last executing test programs: 11.054037459s ago: executing program 2 (id=3250): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x24000000) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2000d, 0x8, 0xeb1, 0x404, 0x80000000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001bc0)="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", 0x850) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0xcfb7, 0x9, 0x6]}, 0x0) wait4$auto(r3, 0x0, 0x80000001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x282403, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x8008, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) 8.9910926s ago: executing program 2 (id=3254): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, r0, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x9, 0x400008, 0xdf, 0x19, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001040), r1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev*]\x8b\x97/0T\xa8\x87/audio1\x04VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xcc\xb7\xd2S\xcb\xfa\xa1\xd8\xb1Z|\nGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x0e\xa8\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\xe2\xae,\xb7\xff\x87\xff6C!\x94\xfb/\x91\xf8E\xefq\x92\xce/\xd7\xdc\xa0[\x86\xee\xd9I\xc9G\x89\x1c\x00\x03\xfc\xc6\xa2*y\xa2\xbca\x98V\xe7WC\xfdL9I}\x14\xfcaL*cAk\xb5%\x0f\xf5\xbbO\xcc\xe3x\xbc\xcc\xa8\"\xe9\xbbr\x05\xbf\xd7\x99\x0e\xc5\xf9s\t\xadn\xb2~\xb7PI\x15\xab\xccSj\xfeSV\x12\x96\x1f\xf4[\xa1\xb5)\r\x80\x00\xf2\xdbO\xb5\x04\a\x85\xa8\x05\xc5\xb2>\xf6\xe0(y\x95)/\x18M\xfac\xad\xdc\a\x9f\xba\xc2\xbc:\xccr\xf2\xb5\xb1\xc63\xef\xc4\xf2\x7f\xd1_\x80\xf6\x9d{\xb1\x97\'\xb3\xb8\xa1\xf28g\x1c\x7f\x86\xbf\x93R\xc2\xe1\x88\xd5\x95\xdc\x1dG\x9b|?\xcb\xe7\xaf\xaa\xd87\x98\xbam\xa5n4\xe0\xdb\xd7$\x84\xbb\xe5\x1f\x11\xba7\xd5G_\xe7\xc8\x02\xf9\xff\xcfD\x1d\xfc\x0e\xc7$\xe5\\\xf5^bY5Lz\xd8\xb6\x99C', 0x80000007) r3 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) write$auto(r2, 0x0, 0x3) ioctl$auto_SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) statmount$auto(0x0, 0x0, 0x10002, 0x7) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r3, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r4 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000d40)=""/16, 0x10) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x200000, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x1a9442, 0x0) mlockall$auto(0x7) socket(0x1e, 0x4, 0x0) process_vm_readv$auto(0x0, &(0x7f00000000c0)={&(0x7f0000001140), 0xfffffffffffffffb}, 0xc374, 0x0, 0x9, 0xcf42) 7.762561562s ago: executing program 0 (id=3259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x4, &(0x7f0000000180)={0x6, 0x0, 0xd57, 0xff, 0xee01, 0xffffffffffffffff, 0x5, 0x2, 0x444c59c2, 0x80, 0x6000000000, 0x9, {0xffffffffffffff38, 0xc78}, {0x0, 0x9}, {0x0, 0xfffffffd}, {0x7fffffff, 0x4}, 0xfffffff9, 0xfffffff9, 0x8f, 0x7c2b, 0x4, 0x0, 0x0, 0x74a, 0x9, 0x9, 0x0, 0x40, [0x0, 0x10, 0xfffffffeffffffff, 0x3, 0x8, 0x9, 0x6, 0x1, 0x9]}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5a}, 0x80000800}, 0x7, 0x4008) sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x234, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0x8b, 0x0, "5be2fdb89a4555bc0ab8fe1b8e4b4655d23babd081a509722b09545c7ad5b15ca3467eb11f74ec1e377cded66879fbe15c54ec9992338ae2d0a419c32c522f30bc4e4370bfae178ac65e63fbd8e692413b826bc301c4542c7efb16e35c150064a9e4e8259c24b140a3a8591f066a48f8c356516fe9edbf6a68cb19153f283eb8d53190f1ccefa0"}, @SMC_NLA_EID_TABLE_UNSPEC={0x88, 0x0, "3ba25d07da672c3db6dd6dc67b9dd4a3c92a962f87b97f400b4c824450e38852c453e6975cea992a5b1a2fb3227a00c406494e75e8649b8f837b83137118a6e2f97eaf7cd4e3755e13530057b7a79b2ae4aba37bdd15b1376f983a5ac5348b8bf7157c1e8a9213dab3daf1375e34e0e2b945d59fdcfd7ba143d5b25c4266a8800671545a"}, @SMC_NLA_EID_TABLE_UNSPEC={0xd0, 0x0, "9bfd36b23676e1676a1a0880ba1bbf8888c5fd90879a8e323b23d8b34d95a2b0ebdf481ca2325ebd345e239de065fff85e60d7b879a6bf635a03eaac2f88a4e4802265a6d7e376756740aa8520f5452af53cf7ad2ec33c0f9d8810f4a6a484a5b52f52ca2af73346ba26b789e5cb65bd17513d5d232b47839ecc214b304ce6c884f01617e11f92749e8c0c685107b0315772af3773d4ebcf7bf7a6e4aa0ce18533991cb44675cd5a0879ae1cd42619bc787182703edd015004f391846b93cacb900085d7d2e32a59c9ba94f2"}, @SMC_NLA_EID_TABLE_ENTRY={0x8, 0x1, '&\'])'}, @SMC_NLA_EID_TABLE_UNSPEC={0x34, 0x0, "6b647518189034624ef645950c5c4080c4ab9c204ad1cc33d0bc224de2377c3dff6e6b835062851211dca584465acbc6"}]}, 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x8000) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) pivot_root$auto(0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) unshare$auto(0x40000080) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f00000001c0)) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd700000dcdf250300000004000800100001800c00108008000900fe220badcf0e4263ba92654e9ba786d984f68d50cc1889a54944e0f4c10b4377e6ba7e4f06a9c51ceaa776e606d523e73c22970e238a2a2d21d986bedd4920bc6da6858218d9d85d2bcf636ecfed11082e866e62d23e21002fb6f82397ce440cae25f8e34e13c9326e6b3692ef5535483880249acd012f3da61690cc2d4496b3d64931149cb37de563235a0e18c0eaa75dba805b0325e25241f0402aec38824e48fb813c57275d21d6a5adec89166a74737bb53bb923c016cc3aa2bbf6d483d702acae0e5b972957824365e50a1ad31f85000000", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x810) 6.838207128s ago: executing program 1 (id=3260): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x29, 0x80001, 0xc4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) write$auto_ctl_device_fops_user(r2, &(0x7f0000000300)="0afcdf8eb0d50f1dbabf32062d9b3656d7691f92d3a6925d82b8fff1c24df86c272395d09d23aeaad0db6d154e2e41a384b81c367840632b70a433ed3debb564a91d165ebd91e9fa7b564fe5044878a78648bd53b59992bb6177b85bc34f7ffa2bcf61d2f52b1e4f", 0x68) fcntl$auto_F_SETLEASE(r1, 0x400, 0xffffffffffffffff) r3 = io_uring_setup$auto(0xd85, 0x0) setsockopt$auto(r0, 0x10000000084, 0x7f, 0x0, 0xad4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/erspan0/gro_flush_timeout\x00', 0x100b42, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x18b842, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) sendfile$auto(r4, r4, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r6, 0x0, 0x20) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) write$auto(r7, 0x0, 0x9) r8 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000140), 0x165100, 0x0) ioctl$auto_PPPIOCSMRU(r8, 0xc004743e, 0x0) write$auto(r8, 0x0, 0x0) socket(0xa, 0x2, 0x0) setreuid$auto(0x4, 0x8) tkill$auto(0x80000000000001, 0x7) r9 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e7babc7b0f0033f22f878dbf083d0f3b3cb64a19b3851f3dd6d311e4c8cc7f2e353e1474c74842098edaec", @ANYRES16=r9, @ANYBLOB="000328bd7000fddbdf25270000000c0006000800000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000004) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x1) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) 6.722193588s ago: executing program 3 (id=3261): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/id/version\x00', 0xa000, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setns(0xffffffffffffffff, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x801, 0x84) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r1, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r2, 0x5453, 0x0) write$auto(r2, 0x0, 0x100000a3d9) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/debug/usb/usbmon/7u\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x101, 0x103) waitid$auto(0x4, 0xffffffffffffffff, &(0x7f0000001140)={@siginfo_0_0={0xfffffffa, 0xff, 0xd, @_kill={0xffffffffffffffff, 0xee00}}}, 0x15, &(0x7f00000011c0)={{0xfffffffffffffffb, 0x7}, {0x101, 0x100}, 0x5, 0x9, 0x8, 0xffffffff, 0x100, 0x3, 0x40, 0x3, 0x80000001, 0x9, 0xa7, 0x5, 0x7, 0x4b1}) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x2, 0x0, r4, 0x1, 0x666) read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r5, 0x40187013, &(0x7f0000000100)={0x1, @ptr=0x10001}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x5, 0x3, 0xfffffffffffffffc, 0x4) io_uring_setup$auto(0x4, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0xad80, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv$auto(r4, &(0x7f0000000080)={&(0x7f0000001280)="3e4e15576d5e21091c765f6ad4658f961435c77789ef7979218635d5b3f013eb3279ad0af2ec064dd68efcb6ae9636bf66b30b899286c90a7dfd1d171094700459ca7b8641b0c616c901465a9b221b7dbe9af4635f376ea2a639929b3e7ba161f566c26acbf0202298a647a503fe902d19b2d70a3aa08ce866adb31942f825b18fabbdb3b68361ddc7fed9d633d16a453c607db8f9976deb6e33501339340fed9c5d9a9adebdbbc8a2713cb77ea8df6d75420b49ce921476e59b34f77a2eeb29e4e219fbce86f12512d0c2756e17", 0x3ff}, 0x1, &(0x7f0000001400)={&(0x7f0000001380)="925f021276702180c5c6b0343bdfb194a9c009d326eba190e9fac932a741299acb9e68144e680bc1b821eb772d23645299657415a1d93587bdd198ba65870df2029abfb982a72bbe82c7945f81496c64286fb156204c15f76ac8116ec3694d5fee9b433599bda6a62ce453cdaa798d721a319d4a0f3c", 0x6}, 0x6ff2, 0x1) read$auto(r6, 0x0, 0xf39) 6.598112516s ago: executing program 0 (id=3262): rseq$auto(&(0x7f0000000140)={0xe, 0x5, 0x2c2, 0x23, 0x8007d, 0xfffffffe, "26c788a7a5024a9859acd35804093ad080405e5667c1ebdf247e1520d2c4f723c82081928a325dde6dcc8b245461261f1e847bfe4289c4a3d8893fe91794c1a983b7dec4715155f202bcb0489c4e8c9a1391f75a1e4c289bd6c51ca54f1d"}, 0x8000, 0x2000, 0x6) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) ioctl$auto_UI_SET_MSCBIT(r0, 0x40045568, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0x220442, 0x0) mmap$auto(0x6, 0x202000b, 0x9, 0x17, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(0x0, 0x8001) lseek$auto(r1, 0x200006, 0x6) io_uring_setup$auto(0xfffff7fc, 0x0) mmap$auto(0x0, 0xc, 0x3, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000240)={0x123062000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0xfffffffffffffffc) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) sendfile$auto(r2, r3, 0x0, 0x800048) close_range$auto(r3, 0x8, 0x0) mmap$auto(0x1000000000, 0x0, 0xf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, r3, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x181383, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x544282, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.397436878s ago: executing program 1 (id=3263): mmap$auto(0x2000000000004, 0x3, 0x4000000000e3, 0x13, 0x401, 0x6) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) mmap$auto(0xffffffffffffffc0, 0x6, 0x7fffffff, 0x40000000000eb1, r0, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@isdn={0x22, 0xf0, 0x8, 0xd4, 0xd6}, 0x40000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200000, 0x0) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c1}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x216, 0x402000b, 0x2000006, 0xeb1, 0x401, 0x10001) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x7d, &(0x7f0000000100)="6f48518673c52b419d9709dcdc22fff70b6ac6eaf746b0343a2f370976afa97b82fd31cc448d8873a39d83383dc5", 0x5) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x7}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) 6.217335504s ago: executing program 0 (id=3264): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x400000000008) close_range$auto(r0, r1, 0x101) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x8, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) socket(0x10, 0x3, 0x0) ioperm$auto(0x7, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r2, 0x10, 0x2) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x7d, 0x0, 0x8) mmap$auto(0x0, 0x800400007, 0x65d, 0xffff, 0xffffffffffffffff, 0x20000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram6\x00', 0xc6fc1, 0x0) write$auto(0x3, 0x0, 0x7fffffff) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0xffff, 0xeb1, 0x404, 0xd) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) socket(0xa, 0x2, 0x88) 5.786264897s ago: executing program 1 (id=3265): openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen\x00', 0x40800, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r0 = socketpair$auto(0x20000001, 0x2, 0x3, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x80000, 0x0) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c030000000000002106000000000000e05f", 0x80}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x8300) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), r0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) write$auto(r4, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r5, 0x0, 0x0) unshare$auto(0x40000080) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) pread64$auto(r6, 0x0, 0x201, 0xc000) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r3) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x40, r7, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xa, 0x17, 0x0, 0x1, [@generic="3453987b61a5"]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 5.338292077s ago: executing program 3 (id=3266): readv$auto(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000680), 0x7}, 0x5) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) write$auto_tty_fops_tty_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x20000001, 0x2, 0x3, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr2/statistics/tx_heartbeat_errors\x00', 0xe0082, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) getpid() r4 = setfsuid$auto(0xee00) getegid() shmctl$auto_SHM_STAT_ANY(0x0, 0xf, 0x0) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002dc0)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYRES32=r4], 0x2550}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b50", 0xfdef) sendfile$auto(r2, r2, 0x0, 0x800400000000ef0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) r5 = epoll_create$auto(0x4) r6 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(r5, 0x1, r6, 0x0) r7 = epoll_create$auto(0x3e) epoll_ctl$auto(r7, 0x1, r5, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/memory_hotplug/parameters/online_policy\x00', 0x60302, 0x0) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10, 0x0) r8 = fsopen$auto(0x0, 0x1) fsconfig$auto(r8, 0x8, 0x0, 0x0, 0x0) 5.285458923s ago: executing program 2 (id=3267): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0x7) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x0, 0x7d, &(0x7f0000000040)={0xffffffffffffffff, 0x6, 0xffffffffffffffc0, 0x800000000000006}) socket(0x2, 0x80805, 0x0) eventfd$auto(0x7) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, 0x0, 0x2, 0x0) waitid$auto_P_ALL(0x0, 0x1, 0x0, 0x5, 0x0) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x180b008}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x41001) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xa4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY\xad\xd6\xc5\xab`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4[\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91\vI\x1eRN8\x99\x88G\xd9\xec\x1epJ\"ds\x1cJr\xde:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\v\xea\x1b\x95\xaf\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd3\x81Y\xa3Fp\v\xdc\xe2\xc3\xc3\xdbS\xdc', 0xfdef, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd43a6ac90df250300000004000800140001800800028004001d800800"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x743142, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='nfs\x00\"p\x17\x9b\xdd\xb4\xed\xb9\xb0\xc7@\xd0_\xf9\xa1\x17tP\x86\xb1,\x93\x87\xae\x03\x8a\xc4\xb5q\xd4\x8c\xc3\xa2?