last executing test programs: 8.242593292s ago: executing program 0 (id=1597): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) (async) rseq$auto(0x0, 0x8000, 0x0, 0x9) (async) r0 = socket(0x1d, 0x3, 0x1) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r0) (async, rerun: 32) mmap$auto(0x0, 0xff, 0x6, 0x9b72, 0x7, 0x9) (rerun: 32) r1 = socket(0x2, 0x3, 0xa) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffc, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x7ffc) (async) r2 = getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) mmap$auto(0x4, 0x2020009, 0x100000000001, 0xeb1, r2, 0x8000) close_range$auto(0x2, r1, 0x10008000) (async) mmap$auto(0x3, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8001) (async) socket(0x2, 0x1, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) get_robust_list$auto(0x1, 0x0, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) (async, rerun: 32) ioctl$auto_PPPIOCSFLAGS(r3, 0x40047459, 0x0) (async, rerun: 32) pread64$auto(r0, 0x0, 0x8001, 0x1) (async) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) (async) r4 = socket(0x2, 0x4, 0x100000) bind$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @loopback, 0x2}, 0xfffffffb) (async) listen$auto(0x3, 0x81) (async) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f0000000000)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x3ff, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xf, 0xa, 0x6) (async) setsockopt$auto(0x3, 0x6c, 0x5, 0x0, 0x7a) (async) mmap$auto(0x0, 0x202000a, 0x3, 0x13, 0xfffffffffffffffb, 0x8000) 7.183055422s ago: executing program 3 (id=1599): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/sequencer2\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0xfe04) r1 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/tracing/options/stacktrace\x00', 0x10000, 0x0) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, 0x0, 0x6c) socket(0x8, 0xa, 0x7) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0xffffffffffffffff, 0x400000000008000) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) close_range$auto(0xffffffffffffffff, r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) clock_gettime$auto(0x80000000, 0x0) socket(0x1e, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/rq_affinity\x00', 0x10b042, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x40000000000a5, 0x80000008000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000640)='/proc/sys/net/ipv6/conf/batadv_slave_0/ioam6_id_wide\x00', 0x30d043, 0x0) read$auto(r2, 0x0, 0xa1) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000680)='/dev/usbmon26\x00', 0x1642, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_MON_IOCG_STATS(r5, 0x80089203, 0x0) ppoll$auto(&(0x7f0000000540)={r4, 0x46, 0x3}, 0xfffffffd, &(0x7f0000000580)={0x8, 0x28fd}, &(0x7f00000005c0)={0x80000000}, 0x8) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x4) mmap$auto(0x0, 0x4000b, 0x27b, 0x9b72, 0x7, 0x28000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x10b040, 0x0) syslog$auto_SYSLOG_ACTION_READ_CLEAR(0x4, 0xffffffffffffffff, 0x226) 7.056318768s ago: executing program 0 (id=1600): openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010029bc100002dc04000800"], 0x1c}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x15, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r5, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsopen$auto(0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) pwrite64$auto(r6, &(0x7f0000000040)='/iys/devices/LNXSY:00/input/input0/inhibited\x00\x00\x00\x00\x00\x04\x00'/60, 0x4, 0x2) mmap$auto(0x0, 0x4, 0x7f, 0x40eb1, 0xffffffffffffffff, 0x300000000000) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x82000000) ioctl$auto_TIOCVHANGUP2(r7, 0x5437, 0x0) mmap$auto(0x27, 0x2000a, 0x4000000000df, 0x40000000000eb2, 0x401, 0x7fff) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 6.572373098s ago: executing program 3 (id=1601): mmap$auto(0x0, 0x20009, 0x4000000000e2, 0x15, 0xffffffffffffffff, 0x8400) r0 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x50) r1 = socket(0x2b, 0x1, 0xba6) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = socket(0x2b, 0xa, 0xfffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(0x0, r3) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0005f326", @ANYRES16=r4, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRES16=r4, @ANYRES16=0x0, @ANYBLOB="00082bbd7000fddbdf250e000000fb2b364b9dd519badd1508074f17d1c495d6ddacc66b0389b3d3d32fc0226224b373cf95190b32a6abba5a95a242a153b373b24960c7998ad27bd401eb76373fe20e489f99ba9c123bea9a2089999405a2ef6103c9713f500e58fc7a03f2df9c0c68a6349348e247324310ea66060b1e219121f7752615ecbb3f717c09451c8164b7da6cb7960ea46e5045622f563218735f7fa80126feb413fe23e18ae15e5fb7b623e5d67ef91b0d1712c39f308a6fdf2d2185cd16006aa7cb3db51e586a5b97a4a7e350321feaef206cbacc71e7b2ae9a4f00"], 0xe8}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/cmdline\x00', 0x80000, 0x0) exit$auto(0x7) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x4) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/018/001\x00', 0x101202, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd, 0x1, 0x7, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) write$auto(r2, &(0x7f00000003c0)='v\xca\xfe\xf3\x01\x01d1L\xff\x15\xba\xa1\xb7=*\xc1D-\xb3l\xc6\xab\xa6\xbd\xf8\xff\xff\v\xb5', 0x1) seccomp$auto_SECCOMP_SET_MODE_STRICT(0x0, 0x7f, 0x0) close_range$auto(0x2, r6, 0x101) unshare$auto(0x40000080) 6.568024656s ago: executing program 1 (id=1609): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000026c0)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x4000000) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd4, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5d9f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x6}, @NBD_ATTR_SOCKETS={0x96, 0x7, 0x0, 0x1, [@typed={0xc, 0x66, 0x0, 0x0, @str='batadv0\x00'}, @generic="0bdb97d97a9a9181e094bd8b87e04de8f81a5a6a5a88d4574c79cd9a1eba91b9193359d0fd16006e9a907b8448bcff8127501624268183940526fed68fff380fce6a62f9d7b28a983a126b505a26d74fe8bd77a9b53a34c674de926dd8079b3db363027b232ad7da378bcac62325b2139a9900ce2f1ffd746023dae5c92904e2be4021361e48"]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, '--%'}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) timer_create$auto(0x2, 0x0, &(0x7f0000000140)=0x6) clock_nanosleep$auto(0x2, 0x200, &(0x7f0000000480)={0x8, 0x7}, 0x0) timer_settime$auto(0x0, 0x6, &(0x7f0000000000)={{0x100000001, 0x3ff}, {0x5a, 0x2}}, 0x0) timer_delete$auto(0x0) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'gretap0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)={0x24, r2, 0x5, 0x70bd29, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r4}, @OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}]}, 0x24}}, 0x4000024) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x200408d8}, 0x4000000) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x240, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf, 0x2, 0x0, 0x1, [@generic="e98d498f5fa6cbd7095107"]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x829}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x9}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xf}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x6f, 0x2, 0x0, 0x1, [@generic="0c6f9ef478cd65babc633b7abeed1041116f68fa17e22f73a7c5c92db354f6e8a4e020f0ed1df8405287e2a3597c91f1a9755823a31257ff07a98d1e987a139cf50b8731f05c9700bcae62edf7cbc40ed4b0a720d27aafeb03fa0560db1d10246d14d0b078e5a2da12f58d"]}, @ETHTOOL_A_STRSET_STRINGSETS={0x15c, 0x2, 0x0, 0x1, [@nested={0x8, 0x7d, 