360 [ 850.514711][T15980] ___slab_alloc+0xee7/0x1cd0 [ 850.514731][T15980] __slab_alloc.constprop.0+0x63/0x110 [ 850.514753][T15980] __kmalloc_cache_noprof+0x477/0x770 [ 850.514776][T15980] batadv_forw_packet_alloc+0x3ad/0x4e0 [ 850.514809][T15980] batadv_iv_ogm_aggregate_new+0x13c/0x4c0 [ 850.514836][T15980] batadv_iv_ogm_schedule_buff+0x9c2/0x14c0 [ 850.514864][T15980] batadv_iv_send_outstanding_bat_ogm_packet+0x329/0x920 [ 850.514896][T15980] process_one_work+0x9ba/0x1b20 [ 850.514923][T15980] worker_thread+0x6c8/0xf10 [ 850.514949][T15980] kthread+0x3c5/0x780 [ 850.514972][T15980] ret_from_fork+0x983/0xb10 [ 850.514992][T15980] page last free pid 7544 tgid 7543 stack trace: [ 850.515006][T15980] __free_frozen_pages+0x7df/0x1160 [ 850.515041][T15980] kimage_free_page_list+0x130/0x230 [ 850.515085][T15980] kimage_alloc_control_pages+0x3d3/0xa00 [ 850.515122][T15980] do_kexec_load+0x439/0x860 [ 850.515143][T15980] __x64_sys_kexec_load+0x1bf/0x230 [ 850.515166][T15980] do_syscall_64+0xcd/0xf80 [ 850.515193][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.515217][T15980] [ 850.515223][T15980] Memory state around the buggy address: [ 850.515236][T15980] ffff888052147000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 850.515253][T15980] ffff888052147080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 850.515271][T15980] >ffff888052147100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 850.515286][T15980] ^ [ 850.515300][T15980] ffff888052147180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 850.515318][T15980] ffff888052147200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 850.515333][T15980] ================================================================== [ 850.515348][T15980] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 850.515366][T15980] CPU: 1 UID: 0 PID: 15980 Comm: syz.6.2420 Tainted: G U syzkaller #0 PREEMPT(full) [ 850.515401][T15980] Tainted: [U]=USER [ 850.515411][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 850.515426][T15980] Call Trace: [ 850.515436][T15980] [ 850.515445][T15980] dump_stack_lvl+0x3d/0x1f0 [ 850.515476][T15980] vpanic+0x640/0x6f0 [ 850.515502][T15980] panic+0xca/0xd0 [ 850.515526][T15980] ? __pfx_panic+0x10/0x10 [ 850.515559][T15980] check_panic_on_warn+0xab/0xb0 [ 850.515587][T15980] end_report+0x107/0x160 [ 850.515622][T15980] kasan_report+0xee/0x110 [ 850.515658][T15980] ? fbcon_prepare_logo+0xa03/0xc70 [ 850.515689][T15980] kasan_check_range+0x100/0x1b0 [ 850.515713][T15980] __asan_memcpy+0x23/0x60 [ 850.515741][T15980] fbcon_prepare_logo+0xa03/0xc70 [ 850.515774][T15980] fbcon_init+0xd77/0x1900 [ 850.515800][T15980] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 850.515829][T15980] visual_init+0x320/0x620 [ 850.515858][T15980] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 850.515895][T15980] store_bind+0x61d/0x760 [ 850.515929][T15980] ? sysfs_file_kobj+0xe4/0x290 [ 850.515953][T15980] ? __pfx_store_bind+0x10/0x10 [ 850.515984][T15980] dev_attr_store+0x58/0x80 [ 850.516007][T15980] ? __pfx_dev_attr_store+0x10/0x10 [ 850.516031][T15980] sysfs_kf_write+0xf2/0x150 [ 850.516059][T15980] kernfs_fop_write_iter+0x3af/0x570 [ 850.516096][T15980] ? __pfx_sysfs_kf_write+0x10/0x10 [ 850.516122][T15980] vfs_write+0x7d3/0x11d0 [ 850.516156][T15980] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 850.516195][T15980] ? __pfx_vfs_write+0x10/0x10 [ 850.516238][T15980] ksys_write+0x12a/0x250 [ 850.516271][T15980] ? __pfx_ksys_write+0x10/0x10 [ 850.516309][T15980] do_syscall_64+0xcd/0xf80 [ 850.516340][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.516366][T15980] RIP: 0033:0x7fc9e8f8f7c9 [ 850.516385][T15980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 850.516411][T15980] RSP: 002b:00007fc9e9e7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 850.516435][T15980] RAX: ffffffffffffffda RBX: 00007fc9e91e6090 RCX: 00007fc9e8f8f7c9 [ 850.516453][T15980] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 850.516469][T15980] RBP: 00007fc9e9013f91 R08: 0000000000000000 R09: 0000000000000000 [ 850.516486][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.516501][T15980] R13: 00007fc9e91e6128 R14: 00007fc9e91e6090 R15: 00007ffca0831448 [ 850.516527][T15980] [ 850.516902][T15980] Kernel Offset: disabled