\xe7\xf4\xb2\xd4\xe1\x93A+\xe9\x8d\xc9\xac9|\xc7\t\xff\'\xaa\xac|\xaa\x85\xa9\xd4j\x12\xca\xfe', 0x6, &(0x7f00000004c0)="77bec3605f85e082fbcf491e2b3b12fde18109d1f64859f820ba86bbb7abcf4c75f53e3ecb7fd57568812ae0e9433c2b0bb0f0c0db3d") inotify_init1$auto(0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x410000, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs_app\x00', 0x101000, 0x0) pread64$auto(r4, 0x0, 0x8, 0xffff) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000002c0)=0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) writev$auto(r5, &(0x7f00000001c0)={&(0x7f0000000400)="f8184486c4f2a66b5022dfba2b5d1b2be28af9d82ebfd911819f2aa35483f3f61d45aadb3f911e325cb772595d3653d9af727934aae6cea89568f2a1ab7493906f8aed6490352df6505eef713bb0b2006b099d29105474af87775e06e1b22311375b3895b75a996ca392359e6f70113f388fba9a760f7219526d14812d2065d0735bebdc03eebf738170e6", 0x40}, 0x200) 5.163138187s ago: executing program 0 (id=3268): sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xad6) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/blkio.bfq.weight_device\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000004c0)=""/45, 0x2d) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) lseek$auto(r3, 0x7fd, 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r4, 0x0, 0x400007ffff000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x2) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) getcpu$auto(&(0x7f0000001140), 0x0, 0x0) getsockopt$auto(r1, 0x4, 0x4, &(0x7f0000000040)='/sys/devices/pci0000:00/waiting_for_supplier\x00', &(0x7f0000000180)=0x20000009) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r6 = ioctl$auto_TUNSETNOCSUM(r5, 0x400454c8, &(0x7f00000001c0)=0x8) bpf$auto(0x101, &(0x7f0000000280)=@bpf_attr_0={0xa, 0x200000b8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2a3ce63f0000f8ffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, r6}, 0xf) 4.431080173s ago: executing program 3 (id=3269): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r3, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) shmctl$auto_IPC_RMID(0xa, 0x0, &(0x7f0000000200)={{0x9, 0xffffffffffffffff, 0xee01, 0x4, 0x100, 0xb1fffffd}, 0x400, 0x400000006, 0x8, 0x0, @inferred, @raw=0x7, 0x2, 0x0, &(0x7f0000000540)="19c3b829e71f4b4088493f392082a22870971f0a6107a7a2bac7aa4a2307871211d729673290d92d4dc6cb4e8f3dc05610b1d7f8ecb09146bded6242685bbb2208133f1eee407cc1caedcbf9d3b9cf073be2e4adffd1e720d238f387fa431c6c5866af5935e869857d0c18be984d97fc5b5b135cc5a4e79e979488e956bcabe41981d0f39c42633024fd53f8a4cb8a5b15e19e4b6896ddbca6bf6a85bf75807268765275f93625635db6e13918c908b925f34d77fc8b2cf3411b5eb531fb2a6d267153e90168076f90a22ca54a13f47add32bd1d6c996483f5a941d7ba98ab5c", &(0x7f0000000740)="2e55e9ee5f293332e76b54634eea61dc2187145174aefcc713bfe59fa80a1971082349a14a5764ebef929a0070d08b7fc4764d868c484d3b33cf35999dddba58bc3c912d44653ee2a07d6fb5fce6cf876f8c881161ee593715c3446b2754c9472c0d80ae944cf2cb1cdbfbe3e96a113bb70487a1ffc871b90a5f449cb57223f4567195f4908eaeae629e8565823508cc0ef60f13baf5feddc5c36dec32c6dff8616368b87c38e2a6cdb93c7bb9a02f07b8d0e7f910f690c00c74996b44f3aebdb75315bf48bb924dbf2f"}) syz_clone3(&(0x7f0000000940)={0x80000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x4}, &(0x7f0000000840)=""/229, 0xe5, &(0x7f0000000440)=""/181, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8, {r1}}, 0x58) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000f80)={0x7bc, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x101}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x7f}, @NCSI_ATTR_PACKAGE_LIST={0xcf, 0x2, 0x0, 0x1, [@typed={0x8, 0xe5, 0x0, 0x0, @fd=r0}, @generic="aed195661f2deeca73add4204b929e1dd5423a1b5984cb7477b7182ade76b6f1669c142b730adc6444c0c23e5302ffbd05cb3f1a9664c7f45e0032f5eb8a4eb317916f083b83bbc33247316d36e7392658ae379603e2e278e561e139c80cfb55c3cb5c42a760e2fb678cbfc86d78e66b12bab3d560d6ccbc14fde6f14939e827f270499fcd26ee8f52ba21bc3ad89d745ffcfa7fc6553058308a71f854489801676a5a305a516fb9db526932edf74df22e96d66a5aa725", @typed={0x4, 0xa6}, @typed={0x8, 0x7d, 0x0, 0x0, @fd}]}, @NCSI_ATTR_DATA={0x6c3, 0x5, "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"}]}, 0x7bc}, 0x1, 0x0, 0x0, 0x4800}, 0x811) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1, 0x948d, 0x1ff, 0x15f4da07, 0x3, 0x8003, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0x8000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) 4.292071715s ago: executing program 2 (id=3270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x4, &(0x7f0000000180)={0x6, 0x0, 0xd57, 0xff, 0xee01, 0xffffffffffffffff, 0x5, 0x2, 0x444c59c2, 0x80, 0x6000000000, 0x9, {0xffffffffffffff38, 0xc78}, {0x0, 0x9}, {0x0, 0xfffffffd}, {0x7fffffff, 0x4}, 0xfffffff9, 0xfffffff9, 0x8f, 0x7c2b, 0x4, 0x0, 0x0, 0x74a, 0x9, 0x9, 0x0, 0x40, [0x0, 0x10, 0xfffffffeffffffff, 0x3, 0x8, 0x9, 0x6, 0x1, 0x9]}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5a}, 0x80000800}, 0x7, 0x4008) sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x234, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0x8b, 0x0, "5be2fdb89a4555bc0ab8fe1b8e4b4655d23babd081a509722b09545c7ad5b15ca3467eb11f74ec1e377cded66879fbe15c54ec9992338ae2d0a419c32c522f30bc4e4370bfae178ac65e63fbd8e692413b826bc301c4542c7efb16e35c150064a9e4e8259c24b140a3a8591f066a48f8c356516fe9edbf6a68cb19153f283eb8d53190f1ccefa0"}, @SMC_NLA_EID_TABLE_UNSPEC={0x88, 0x0, "3ba25d07da672c3db6dd6dc67b9dd4a3c92a962f87b97f400b4c824450e38852c453e6975cea992a5b1a2fb3227a00c406494e75e8649b8f837b83137118a6e2f97eaf7cd4e3755e13530057b7a79b2ae4aba37bdd15b1376f983a5ac5348b8bf7157c1e8a9213dab3daf1375e34e0e2b945d59fdcfd7ba143d5b25c4266a8800671545a"}, @SMC_NLA_EID_TABLE_UNSPEC={0xd0, 0x0, "9bfd36b23676e1676a1a0880ba1bbf8888c5fd90879a8e323b23d8b34d95a2b0ebdf481ca2325ebd345e239de065fff85e60d7b879a6bf635a03eaac2f88a4e4802265a6d7e376756740aa8520f5452af53cf7ad2ec33c0f9d8810f4a6a484a5b52f52ca2af73346ba26b789e5cb65bd17513d5d232b47839ecc214b304ce6c884f01617e11f92749e8c0c685107b0315772af3773d4ebcf7bf7a6e4aa0ce18533991cb44675cd5a0879ae1cd42619bc787182703edd015004f391846b93cacb900085d7d2e32a59c9ba94f2"}, @SMC_NLA_EID_TABLE_ENTRY={0x8, 0x1, '&\'])'}, @SMC_NLA_EID_TABLE_UNSPEC={0x34, 0x0, "6b647518189034624ef645950c5c4080c4ab9c204ad1cc33d0bc224de2377c3dff6e6b835062851211dca584465acbc6"}]}, 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x8000) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) pivot_root$auto(0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) unshare$auto(0x40000080) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f00000001c0)) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd700000dcdf250300000004000800100001800c00108008000900fe220badcf0e4263ba92654e9ba786d984f68d50cc1889a54944e0f4c10b4377e6ba7e4f06a9c51ceaa776e606d523e73c22970e238a2a2d21d986bedd4920bc6da6858218d9d85d2bcf636ecfed11082e866e62d23e21002fb6f82397ce440cae25f8e34e13c9326e6b3692ef5535483880249acd012f3da61690cc2d4496b3d64931149cb37de563235a0e18c0eaa75dba805b0325e25241f0402aec38824e48fb813c57275d21d6a5adec89166a74737bb53bb923c016cc3aa2bbf6d483d702acae0e5b972957824365e50a1ad31f85000000", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x810) 4.187342147s ago: executing program 1 (id=3271): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) io_uring_setup$auto(0x87, 0x0) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x487, 0x0, 0x0) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x8, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0xfffffffc, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x8000000000000000, 0x0, 0x10, 0x0, 0x0, 0x1]}, 0x1fe, 0x83) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5a}, 0x80000800}, 0x7, 0x4008) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r3, 0x0, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, 0x0, 0x20103, 0x0) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x4, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x1, 0xfffffffffffff001, 0xe) madvise$auto(0x0, 0x200007, 0x19) 3.287562585s ago: executing program 0 (id=3272): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) lseek$auto(r0, 0x0, 0x1) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x101202, 0x0) mmap$auto(0x0, 0x1000400008, 0xdf, 0x9b72, 0x2, 0x800008000) ioctl$auto_VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000340)={0x80000001, 0x7fffffff}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/arp\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x6, 0x809) bpf$auto(0x5, &(0x7f0000000000)=@info={0xffffffffffffffff, 0x4, 0x3}, 0x171) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_4={0x1e, 0x4, 0x1, 0x8}, 0x6f4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), r4) sendmsg$auto_SEG6_CMD_SETHMAC(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x2c, r5, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xb}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xfd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000015}, 0xc810) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, 0x0, 0x1fe, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/tcp6\x00', 0x20100, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/nullb0/mq/0/nr_tags\x00', 0x8080, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_fake_panic_fops_(0xffffffffffffff9c, 0x0, 0x501080, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$auto_IORING_UNREGISTER_BUFFERS(r6, 0x1, &(0x7f0000000200)="a13b466b7764dfe742", 0x3) socketpair$auto(0x8, 0x77e, 0x11f, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x40000007, 0xd3e, 0x1, 0x948b, 0x4, 0x95f4da0a, 0x10001, 0x3, 0x62, 0xc0000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 2.656301808s ago: executing program 2 (id=3273): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x15, 0x0, 0x9) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0xffffffffffffffff, 0x40a, 0x0) socket(0x10, 0x2, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.599701241s ago: executing program 3 (id=3274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x4, &(0x7f0000000180)={0x6, 0x0, 0xd57, 0xff, 0xee01, 0xffffffffffffffff, 0x5, 0x2, 0x444c59c2, 0x80, 0x6000000000, 0x9, {0xffffffffffffff38, 0xc78}, {0x0, 0x9}, {0x0, 0xfffffffd}, {0x7fffffff, 0x4}, 0xfffffff9, 0xfffffff9, 0x8f, 0x7c2b, 0x4, 0x0, 0x0, 0x74a, 0x9, 0x9, 0x0, 0x40, [0x0, 0x10, 0xfffffffeffffffff, 0x3, 0x8, 0x9, 0x6, 0x1, 0x9]}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5a}, 0x80000800}, 0x7, 0x4008) sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x234, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0x8b, 0x0, "5be2fdb89a4555bc0ab8fe1b8e4b4655d23babd081a509722b09545c7ad5b15ca3467eb11f74ec1e377cded66879fbe15c54ec9992338ae2d0a419c32c522f30bc4e4370bfae178ac65e63fbd8e692413b826bc301c4542c7efb16e35c150064a9e4e8259c24b140a3a8591f066a48f8c356516fe9edbf6a68cb19153f283eb8d53190f1ccefa0"}, @SMC_NLA_EID_TABLE_UNSPEC={0x88, 0x0, "3ba25d07da672c3db6dd6dc67b9dd4a3c92a962f87b97f400b4c824450e38852c453e6975cea992a5b1a2fb3227a00c406494e75e8649b8f837b83137118a6e2f97eaf7cd4e3755e13530057b7a79b2ae4aba37bdd15b1376f983a5ac5348b8bf7157c1e8a9213dab3daf1375e34e0e2b945d59fdcfd7ba143d5b25c4266a8800671545a"}, @SMC_NLA_EID_TABLE_UNSPEC={0xd0, 0x0, "9bfd36b23676e1676a1a0880ba1bbf8888c5fd90879a8e323b23d8b34d95a2b0ebdf481ca2325ebd345e239de065fff85e60d7b879a6bf635a03eaac2f88a4e4802265a6d7e376756740aa8520f5452af53cf7ad2ec33c0f9d8810f4a6a484a5b52f52ca2af73346ba26b789e5cb65bd17513d5d232b47839ecc214b304ce6c884f01617e11f92749e8c0c685107b0315772af3773d4ebcf7bf7a6e4aa0ce18533991cb44675cd5a0879ae1cd42619bc787182703edd015004f391846b93cacb900085d7d2e32a59c9ba94f2"}, @SMC_NLA_EID_TABLE_ENTRY={0x8, 0x1, '&\'])'}, @SMC_NLA_EID_TABLE_UNSPEC={0x34, 0x0, "6b647518189034624ef645950c5c4080c4ab9c204ad1cc33d0bc224de2377c3dff6e6b835062851211dca584465acbc6"}]}, 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x8000) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) pivot_root$auto(0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) unshare$auto(0x40000080) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_GET_SG_TABLESIZE(r5, 