0x0, 0x1, [@nested={0x4, 0x6}]}, @generic="cba45cb2e6900d0961e20e97aeae04ca36ade609a82f5472f3a96affe9c57bcfa2930756e8ce1077c8ca66f1b3d6efaa1ba56ec87fb15919e67b9afc01f3597004d829626ea96a55807b94183fe696dc", @typed={0x8, 0x138, 0x0, 0x0, @u32=0xe}, @generic="2b73adda254a22603237752a8cdf48303ff1fa5accebfa34415f89245461167464c4314102bda37aedfc74c6206a17e51164dc557a7bd9433f10c8e9146c9cd0a8b7f2a06dcae09f77bd337e397e2906b54515eed28256d49b5191c9d49830ff3dc6b59d74c25a9ca54d3b58fb97fc0c8c609d4aaaf073bdbc5b226fef5f0d21fde6d1d404323a9971495cfa6dd9518ba987e443bc7681b29c8130f6cea0e21b7fdb5d556cedb096d099582b76181015a870069b4be110128e3166b5faba2373412066e8df021aac6b384740bd8e8878e081bdfed847257c7611320faee5b40666e1d46b", @nested={0x14, 0x2a, 0x0, 0x1, [@typed={0x6, 0x75, 0x0, 0x0, @str=':\x00'}, @nested={0x4, 0x125}, @nested={0x4, 0xfe}]}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000041}, 0x45) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) symlinkat$auto(&(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') bpf$auto(0x0, &(0x7f00000000c0)=@batch={0x115d, 0x9, 0x21a, 0xfffffffffffffffa, 0x7, r9, 0x4, 0x9}, 0xf) bpf$auto(0x4, &(0x7f00000002c0)=@bpf_attr_11={0x5, 0x8000000000000005, 0x7, 0x1621, 0xf870e9f, 0xa4ea, 0x8}, 0x9) 5.953285729s ago: executing program 0 (id=1602): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x141201, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) r1 = socket(0xa, 0x1, 0x100) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x100000001ff, 0x7, 0x3, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x5, 0x62, 0x80000001, 0x5, 0x5, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) ioctl$auto(r3, 0x80405600, r3) sendfile$auto(r3, r1, &(0x7f0000000180), 0x4) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x0, 0x5, 0x4, 0x0) read$auto_vga_arb_device_fops_vgaarb(r4, &(0x7f0000000240)=""/96, 0x60) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000002200)='*){\x85,\x00', &(0x7f0000002240), 0x8, 0x0) init_module$auto(0x0, 0xffff9, 0x0) r5 = fanotify_init$auto(0xba, 0x0) fanotify_mark$auto(r5, 0x205, 0x100002, 0x4, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f00000001c0), 0x200200, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r6, 0x0, 0x20) 5.888749153s ago: executing program 2 (id=1603): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) utimensat$auto(r0, &(0x7f0000001c80)='\x00', 0x0, 0x1000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_timeout\x00', 0x101042, 0x0) write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop1\x00', 0x80600, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyv7\x00', 0x10000, 0x0) ioctl$auto_BLKIOMIN(r2, 0x1278, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x80382, 0x0) write$auto(r2, 0x0, 0x800000000005) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) setgid$auto(0xee00) ioctl$auto_BLKDISCARD(r2, 0x1277, 0x0) 5.213108518s ago: executing program 1 (id=1604): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) ptrace$auto(0xf, 0x0, 0xfffffffffffffffe, 0x8000000000000000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20803, 0x0) setsockopt$auto(0xffffffffffffffff, 0x3, 0x8, 0x0, 0x44) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x880, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty8\x00', 0x14180, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000007c0), 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) r5 = epoll_create$auto(0x4) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video48\x00', 0x18a041, 0x0) epoll_ctl$auto(r5, 0x1, r6, 0x0) close_range$auto(0x2, 0x8, 0x0) read$auto(r4, 0x0, 0x1) ioctl$auto_TUNSETNOCSUM(r4, 0x400454c8, &(0x7f00000000c0)=0x2) close_range$auto(0x2, 0x8, 0x0) 5.212280724s ago: executing program 3 (id=1605): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r2 = socket(0x18, 0x3, 0x2) accept$auto(r2, 0x0, 0x0) write$auto_tty_fops_tty_io(r1, 0x0, 0x0) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0xb49dc2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/file-nr\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f0000002180)=""/211, 0xd3) socket(0x6, 0x2, 0x80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x10084) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96) r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) write$auto_proc_clear_refs_operations_internal(r4, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) setsockopt$auto(0x5, 0x104000000000010e, 0x2, 0x0, 0x16) 4.237888898s ago: executing program 3 (id=1606): mmap$auto(0x0, 0x20009, 0xe0, 0x91, 0xffffffffffffffff, 0x8000) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) rseq$auto(0x0, 0xfffffff5, 0x0, 0x5) sysfs$auto(0x2, 0x10000000000002a, 0x0) mmap$auto(0x0, 0x40009, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendto$auto(0x3, 0x0, 0x80000001, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000040), 0x5}, 0x5) read$auto(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) readv$auto(0x3, &(0x7f0000000600)={&(0x7f00000001c0), 0x4}, 0x1da) mmap$auto(0xfffffffffffffffd, 0x4020011, 0xdf, 0xebd, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) mmap$auto(0x9, 0x400000008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0xffffffffffffffff, 0x4010ae67, 0x38) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x551902, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x393540, 0x0) 4.224842315s ago: executing program 2 (id=1615): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b76, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1d, 0x5, 0xfffffffe, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(0xffffffffffffffff, &(0x7f00000000c0)='\t\x8d\xb6\xaa\x80\xd5\xbc_:A\xacz\xdc\xa0\x1d', 0x2, 0x6, &(0x7f0000000240)={0x2000000000000003, 0x101}) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040)="99e7daa24511691d42a963", 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) semctl$auto_SETVAL(0x5, 0xfffffff5, 0x10, 0xfffffffffffffffd) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/version\x00', 0x42c700, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) mincore$auto(0x1000, 0x8001, 0x0) read$auto(r1, 0x0, 0x20) io_uring_register$auto_IORING_REGISTER_CLOCK(r2, 0x1d, &(0x7f0000000180)="0f0889767f7a859647f9c565fea7e1ccf3940edcd411a6c2f69c5166fdb3d08c415b32a52e691961894d35f051d91b5c7b42f918b28d018fa59b038e264dd8c18fc53b75b8a87fe75d46208b429ed3baa8668d20209edaedb7564b866628e92d74d277c90547da4a389cdecef291f89f7723745196ef95edce0aa8bb98731c283c17eba9e1e6684b02c1f1a140e7372550e1ed02b732a6e0fd5c7bb6b5e8f7446d2feab17a20e4b2015a06", 0x4) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x6000, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r4, 0xb21, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="44ebff80", @ANYRES16=r4, @ANYBLOB="00082bbd7000fbdbdf256a0000000500a20038000000040083000800ef000300000008000b010c00000014000400636169663000"/62], 0x44}, 0x1, 0x0, 0x0, 0x2000000}, 0x240000d4) 3.693741894s ago: executing program 1 (id=1607): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000180), 0x28000, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x0, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(r3, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r4) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x13, 0xfffffffffffffffa, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) clock_nanosleep$auto(0x8001, 0x9, 0x0, &(0x7f0000000240)={0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) 3.397028421s ago: executing program 3 (id=1608): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x8002e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x810441, 