0x227f, &(0x7f00000001c0)) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd700000dcdf250300000004000800100001800c00108008000900fe220badcf0e4263ba92654e9ba786d984f68d50cc1889a54944e0f4c10b4377e6ba7e4f06a9c51ceaa776e606d523e73c22970e238a2a2d21d986bedd4920bc6da6858218d9d85d2bcf636ecfed11082e866e62d23e21002fb6f82397ce440cae25f8e34e13c9326e6b3692ef5535483880249acd012f3da61690cc2d4496b3d64931149cb37de563235a0e18c0eaa75dba805b0325e25241f0402aec38824e48fb813c57275d21d6a5adec89166a74737bb53bb923c016cc3aa2bbf6d483d702acae0e5b972957824365e50a1ad31f85000000", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x810) 2.295075171s ago: executing program 1 (id=3275): rseq$auto(&(0x7f0000000140)={0xe, 0x5, 0x2c2, 0x23, 0x8007d, 0xfffffffe, "26c788a7a5024a9859acd35804093ad080405e5667c1ebdf247e1520d2c4f723c82081928a325dde6dcc8b245461261f1e847bfe4289c4a3d8893fe91794c1a983b7dec4715155f202bcb0489c4e8c9a1391f75a1e4c289bd6c51ca54f1d"}, 0x8000, 0x2000, 0x6) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) ioctl$auto_UI_SET_MSCBIT(r0, 0x40045568, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0x220442, 0x0) mmap$auto(0x6, 0x202000b, 0x9, 0x17, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(0x0, 0x8001) lseek$auto(r1, 0x200006, 0x6) io_uring_setup$auto(0xfffff7fc, 0x0) mmap$auto(0x0, 0xc, 0x3, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000240)={0x123062000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0xfffffffffffffffc) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) sendfile$auto(r2, r3, 0x0, 0x800048) close_range$auto(r3, 0x8, 0x0) mmap$auto(0x1000000000, 0x0, 0xf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, r3, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x181383, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x544282, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.680523767s ago: executing program 1 (id=3276): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x44f5, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="5142651f911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb1338074113579e665c6f3cffde5a8ee98a7bf3f8157986cf7c1c5dbdedaacbe3946b3d8809dec7387f006c062b93b6b481a806e5544ddeea7218fcc15c25a88164bfd0735e6290167cb2dbf4b4a317ba00b1fc27d203a6cff71ef8fe97a97d8e07af2ce1d0a0a2aa9ede7dd0572325075c83c2ecf866aa01654eff55ebe4e489e72152e6a3090e2348732704eb02997ffd23a63faabfbbbd1fb124cab606faed24a393058cea1c1286001ee5c0c1fa26b6a81ebdd4718a94cebdb45bfe812c771df398d3305da03d37ced9d0242b6da212dc9f5c14d7ff999bee20f6621792d1442e449eba8589a823e5e99c65fdffbaefe89e2e32406ec4cf574e335e2d288e4cdad56f4b1b57c364ed3e28809e480d6f410c7ebf43bd2a605d6a8c9facae6b7f8f2c56f792ae21fc0cc5dd9beae0cab3547ebb5467183c2f01bc315bd7bd191088886752dc5108093bdbc91348743440130f33d3dfa9c25490245e5fa904f8660e82253c826b7bea4e9a7a1c627e10c56d71878a644bd176016f29cf5398be14cc0fdec45c65e2b967aedb75212eed1eb05a44da62190009d1c08163b74813b82c27f1e6cd681a4b5150f967444b7bc930da68603fd706e96ba8663b2e50ef0a9b04e321a8a337b08fea7288a3fef5062c7e4c17ad3d490870d39c10b78a74eab25c993527e313a4f59d86de55aa9a8a63f734c2db556692fe993b0cd08e0ab5434c9ec02d5127354f55e6b5d5a7b61685d02edae21ece71d203abf7408211229a9ebbfdeffa2c0f38db274066d0706d80398c172e6daf4a0dce62c2287cbf0d30cfa313d7baf4e5caa18f594f0ab0d854f3cef76ff83e96fa49d0e0f8a47193b51a0a45aee2e1d9a5b372b8ee828f645a06979ec351d798480c7824e846028c02f58b5641acbae1e2079abd86182a662bb1642c9346d7fba628fb012da293acef33b8b76a8885c2e5d685348b6148c5b44409f58d8d5f29344fe8a2e4c2432ae622bb1912ea65d55745eff6aa689e859dcaeff39bff895025bd72cd780d59cbaa0886afd5d6676d2de6266903115525c075cc3f75ce9eba3787a890e1f758f0e502c4c9c0538dc942cf4e2d69742edeeddb66b1d459fcf6f744b2c40111104ab21fd4e99b4477e25cc5a9af59108c8b2f569d4ba227c754f294fdc1e6b383fd89861a203f4d4ee33814aeb21ee411a0d6918533aa2450b1e35c97ab6f01f3829c8a4c33fe0fbc81dd579bbdb44eda4f335d2bc512ca7f38f603c29033c94df2c9533f4422432f574a021e90a0fe3a4cf54de46e25986315b30956face49e26e8dcbcc9e1363627a9f38a2ee8304307dab4013d77f4c337551e2a6ac230788513cdd15e734263e4973c75757d9809c510977adc3be6c5b110597b09c7dad1f54e4506744710b53221e4a7982ac4c59bfae6370258b5af7864a4ca680addd736e35da579cc0e975e6cdefa3d082c8b4b10b205", 0xd42) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x8400ae8e, &(0x7f00000000c0)={0xdd}) mmap$auto(0x8, 0x5, 0x4000000000df, 0x40ebf, r0, 0x300000000000) write$auto(0x3, 0x0, 0x7fffffff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x1d, 0x1, 0x7fff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000180)="61aab891ba04631c32eef21f17e7b6cfda2cf3f7dd9ffd35921b09ad36c44d79562ef07319b8c2e5f03942662bc81ce149361bb7e1e109e5c9266fe89381061fe7e20326db2ac0717d1d58548a6724cb612cb9d74f2a576ecd9cc1836a0611cbce7f2dd9b9345d36998b59cfd2bb7ca0528e6fd66d90c6e6dfff2a1d49aff0e0cfbbd8d1690033a73e9a8dfdf8f005f5e885fa865262e69f4057f327bb573824d0985a41feac0dbe976d707961d80884f20551f08938492601c61eb69d1ae21287cdd332ab8128dc7f7c79e58c5f24af2f") setresuid$auto(0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1.679877896s ago: executing program 0 (id=3284): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x24000000) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2000d, 0x8, 0xeb1, 0x404, 0x80000000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd75", 0x850) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0xcfb7, 0x9, 0x6]}, 0x0) wait4$auto(r3, 0x0, 0x80000001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x282403, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x8008, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) 1.497980746s ago: executing program 3 (id=3277): close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x29, 0x5, 0x0) socket(0xa, 0x3, 0x3a) socket(0x2, 0xa, 0x1) r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x9, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x40, 0x8, 0x100000000}}) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x4040, 0x75) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) select$auto(0x3, &(0x7f0000000440)={[0x5, 0x3, 0x1000, 0xdf, 0x8, 0x7, 0x10001, 0x8, 0x438c82bf, 0x4, 0x0, 0x4, 0x788, 0x6, 0x5, 0x8]}, 0x0, 0x0, 0x0) 1.454568578s ago: executing program 2 (id=3278): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) io_uring_register$auto_IORING_UNREGISTER_FILES(r0, 0x3, &(0x7f0000000080)="193f32b995f0ecb4ddf8cd83baeda5c352a745214ad880cc4c561670de2d13131c656d339507302cd18f379f551569932d17bb17195ecfc677eb23ac801128003ef54e78817f1a", 0x3) sendfile$auto(r0, r0, &(0x7f0000000000)=0x3, 0xad6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x20800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) read$auto(0xffffffffffffffff, 0x0, 0x20) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x6) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/block/sda/sched/read0_fifo_list\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r4, &(0x7f0000000040)=""/163, 0xa3) unshare$auto(0x40000080) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="b2", 0x1) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r1, r6, 0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x48, 0x0, 0x9) socket(0x10, 0x80002, 0x0) bind$auto(r2, &(0x7f0000000140)=@generic={0x1a, "9300000004000000000000000091"}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vgem/driver_override\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4, 0x1e}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) 0s ago: executing program 3 (id=3279): mmap$auto(0x2000000000004, 0x3, 0x4000000000e3, 0x13, 0x401, 0x6) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) mmap$auto(0xffffffffffffffc0, 0x6, 0x7fffffff, 0x40000000000eb1, r0, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@isdn={0x22, 0xf0, 0x8, 0xd4, 0xd6}, 0x40000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200000, 0x0) writev$auto(0x3, 0x0, 0x8009) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r1) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200080c1}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x216, 0x402000b, 0x2000006, 0xeb1, 0x401, 0x10001) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x7d, &(0x7f0000000100)="6f48518673c52b419d9709dcdc22fff70b6ac6eaf746b0343a2f370976afa97b82fd31cc448d8873a39d83383dc5", 0x5) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x7}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) kernel console output (not intermixed with test programs): l_64+0xcd/0xf80 [ 887.673795][T18981] alloc_pages_bulk_noprof+0x77b/0x1010 [ 887.673817][T18981] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 887.673837][T18981] ? splice_from_pipe_next+0x1f7/0x5d0 [ 887.673855][T18981] ? copy_splice_read+0x1a8/0xc20 [ 887.673879][T18981] copy_splice_read+0x1e1/0xc20 [ 887.673898][T18981] ? __pfx_pipe_to_null+0x10/0x10 [ 887.673920][T18981] ? __pfx_copy_splice_read+0x10/0x10 [ 887.673936][T18981] ? pipe_unlock+0x4a/0x70 [ 887.673955][T18981] ? __pfx_splice_from_pipe+0x10/0x10 [ 887.673972][T18981] ? irqentry_exit+0x1dd/0x8c0 [ 887.673995][T18981] ? __pfx_copy_splice_read+0x10/0x10 [ 887.674012][T18981] do_splice_read+0x285/0x370 [ 887.674031][T18981] splice_direct_to_actor+0x2a1/0xa30 [ 887.674051][T18981] ? __pfx_direct_splice_actor+0x10/0x10 [ 887.674072][T18981] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 887.674096][T18981] do_splice_direct+0x174/0x240 [ 887.674115][T18981] ? __pfx_do_splice_direct+0x10/0x10 [ 887.674133][T18981] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 887.674152][T18981] ? bpf_lsm_file_permission+0x9/0x10 [ 887.674166][T18981] ? security_file_permission+0x71/0x210 [ 887.674186][T18981] ? rw_verify_area+0xcf/0x6c0 [ 887.674203][T18981] do_sendfile+0xb06/0xe50 [ 887.674223][T18981] ? __pfx_do_sendfile+0x10/0x10 [ 887.674243][T18981] ? __x64_sys_futex+0x1e0/0x4c0 [ 887.674259][T18981] ? __x64_sys_futex+0x1e9/0x4c0 [ 887.674276][T18981] __x64_sys_sendfile64+0x1d8/0x220 [ 887.674297][T18981] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 887.674322][T18981] do_syscall_64+0xcd/0xf80 [ 887.674340][T18981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.674354][T18981] RIP: 0033:0x7f7588f8f7c9 [ 887.674367][T18981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.674380][T18981] RSP: 002b:00007f7589e15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 887.674395][T18981] RAX: ffffffffffffffda RBX: 00007f75891e5fa0 RCX: 00007f7588f8f7c9 [ 887.674405][T18981] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 887.674414][T18981] RBP: 00007f7589013f91 R08: 0000000000000000 R09: 0000000000000000 [ 887.674423][T18981] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 887.674432][T18981] R13: 00007f75891e6038 R14: 00007f75891e5fa0 R15: 00007ffcccd146b8 [ 887.674452][T18981] [ 888.397822][T19004] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 888.447359][T19008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2513'. [ 888.482519][T19009] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 889.338983][T19020] binder: 19019:19020 ioctl c018620c 0 returned -1 [ 889.366276][T19020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2515'. [ 889.562034][T19026] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 891.785027][T19059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2523'. [ 892.480667][T19069] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2524'. [ 892.876358][T19075] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 893.134257][T19079] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 893.535639][T19081] [U] [ 893.538632][T19081] [U] [ 893.541335][T19081] [U] [ 893.544127][T19081] [U] [ 893.570992][T19081] [U] [ 893.573735][T19081] [U] [ 893.576701][T19081] [U] [ 893.579413][T19081] [U] [ 893.617546][T19081] [U] [ 893.620329][T19081] [U] [ 893.623084][T19081] [U] [ 893.625776][T19081] [U] [ 893.698091][T19081] [U] [ 893.724171][T19081] [U] }?[&ZJ$4LBQIš:%]KUPU^RTCA[Q$W`V`SCN`5/)>YP]VXR)*SWW5'#6PHDت  [ 893.762732][T19088] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 893.905322][T19081] [U] "IYVU ^DԤ؄L3)JKR2K̆F6A¿&$Q6Ԁ`%3ʛVIAȢ!Ţ" ϛ1!JHF4 [ 893.979786][T19081] [U] F\/VUBES]@&^ڛF+ ЮT5Z/ݡ|² &ҾŶMR='TM [ 894.056603][T19081] [U] EI̸A' WC@)MQ2;N [ 894.158282][T19081] [U] YT }֠PS3Lٙ [ 894.245205][T19081] [U] \܁WRPOUAEX#QDZGR {F̀Ů˙ˇ [ 894.333346][T19081] [U] J}Ő?^TL` [ 894.468065][T19081] [U] T]XSṔ1V}{ԳOGֵYQȥUGXVތF_DM [ 894.788068][T19081] [U] 0 N.YS3`9 .,JPC' _ҟ _DFB"˩ųՔCū!G[O60R _VJZZ5R]T)޳I[E`DK [ 894.942712][T19081] [U] -ǧZ$7NǭS+1N_4?ݪT?4 [ 894.966135][T19081] [U] ><&@ [ 894.984893][T19081] [U] >Iɠ=S/!A|6З- XUK;5+ĵ6KюJ='Pل;-'F [ 895.030651][T19081] [U] +|T\L5K1 [ 895.052355][T19081] [U] F [ 895.065318][T19081] [U] ;ĭISIːH7T}YWÏ@6:L˗,]·GELS)OF<>_Ӆ7,5UO#}L6Q;``؜7< 4`_Y޽˱N#Xï\1ωF8|ՋBO? GKGG3׿ȼ>#D`L[@ITIJ'UZ [ 895.160253][T19081] [U] GM.!BR [ 895.183312][T19081] [U] WPS{T/9.D'}I@_Վ ܿS; [ 897.319611][T19130] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 897.363234][T19132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2538'. [ 897.999999][T19138] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 898.788087][T19145] binder: 19144:19145 ioctl c018620c 0 returned -1 [ 898.804829][T19145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2542'. [ 899.563326][T19158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2553'. [ 900.070063][T19172] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 900.802285][T19183] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 901.009919][T19185] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 902.836761][T19215] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 902.879740][T19216] binder: 19213:19216 ioctl c018620c 0 returned -1 [ 902.928325][T19216] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2556'. [ 904.331435][T19238] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 904.865319][T19242] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input63 [ 905.500012][T19243] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input64 [ 906.421621][T19265] binder: 19264:19265 ioctl c018620c 0 returned -1 [ 907.117179][T19275] binder: 19274:19275 ioctl c018620c 0 returned -1 [ 907.145253][T19275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2568'. [ 908.637612][T19299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2571'. [ 908.646730][T19299] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 908.755552][T19303] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 909.496434][T19308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2576'. [ 909.546441][T19311] binder: 19309:19311 ioctl c018620c 0 returned -1 [ 910.729737][T19334] nfs: Unknown parameter 'w`_I+; HY ' [ 911.302193][T19340] FAULT_INJECTION: forcing a failure. [ 911.302193][T19340] name failslab, interval 1, probability 0, space 0, times 0 [ 911.317106][T19340] CPU: 1 UID: 0 PID: 19340 Comm: syz.0.2580 Not tainted syzkaller #0 PREEMPT(full) [ 911.317129][T19340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 911.317138][T19340] Call Trace: [ 911.317144][T19340] [ 911.317150][T19340] dump_stack_lvl+0x16c/0x1f0 [ 911.317174][T19340] should_fail_ex+0x512/0x640 [ 911.317192][T19340] ? __kmalloc_cache_noprof+0x5f/0x770 [ 911.317209][T19340] should_failslab+0xc2/0x120 [ 911.317230][T19340] __kmalloc_cache_noprof+0x72/0x770 [ 911.317244][T19340] ? allocate_file_region_entries+0x1a0/0x620 [ 911.317266][T19340] ? allocate_file_region_entries+0x1a0/0x620 [ 911.317282][T19340] ? _raw_spin_unlock+0x28/0x50 [ 911.317296][T19340] allocate_file_region_entries+0x1a0/0x620 [ 911.317317][T19340] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 911.317341][T19340] region_chg+0x85/0x140 [ 911.317363][T19340] __vma_reservation_common+0x43b/0x740 [ 911.317383][T19340] ? __pfx___vma_reservation_common+0x10/0x10 [ 911.317403][T19340] ? __pfx___might_resched+0x10/0x10 [ 911.317423][T19340] ? folio_zero_user+0x1db/0x7c0 [ 911.317447][T19340] hugetlb_fault+0x198e/0x2f30 [ 911.317477][T19340] ? __pfx_hugetlb_fault+0x10/0x10 [ 911.317513][T19340] ? find_vma+0xbf/0x140 [ 911.317539][T19340] ? __pfx_find_vma+0x10/0x10 [ 911.317562][T19340] handle_mm_fault+0x95d/0xad0 [ 911.317586][T19340] do_user_addr_fault+0x2e4/0xda0 [ 911.317604][T19340] ? rcu_is_watching+0x12/0xc0 [ 911.317626][T19340] exc_page_fault+0x64/0xc0 [ 911.317643][T19340] asm_exc_page_fault+0x26/0x30 [ 911.317657][T19340] RIP: 0010:__put_user_4+0xd/0x20 [ 911.317674][T19340] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 911.317688][T19340] RSP: 0018:ffffc9000bf27e18 EFLAGS: 00050246 [ 911.317701][T19340] RAX: 0000000000000007 RBX: 0000000000000000 RCX: 0000000000000000 [ 911.317709][T19340] RDX: 0000000000080000 RSI: ffffffff8923ae14 RDI: ffffffff8bd1d1a0 [ 911.317718][T19340] RBP: 1ffff920017e4fc7 R08: 0000000099ddf421 R09: 00000000ffffffff [ 911.317727][T19340] R10: ffff888046a729b0 R11: 00000000ffffffff R12: 0000000000000007 [ 911.317736][T19340] R13: 0000000000000008 R14: 0000000000000005 R15: dffffc0000000000 [ 911.317750][T19340] ? __sys_socketpair+0x114/0x5a0 [ 911.317781][T19340] __sys_socketpair+0x120/0x5a0 [ 911.317819][T19340] ? __pfx___sys_socketpair+0x10/0x10 [ 911.317855][T19340] ? __pfx___x64_sys_futex+0x10/0x10 [ 911.317873][T19340] ? __pfx_ksys_write+0x10/0x10 [ 911.317895][T19340] __x64_sys_socketpair+0x96/0x100 [ 911.317915][T19340] ? lockdep_hardirqs_on+0x7c/0x110 [ 911.317931][T19340] do_syscall_64+0xcd/0xf80 [ 911.317948][T19340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.317962][T19340] RIP: 0033:0x7fa73038f7c9 [ 911.317974][T19340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 911.317987][T19340] RSP: 002b:00007fa73119e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 911.318000][T19340] RAX: ffffffffffffffda RBX: 00007fa7305e5fa0 RCX: 00007fa73038f7c9 [ 911.318009][T19340] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 911.318018][T19340] RBP: 00007fa730413f91 R08: 0000000000000000 R09: 0000000000000000 [ 911.318026][T19340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.318035][T19340] R13: 00007fa7305e6038 R14: 00007fa7305e5fa0 R15: 00007ffc80b731a8 [ 911.318055][T19340] [ 912.129129][T19356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2583'. [ 912.179962][T19357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2584'. [ 912.201382][T19356] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 912.214314][T19357] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 912.272509][T19357] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 912.285410][T19356] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 913.070221][T19369] input: f as /devices/virtual/input/input65 [ 913.231695][T19374] zram: Removed device: zram0 [ 913.294020][T19377] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 913.852215][T19381] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 914.040958][T19385] FAULT_INJECTION: forcing a failure. [ 914.040958][T19385] name failslab, interval 1, probability 0, space 0, times 0 [ 914.064644][T19383] sp0: Synchronizing with TNC [ 914.075531][T19385] CPU: 1 UID: 0 PID: 19385 Comm: syz.2.2591 Not tainted syzkaller #0 PREEMPT(full) [ 914.075569][T19385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 914.075586][T19385] Call Trace: [ 914.075595][T19385] [ 914.075606][T19385] dump_stack_lvl+0x16c/0x1f0 [ 914.075642][T19385] should_fail_ex+0x512/0x640 [ 914.075670][T19385] ? __kmalloc_noprof+0xca/0x870 [ 914.075699][T19385] should_failslab+0xc2/0x120 [ 914.075732][T19385] __kmalloc_noprof+0xdd/0x870 [ 914.075780][T19385] ? __register_sysctl_table+0xea2/0x1900 [ 914.075821][T19385] ? __register_sysctl_table+0xea2/0x1900 [ 914.075851][T19385] __register_sysctl_table+0xea2/0x1900 [ 914.075890][T19385] ? __pfx___register_sysctl_table+0x10/0x10 [ 914.075920][T19385] ? is_module_address+0x69/0xf0 [ 914.075949][T19385] ? register_net_sysctl_sz+0x222/0x3d0 [ 914.075985][T19385] ? __asan_memcpy+0x3c/0x60 [ 914.076015][T19385] xfrm6_net_init+0xf0/0x1c0 [ 914.076044][T19385] ? __pfx_xfrm6_net_init+0x10/0x10 [ 914.076080][T19385] ops_init+0x1e2/0x5f0 [ 914.076114][T19385] setup_net+0x11d/0x3a0 [ 914.076144][T19385] ? __pfx_setup_net+0x10/0x10 [ 914.076171][T19385] ? lockdep_init_map_type+0x5c/0x270 [ 914.076199][T19385] ? mutex_init_lockep+0x110/0x150 [ 914.076232][T19385] copy_net_ns+0x351/0x5d0 [ 914.076267][T19385] create_new_namespaces+0x3ea/0xab0 [ 914.076309][T19385] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 914.076346][T19385] ksys_unshare+0x45b/0xa40 [ 914.076371][T19385] ? __pfx_ksys_unshare+0x10/0x10 [ 914.076395][T19385] ? xfd_validate_state+0x61/0x180 [ 914.076440][T19385] __x64_sys_unshare+0x31/0x40 [ 914.076463][T19385] do_syscall_64+0xcd/0xf80 [ 914.076494][T19385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.076519][T19385] RIP: 0033:0x7f7588f8f7c9 [ 914.076540][T19385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.076563][T19385] RSP: 002b:00007f7589e15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 914.076587][T19385] RAX: ffffffffffffffda RBX: 00007f75891e5fa0 RCX: 00007f7588f8f7c9 [ 914.076605][T19385] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 914.076621][T19385] RBP: 00007f7589013f91 R08: 0000000000000000 R09: 0000000000000000 [ 914.076638][T19385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.076654][T19385] R13: 00007f75891e6038 R14: 00007f75891e5fa0 R15: 00007ffcccd146b8 [ 914.076691][T19385] [ 914.077063][T19385] sysctl could not get directory: [ 914.154355][T19391] snd_aloop snd_aloop.0: control 7:265:7::2 is already present [ 914.155654][T19385] /net/ipv6 -12 [ 914.508211][T19383] ptp ptp0: new virtual clock ptp1 [ 914.518729][T19383] ptp ptp0: new virtual clock ptp2 [ 914.528536][T19383] ptp ptp0: new virtual clock ptp3 [ 914.534980][T19383] ptp ptp0: guarantee physical clock free running [ 914.895225][T19413] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2596'. [ 914.910182][T19413] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 915.036028][T19413] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 915.557445][T19424] binder: 19423:19424 ioctl c018620c 0 returned -1 [ 915.634293][T19424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2598'. [ 915.823543][T19426] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 916.056371][T19438] FAULT_INJECTION: forcing a failure. [ 916.056371][T19438] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 916.141678][T19438] CPU: 1 UID: 0 PID: 19438 Comm: syz.1.2603 Not tainted syzkaller #0 PREEMPT(full) [ 916.141716][T19438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 916.141733][T19438] Call Trace: [ 916.141742][T19438] [ 916.141754][T19438] dump_stack_lvl+0x16c/0x1f0 [ 916.141790][T19438] should_fail_ex+0x512/0x640 [ 916.141826][T19438] strncpy_from_user+0x3b/0x2e0 [ 916.141857][T19438] getname_flags.part.0+0x8f/0x550 [ 916.141890][T19438] getname_flags+0x93/0xf0 [ 916.141921][T19438] __do_sys_swapon+0x848/0x3a90 [ 916.141958][T19438] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 916.141995][T19438] ? __x64_sys_futex+0x1e0/0x4c0 [ 916.142024][T19438] ? __x64_sys_futex+0x1e9/0x4c0 [ 916.142059][T19438] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 916.142097][T19438] ? __pfx___do_sys_swapon+0x10/0x10 [ 916.142126][T19438] ? syscall_user_dispatch+0x78/0x140 [ 916.142170][T19438] do_syscall_64+0xcd/0xf80 [ 916.142204][T19438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.142230][T19438] RIP: 0033:0x7f58e4b8f7c9 [ 916.142252][T19438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 916.142277][T19438] RSP: 002b:00007f58e2df6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a7 [ 916.142302][T19438] RAX: ffffffffffffffda RBX: 00007f58e4de5fa0 RCX: 00007f58e4b8f7c9 [ 916.142320][T19438] RDX: 0000000000000000 RSI: 0000000000007057 RDI: 0000000000000000 [ 916.142337][T19438] RBP: 00007f58e4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 916.142354][T19438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.142369][T19438] R13: 00007f58e4de6038 R14: 00007f58e4de5fa0 R15: 00007fff64374438 [ 916.142407][T19438] [ 916.596553][T19445] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input66 [ 917.366097][T19446] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input67 [ 917.561587][T19458] binder: 19457:19458 ioctl c018620c 0 returned -1 [ 918.155203][T19471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2609'. [ 918.173325][T19471] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 918.200542][T19471] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 920.391595][T19498] binder: 19495:19498 ioctl c018620c 0 returned -1 [ 920.571294][T19503] input: jJǸ-9%vJ86 as /devices/virtual/input/input68 [ 921.722385][T19518] binder: 19516:19518 ioctl c018620c 0 returned -1 [ 921.744061][T19519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2618'. [ 921.753261][T19519] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 921.830638][T19519] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 923.538808][T19537] binder: 19536:19537 ioctl c018620c 0 returned -1 [ 923.783453][T19538] zswap: compressor not available [ 924.184642][T19538] FAULT_INJECTION: forcing a failure. [ 924.184642][T19538] name failslab, interval 1, probability 0, space 0, times 0 [ 924.272013][T19538] CPU: 1 UID: 0 PID: 19538 Comm: syz.1.2624 Not tainted syzkaller #0 PREEMPT(full) [ 924.272040][T19538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 924.272050][T19538] Call Trace: [ 924.272056][T19538] [ 924.272066][T19538] dump_stack_lvl+0x16c/0x1f0 [ 924.272089][T19538] should_fail_ex+0x512/0x640 [ 924.272106][T19538] ? __kmalloc_noprof+0xca/0x870 [ 924.272126][T19538] should_failslab+0xc2/0x120 [ 924.272147][T19538] __kmalloc_noprof+0xdd/0x870 [ 924.272161][T19538] ? sk_prot_alloc+0x1a8/0x2a0 [ 924.272183][T19538] ? sk_prot_alloc+0x1a8/0x2a0 [ 924.272200][T19538] sk_prot_alloc+0x1a8/0x2a0 [ 924.272219][T19538] sk_alloc+0x36/0xb80 [ 924.272234][T19538] __netlink_create+0x5e/0x2c0 [ 924.272251][T19538] __netlink_kernel_create+0xed/0x7b0 [ 924.272269][T19538] ? __pfx___netlink_kernel_create+0x10/0x10 [ 924.272292][T19538] rtnetlink_net_init+0xb9/0x140 [ 924.272306][T19538] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 924.272320][T19538] ? lockdep_init_map_type+0x5c/0x270 [ 924.272336][T19538] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 924.272348][T19538] ? __pfx_rtnetlink_bind+0x10/0x10 [ 924.272363][T19538] ? mutex_init_lockep+0x110/0x150 [ 924.272381][T19538] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 924.272393][T19538] ops_init+0x1e2/0x5f0 [ 924.272412][T19538] setup_net+0x11d/0x3a0 [ 924.272428][T19538] ? __pfx_setup_net+0x10/0x10 [ 924.272442][T19538] ? lockdep_init_map_type+0x5c/0x270 [ 924.272458][T19538] ? mutex_init_lockep+0x110/0x150 [ 924.272476][T19538] copy_net_ns+0x351/0x5d0 [ 924.272495][T19538] create_new_namespaces+0x3ea/0xab0 [ 924.272519][T19538] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 924.272540][T19538] ksys_unshare+0x45b/0xa40 [ 924.272554][T19538] ? __pfx_ksys_unshare+0x10/0x10 [ 924.272566][T19538] ? exc_page_fault+0x64/0xc0 [ 924.272589][T19538] __x64_sys_unshare+0x31/0x40 [ 924.272601][T19538] do_syscall_64+0xcd/0xf80 [ 924.272619][T19538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.272633][T19538] RIP: 0033:0x7f58e4b8f7c9 [ 924.272646][T19538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.272660][T19538] RSP: 002b:00007f58e2df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 924.272674][T19538] RAX: ffffffffffffffda RBX: 00007f58e4de5fa0 RCX: 00007f58e4b8f7c9 [ 924.272683][T19538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 924.272692][T19538] RBP: 00007f58e4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 924.272702][T19538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.272711][T19538] R13: 00007f58e4de6038 R14: 00007f58e4de5fa0 R15: 00007fff64374438 [ 924.272731][T19538] [ 925.465678][T19564] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+' [ 928.504244][T19605] openvswitch: netlink: Key type 14680 is out of range max 32 [ 928.517354][T19605] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 929.872697][T19610] zswap: compressor not available [ 930.377726][T19610] FAULT_INJECTION: forcing a failure. [ 930.377726][T19610] name failslab, interval 1, probability 0, space 0, times 0 [ 930.398748][T19610] CPU: 0 UID: 0 PID: 19610 Comm: syz.3.2638 Not tainted syzkaller #0 PREEMPT(full) [ 930.398783][T19610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 930.398799][T19610] Call Trace: [ 930.398808][T19610] [ 930.398818][T19610] dump_stack_lvl+0x16c/0x1f0 [ 930.398855][T19610] should_fail_ex+0x512/0x640 [ 930.398885][T19610] ? __kmalloc_noprof+0xca/0x870 [ 930.398914][T19610] should_failslab+0xc2/0x120 [ 930.398951][T19610] __kmalloc_noprof+0xdd/0x870 [ 930.398977][T19610] ? __netlink_kernel_create+0x17f/0x7b0 [ 930.399016][T19610] ? __netlink_kernel_create+0x17f/0x7b0 [ 930.399044][T19610] __netlink_kernel_create+0x17f/0x7b0 [ 930.399075][T19610] ? __pfx___netlink_kernel_create+0x10/0x10 [ 930.399126][T19610] rtnetlink_net_init+0xb9/0x140 [ 930.399151][T19610] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 930.399173][T19610] ? lockdep_init_map_type+0x5c/0x270 [ 930.399207][T19610] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 930.399228][T19610] ? __pfx_rtnetlink_bind+0x10/0x10 [ 930.399255][T19610] ? mutex_init_lockep+0x110/0x150 [ 930.399285][T19610] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 930.399309][T19610] ops_init+0x1e2/0x5f0 [ 930.399342][T19610] setup_net+0x11d/0x3a0 [ 930.399371][T19610] ? __pfx_setup_net+0x10/0x10 [ 930.399397][T19610] ? lockdep_init_map_type+0x5c/0x270 [ 930.399422][T19610] ? mutex_init_lockep+0x110/0x150 [ 930.399454][T19610] copy_net_ns+0x351/0x5d0 [ 930.399485][T19610] create_new_namespaces+0x3ea/0xab0 [ 930.399525][T19610] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 930.399575][T19610] ksys_unshare+0x45b/0xa40 [ 930.399601][T19610] ? __pfx_ksys_unshare+0x10/0x10 [ 930.399622][T19610] ? exc_page_fault+0x64/0xc0 [ 930.399660][T19610] __x64_sys_unshare+0x31/0x40 [ 930.399684][T19610] do_syscall_64+0xcd/0xf80 [ 930.399718][T19610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.399744][T19610] RIP: 0033:0x7f055038f7c9 [ 930.399764][T19610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.399789][T19610] RSP: 002b:00007f055129b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 930.399814][T19610] RAX: ffffffffffffffda RBX: 00007f05505e5fa0 RCX: 00007f055038f7c9 [ 930.399831][T19610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 930.399847][T19610] RBP: 00007f0550413f91 R08: 0000000000000000 R09: 0000000000000000 [ 930.399864][T19610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 930.399877][T19610] R13: 00007f05505e6038 R14: 00007f05505e5fa0 R15: 00007ffc1506f398 [ 930.399910][T19610] [ 931.498292][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.504792][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.710199][T19657] binder: 19655:19657 ioctl c018620c 0 returned -1 [ 933.818652][T19671] openvswitch: netlink: Key type 14680 is out of range max 32 [ 933.962780][T19671] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 934.897306][T19678] openvswitch: netlink: Key type 14680 is out of range max 32 [ 934.952114][T19682] openvswitch: netlink: Message has 8 unknown bytes. [ 934.967618][T19678] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 934.975362][T19682] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 935.089761][T19684] openvswitch: netlink: Key type 14680 is out of range max 32 [ 935.134245][T19684] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 935.156016][T19680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2650'. [ 936.025882][T19694] FAULT_INJECTION: forcing a failure. [ 936.025882][T19694] name failslab, interval 1, probability 0, space 0, times 0 [ 936.040619][T19694] CPU: 1 UID: 0 PID: 19694 Comm: syz.1.2653 Not tainted syzkaller #0 PREEMPT(full) [ 936.040656][T19694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 936.040673][T19694] Call Trace: [ 936.040682][T19694] [ 936.040693][T19694] dump_stack_lvl+0x16c/0x1f0 [ 936.040729][T19694] should_fail_ex+0x512/0x640 [ 936.040756][T19694] ? __kmalloc_noprof+0xca/0x870 [ 936.040778][T19694] should_failslab+0xc2/0x120 [ 936.040800][T19694] __kmalloc_noprof+0xdd/0x870 [ 936.040814][T19694] ? __register_sysctl_table+0xea2/0x1900 [ 936.040845][T19694] ? __register_sysctl_table+0xea2/0x1900 [ 936.040864][T19694] __register_sysctl_table+0xea2/0x1900 [ 936.040887][T19694] ? __pfx___register_sysctl_table+0x10/0x10 [ 936.040905][T19694] ? is_module_address+0x69/0xf0 [ 936.040923][T19694] ? register_net_sysctl_sz+0x222/0x3d0 [ 936.040944][T19694] ? __asan_memcpy+0x3c/0x60 [ 936.040961][T19694] xfrm6_net_init+0xf0/0x1c0 [ 936.040978][T19694] ? __pfx_xfrm6_net_init+0x10/0x10 [ 936.040993][T19694] ops_init+0x1e2/0x5f0 [ 936.041012][T19694] setup_net+0x11d/0x3a0 [ 936.041029][T19694] ? __pfx_setup_net+0x10/0x10 [ 936.041044][T19694] ? lockdep_init_map_type+0x5c/0x270 [ 936.041060][T19694] ? mutex_init_lockep+0x110/0x150 [ 936.041079][T19694] copy_net_ns+0x351/0x5d0 [ 936.041098][T19694] create_new_namespaces+0x3ea/0xab0 [ 936.041122][T19694] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 936.041143][T19694] ksys_unshare+0x45b/0xa40 [ 936.041157][T19694] ? __pfx_ksys_unshare+0x10/0x10 [ 936.041171][T19694] ? xfd_validate_state+0x61/0x180 [ 936.041196][T19694] __x64_sys_unshare+0x31/0x40 [ 936.041209][T19694] do_syscall_64+0xcd/0xf80 [ 936.041227][T19694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.041241][T19694] RIP: 0033:0x7f58e4b8f7c9 [ 936.041254][T19694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.041268][T19694] RSP: 002b:00007f58e2df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 936.041282][T19694] RAX: ffffffffffffffda RBX: 00007f58e4de5fa0 RCX: 00007f58e4b8f7c9 [ 936.041292][T19694] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 936.041300][T19694] RBP: 00007f58e4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 936.041309][T19694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 936.041317][T19694] R13: 00007f58e4de6038 R14: 00007f58e4de5fa0 R15: 00007fff64374438 [ 936.041337][T19694] [ 936.041466][T19694] sysctl could not get directory: /net/ipv6 -12 [ 936.360251][T19698] openvswitch: netlink: Key type 14680 is out of range max 32 [ 936.375448][T19701] snd_aloop snd_aloop.0: control 7:265:7::2 is already present [ 936.466246][T19698] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 936.749713][T19695] zswap: compressor not available [ 936.954132][T19695] FAULT_INJECTION: forcing a failure. [ 936.954132][T19695] name failslab, interval 1, probability 0, space 0, times 0 [ 937.008970][T19695] CPU: 1 UID: 0 PID: 19695 Comm: syz.2.2651 Not tainted syzkaller #0 PREEMPT(full) [ 937.008993][T19695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 937.009003][T19695] Call Trace: [ 937.009008][T19695] [ 937.009015][T19695] dump_stack_lvl+0x16c/0x1f0 [ 937.009038][T19695] should_fail_ex+0x512/0x640 [ 937.009056][T19695] ? fs_reclaim_acquire+0xae/0x150 [ 937.009078][T19695] should_failslab+0xc2/0x120 [ 937.009098][T19695] kmem_cache_alloc_noprof+0x75/0x720 [ 937.009113][T19695] ? __pfx_map_id_range_down+0x10/0x10 [ 937.009132][T19695] ? security_inode_alloc+0x3b/0x2b0 [ 937.009152][T19695] ? security_inode_alloc+0x3b/0x2b0 [ 937.009168][T19695] security_inode_alloc+0x3b/0x2b0 [ 937.009184][T19695] inode_init_always_gfp+0xced/0x1040 [ 937.009206][T19695] alloc_inode+0x86/0x240 [ 937.009221][T19695] sock_alloc+0x40/0x280 [ 937.009238][T19695] sock_create_lite+0x82/0x120 [ 937.009257][T19695] __netlink_kernel_create+0xbd/0x7b0 [ 937.009276][T19695] ? __pfx___netlink_kernel_create+0x10/0x10 [ 937.009297][T19695] ? __pfx_genl_pernet_init+0x10/0x10 [ 937.009316][T19695] genl_pernet_init+0xbd/0x170 [ 937.009334][T19695] ? __pfx_genl_pernet_init+0x10/0x10 [ 937.009352][T19695] ? lockdep_init_map_type+0x5c/0x270 [ 937.009368][T19695] ? __pfx_genl_rcv+0x10/0x10 [ 937.009384][T19695] ? __pfx_genl_bind+0x10/0x10 [ 937.009400][T19695] ? __pfx_genl_unbind+0x10/0x10 [ 937.009417][T19695] ? __pfx_genl_release+0x10/0x10 [ 937.009435][T19695] ? mutex_init_lockep+0x110/0x150 [ 937.009453][T19695] ops_init+0x1e2/0x5f0 [ 937.009472][T19695] setup_net+0x11d/0x3a0 [ 937.009488][T19695] ? __pfx_setup_net+0x10/0x10 [ 937.009503][T19695] ? lockdep_init_map_type+0x5c/0x270 [ 937.009518][T19695] ? mutex_init_lockep+0x110/0x150 [ 937.009536][T19695] copy_net_ns+0x351/0x5d0 [ 937.009556][T19695] create_new_namespaces+0x3ea/0xab0 [ 937.009580][T19695] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 937.009601][T19695] ksys_unshare+0x45b/0xa40 [ 937.009615][T19695] ? __pfx_ksys_unshare+0x10/0x10 [ 937.009629][T19695] ? xfd_validate_state+0x61/0x180 [ 937.009654][T19695] __x64_sys_unshare+0x31/0x40 [ 937.009667][T19695] do_syscall_64+0xcd/0xf80 [ 937.009685][T19695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.009699][T19695] RIP: 0033:0x7f7588f8f7c9 [ 937.009712][T19695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.009725][T19695] RSP: 002b:00007f7589e15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 937.009739][T19695] RAX: ffffffffffffffda RBX: 00007f75891e5fa0 RCX: 00007f7588f8f7c9 [ 937.009749][T19695] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 937.009759][T19695] RBP: 00007f7589013f91 R08: 0000000000000000 R09: 0000000000000000 [ 937.009768][T19695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.009786][T19695] R13: 00007f75891e6038 R14: 00007f75891e5fa0 R15: 00007ffcccd146b8 [ 937.009806][T19695] [ 937.346960][T19713] binder: 19712:19713 ioctl c018620c 0 returned -1 [ 938.364820][T19728] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 938.397751][T19734] openvswitch: netlink: Message has 8 unknown bytes. [ 938.435564][T19734] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 938.800856][T19740] openvswitch: netlink: Message has 8 unknown bytes. [ 938.842633][T19740] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 939.623298][T19745] binder: 19744:19745 ioctl c018620c 0 returned -1 [ 939.748531][T19748] random: crng reseeded on system resumption [ 940.469816][T19760] binder: 19759:19760 ioctl c018620c 0 returned -1 [ 941.071180][T19768] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 941.428302][T19774] binder: 19771:19774 ioctl c018620c 0 returned -1 [ 941.952234][T19783] openvswitch: netlink: Message has 8 unknown bytes. [ 942.030190][T19783] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 942.316844][T19787] bond0: option all_slaves_active: invalid value () [ 943.122833][T19799] binder: 19797:19799 ioctl c018620c 0 returned -1 [ 943.286442][T19792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2676'. [ 943.363832][T19805] binder: 19804:19805 ioctl c018620c 0 returned -1 [ 943.373894][T19792] veth0_macvtap: left promiscuous mode [ 943.423322][T19792] macvtap0: entered promiscuous mode [ 943.437301][T19792] macvtap0: entered allmulticast mode [ 946.533752][T19841] binder: 19840:19841 ioctl c018620c 0 returned -1 [ 947.837128][T19858] openvswitch: netlink: Message has 8 unknown bytes. [ 947.906539][T19858] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 948.884209][T19868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2689'. [ 948.927055][T19868] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.036751][T19868] bridge_slave_1 (unregistering): left allmulticast mode [ 949.103191][T19868] bridge_slave_1 (unregistering): left promiscuous mode [ 949.175137][T19868] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.549470][T19879] FAULT_INJECTION: forcing a failure. [ 949.549470][T19879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 949.576293][T19879] CPU: 1 UID: 0 PID: 19879 Comm: syz.2.2690 Not tainted syzkaller #0 PREEMPT(full) [ 949.576316][T19879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 949.576325][T19879] Call Trace: [ 949.576332][T19879] [ 949.576338][T19879] dump_stack_lvl+0x16c/0x1f0 [ 949.576360][T19879] should_fail_ex+0x512/0x640 [ 949.576380][T19879] should_fail_alloc_page+0xe7/0x130 [ 949.576403][T19879] prepare_alloc_pages+0x3c2/0x610 [ 949.576425][T19879] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 949.576442][T19879] ? __pfx_try_to_migrate_one+0x10/0x10 [ 949.576468][T19879] ? __up_read+0x2d1/0x700 [ 949.576485][T19879] ? __pfx___up_read+0x10/0x10 [ 949.576511][T19879] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 949.576526][T19879] ? rmap_walk_anon+0x503/0x710 [ 949.576562][T19879] __folio_alloc_noprof+0x11/0xa0 [ 949.576577][T19879] alloc_migration_target+0x24a/0x660 [ 949.576601][T19879] migrate_pages_batch+0x3bc/0x3bb0 [ 949.576617][T19879] ? __pfx_alloc_migration_target+0x10/0x10 [ 949.576645][T19879] ? __pfx_migrate_pages_batch+0x10/0x10 [ 949.576661][T19879] ? __pfx_walk_pgd_range+0x10/0x10 [ 