0x0) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/amidi2\x00', 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) 2.878385721s ago: executing program 2 (id=1610): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f682, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0xf, 0x3, 0x2) bpf$auto_BPF_MAP_FREEZE(0x16, &(0x7f0000000100)=@batch={0xa, 0x7f, 0x9, 0x800000, 0x18c000, r0, 0x8, 0x40}, 0x8001) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r2) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) rseq$auto(&(0x7f0000000000)={0xffff, 0x33, 0x9c, 0x2, 0x10001, 0x113, "5052cb8502f6b110a9da01dd045cde2413883dde7705f358f164daeefcc70fb33d648cfc9f61f1b83162d93f9f9def6c"}, 0x4, 0x438, 0x8) write$auto(0x3, 0x0, 0xfdef) 2.621602615s ago: executing program 0 (id=1611): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/bdi/1:11/power/autosuspend_delay_ms\x00', 0xc2700, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0x10, 0xfffffffffffffffa, 0x8003) socket(0x2, 0x3, 0xa) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/sctp/remaddr\x00', 0x101d00, 0x0) socketpair$auto(0x7, 0x3ff, 0xfffffffb, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0xa042, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10b801, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000002f, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0x400008, 0xffffffffffffff36, 0x14, 0xffffffffffffffff, 0x714) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/neigh/wlan1/mcast_solicit\x00', 0x2000, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x0, 0x3ff}) read$auto(r3, 0x0, 0x1ff) write$auto(0xffffffffffffffff, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) 2.05601059s ago: executing program 1 (id=1612): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x1a4) read$auto(r0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x123240, 0x0) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_OVS_DP_CMD_NEW(r1, 0x0, 0x80) mprotect$auto(0x0, 0x806121, 0x6) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4020aea5, 0x38) 1.950406849s ago: executing program 0 (id=1613): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x7, 0x9, 0x2, 0x4000]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) read$auto(r0, 0x0, 0x2000000000007) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000200)="aee0b8e7c69c10e0c15742274204589e770aa7bd9d154e2363b0a92cdbd7e1885256c7756ed772fccd69cc41139b9f49703273217b1e2a030229337f3a304580cdede355c5ece4a729acee9debbc3a43646fa0fad699a1d078e159824acc83f0394296878a879c334f1c7d2614a17b53f2b83d8b019f910d0f126e640828b27bdf06a634f84df5eb051358cc117b8b6f471c8587d3c2288847", 0x3}, 0x7) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000000)=""/65, 0x41) ioctl$auto_BLKTRACESETUP2(r1, 0xc0481273, &(0x7f0000000340)={"37f660e691fdf181026b1093d578faa753e25bc5deb594a318cca52051d2e74d", 0xfffe, 0x8, 0x1, 0x3, 0x6, 0x0}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2002}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x290, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_PACKET={0x12, 0x1, "825a1ab7157a657757b4ccdf46c5"}, @OVS_PACKET_ATTR_KEY={0x249, 0x2, 0x0, 0x1, [@typed={0x14, 0xdd, 0x0, 0x0, @ipv6=@loopback}, @generic="ec2f0ecc439ee759f2f0a52d41504cba70", @typed={0x8, 0xa8, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x1e, 0xf0, 0x0, 0x1, [@typed={0xc, 0x14f, 0x0, 0x0, @u64=0x80000001}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r2}, @typed={0x4, 0x100}, @generic="1ae0"]}, @nested={0x2a, 0xe3, 0x0, 0x1, [@nested={0x4, 0x6c}, @generic="fc85a0b3ccf065c419b1d93f4648f8e5a69c790e7ff96ddd0f751b030316366e60eb"]}, @nested={0x5b, 0xe3, 0x0, 0x1, [@nested={0x4, 0x15}, @generic="7316619b81fcbee916a98c13d76ba3b1b016f116aff09e609c7fa35118cf5c459f3ece759850a9b579e93febf7fc668ebb90c61d27bf0b94ac066a6bd781054d555f494d81eff093e0a7214f933596b6ea1059"]}, @nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0xf0, 0x0, 0x0, @uid}]}, @generic, @nested={0x14a, 0xf9, 0x0, 0x1, [@typed={0x6, 0x144, 0x0, 0x0, @str='[\x00'}, @typed={0x8, 0x9a, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x95}, @generic, @typed={0x8, 0x30, 0x0, 0x0, @u32}, @generic="dac89e0ea970c4046fbd851986af18a033d5971352aa8316c49c1a558c7ac1d084067c99", @nested={0x4, 0x2c}, @generic="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", @nested={0x4, 0x2b}]}, @nested={0x18, 0x95, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x130}, @typed={0x8, 0x14, 0x0, 0x0, @ipv4=@remote}]}]}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x1000006}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x5}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x290}, 0x1, 0x0, 0x0, 0x8041}, 0x4008084) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x20005, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) 1.914927841s ago: executing program 2 (id=1614): mmap$auto(0x0, 0x20009, 0x4000000000e2, 0x15, 0xffffffffffffffff, 0x8400) r0 = socket(0x2c, 0x3, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x50) r1 = socket(0x2b, 0x1, 0xba6) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = socket(0x2b, 0xa, 0xfffffffe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(0x0, r3) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000c00)=ANY=[@ANYBLOB="0005f326", @ANYRES16=r4, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r1, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRES16=r4, @ANYRES16=0x0, @ANYBLOB="00082bbd7000fddbdf250e000000fb2b364b9dd519badd1508074f17d1c495d6ddacc66b0389b3d3d32fc0226224b373cf95190b32a6abba5a95a242a153b373b24960c7998ad27bd401eb76373fe20e489f99ba9c123bea9a2089999405a2ef6103c9713f500e58fc7a03f2df9c0c68a6349348e247324310ea66060b1e219121f7752615ecbb3f717c09451c8164b7da6cb7960ea46e5045622f563218735f7fa80126feb413fe23e18ae15e5fb7b623e5d67ef91b0d1712c39f308a6fdf2d2185cd16006aa7cb3db51e586a5b97a4a7e350321feaef206cbacc71e7b2ae9a4f00"], 0xe8}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/cmdline\x00', 0x80000, 0x0) exit$auto(0x7) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x4) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/018/001\x00', 0x101202, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x800000000007, 0xd, 0x1, 0x7, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) write$auto(r2, &(0x7f00000003c0)='v\xca\xfe\xf3\x01\x01d1L\xff\x15\xba\xa1\xb7=*\xc1D-\xb3l\xc6\xab\xa6\xbd\xf8\xff\xff\v\xb5', 0x1) seccomp$auto_SECCOMP_SET_MODE_STRICT(0x0, 0x7f, 0x0) close_range$auto(0x2, r6, 0x101) unshare$auto(0x40000080) 1.622186597s ago: executing program 1 (id=1616): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptya5\x00', 0x62c00, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty34\x00', 0x2200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0xfffffffffffffffc, 0x20000000007fb3) 797.361159ms ago: executing program 0 (id=1617): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r2 = socket(0x18, 0x3, 0x2) accept$auto(r2, 0x0, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b5d", 0x25) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0xb49dc2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/file-nr\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f0000002180)=""/211, 0xd3) socket(0x6, 0x2, 0x80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x10084) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) bpf$auto(0x0, 0x0, 0x96) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) write$auto_proc_clear_refs_operations_internal(r4, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) setsockopt$auto(0x5, 