949.576678][T19879] migrate_pages_sync+0x12d/0x8a0 [ 949.576692][T19879] ? __pfx_alloc_migration_target+0x10/0x10 [ 949.576716][T19879] ? queue_pages_test_walk+0x279/0x410 [ 949.576736][T19879] ? __pfx_migrate_pages_sync+0x10/0x10 [ 949.576750][T19879] ? walk_page_test+0x9b/0x180 [ 949.576765][T19879] ? walk_page_range_mm+0x235/0xb40 [ 949.576784][T19879] migrate_pages+0x1b0b/0x2350 [ 949.576799][T19879] ? __pfx_alloc_migration_target+0x10/0x10 [ 949.576825][T19879] ? __pfx_migrate_pages+0x10/0x10 [ 949.576839][T19879] ? queue_pages_range+0x11e/0x180 [ 949.576859][T19879] ? __pfx___up_read+0x10/0x10 [ 949.576875][T19879] ? do_migrate_pages+0x458/0x750 [ 949.576897][T19879] do_migrate_pages+0x48e/0x750 [ 949.576920][T19879] ? __pfx_do_migrate_pages+0x10/0x10 [ 949.576942][T19879] ? rcu_is_watching+0x12/0xc0 [ 949.576962][T19879] ? cap_capable+0x10d/0x3f0 [ 949.576976][T19879] ? get_task_mm+0xc2/0xf0 [ 949.576994][T19879] ? security_capable+0x250/0x260 [ 949.577011][T19879] kernel_migrate_pages+0x55b/0x700 [ 949.577029][T19879] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 949.577049][T19879] ? __pfx_do_writev+0x10/0x10 [ 949.577077][T19879] __x64_sys_migrate_pages+0x96/0x100 [ 949.577099][T19879] ? lockdep_hardirqs_on+0x7c/0x110 [ 949.577117][T19879] do_syscall_64+0xcd/0xf80 [ 949.577135][T19879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.577151][T19879] RIP: 0033:0x7f7588f8f7c9 [ 949.577165][T19879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.577179][T19879] RSP: 002b:00007f7589e15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 949.577193][T19879] RAX: ffffffffffffffda RBX: 00007f75891e5fa0 RCX: 00007f7588f8f7c9 [ 949.577203][T19879] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 949.577212][T19879] RBP: 00007f7589013f91 R08: 0000000000000000 R09: 0000000000000000 [ 949.577221][T19879] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 949.577230][T19879] R13: 00007f75891e6038 R14: 00007f75891e5fa0 R15: 00007ffcccd146b8 [ 949.577249][T19879] [ 949.990867][T19881] binder: 19880:19881 ioctl c018620c 0 returned -1 [ 950.078354][T19886] binder: 19883:19886 ioctl c018620c 0 returned -1 [ 951.804079][T19905] openvswitch: netlink: Message has 8 unknown bytes. [ 951.831643][T19905] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 952.665893][T19914] binder: 19913:19914 ioctl c018620c 0 returned -1 [ 952.916974][T19920] openvswitch: netlink: Message has 8 unknown bytes. [ 952.976003][T19920] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 953.950053][T19929] binder: 19928:19929 ioctl c018620c 0 returned -1 [ 954.459254][T19936] binder: 19935:19936 ioctl c018620c 0 returned -1 [ 954.544809][T19938] binder: 19937:19938 ioctl c018620c 0 returned -1 [ 955.762363][T19950] FAULT_INJECTION: forcing a failure. [ 955.762363][T19950] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 955.783851][T19950] CPU: 1 UID: 0 PID: 19950 Comm: syz.1.2706 Not tainted syzkaller #0 PREEMPT(full) [ 955.783890][T19950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 955.783906][T19950] Call Trace: [ 955.783914][T19950] [ 955.783925][T19950] dump_stack_lvl+0x16c/0x1f0 [ 955.783960][T19950] should_fail_ex+0x512/0x640 [ 955.783996][T19950] should_fail_alloc_page+0xe7/0x130 [ 955.784035][T19950] prepare_alloc_pages+0x3c2/0x610 [ 955.784077][T19950] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 955.784112][T19950] ? __up_read+0x2d1/0x700 [ 955.784145][T19950] ? __pfx___up_read+0x10/0x10 [ 955.784175][T19950] ? __rmap_walk_file+0x575/0x620 [ 955.784209][T19950] ? vma_interval_tree_iter_next+0x10c/0x250 [ 955.784248][T19950] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 955.784280][T19950] ? __rmap_walk_file+0x575/0x620 [ 955.784322][T19950] ? rmap_walk_file+0x174/0x1f0 [ 955.784353][T19950] ? queue_folios_pte_range+0x9bb/0x1150 [ 955.784406][T19950] __folio_alloc_noprof+0x11/0xa0 [ 955.784433][T19950] alloc_migration_target+0x24a/0x660 [ 955.784475][T19950] migrate_pages_batch+0x3bc/0x3bb0 [ 955.784505][T19950] ? __pfx_alloc_migration_target+0x10/0x10 [ 955.784557][T19950] ? __pfx_migrate_pages_batch+0x10/0x10 [ 955.784590][T19950] ? __pfx_walk_pgd_range+0x10/0x10 [ 955.784622][T19950] migrate_pages_sync+0x12d/0x8a0 [ 955.784659][T19950] ? __pfx_alloc_migration_target+0x10/0x10 [ 955.784706][T19950] ? queue_pages_test_walk+0x279/0x410 [ 955.784744][T19950] ? __pfx_migrate_pages_sync+0x10/0x10 [ 955.784772][T19950] ? walk_page_test+0x9b/0x180 [ 955.784803][T19950] ? walk_page_range_mm+0x235/0xb40 [ 955.784840][T19950] migrate_pages+0x1b0b/0x2350 [ 955.784870][T19950] ? __pfx_alloc_migration_target+0x10/0x10 [ 955.784919][T19950] ? __pfx_migrate_pages+0x10/0x10 [ 955.784945][T19950] ? queue_pages_range+0x11e/0x180 [ 955.784983][T19950] ? __pfx___up_read+0x10/0x10 [ 955.785014][T19950] ? do_migrate_pages+0x458/0x750 [ 955.785054][T19950] do_migrate_pages+0x48e/0x750 [ 955.785094][T19950] ? __pfx_do_migrate_pages+0x10/0x10 [ 955.785146][T19950] ? rcu_is_watching+0x12/0xc0 [ 955.785181][T19950] ? cap_capable+0x10d/0x3f0 [ 955.785204][T19950] ? get_task_mm+0xc2/0xf0 [ 955.785249][T19950] ? security_capable+0x250/0x260 [ 955.785280][T19950] kernel_migrate_pages+0x55b/0x700 [ 955.785313][T19950] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 955.785354][T19950] ? __pfx_do_writev+0x10/0x10 [ 955.785391][T19950] __x64_sys_migrate_pages+0x96/0x100 [ 955.785425][T19950] ? lockdep_hardirqs_on+0x7c/0x110 [ 955.785453][T19950] do_syscall_64+0xcd/0xf80 [ 955.785486][T19950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.785510][T19950] RIP: 0033:0x7f58e4b8f7c9 [ 955.785532][T19950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 955.785557][T19950] RSP: 002b:00007f58e2df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 955.785583][T19950] RAX: ffffffffffffffda RBX: 00007f58e4de5fa0 RCX: 00007f58e4b8f7c9 [ 955.785601][T19950] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 955.785618][T19950] RBP: 00007f58e4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 955.785634][T19950] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 955.785658][T19950] R13: 00007f58e4de6038 R14: 00007f58e4de5fa0 R15: 00007fff64374438 [ 955.785694][T19950] [ 956.035204][T19961] openvswitch: netlink: Message has 8 unknown bytes. [ 956.036158][T19961] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 956.134597][T19963] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2709'. [ 956.186808][T19965] nbd: socks must be embedded in a SOCK_ITEM attr [ 957.711952][T19961] tty tty45: ldisc open failed (-12), clearing slot 44 [ 958.638507][T19980] binder: 19979:19980 ioctl c018620c 0 returned -1 [ 960.013498][T19989] binder: 19988:19989 ioctl c018620c 0 returned -1 [ 961.189648][T20002] binder: 20000:20002 ioctl c018620c 0 returned -1 [ 961.198498][T20003] binder: 20001:20003 ioctl c018620c 0 returned -1 [ 961.803226][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 962.060205][T20013] openvswitch: netlink: Message has 8 unknown bytes. [ 962.102862][T20013] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 962.469924][T20015] binder: 20014:20015 ioctl c018620c 0 returned -1 [ 962.499220][T20018] sp0: Synchronizing with TNC [ 962.520540][T20019] binder: 20017:20019 ioctl c018620c 0 returned -1 [ 962.738174][T20023] ptp ptp0: guarantee physical clock free running [ 962.951658][T20028] binder: 20027:20028 ioctl c018620c 0 returned -1 [ 963.017734][T20030] input: f as /devices/virtual/input/input69 [ 963.791490][T20038] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 964.042414][T20044] bond0: option all_slaves_active: invalid value () [ 964.892417][T20058] binder: 20055:20058 ioctl c018620c 0 returned -1 [ 965.564964][T20068] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 966.065262][T20075] openvswitch: netlink: Message has 8 unknown bytes. [ 966.087715][T20075] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 966.627877][T20081] binder: 20080:20081 ioctl c018620c 0 returned -1 [ 968.642983][T20105] input: f as /devices/virtual/input/input70 [ 969.216383][T20115] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 970.090396][T20130] openvswitch: netlink: Message has 8 unknown bytes. [ 970.170219][T20130] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 970.972475][T20135] FAULT_INJECTION: forcing a failure. [ 970.972475][T20135] name failslab, interval 1, probability 0, space 0, times 0 [ 971.014068][T20135] CPU: 1 UID: 0 PID: 20135 Comm: syz.1.2745 Not tainted syzkaller #0 PREEMPT(full) [ 971.014107][T20135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 971.014123][T20135] Call Trace: [ 971.014134][T20135] [ 971.014145][T20135] dump_stack_lvl+0x16c/0x1f0 [ 971.014181][T20135] should_fail_ex+0x512/0x640 [ 971.014199][T20135] ? __kmalloc_node_noprof+0xcd/0x890 [ 971.014220][T20135] should_failslab+0xc2/0x120 [ 971.014241][T20135] __kmalloc_node_noprof+0xe0/0x890 [ 971.014258][T20135] ? __get_vm_area_node+0x208/0x330 [ 971.014275][T20135] ? __vmalloc_node_range_noprof+0x3e5/0x1480 [ 971.014306][T20135] ? __vmalloc_node_range_noprof+0x3e5/0x1480 [ 971.014327][T20135] __vmalloc_node_range_noprof+0x3e5/0x1480 [ 971.014354][T20135] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 971.014375][T20135] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 971.014401][T20135] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 971.014417][T20135] vmalloc_user_noprof+0x9e/0xe0 [ 971.014437][T20135] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 971.014454][T20135] vb2_vmalloc_alloc+0x135/0x3f0 [ 971.014471][T20135] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 971.014487][T20135] __vb2_queue_alloc+0x8c9/0x1280 [ 971.014511][T20135] vb2_core_reqbufs+0xa90/0xfe0 [ 971.014530][T20135] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 971.014556][T20135] __vb2_init_fileio+0x3f1/0x1100 [ 971.014571][T20135] ? lockdep_hardirqs_on+0x7c/0x110 [ 971.014588][T20135] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 971.014604][T20135] ? __pollwait+0x271/0x460 [ 971.014624][T20135] vb2_core_poll+0x5ec/0x700 [ 971.014640][T20135] vb2_poll+0x4b/0xe0 [ 971.014661][T20135] vb2_fop_poll+0x10f/0x2c0 [ 971.014676][T20135] ? __pfx_vb2_fop_poll+0x10/0x10 [ 971.014689][T20135] v4l2_poll+0x163/0x320 [ 971.014708][T20135] ? __pfx_v4l2_poll+0x10/0x10 [ 971.014724][T20135] do_sys_poll+0x55c/0xdf0 [ 971.014748][T20135] ? __pfx_do_sys_poll+0x10/0x10 [ 971.014782][T20135] ? preempt_schedule_common+0x44/0xc0 [ 971.014799][T20135] ? __pfx___pollwait+0x10/0x10 [ 971.014818][T20135] ? __pfx_pollwake+0x10/0x10 [ 971.014863][T20135] ? __pfx_timespec64_add_safe+0x10/0x10 [ 971.014881][T20135] ? ktime_get_ts64+0x2d2/0x400 [ 971.014897][T20135] ? read_tsc+0x9/0x20 [ 971.014913][T20135] ? ktime_get_ts64+0x256/0x400 [ 971.014933][T20135] __x64_sys_poll+0x1a6/0x450 [ 971.014952][T20135] ? __pfx___x64_sys_poll+0x10/0x10 [ 971.014975][T20135] do_syscall_64+0xcd/0xf80 [ 971.014994][T20135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.015009][T20135] RIP: 0033:0x7f58e4b8f7c9 [ 971.015021][T20135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.015035][T20135] RSP: 002b:00007f58e2df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 971.015051][T20135] RAX: ffffffffffffffda RBX: 00007f58e4de5fa0 RCX: 00007f58e4b8f7c9 [ 971.015061][T20135] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 971.015069][T20135] RBP: 00007f58e4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 971.015078][T20135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.015086][T20135] R13: 00007f58e4de6038 R14: 00007f58e4de5fa0 R15: 00007fff64374438 [ 971.015106][T20135] [ 971.022103][T20135] syz.1.2745: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 971.596246][T20144] openvswitch: netlink: Message has 8 unknown bytes. [ 971.606285][T20144] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 971.726083][T20140] openvswitch: netlink: Message has 8 unknown bytes. [ 971.749765][T20135] CPU: 1 UID: 0 PID: 20135 Comm: syz.1.2745 Not tainted syzkaller #0 PREEMPT(full) [ 971.749802][T20135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 971.749812][T20135] Call Trace: [ 971.749817][T20135] [ 971.749824][T20135] dump_stack_lvl+0x16c/0x1f0 [ 971.749849][T20135] warn_alloc+0x248/0x3a0 [ 971.749867][T20135] ? __pfx_warn_alloc+0x10/0x10 [ 971.749881][T20135] ? dump_stack_lvl+0x1a3/0x1f0 [ 971.749898][T20135] ? should_fail_ex+0x354/0x640 [ 971.749917][T20135] ? rcu_is_watching+0x12/0xc0 [ 971.749939][T20135] ? trace_kmalloc+0x2b/0xb0 [ 971.749973][T20135] ? __kmalloc_node_noprof+0x364/0x890 [ 971.749990][T20135] ? __get_vm_area_node+0x208/0x330 [ 971.750009][T20135] ? __vmalloc_node_range_noprof+0x3e5/0x1480 [ 971.750040][T20135] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 971.750068][T20135] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 971.750089][T20135] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 971.750116][T20135] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 971.750132][T20135] vmalloc_user_noprof+0x9e/0xe0 [ 971.750153][T20135] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 971.750169][T20135] vb2_vmalloc_alloc+0x135/0x3f0 [ 971.750186][T20135] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 971.750202][T20135] __vb2_queue_alloc+0x8c9/0x1280 [ 971.750227][T20135] vb2_core_reqbufs+0xa90/0xfe0 [ 971.750246][T20135] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 971.750272][T20135] __vb2_init_fileio+0x3f1/0x1100 [ 971.750287][T20135] ? lockdep_hardirqs_on+0x7c/0x110 [ 971.750305][T20135] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 971.750321][T20135] ? __pollwait+0x271/0x460 [ 971.750342][T20135] vb2_core_poll+0x5ec/0x700 [ 971.750358][T20135] vb2_poll+0x4b/0xe0 [ 971.750381][T20135] vb2_fop_poll+0x10f/0x2c0 [ 971.750397][T20135] ? __pfx_vb2_fop_poll+0x10/0x10 [ 971.750410][T20135] v4l2_poll+0x163/0x320 [ 971.750430][T20135] ? __pfx_v4l2_poll+0x10/0x10 [ 971.750447][T20135] do_sys_poll+0x55c/0xdf0 [ 971.750472][T20135] ? __pfx_do_sys_poll+0x10/0x10 [ 971.750507][T20135] ? preempt_schedule_common+0x44/0xc0 [ 971.750524][T20135] ? __pfx___pollwait+0x10/0x10 [ 971.750544][T20135] ? __pfx_pollwake+0x10/0x10 [ 971.750589][T20135] ? __pfx_timespec64_add_safe+0x10/0x10 [ 971.750607][T20135] ? ktime_get_ts64+0x2d2/0x400 [ 971.750624][T20135] ? read_tsc+0x9/0x20 [ 971.750641][T20135] ? ktime_get_ts64+0x256/0x400 [ 971.750661][T20135] __x64_sys_poll+0x1a6/0x450 [ 971.750679][T20135] ? __pfx___x64_sys_poll+0x10/0x10 [ 971.750704][T20135] do_syscall_64+0xcd/0xf80 [ 971.750723][T20135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.750737][T20135] RIP: 0033:0x7f58e4b8f7c9 [ 971.750750][T20135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.750764][T20135] RSP: 002b:00007f58e2df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 971.750779][T20135] RAX: ffffffffffffffda RBX: 00007f58e4de5fa0 RCX: 00007f58e4b8f7c9 [ 971.750788][T20135] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 971.750797][T20135] RBP: 00007f58e4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 971.750806][T20135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.750815][T20135] R13: 00007f58e4de6038 R14: 00007f58e4de5fa0 R15: 00007fff64374438 [ 971.750835][T20135] [ 972.166890][T20140] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 972.394507][T20135] Mem-Info: [ 972.438962][T20149] binder: 20147:20149 ioctl c018620c 0 returned -1 [ 972.458990][T20135] active_anon:26002 inactive_anon:3662 isolated_anon:0 [ 972.458990][T20135] active_file:8896 inactive_file:83146 isolated_file:0 [ 972.458990][T20135] unevictable:768 dirty:621 writeback:0 [ 972.458990][T20135] slab_reclaimable:15456 slab_unreclaimable:106122 [ 972.458990][T20135] mapped:28420 shmem:1364 pagetables:1227 [ 972.458990][T20135] sec_pagetables:0 bounce:0 [ 972.458990][T20135] kernel_misc_reclaimable:0 [ 972.458990][T20135] free:1239698 free_pcp:19363 free_cma:0 [ 972.663484][T20135] Node 0 active_anon:110808kB inactive_anon:14648kB active_file:35408kB inactive_file:331236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111508kB dirty:2544kB writeback:0kB shmem:8436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:90112kB kernel_stack:11184kB pagetables:4840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 972.774790][T20135] Node 1 active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:1348kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:772kB dirty:140kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 973.009457][T20135] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 973.223323][T20135] lowmem_reserve[]: 0 2482 2484 2484 2484 [ 973.294287][T20135] Node 0 DMA32 free:1061676kB boost:0kB min:34344kB low:42928kB high:51512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:118076kB inactive_anon:14648kB active_file:35508kB inactive_file:331236kB unevictable:1536kB writepending:2920kB zspages:752kB present:3129332kB managed:2542496kB mlocked:0kB bounce:0kB free_pcp:37396kB local_pcp:18828kB free_cma:0kB [ 973.393171][T20135] lowmem_reserve[]: 0 0 1 1 1 [ 973.397955][T20135] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 973.463692][T20135] lowmem_reserve[]: 0 0 0 0 0 [ 973.468882][T20135] Node 1 Normal free:3871384kB boost:0kB min:55532kB low:69412kB high:83292kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:1348kB unevictable:1536kB writepending:140kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:34308kB local_pcp:27584kB free_cma:0kB [ 973.573262][T20135] lowmem_reserve[]: 0 0 0 0 0 [ 973.578126][T20135] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 973.704859][T20135] Node 0 DMA32: 2312*4kB (UME) 1430*8kB (UME) 1250*16kB (UME) 1297*32kB (UME) 1053*64kB (UM) 822*128kB (UME) 614*256kB (UME) 386*512kB (UME) 265*1024kB (UME) 6*2048kB (UE) 41*4096kB (UM) = 1061200kB [ 973.798384][T20135] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 973.842141][T20135] Node 1 Normal: 161*4kB (UME) 62*8kB (UME) 38*16kB (UME) 110*32kB (UME) 98*64kB (UME) 27*128kB (UME) 11*256kB (UME) 5*512kB (UM) 3*1024kB (UME) 7*2048kB (UME) 936*4096kB (M) = 3871636kB [ 973.893117][T20135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 973.933246][T20135] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 973.942654][T20135] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 973.993129][T20135] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 974.022728][T20135] 93455 total pagecache pages [ 974.047357][T20135] 6 pages in swap cache [ 974.055198][T20135] Free swap = 120460kB [ 974.087396][T20135] Total swap = 124996kB [ 974.111509][T20175] binder: 20174:20175 ioctl c018620c 0 returned -1 [ 974.133170][T20135] 2097051 pages RAM [ 974.156162][T20135] 0 pages HighMem/MovableOnly [ 974.179228][T20135] 429337 pages reserved [ 974.190695][T20135] 0 pages cma reserved [ 974.465627][T20181] binder: 20180:20181 ioctl c018620c 0 returned -1 [ 976.150375][T20200] binder: 20199:20200 ioctl c018620c 0 returned -1 [ 976.234084][T20202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2757'. [ 976.326191][T20205] nbd: socks must be embedded in a SOCK_ITEM attr [ 976.593857][T20210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2759'. [ 978.774422][T20218] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input71 [ 978.886163][T20224] openvswitch: netlink: Message has 8 unknown bytes. [ 978.922616][T20225] bond0: option all_slaves_active: invalid value () [ 978.962238][T20224] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 979.346762][T20223] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input72 [ 980.123021][T20240] debugfs: '!PjE r҄y*"l-y–L̓]' already exists in 'ieee80211' [ 981.313936][T20256] binder: 20255:20256 ioctl c018620c 0 returned -1 [ 983.342359][T20283] openvswitch: netlink: Message has 8 unknown bytes. [ 983.426333][T20283] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 984.308674][T20289] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 984.990616][T20292] input: f as /devices/virtual/input/input73 [ 985.976931][T20306] binder: 20305:20306 ioctl c018620c 0 returned -1 [ 987.156756][T20319] random: crng reseeded on system resumption [ 987.316832][ T5845] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 987.560189][T20324] binder: 20323:20324 ioctl c018620c 0 returned -1 [ 989.195043][T20342] netlink: zone id is out of range [ 990.647487][T20355] input: jJǸ-9%vJ86 as /devices/virtual/input/input74 [ 992.952212][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.960897][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.020702][T20405] binder: 20404:20405 ioctl c018620c 0 returned -1 [ 995.078949][T20419] input: f as /devices/virtual/input/input75 [ 996.228619][T20434] input: jJǸ-9%vJ86 as /devices/virtual/input/input76 [ 997.529966][T20450] bond0: option all_slaves_active: invalid value () [ 997.607264][T20451] bond0: option all_slaves_active: invalid value () [ 997.648938][T20455] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 997.875965][T20454] bond0: option all_slaves_active: invalid value () [ 998.812856][T20464] binder: 20462:20464 ioctl c018620c 0 returned -1 [ 999.975562][T20483] input: f as /devices/virtual/input/input78 [ 1000.643589][T20489] input: f as /devices/virtual/input/input79 [ 1000.699180][T20476] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1001.051442][T20498] input: f as /devices/virtual/input/input80 [ 1001.061607][T20500] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1002.350369][T20516] binder: 20515:20516 ioctl c018620c 0 returned -1 [ 1003.977903][T20536] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1004.298700][T20540] input: f as /devices/virtual/input/input82 [ 1004.524186][T20544] input: f as /devices/virtual/input/input83 [ 1005.165478][T20554] binder: 20552:20554 ioctl c018620c 0 returned -1 [ 1005.423815][T20562] input: f as /devices/virtual/input/input84 [ 1006.815375][T20577] binder: 20576:20577 ioctl c018620c 0 returned -1 [ 1007.160408][T20583] snd_aloop snd_aloop.0: control 7:265:7::2 is already present [ 1008.006105][T20597] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1008.578474][T20601] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1009.072702][T20609] binder: 20607:20609 ioctl c018620c 0 returned -1 [ 1009.464623][T20614] input: f as /devices/virtual/input/input85 [ 1010.449607][T20620] bond0: option all_slaves_active: invalid value () [ 1010.706808][T20632] binder: 20630:20632 ioctl c018620c 0 returned -1 [ 1011.807994][T20645] binder: 20644:20645 ioctl c018620c 0 returned -1 [ 1012.265639][T20655] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1012.862505][T20662] binder: 20661:20662 ioctl c018620c 0 returned -1 [ 1013.836663][T20681] snd_aloop snd_aloop.0: control 7:265:7::2 is already present [ 1014.964669][T20696] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1015.215530][T20699] binder: 20698:20699 ioctl c018620c 0 returned -1 [ 1016.008727][T20712] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1016.584635][T20717] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1017.559769][T20735] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input87 [ 1018.036721][T20736] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88 [ 1018.183320][T20733] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1018.220722][T20733] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1018.268122][T20733] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1018.283397][T20733] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1018.839165][T20748] input: f as /devices/virtual/input/input89 [ 1019.686750][T20765] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1019.837240][T20770] binder: 20768:20770 ioctl c018620c 0 returned -1 [ 1020.043221][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 1020.164406][T20777] binder: 20776:20777 ioctl c018620c 0 returned -1 [ 1020.284112][T13465] Bluetooth: hci3: command 0x0406 tx timeout [ 1020.290313][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 1020.365856][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 1020.647911][T20785] binder: 20784:20785 ioctl c018620c 0 returned -1 [ 1021.973864][T20812] FAULT_INJECTION: forcing a failure. [ 1021.973864][T20812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1022.053302][T20812] CPU: 0 UID: 0 PID: 20812 Comm: syz.2.2879 Not tainted syzkaller #0 PREEMPT(full) [ 1022.053339][T20812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1022.053356][T20812] Call Trace: [ 1022.053364][T20812] [ 1022.053375][T20812] dump_stack_lvl+0x16c/0x1f0 [ 1022.053411][T20812] should_fail_ex+0x512/0x640 [ 1022.053445][T20812] should_fail_alloc_page+0xe7/0x130 [ 1022.053483][T20812] prepare_alloc_pages+0x3c2/0x610 [ 1022.053520][T20812] ? rcu_is_watching+0x12/0xc0 [ 1022.053561][T20812] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 1022.053597][T20812] ? rcu_is_watching+0x12/0xc0 [ 1022.053632][T20812] ? trace_mm_page_alloc+0x11b/0x180 [ 1022.053666][T20812] ? __alloc_frozen_pages_noprof+0x292/0x2440 [ 1022.053699][T20812] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1022.053730][T20812] ? find_held_lock+0x2b/0x80 [ 1022.053765][T20812] ? is_bpf_text_address+0x8a/0x1a0 [ 1022.053802][T20812] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1022.053833][T20812] ? kernel_text_address+0x8d/0x100 [ 1022.053864][T20812] ? __kernel_text_address+0xd/0x40 [ 1022.053893][T20812] ? unwind_get_return_address+0x59/0xa0 [ 1022.053938][T20812] alloc_pages_bulk_noprof+0x77b/0x1010 [ 1022.053966][T20812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1022.054004][T20812] ? policy_nodemask+0xea/0x4e0 [ 1022.054041][T20812] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1022.054074][T20812] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1022.054106][T20812] ? set_page_refcounted+0xbd/0x230 [ 1022.054128][T20812] kasan_populate_vmalloc+0x112/0x2d0 [ 1022.054152][T20812] ? alloc_vmap_area+0x894/0x29a0 [ 1022.054176][T20812] alloc_vmap_area+0x93d/0x29a0 [ 1022.054201][T20812] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1022.054225][T20812] __get_vm_area_node+0x1ca/0x330 [ 1022.054248][T20812] __vmalloc_node_range_noprof+0x271/0x1480 [ 1022.054270][T20812] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1022.054292][T20812] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1022.054311][T20812] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1022.054336][T20812] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1022.054351][T20812] vmalloc_user_noprof+0x9e/0xe0 [ 1022.054371][T20812] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1022.054387][T20812] vb2_vmalloc_alloc+0x135/0x3f0 [ 1022.054404][T20812] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1022.054419][T20812] __vb2_queue_alloc+0x8c9/0x1280 [ 1022.054449][T20812] vb2_core_reqbufs+0xa90/0xfe0 [ 1022.054479][T20812] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1022.054522][T20812] __vb2_init_fileio+0x3f1/0x1100 [ 1022.054547][T20812] ? lockdep_hardirqs_on+0x7c/0x110 [ 1022.054566][T20812] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1022.054584][T20812] ? __pollwait+0x271/0x460 [ 1022.054604][T20812] vb2_core_poll+0x5ec/0x700 [ 1022.054621][T20812] vb2_poll+0x4b/0xe0 [ 1022.054642][T20812] vb2_fop_poll+0x10f/0x2c0 [ 