0x104000000000010e, 0x2, 0x0, 0x16) 720.137713ms ago: executing program 3 (id=1618): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r2 = socket(0x18, 0x3, 0x2) accept$auto(r2, 0x0, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fd9b5d", 0x25) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0xb49dc2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/file-nr\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f0000002180)=""/211, 0xd3) socket(0x6, 0x2, 0x80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x10084) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) write$auto_proc_clear_refs_operations_internal(r4, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) setsockopt$auto(0x5, 0x104000000000010e, 0x2, 0x0, 0x16) 562.25073ms ago: executing program 2 (id=1619): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x4068aea3, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r1, 0xc0585611, r2) 113.664702ms ago: executing program 1 (id=1620): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) clock_nanosleep$auto(0x8000a, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa, 0x80000d3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x200000000062, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 2 (id=1621): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r2 = socket(0x18, 0x3, 0x2) accept$auto(r2, 0x0, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca0648", 0x21) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0xb49dc2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002140)='/proc/sys/fs/file-nr\x00', 0x0, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r3, &(0x7f0000002180)=""/211, 0xd3) socket(0x6, 0x2, 0x80000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x10084) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) bpf$auto(0x0, &(0x7f0000000340)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0xfa, 0x80}, 0x96) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) setsockopt$auto(0x5, 0x104000000000010e, 0x2, 0x0, 0x16) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        [ 510.815026][ T30] audit: type=1800 audit(4294967305.505:27): pid=13588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1474" name="features" dev="configfs" ino=50164 res=0 errno=0 [ 511.134931][T13581] bond0: option arp_interval: invalid value () [ 511.143190][T13581] bond0: option arp_interval: allowed values 0 - 2147483647 [ 511.463497][T13601] netlink: 'syz.2.1478': attribute type 32 has an invalid length. [ 511.485607][T13601] netlink: 'syz.2.1478': attribute type 33 has an invalid length. [ 511.518018][T13601] netlink: 'syz.2.1478': attribute type 35 has an invalid length. [ 511.527083][T13601] netlink: 'syz.2.1478': attribute type 37 has an invalid length. [ 511.535296][T13601] netlink: 'syz.2.1478': attribute type 39 has an invalid length. [ 511.546595][T13601] netlink: 'syz.2.1478': attribute type 40 has an invalid length. [ 511.555066][T13601] netlink: 'syz.2.1478': attribute type 41 has an invalid length. [ 511.567244][T13601] netlink: 'syz.2.1478': attribute type 44 has an invalid length. [ 511.576902][T13601] netlink: 'syz.2.1478': attribute type 46 has an invalid length. [ 511.588228][T13601] netlink: 'syz.2.1478': attribute type 47 has an invalid length. [ 511.596505][T13601] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1478'. [ 511.862453][T13614] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 514.809391][T13663] usb usb23: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 515.068938][T13672] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 515.991555][T13692] netlink: 'syz.3.1498': attribute type 11 has an invalid length. [ 516.000304][T13692] netlink: 'syz.3.1498': attribute type 11 has an invalid length. [ 516.008993][T13692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1498'. [ 516.019839][T13692] netlink: 'syz.3.1498': attribute type 11 has an invalid length. [ 516.045679][T13692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1498'. [ 516.055018][T13692] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1498'. [ 517.250431][T13723] zswap: compressor not available [ 517.504099][T13734] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 517.748208][T13751] Invalid ELF header magic: != ELF [ 518.987724][T13777] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 519.228449][T13782] ptrace attach of "./syz-executor exec"[13784] was attempted by "./syz-executor exec"[13782] [ 520.025642][T13802] HfR: entered promiscuous mode [ 520.110778][T13802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1518'. [ 520.120584][T13802] HfR: left promiscuous mode [ 520.704128][T13799] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 520.710693][T13799] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 520.718677][T13799] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 520.726540][T13799] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 520.748608][T13799] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 520.819232][T13799] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 522.077094][ T5867] Bluetooth: hci0: command 0x0406 tx timeout [ 522.750767][T13839] Bluetooth: hci1: command 0x0406 tx timeout [ 522.756804][T13839] Bluetooth: hci2: command 0x0406 tx timeout [ 522.817502][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 523.211400][T13850] FAULT_INJECTION: forcing a failure. [ 523.211400][T13850] name fail_futex, interval 1, probability 0, space 0, times 0 [ 523.232401][T13850] CPU: 0 UID: 0 PID: 13850 Comm: syz.3.1526 Tainted: G U syzkaller #0 PREEMPT(full) [ 523.232443][T13850] Tainted: [U]=USER [ 523.232453][T13850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 523.232468][T13850] Call Trace: [ 523.232478][T13850] [ 523.232488][T13850] dump_stack_lvl+0x16c/0x1f0 [ 523.232528][T13850] should_fail_ex+0x512/0x640 [ 523.232569][T13850] get_futex_key+0x1d0/0x1560 [ 523.232612][T13850] ? __pfx_get_futex_key+0x10/0x10 [ 523.232656][T13850] futex_wake+0xea/0x530 [ 523.232692][T13850] ? __pfx_futex_wake+0x10/0x10 [ 523.232725][T13850] ? __pfx_proc_reg_read+0x10/0x10 [ 523.232765][T13850] ? ksys_read+0x190/0x250 [ 523.232802][T13850] do_futex+0x1e3/0x350 [ 523.232833][T13850] ? __pfx_do_futex+0x10/0x10 [ 523.232872][T13850] __x64_sys_futex+0x1e0/0x4c0 [ 523.232904][T13850] ? fput+0x9b/0xd0 [ 523.232937][T13850] ? __pfx___x64_sys_futex+0x10/0x10 [ 523.232968][T13850] ? ksys_read+0x1ac/0x250 [ 523.232994][T13850] ? __pfx_ksys_read+0x10/0x10 [ 523.233035][T13850] do_syscall_64+0xcd/0x490 [ 523.233072][T13850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.233111][T13850] RIP: 0033:0x7f88b238ebe9 [ 523.233134][T13850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.233171][T13850] RSP: 002b:00007f88b05f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 523.233198][T13850] RAX: ffffffffffffffda RBX: 00007f88b25c5fa8 RCX: 00007f88b238ebe9 [ 523.233217][T13850] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88b25c5fac [ 523.233235][T13850] RBP: 00007f88b25c5fa0 R08: 00007f88b311e000 R09: 0000000000000000 [ 523.233253][T13850] R10: 00000000000000f7 R11: 0000000000000246 R12: 0000000000000000 [ 523.233270][T13850] R13: 00007f88b25c6038 R14: 00007ffd38986e90 R15: 00007ffd38986f78 [ 523.233308][T13850] [ 524.829057][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 524.898578][ T5871] Bluetooth: hci3: command 0x0406 tx timeout [ 526.993678][ T5869] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 527.004864][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: syz-executor Tainted: G U syzkaller #0 PREEMPT(full) [ 527.004904][ T5869] Tainted: [U]=USER [ 527.004913][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.004926][ T5869] Call Trace: [ 527.004935][ T5869] [ 527.004945][ T5869] dump_stack_lvl+0x16c/0x1f0 [ 527.004984][ T5869] dump_header+0x101/0x930 [ 527.005021][ T5869] oom_kill_process+0x272/0xa40 [ 527.005057][ T5869] out_of_memory+0x350/0x1700 [ 527.005095][ T5869] ? __pfx_out_of_memory+0x10/0x10 [ 527.005136][ T5869] mem_cgroup_out_of_memory+0x118/0x130 [ 527.005173][ T5869] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 527.005218][ T5869] ? do_raw_spin_unlock+0x172/0x230 [ 527.005262][ T5869] try_charge_memcg+0x72b/0xd50 [ 527.005298][ T5869] ? __pfx_try_charge_memcg+0x10/0x10 [ 527.005339][ T5869] ? find_held_lock+0x2b/0x80 [ 527.005371][ T5869] charge_memcg+0x8a/0x230 [ 527.005403][ T5869] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 527.005441][ T5869] __read_swap_cache_async+0x43e/0x5a0 [ 527.005475][ T5869] ? __pfx___read_swap_cache_async+0x10/0x10 [ 527.005502][ T5869] ? swp_swap_info+0xb0/0x130 [ 527.005533][ T5869] ? __pfx_swp_swap_info+0x10/0x10 [ 527.005575][ T5869] swap_cluster_readahead+0x3eb/0x710 [ 527.005611][ T5869] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 527.005676][ T5869] ? get_vma_policy+0x242/0x3c0 [ 527.005713][ T5869] swapin_readahead+0x13a/0xd60 [ 527.005752][ T5869] ? __pfx_swapin_readahead+0x10/0x10 [ 527.005777][ T5869] ? __filemap_get_folio+0x32b/0xc30 [ 527.005818][ T5869] ? swap_cache_get_folio+0x1df/0x450 [ 527.005847][ T5869] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 527.005879][ T5869] ? __pfx_get_swap_device+0x10/0x10 [ 527.005910][ T5869] ? do_swap_page+0x12e/0x6600 [ 527.005952][ T5869] do_swap_page+0x5c7/0x6600 [ 527.005990][ T5869] ? __lock_acquire+0x62e/0x1ce0 [ 527.006034][ T5869] ? __pfx_do_swap_page+0x10/0x10 [ 527.006074][ T5869] ? __pfx_default_wake_function+0x10/0x10 [ 527.006101][ T5869] ? __lock_acquire+0x62e/0x1ce0 [ 527.006137][ T5869] ? rcu_is_watching+0x12/0xc0 [ 527.006162][ T5869] ? ___pte_offset_map+0x2ad/0x4f0 [ 527.006203][ T5869] __handle_mm_fault+0x1719/0x2a50 [ 527.006241][ T5869] ? __pfx___handle_mm_fault+0x10/0x10 [ 527.006274][ T5869] ? lock_vma_under_rcu+0x1eb/0x530 [ 527.006313][ T5869] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 527.006350][ T5869] handle_mm_fault+0x589/0xd10 [ 527.006379][ T5869] ? trace_raw_output_exceptions+0x131/0x150 [ 527.006420][ T5869] do_user_addr_fault+0x60c/0x1370 [ 527.006462][ T5869] ? rcu_is_watching+0x12/0xc0 [ 527.006492][ T5869] exc_page_fault+0x5c/0xb0 [ 527.006526][ T5869] asm_exc_page_fault+0x26/0x30 [ 527.006551][ T5869] RIP: 0033:0x7f3e6c3b6a10 [ 527.006572][ T5869] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 527.006596][ T5869] RSP: 002b:00007ffff39121a8 EFLAGS: 00010246 [ 527.006618][ T5869] RAX: 0000000000000000 RBX: 00000000000005a4 RCX: 00007f3e6c3c14a5 [ 527.006634][ T5869] RDX: 00007ffff39121f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 527.006649][ T5869] RBP: 00007ffff391225c R08: 0000000000000000 R09: 0000000000000000 [ 527.006664][ T5869] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 527.006679][ T5869] R13: 00000000000927c0 R14: 00000000000808a4 R15: 00007ffff39122b0 [ 527.006715][ T5869] [ 527.006725][ T5869] memory: usage 3072kB, limit 3072kB, failcnt 155021 [ 527.089241][T13938] netlink: 'syz.3.1545': attribute type 1 has an invalid length. [ 527.438839][T13938] netlink: 322 bytes leftover after parsing attributes in process `syz.3.1545'. [ 527.498685][ T5869] memory+swap: usage 3412kB, limit 9007199254740988kB, failcnt 0 [ 527.539769][ T5869] kmem: usage 3024kB, limit 9007199254740988kB, failcnt 0 [ 527.603522][ T5869] Memory cgroup stats for /syz0: [ 527.603685][ T5869] cache 0 [ 527.612258][ T5869] rss 0 [ 527.615039][ T5869] rss_huge 0 [ 527.618248][ T5869] shmem 0 [ 527.621952][ T5869] mapped_file 0 [ 527.625512][ T5869] dirty 0 [ 527.628593][ T5869] writeback 0 [ 527.633180][ T5869] workingset_refault_anon 7696 [ 527.638312][ T5869] workingset_refault_file 38417 [ 527.643647][ T5869] swap 348160 [ 527.646949][ T5869] swapcached 49152 [ 527.651199][ T5869] pgpgin 277103 [ 527.663595][ T5869] pgpgout 278624 [ 527.667166][ T5869] pgfault 335181 [ 527.676008][ T5869] pgmajfault 5392 [ 527.680256][ T5869] inactive_anon 0 [ 527.686223][ T5869] active_anon 49152 [ 527.765862][ T5869] inactive_file 0 [ 527.769541][ T5869] active_file 0 [ 527.801586][ T5869] unevictable 0 [ 527.809853][ T5869] hierarchical_memory_limit 3145728 [ 527.816277][ T5869] hierarchical_memsw_limit 9223372036854771712 [ 527.816949][T13948] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 527.875029][ T5869] total_cache 0 [ 527.878631][ T5869] total_rss 0 [ 527.882440][ T5869] total_rss_huge 0 [ 527.886171][ T5869] total_shmem 0 [ 527.889719][ T5869] total_mapped_file 0 [ 527.894335][ T5869] total_dirty 0 [ 527.902928][ T5869] total_writeback 0 [ 527.906885][ T5869] total_workingset_refault_anon 7696 [ 527.916187][ T5869] total_workingset_refault_file 38417 [ 527.947766][ T5869] total_swap 348160 [ 527.958472][ T5869] total_swapcached 49152 [ 527.966399][ T5869] total_pgpgin 277103 [ 527.991511][ T5869] total_pgpgout 278624 [ 528.004631][ T5869] total_pgfault 335181 [ 528.008902][ T5869] total_pgmajfault 5392 [ 528.013791][ T5869] total_inactive_anon 0 [ 528.018036][ T5869] total_active_anon 49152 [ 528.117823][ T5869] total_inactive_file 0 [ 528.124519][ T5869] total_active_file 0 [ 528.128697][ T5869] total_unevictable 0 [ 528.133279][ T5869] anon_cost 0 [ 528.136725][ T5869] file_cost 0 [ 528.142956][ T5869] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1540,pid=13912,uid=0 [ 528.196011][ T5869] Memory cgroup out of memory: Killed process 13912 (syz.0.1540) total-vm:108572kB, anon-rss:1024kB, file-rss:27188kB, shmem-rss:0kB, UID:0 pgtables:160kB oom_score_adj:1000 [ 528.731260][T13956] netlink: 'syz.0.1549': attribute type 11 has an invalid length. [ 528.739205][T13956] netlink: 'syz.0.1549': attribute type 11 has an invalid length. [ 530.578370][T13989] FAULT_INJECTION: forcing a failure. [ 530.578370][T13989] name fail_futex, interval 1, probability 0, space 0, times 0 [ 530.611914][T13989] CPU: 1 UID: 0 PID: 13989 Comm: syz.3.1554 Tainted: G U syzkaller #0 PREEMPT(full) [ 530.611957][T13989] Tainted: [U]=USER [ 530.611966][T13989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.611982][T13989] Call Trace: [ 530.611992][T13989] [ 530.612002][T13989] dump_stack_lvl+0x16c/0x1f0 [ 530.612043][T13989] should_fail_ex+0x512/0x640 [ 530.612082][T13989] get_futex_key+0x1d0/0x1560 [ 530.612120][T13989] ? __pfx_get_futex_key+0x10/0x10 [ 530.612164][T13989] futex_wake+0xea/0x530 [ 530.612201][T13989] ? rcu_is_watching+0x12/0xc0 [ 530.612229][T13989] ? __pfx_futex_wake+0x10/0x10 [ 530.612269][T13989] ? kmem_cache_free+0x2d1/0x4d0 [ 530.612296][T13989] ? fd_install+0x225/0x750 [ 530.612322][T13989] ? putname+0x154/0x1a0 [ 530.612362][T13989] do_futex+0x1e3/0x350 [ 530.612395][T13989] ? __pfx_do_futex+0x10/0x10 [ 530.612439][T13989] __x64_sys_futex+0x1e0/0x4c0 [ 530.612474][T13989] ? __x64_sys_openat+0x174/0x210 [ 530.612512][T13989] ? __pfx___x64_sys_futex+0x10/0x10 [ 530.612559][T13989] do_syscall_64+0xcd/0x490 [ 530.612596][T13989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.612624][T13989] RIP: 0033:0x7f88b238ebe9 [ 530.612645][T13989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.612672][T13989] RSP: 002b:00007f88b05d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 530.612697][T13989] RAX: ffffffffffffffda RBX: 00007f88b25c6098 RCX: 00007f88b238ebe9 [ 530.612716][T13989] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88b25c609c [ 530.612733][T13989] RBP: 00007f88b25c6090 R08: 00007f88b311e000 R09: 0000000000000000 [ 530.612757][T13989] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000 [ 530.612774][T13989] R13: 00007f88b25c6128 R14: 00007ffd38986e90 R15: 00007ffd38986f78 [ 530.612811][T13989] [ 531.313018][ T30] audit: type=1804 audit(4294967300.228:28): pid=14015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1560" name="/newroot/405/file0" dev="tmpfs" ino=2125 res=1 errno=0 [ 531.901064][T14033] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 533.525886][ T5869] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 533.537102][ T5869] CPU: 0 UID: 0 PID: 5869 Comm: syz-executor Tainted: G U syzkaller #0 PREEMPT(full) [ 533.537137][ T5869] Tainted: [U]=USER [ 533.537146][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.537159][ T5869] Call Trace: [ 533.537166][ T5869] [ 533.537175][ T5869] dump_stack_lvl+0x16c/0x1f0 [ 533.537212][ T5869] dump_header+0x101/0x930 [ 533.537245][ T5869] oom_kill_process+0x272/0xa40 [ 533.537281][ T5869] out_of_memory+0x350/0x1700 [ 533.537319][ T5869] ? __pfx_out_of_memory+0x10/0x10 [ 533.537360][ T5869] mem_cgroup_out_of_memory+0x118/0x130 [ 533.537397][ T5869] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 533.537443][ T5869] ? do_raw_spin_unlock+0x172/0x230 [ 533.537486][ T5869] try_charge_memcg+0x72b/0xd50 [ 533.537523][ T5869] ? __pfx_try_charge_memcg+0x10/0x10 [ 533.537568][ T5869] ? find_held_lock+0x2b/0x80 [ 533.537600][ T5869] charge_memcg+0x8a/0x230 [ 533.537630][ T5869] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 533.537669][ T5869] __read_swap_cache_async+0x43e/0x5a0 [ 533.537702][ T5869] ? __pfx___read_swap_cache_async+0x10/0x10 [ 533.537728][ T5869] ? __pfx_debug_object_activate+0x10/0x10 [ 533.537755][ T5869] ? swp_swap_info+0xce/0x130 [ 533.537787][ T5869] ? __pfx_swp_swap_info+0x10/0x10 [ 533.537828][ T5869] swap_cluster_readahead+0x4e1/0x710 [ 533.537865][ T5869] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 533.537891][ T5869] ? css_rstat_updated+0x1c2/0x510 [ 533.537940][ T5869] ? get_vma_policy+0x242/0x3c0 [ 533.537977][ T5869] swapin_readahead+0x13a/0xd60 [ 533.538016][ T5869] ? __pfx_swapin_readahead+0x10/0x10 [ 533.538041][ T5869] ? __filemap_get_folio+0x32b/0xc30 [ 533.538082][ T5869] ? swap_cache_get_folio+0x1df/0x450 [ 533.538110][ T5869] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 533.538134][ T5869] ? __pfx_get_swap_device+0x10/0x10 [ 533.538166][ T5869] ? do_swap_page+0x12e/0x6600 [ 533.538207][ T5869] do_swap_page+0x5c7/0x6600 [ 533.538245][ T5869] ? __lock_acquire+0x62e/0x1ce0 [ 533.538289][ T5869] ? __pfx_do_swap_page+0x10/0x10 [ 533.538327][ T5869] ? __pfx_default_wake_function+0x10/0x10 [ 533.538354][ T5869] ? __lock_acquire+0x62e/0x1ce0 [ 533.538390][ T5869] ? rcu_is_watching+0x12/0xc0 [ 533.538415][ T5869] ? ___pte_offset_map+0x2ad/0x4f0 [ 533.538455][ T5869] __handle_mm_fault+0x1719/0x2a50 [ 533.538493][ T5869] ? __pfx___handle_mm_fault+0x10/0x10 [ 533.538525][ T5869] ? lock_vma_under_rcu+0x1eb/0x530 [ 533.538569][ T5869] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 533.538593][ T5869] ? get_timespec64+0x136/0x1b0 [ 533.538631][ T5869] handle_mm_fault+0x589/0xd10 [ 533.538660][ T5869] ? trace_raw_output_exceptions+0x131/0x150 [ 533.538700][ T5869] do_user_addr_fault+0x60c/0x1370 [ 533.538740][ T5869] ? rcu_is_watching+0x12/0xc0 [ 533.538770][ T5869] exc_page_fault+0x5c/0xb0 [ 533.538802][ T5869] asm_exc_page_fault+0x26/0x30 [ 533.538826][ T5869] RIP: 0033:0x7f3e6c3c14a8 [ 533.538847][ T5869] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 533.538870][ T5869] RSP: 002b:00007ffff39121b0 EFLAGS: 00010293 [ 533.538892][ T5869] RAX: 0000000000000000 RBX: 00000000000005bb RCX: 00007f3e6c3c14a5 [ 533.538908][ T5869] RDX: 00007ffff39121f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 533.538923][ T5869] RBP: 00007ffff391225c R08: 0000000000000000 R09: 0000000000000000 [ 533.538939][ T5869] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 533.538954][ T5869] R13: 00000000000927c0 R14: 00000000000821f8 R15: 00007ffff39122b0 [ 533.538990][ T5869] [ 533.539006][ T5869] memory: usage 3072kB, limit 3072kB, failcnt 155192 [ 533.675444][T14062] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 533.932909][ T5869] memory+swap: usage 3416kB, limit 9007199254740988kB, failcnt 0 [ 534.019429][ T5869] kmem: usage 996kB, limit 9007199254740988kB, failcnt 0 [ 534.049161][ T5869] Memory cgroup stats for /syz0: [ 534.049323][ T5869] cache 0 [ 534.063305][ T5869] rss 2117632 [ 534.066617][ T5869] rss_huge 0 [ 534.084014][ T5869] shmem 0 [ 534.086991][ T5869] mapped_file 0 [ 534.090458][ T5869] dirty 0 [ 534.102929][ T5869] writeback 0 [ 534.106560][ T5869] workingset_refault_anon 7880 [ 534.132944][ T5869] workingset_refault_file 38428 [ 534.140898][ T5869] swap 352256 [ 534.150053][ T5869] swapcached 8192 [ 534.160132][ T5869] pgpgin 278065 [ 534.164635][ T5869] pgpgout 279079 [ 534.168194][ T5869] pgfault 339213 [ 534.172629][ T5869] pgmajfault 5541 [ 534.178476][ T5869] inactive_anon 8192 [ 534.182389][ T5869] active_anon 0 [ 534.189057][ T5869] inactive_file 0 [ 534.192784][ T5869] active_file 0 [ 534.199629][ T5869] unevictable 2117632 [ 534.203928][ T5869] hierarchical_memory_limit 3145728 [ 534.209134][ T5869] hierarchical_memsw_limit 9223372036854771712 [ 534.324725][ T5869] total_cache 0 [ 534.353213][ T5869] total_rss 2117632 [ 534.357060][ T5869] total_rss_huge 0 [ 534.379687][ T5869] total_shmem 0 [ 534.391104][ T5869] total_mapped_file 0 [ 534.391155][ T5869] total_dirty 0 [ 534.391166][ T5869] total_writeback 0 [ 534.391177][ T5869] total_workingset_refault_anon 7880 [ 534.391189][ T5869] total_workingset_refault_file 38428 [ 534.391202][ T5869] total_swap 352256 [ 534.391212][ T5869] total_swapcached 8192 [ 534.391222][ T5869] total_pgpgin 278065 [ 534.391233][ T5869] total_pgpgout 279079 [ 534.391244][ T5869] total_pgfault 339213 [ 534.391255][ T5869] total_pgmajfault 5541 [ 534.391266][ T5869] total_inactive_anon 8192 [ 534.391278][ T5869] total_active_anon 0 [ 534.391289][ T5869] total_inactive_file 0 [ 534.391300][ T5869] total_active_file 0 [ 534.391311][ T5869] total_unevictable 2117632 [ 534.391323][ T5869] anon_cost 0 [ 534.391333][ T5869] file_cost 0 [ 534.391345][ T5869] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1567,pid=14053,uid=0 [ 534.391558][ T5869] Memory cgroup out of memory: Killed process 14053 (syz.0.1567) total-vm:105992kB, anon-rss:3060kB, file-rss:20864kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 534.920486][T14081] usb usb36: usbfs: process 14081 (syz.1.1574) did not claim interface 0 before use [ 535.104386][T14085] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 535.453952][T14093] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 535.686738][T14099] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 535.901050][T14093] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 536.378208][T14108] FAULT_INJECTION: forcing a failure. [ 536.378208][T14108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 536.450939][T14108] CPU: 1 UID: 0 PID: 14108 Comm: syz.1.1581 Tainted: G U syzkaller #0 PREEMPT(full) [ 536.450967][T14108] Tainted: [U]=USER [ 536.450972][T14108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.450981][T14108] Call Trace: [ 536.450988][T14108] [ 536.450994][T14108] dump_stack_lvl+0x16c/0x1f0 [ 536.451019][T14108] should_fail_ex+0x512/0x640 [ 536.451042][T14108] strncpy_from_user+0x3b/0x2e0 [ 536.451064][T14108] getname_flags.part.0+0x8f/0x550 [ 536.451092][T14108] getname_flags+0x93/0xf0 [ 536.451108][T14108] do_sys_openat2+0xb8/0x1d0 [ 536.451130][T14108] ? __pfx_do_sys_openat2+0x10/0x10 [ 536.451159][T14108] __x64_sys_open+0x153/0x1e0 [ 536.451180][T14108] ? __pfx___x64_sys_open+0x10/0x10 [ 536.451206][T14108] ? rcu_is_watching+0x12/0xc0 [ 536.451222][T14108] do_syscall_64+0xcd/0x490 [ 536.451243][T14108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.451258][T14108] RIP: 0033:0x7ff20a38ebe9 [ 536.451270][T14108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.451283][T14108] RSP: 002b:00007ff20b2d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 536.451297][T14108] RAX: ffffffffffffffda RBX: 00007ff20a5c6090 RCX: 00007ff20a38ebe9 [ 536.451307][T14108] RDX: 0000000000000045 RSI: 000000000012ba7e RDI: 0000200000000000 [ 536.451316][T14108] RBP: 00007ff20a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 536.451325][T14108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.451341][T14108] R13: 00007ff20a5c6128 R14: 00007ff20a5c6090 R15: 00007fff052074c8 [ 536.451360][T14108] [ 538.035074][T14135] ALSA: mixer_oss: invalid OSS volume '' [ 540.533425][ T30] audit: type=1800 audit(4294967305.175:29): pid=14195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1598" name="dummy_udc" dev="gadgetfs" ino=5858 res=0 errno=0 [ 543.967156][T14258] Invalid ELF header magic: != ELF [ 545.598462][T14285] FAULT_INJECTION: forcing a failure. [ 545.598462][T14285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 545.665064][T14285] CPU: 0 UID: 0 PID: 14285 Comm: syz.2.1610 Tainted: G U syzkaller #0 PREEMPT(full) [ 545.665107][T14285] Tainted: [U]=USER [ 545.665116][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.665129][T14285] Call Trace: [ 545.665138][T14285] [ 545.665148][T14285] dump_stack_lvl+0x16c/0x1f0 [ 545.665186][T14285] should_fail_ex+0x512/0x640 [ 545.665229][T14285] should_fail_alloc_page+0xe7/0x130 [ 545.665266][T14285] prepare_alloc_pages+0x3c2/0x610 [ 545.665301][T14285] ? rcu_is_watching+0x12/0xc0 [ 545.665337][T14285] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 545.665368][T14285] ? __lock_acquire+0xb97/0x1ce0 [ 545.665424][T14285] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 545.665458][T14285] ? do_raw_spin_lock+0x12c/0x2b0 [ 545.665499][T14285] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 545.665536][T14285] ? find_held_lock+0x2b/0x80 [ 545.665573][T14285] ? __lock_acquire+0xb97/0x1ce0 [ 545.665607][T14285] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 545.665644][T14285] ? policy_nodemask+0xea/0x4e0 [ 545.665678][T14285] alloc_pages_mpol+0x1fb/0x550 [ 545.665713][T14285] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 545.665757][T14285] folio_alloc_mpol_noprof+0x36/0x2f0 [ 545.665797][T14285] shmem_alloc_folio+0x135/0x160 [ 545.665840][T14285] shmem_alloc_and_add_folio+0x499/0xc20 [ 545.665878][T14285] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 545.665914][T14285] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 545.665953][T14285] shmem_get_folio_gfp+0x67f/0x1600 [ 545.665992][T14285] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 545.666021][T14285] ? __page_table_check_ptes_set+0x1ae/0x420 [ 545.666060][T14285] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 545.666091][T14285] ? const_folio_flags+0x5b/0x100 [ 545.666137][T14285] shmem_fault+0x1fe/0xa30 [ 545.666170][T14285] ? __pfx_shmem_fault+0x10/0x10 [ 545.666199][T14285] ? __lock_acquire+0x62e/0x1ce0 [ 545.666239][T14285] ? __lock_acquire+0xb97/0x1ce0 [ 545.666281][T14285] ? __pfx_filemap_map_pages+0x10/0x10 [ 545.666311][T14285] __do_fault+0x10a/0x490 [ 545.666346][T14285] ? __pfx_filemap_map_pages+0x10/0x10 [ 545.666374][T14285] do_pte_missing+0xf50/0x3ba0 [ 545.666412][T14285] ? find_held_lock+0x2b/0x80 [ 545.666440][T14285] ? __handle_mm_fault+0x14fd/0x2a50 [ 545.666474][T14285] __handle_mm_fault+0x152a/0x2a50 [ 545.666508][T14285] ? mt_find+0x3ef/0xa30 [ 545.666550][T14285] ? __pfx___handle_mm_fault+0x10/0x10 [ 545.666576][T14285] ? __pfx_mt_find+0x10/0x10 [ 545.666635][T14285] ? find_vma+0xbf/0x140 [ 545.666667][T14285] ? __pfx_find_vma+0x10/0x10 [ 545.666705][T14285] handle_mm_fault+0x589/0xd10 [ 545.666734][T14285] ? trace_raw_output_exceptions+0x131/0x150 [ 545.666776][T14285] do_user_addr_fault+0x7a6/0x1370 [ 545.666820][T14285] ? rcu_is_watching+0x12/0xc0 [ 545.666852][T14285] exc_page_fault+0x5c/0xb0 [ 545.666885][T14285] asm_exc_page_fault+0x26/0x30 [ 545.666911][T14285] RIP: 0010:__get_user_1+0x14/0x30 [ 545.666938][T14285] Code: 82 18 04 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <0f> b6 10 31 c0 0f 01 ca e9 4f 18 04 00 66 66 2e 0f 1f 84 00 00 00 [ 545.666962][T14285] RSP: 0018:ffffc9000b5f7c00 EFLAGS: 00050287 [ 545.666984][T14285] RAX: 0000000000004000 RBX: 0000000000004000 RCX: 000000000000fdef [ 545.667001][T14285] RDX: 00007ffffffff000 RSI: ffffffff84958821 RDI: ffffffff8c162f00 [ 545.667018][T14285] RBP: ffff888023b9f000 R08: 0f4fac54c7c2aa36 R09: 0000000000000001 [ 545.667036][T14285] R10: 0000000000000004 R11: 0000000000000000 R12: 000000000000bdef [ 545.667051][T14285] R13: 0000000000003e40 R14: ffffed1004773e61 R15: 0000000000003fff [ 545.667082][T14285] ? tomoyo_write_control+0x321/0x1430 [ 545.667113][T14285] tomoyo_write_control+0x336/0x1430 [ 545.667156][T14285] ? __pfx_tomoyo_write_control+0x10/0x10 [ 545.667193][T14285] ? __pfx_tomoyo_write+0x10/0x10 [ 545.667227][T14285] vfs_write+0x29d/0x11d0 [ 545.667263][T14285] ? __pfx___mutex_lock+0x10/0x10 [ 545.667298][T14285] ? __pfx_vfs_write+0x10/0x10 [ 545.667340][T14285] ? __fget_files+0x20e/0x3c0 [ 545.667380][T14285] ksys_write+0x12a/0x250 [ 545.667416][T14285] ? __pfx_ksys_write+0x10/0x10 [ 545.667458][T14285] do_syscall_64+0xcd/0x490 [ 545.667497][T14285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.667521][T14285] RIP: 0033:0x7f639738ebe9 [ 545.667544][T14285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.667569][T14285] RSP: 002b:00007f6398288038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 545.667593][T14285] RAX: ffffffffffffffda RBX: 00007f63975c5fa0 RCX: 00007f639738ebe9 [ 545.667607][T14285] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 545.667621][T14285] RBP: 00007f6397411e19 R08: 0000000000000000 R09: 0000000000000000 [ 545.667636][T14285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.667652][T14285] R13: 00007f63975c6038 R14: 00007f63975c5fa0 R15: 00007ffcc83b4798 [ 545.667690][T14285] [ 547.057907][T14294] kexec: Could not allocate control_code_buffer [ 548.361532][T14328] ================================================================== [ 548.361551][T14328] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 548.361585][T14328] Write of size 8 at addr ffffc90003979be0 by task syz.1.1620/14328 [ 548.361608][T14328] [ 548.361621][T14328] CPU: 1 UID: 0 PID: 14328 Comm: syz.1.1620 Tainted: G U syzkaller #0 PREEMPT(full) [ 548.361658][T14328] Tainted: [U]=USER [ 548.361667][T14328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.361680][T14328] Call Trace: [ 548.361689][T14328] [ 548.361699][T14328] dump_stack_lvl+0x116/0x1f0 [ 548.361733][T14328] print_report+0xcd/0x630 [ 548.361765][T14328] ? __virt_addr_valid+0x81/0x610 [ 548.361799][T14328] ? sys_imageblit+0x1a6f/0x1e60 [ 548.361822][T14328] kasan_report+0xe0/0x110 [ 548.361853][T14328] ? sys_imageblit+0x1a6f/0x1e60 [ 548.361882][T14328] sys_imageblit+0x1a6f/0x1e60 [ 548.361908][T14328] ? __lock_acquire+0xb97/0x1ce0 [ 548.361942][T14328] ? __pfx_sys_imageblit+0x10/0x10 [ 548.361970][T14328] ? __lock_acquire+0xb97/0x1ce0 [ 548.362001][T14328] ? find_held_lock+0x2b/0x80 [ 548.362028][T14328] ? lock_acquire+0x179/0x350 [ 548.362058][T14328] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 548.362089][T14328] bit_putcs+0x90f/0xde0 [ 548.362130][T14328] ? __pfx_bit_putcs+0x10/0x10 [ 548.362167][T14328] ? fb_get_color_depth+0x120/0x250 [ 548.362208][T14328] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.362248][T14328] ? __pfx_bit_putcs+0x10/0x10 [ 548.362281][T14328] fbcon_putcs+0x384/0x4a0 [ 548.362311][T14328] do_update_region+0x2e6/0x3f0 [ 548.362339][T14328] invert_screen+0x1e4/0x590 [ 548.362370][T14328] ? __pfx_invert_screen+0x10/0x10 [ 548.362400][T14328] ? __pfx_complement_pos+0x10/0x10 [ 548.362436][T14328] set_selection_kernel+0xd23/0x14a0 [ 548.362465][T14328] ? bpf_lsm_capable+0x9/0x10 [ 548.362494][T14328] ? security_capable+0x7e/0x260 [ 548.362522][T14328] set_selection_user+0xe8/0x140 [ 548.362550][T14328] ? __pfx_set_selection_user+0x10/0x10 [ 548.362582][T14328] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.362619][T14328] tioclinux+0x2b1/0x640 [ 548.362654][T14328] vt_ioctl+0x1fdf/0x30a0 [ 548.362678][T14328] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.362713][T14328] ? __pfx_vt_ioctl+0x10/0x10 [ 548.362739][T14328] ? tomoyo_path_number_perm+0x295/0x580 [ 548.362772][T14328] ? tomoyo_path_number_perm+0x18d/0x580 [ 548.362805][T14328] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 548.362838][T14328] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.362875][T14328] ? tty_jobctrl_ioctl+0x152/0xe00 [ 548.362902][T14328] ? __pfx_vt_ioctl+0x10/0x10 [ 548.362926][T14328] tty_ioctl+0x661/0x1680 [ 548.362960][T14328] ? __pfx_tty_ioctl+0x10/0x10 [ 548.362998][T14328] ? find_held_lock+0x2b/0x80 [ 548.363023][T14328] ? hook_file_ioctl_common+0x145/0x410 [ 548.363059][T14328] ? __fget_files+0x20e/0x3c0 [ 548.363093][T14328] ? __pfx_tty_ioctl+0x10/0x10 [ 548.363125][T14328] __x64_sys_ioctl+0x18b/0x210 [ 548.363160][T14328] do_syscall_64+0xcd/0x490 [ 548.363201][T14328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.363228][T14328] RIP: 0033:0x7ff20a38ebe9 [ 548.363248][T14328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.363287][T14328] RSP: 002b:00007ff20b2f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.363314][T14328] RAX: ffffffffffffffda RBX: 00007ff20a5c5fa0 RCX: 00007ff20a38ebe9 [ 548.363332][T14328] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000001 [ 548.363348][T14328] RBP: 00007ff20a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 548.363365][T14328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.363381][T14328] R13: 00007ff20a5c6038 R14: 00007ff20a5c5fa0 R15: 00007fff052074c8 [ 548.363408][T14328] [ 548.363418][T14328] [ 548.363426][T14328] The buggy address belongs to a vmalloc virtual mapping [ 548.363445][T14328] Memory state around the buggy address: [ 548.363461][T14328] ffffc90003979a80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 548.363480][T14328] ffffc90003979b00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 548.363500][T14328] >ffffc90003979b80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 548.363515][T14328] ^ [ 548.363532][T14328] ffffc90003979c00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 548.363551][T14328] ffffc90003979c80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 548.363567][T14328] ================================================================== [ 548.363689][T14328] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 548.363711][T14328] CPU: 1 UID: 0 PID: 14328 Comm: syz.1.1620 Tainted: G U syzkaller #0 PREEMPT(full) [ 548.363750][T14328] Tainted: [U]=USER [ 548.363760][T14328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.363775][T14328] Call Trace: [ 548.363784][T14328] [ 548.363795][T14328] dump_stack_lvl+0x3d/0x1f0 [ 548.363832][T14328] vpanic+0x6e8/0x7a0 [ 548.363868][T14328] ? __pfx_vpanic+0x10/0x10 [ 548.363904][T14328] ? __pfx_vprintk_emit+0x10/0x10 [ 548.363936][T14328] ? sys_imageblit+0x1a6f/0x1e60 [ 548.363961][T14328] panic+0xca/0xd0 [ 548.363995][T14328] ? __pfx_panic+0x10/0x10 [ 548.364030][T14328] ? sys_imageblit+0x1a6f/0x1e60 [ 548.364069][T14328] ? preempt_schedule_common+0x44/0xc0 [ 548.364102][T14328] ? preempt_schedule_thunk+0x16/0x30 [ 548.364142][T14328] check_panic_on_warn+0xab/0xb0 [ 548.364180][T14328] end_report+0x107/0x170 [ 548.364266][T14328] kasan_report+0xee/0x110 [ 548.364300][T14328] ? sys_imageblit+0x1a6f/0x1e60 [ 548.364330][T14328] sys_imageblit+0x1a6f/0x1e60 [ 548.364358][T14328] ? __lock_acquire+0xb97/0x1ce0 [ 548.364392][T14328] ? __pfx_sys_imageblit+0x10/0x10 [ 548.364420][T14328] ? __lock_acquire+0xb97/0x1ce0 [ 548.364491][T14328] ? find_held_lock+0x2b/0x80 [ 548.364526][T14328] ? lock_acquire+0x179/0x350 [ 548.364560][T14328] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 548.364608][T14328] bit_putcs+0x90f/0xde0 [ 548.364653][T14328] ? __pfx_bit_putcs+0x10/0x10 [ 548.364696][T14328] ? fb_get_color_depth+0x120/0x250 [ 548.364733][T14328] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.364773][T14328] ? __pfx_bit_putcs+0x10/0x10 [ 548.364807][T14328] fbcon_putcs+0x384/0x4a0 [ 548.364840][T14328] do_update_region+0x2e6/0x3f0 [ 548.364875][T14328] invert_screen+0x1e4/0x590 [ 548.364909][T14328] ? __pfx_invert_screen+0x10/0x10 [ 548.364943][T14328] ? __pfx_complement_pos+0x10/0x10 [ 548.364983][T14328] set_selection_kernel+0xd23/0x14a0 [ 548.365014][T14328] ? bpf_lsm_capable+0x9/0x10 [ 548.365040][T14328] ? security_capable+0x7e/0x260 [ 548.365069][T14328] set_selection_user+0xe8/0x140 [ 548.365100][T14328] ? __pfx_set_selection_user+0x10/0x10 [ 548.365132][T14328] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.365170][T14328] tioclinux+0x2b1/0x640 [ 548.365250][T14328] vt_ioctl+0x1fdf/0x30a0 [ 548.365281][T14328] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.365317][T14328] ? __pfx_vt_ioctl+0x10/0x10 [ 548.365343][T14328] ? tomoyo_path_number_perm+0x295/0x580 [ 548.365379][T14328] ? tomoyo_path_number_perm+0x18d/0x580 [ 548.365411][T14328] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 548.365445][T14328] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 548.365479][T14328] ? tty_jobctrl_ioctl+0x152/0xe00 [ 548.365504][T14328] ? __pfx_vt_ioctl+0x10/0x10 [ 548.365527][T14328] tty_ioctl+0x661/0x1680 [ 548.365558][T14328] ? __pfx_tty_ioctl+0x10/0x10 [ 548.365594][T14328] ? find_held_lock+0x2b/0x80 [ 548.365619][T14328] ? hook_file_ioctl_common+0x145/0x410 [ 548.365656][T14328] ? __fget_files+0x20e/0x3c0 [ 548.365685][T14328] ? __pfx_tty_ioctl+0x10/0x10 [ 548.365718][T14328] __x64_sys_ioctl+0x18b/0x210 [ 548.365758][T14328] do_syscall_64+0xcd/0x490 [ 548.365792][T14328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.365819][T14328] RIP: 0033:0x7ff20a38ebe9 [ 548.365840][T14328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.365864][T14328] RSP: 002b:00007ff20b2f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 548.365890][T14328] RAX: ffffffffffffffda RBX: 00007ff20a5c5fa0 RCX: 00007ff20a38ebe9 [ 548.365907][T14328] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000001 [ 548.365923][T14328] RBP: 00007ff20a411e19 R08: 0000000000000000 R09: 0000000000000000 [ 548.365939][T14328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.365955][T14328] R13: 00007ff20a5c6038 R14: 00007ff20a5c5fa0 R15: 00007fff052074c8 [ 548.365983][T14328] [ 548.366253][T14328] Kernel Offset: disabled