1022.054657][T20812] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1022.054670][T20812] v4l2_poll+0x163/0x320 [ 1022.054688][T20812] ? __pfx_v4l2_poll+0x10/0x10 [ 1022.054704][T20812] do_sys_poll+0x55c/0xdf0 [ 1022.054728][T20812] ? __pfx_do_sys_poll+0x10/0x10 [ 1022.054743][T20812] ? __lock_acquire+0x433/0x22f0 [ 1022.054776][T20812] ? __futex_wait+0x24b/0x2f0 [ 1022.054794][T20812] ? __pfx___pollwait+0x10/0x10 [ 1022.054813][T20812] ? __pfx_pollwake+0x10/0x10 [ 1022.054857][T20812] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1022.054875][T20812] ? ktime_get_ts64+0x2d2/0x400 [ 1022.054891][T20812] ? read_tsc+0x9/0x20 [ 1022.054912][T20812] ? ktime_get_ts64+0x256/0x400 [ 1022.054932][T20812] __x64_sys_poll+0x1a6/0x450 [ 1022.054950][T20812] ? __pfx___x64_sys_poll+0x10/0x10 [ 1022.054973][T20812] do_syscall_64+0xcd/0xf80 [ 1022.054990][T20812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.055005][T20812] RIP: 0033:0x7f7588f8f7c9 [ 1022.055018][T20812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.055032][T20812] RSP: 002b:00007f7589e15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1022.055045][T20812] RAX: ffffffffffffffda RBX: 00007f75891e5fa0 RCX: 00007f7588f8f7c9 [ 1022.055055][T20812] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 1022.055063][T20812] RBP: 00007f7589013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1022.055072][T20812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.055081][T20812] R13: 00007f75891e6038 R14: 00007f75891e5fa0 R15: 00007ffcccd146b8 [ 1022.055101][T20812] [ 1022.055324][T20812] syz.2.2879: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1022.699536][T20812] CPU: 0 UID: 0 PID: 20812 Comm: syz.2.2879 Not tainted syzkaller #0 PREEMPT(full) [ 1022.699571][T20812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1022.699588][T20812] Call Trace: [ 1022.699597][T20812] [ 1022.699607][T20812] dump_stack_lvl+0x16c/0x1f0 [ 1022.699642][T20812] warn_alloc+0x248/0x3a0 [ 1022.699674][T20812] ? __pfx_warn_alloc+0x10/0x10 [ 1022.699705][T20812] ? __get_vm_area_node+0x2cd/0x330 [ 1022.699747][T20812] ? __get_vm_area_node+0x2cd/0x330 [ 1022.699779][T20812] ? __get_vm_area_node+0x208/0x330 [ 1022.699821][T20812] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 1022.699869][T20812] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1022.699907][T20812] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1022.699956][T20812] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1022.699986][T20812] vmalloc_user_noprof+0x9e/0xe0 [ 1022.700022][T20812] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1022.700052][T20812] vb2_vmalloc_alloc+0x135/0x3f0 [ 1022.700089][T20812] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1022.700118][T20812] __vb2_queue_alloc+0x8c9/0x1280 [ 1022.700165][T20812] vb2_core_reqbufs+0xa90/0xfe0 [ 1022.700202][T20812] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1022.700252][T20812] __vb2_init_fileio+0x3f1/0x1100 [ 1022.700279][T20812] ? lockdep_hardirqs_on+0x7c/0x110 [ 1022.700309][T20812] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1022.700339][T20812] ? __pollwait+0x271/0x460 [ 1022.700376][T20812] vb2_core_poll+0x5ec/0x700 [ 1022.700405][T20812] vb2_poll+0x4b/0xe0 [ 1022.700444][T20812] vb2_fop_poll+0x10f/0x2c0 [ 1022.700471][T20812] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1022.700495][T20812] v4l2_poll+0x163/0x320 [ 1022.700528][T20812] ? __pfx_v4l2_poll+0x10/0x10 [ 1022.700558][T20812] do_sys_poll+0x55c/0xdf0 [ 1022.700604][T20812] ? __pfx_do_sys_poll+0x10/0x10 [ 1022.700633][T20812] ? __lock_acquire+0x433/0x22f0 [ 1022.700697][T20812] ? __futex_wait+0x24b/0x2f0 [ 1022.700733][T20812] ? __pfx___pollwait+0x10/0x10 [ 1022.700770][T20812] ? __pfx_pollwake+0x10/0x10 [ 1022.700857][T20812] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1022.700890][T20812] ? ktime_get_ts64+0x2d2/0x400 [ 1022.700920][T20812] ? read_tsc+0x9/0x20 [ 1022.700948][T20812] ? ktime_get_ts64+0x256/0x400 [ 1022.700987][T20812] __x64_sys_poll+0x1a6/0x450 [ 1022.701019][T20812] ? __pfx___x64_sys_poll+0x10/0x10 [ 1022.701064][T20812] do_syscall_64+0xcd/0xf80 [ 1022.701102][T20812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.701130][T20812] RIP: 0033:0x7f7588f8f7c9 [ 1022.701151][T20812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.701176][T20812] RSP: 002b:00007f7589e15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1022.701201][T20812] RAX: ffffffffffffffda RBX: 00007f75891e5fa0 RCX: 00007f7588f8f7c9 [ 1022.701219][T20812] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 1022.701236][T20812] RBP: 00007f7589013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1022.701252][T20812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.701267][T20812] R13: 00007f75891e6038 R14: 00007f75891e5fa0 R15: 00007ffcccd146b8 [ 1022.701305][T20812] [ 1022.701316][T20812] Mem-Info: [ 1023.082985][T20812] active_anon:26481 inactive_anon:3654 isolated_anon:133 [ 1023.082985][T20812] active_file:9033 inactive_file:84876 isolated_file:272 [ 1023.082985][T20812] unevictable:768 dirty:760 writeback:0 [ 1023.082985][T20812] slab_reclaimable:14875 slab_unreclaimable:105020 [ 1023.082985][T20812] mapped:27631 shmem:1364 pagetables:1280 [ 1023.082985][T20812] sec_pagetables:0 bounce:0 [ 1023.082985][T20812] kernel_misc_reclaimable:0 [ 1023.082985][T20812] free:1239971 free_pcp:17316 free_cma:0 [ 1023.277233][T20814] zswap: compressor not available [ 1023.403298][T20812] Node 0 active_anon:108776kB inactive_anon:14616kB active_file:35852kB inactive_file:339240kB unevictable:1536kB isolated(anon):132kB isolated(file):88kB mapped:110032kB dirty:3004kB writeback:0kB shmem:5936kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:92160kB kernel_stack:11368kB pagetables:5008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1023.542097][T20812] Node 1 active_anon:64kB inactive_anon:0kB active_file:280kB inactive_file:1364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:592kB dirty:136kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1023.853313][T20812] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1023.911604][T20812] lowmem_reserve[]: 0 2482 2484 2484 2484 [ 1024.035780][T20812] Node 0 DMA32 free:1052944kB boost:0kB min:34344kB low:42928kB high:51512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106652kB inactive_anon:14616kB active_file:35852kB inactive_file:338824kB unevictable:1536kB writepending:3124kB zspages:752kB present:3129332kB managed:2542496kB mlocked:0kB bounce:0kB free_pcp:39708kB local_pcp:20776kB free_cma:0kB [ 1024.202985][T20812] lowmem_reserve[]: 0 0 1 1 1 [ 1024.211105][T20812] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1024.284415][T20812] lowmem_reserve[]: 0 0 0 0 0 [ 1024.299519][T20812] Node 1 Normal free:3872852kB boost:0kB min:55532kB low:69412kB high:83292kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64kB inactive_anon:0kB active_file:280kB inactive_file:1364kB unevictable:1536kB writepending:136kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32724kB local_pcp:6484kB free_cma:0kB [ 1024.461799][T20812] lowmem_reserve[]: 0 0 0 0 0 [ 1024.478092][T20812] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1024.515401][T20812] Node 0 DMA32: 2241*4kB (UME) 1681*8kB (UME) 1413*16kB (UME) 1275*32kB (ME) 1087*64kB (UME) 889*128kB (UME) 652*256kB (UME) 415*512kB (UME) 276*1024kB (UME) 10*2048kB (UME) 24*4096kB (UM) = 1049980kB [ 1024.695405][T20812] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1024.838245][T20812] Node 1 Normal: 151*4kB (UME) 41*8kB (UE) 45*16kB (UME) 138*32kB (UME) 97*64kB (UME) 27*128kB (UME) 11*256kB (UME) 4*512kB (UM) 4*1024kB (UME) 7*2048kB (UME) 936*4096kB (M) = 3872884kB [ 1025.208490][T20812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.293193][T20812] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1025.367172][T20812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1025.452968][T20812] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1025.583591][T20812] 96110 total pagecache pages [ 1025.647279][T20812] 30 pages in swap cache [ 1025.662200][T20850] binder: 20849:20850 ioctl c018620c 0 returned -1 [ 1025.671350][T20812] Free swap = 120456kB [ 1025.703368][T20812] Total swap = 124996kB [ 1025.722008][T20812] 2097051 pages RAM [ 1025.793293][T20812] 0 pages HighMem/MovableOnly [ 1025.798176][T20812] 429337 pages reserved [ 1025.802360][T20812] 0 pages cma reserved [ 1025.956920][T20855] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1026.345438][T20859] snd_aloop snd_aloop.0: control 7:265:7::2 is already present [ 1026.979020][T20869] input: f as /devices/virtual/input/input90 [ 1027.255124][T20873] binder: 20872:20873 ioctl c018620c 0 returned -1 [ 1028.258414][T20889] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1029.394793][T20906] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1029.474678][T20908] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1030.080813][T20913] binder: 20912:20913 ioctl c018620c 0 returned -1 [ 1030.464314][T20920] binder: 20919:20920 ioctl c018620c 0 returned -1 [ 1031.297527][T20928] input: f as /devices/virtual/input/input91 [ 1031.638092][T20932] binder: 20931:20932 ioctl c018620c 0 returned -1 [ 1033.278419][T20950] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 1033.329119][T20950] CPU: 1 UID: 0 PID: 20950 Comm: syz.1.2907 Not tainted syzkaller #0 PREEMPT(full) [ 1033.329141][T20950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1033.329151][T20950] Call Trace: [ 1033.329156][T20950] [ 1033.329163][T20950] dump_stack_lvl+0x16c/0x1f0 [ 1033.329185][T20950] sysfs_warn_dup+0x7f/0xa0 [ 1033.329202][T20950] sysfs_do_create_link_sd+0x124/0x140 [ 1033.329220][T20950] sysfs_create_link+0x61/0xc0 [ 1033.329236][T20950] device_add+0x62c/0x1950 [ 1033.329254][T20950] ? __pfx_device_add+0x10/0x10 [ 1033.329267][T20950] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1033.329290][T20950] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 1033.329313][T20950] wiphy_register+0x1eb0/0x2b20 [ 1033.329331][T20950] ? netdev_run_todo+0x850/0x12a0 [ 1033.329349][T20950] ? __pfx__dev_printk+0x10/0x10 [ 1033.329371][T20950] ? __pfx_wiphy_register+0x10/0x10 [ 1033.329396][T20950] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 1033.329418][T20950] ieee80211_register_hw+0x253d/0x4120 [ 1033.329444][T20950] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1033.329463][T20950] ? __pfx___debug_object_init+0x10/0x10 [ 1033.329488][T20950] ? find_held_lock+0x2b/0x80 [ 1033.329508][T20950] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1033.329528][T20950] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1033.329550][T20950] ? __hrtimer_setup+0x176/0x280 [ 1033.329570][T20950] mac80211_hwsim_new_radio+0x329f/0x5080 [ 1033.329599][T20950] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1033.329623][T20950] hwsim_new_radio_nl+0xba2/0x1330 [ 1033.329643][T20950] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1033.329666][T20950] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1033.329688][T20950] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1033.329713][T20950] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1033.329734][T20950] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1033.329754][T20950] ? genl_get_cmd+0x194/0x580 [ 1033.329776][T20950] ? bpf_lsm_capable+0x9/0x10 [ 1033.329792][T20950] ? security_capable+0x7e/0x260 [ 1033.329809][T20950] ? ns_capable+0xd7/0x110 [ 1033.329829][T20950] genl_rcv_msg+0x55c/0x800 [ 1033.329850][T20950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1033.329869][T20950] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1033.329894][T20950] netlink_rcv_skb+0x158/0x420 [ 1033.329911][T20950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1033.329931][T20950] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1033.329956][T20950] ? netlink_deliver_tap+0x1ae/0xd30 [ 1033.329975][T20950] genl_rcv+0x28/0x40 [ 1033.329992][T20950] netlink_unicast+0x5aa/0x870 [ 1033.330012][T20950] ? __pfx_netlink_unicast+0x10/0x10 [ 1033.330028][T20950] ? __pfx___might_resched+0x10/0x10 [ 1033.330055][T20950] netlink_sendmsg+0x8c8/0xdd0 [ 1033.330075][T20950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1033.330104][T20950] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1033.330125][T20950] ____sys_sendmsg+0xa5d/0xc30 [ 1033.330146][T20950] ? copy_msghdr_from_user+0x10a/0x160 [ 1033.330162][T20950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1033.330187][T20950] ? __pfx_futex_wake_mark+0x10/0x10 [ 1033.330209][T20950] ___sys_sendmsg+0x134/0x1d0 [ 1033.330225][T20950] ? __pfx____sys_sendmsg+0x10/0x10 [ 1033.330240][T20950] ? __lock_acquire+0x433/0x22f0 [ 1033.330279][T20950] __sys_sendmsg+0x16d/0x220 [ 1033.330294][T20950] ? __pfx___sys_sendmsg+0x10/0x10 [ 1033.330309][T20950] ? __x64_sys_futex+0x1e0/0x4c0 [ 1033.330337][T20950] do_syscall_64+0xcd/0xf80 [ 1033.330356][T20950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.330370][T20950] RIP: 0033:0x7f58e4b8f7c9 [ 1033.330383][T20950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.330397][T20950] RSP: 002b:00007f58e2df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1033.330411][T20950] RAX: ffffffffffffffda RBX: 00007f58e4de5fa0 RCX: 00007f58e4b8f7c9 [ 1033.330421][T20950] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1033.330431][T20950] RBP: 00007f58e4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1033.330440][T20950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1033.330448][T20950] R13: 00007f58e4de6038 R14: 00007f58e4de5fa0 R15: 00007fff64374438 [ 1033.330470][T20950] [ 1033.757848][T20953] input: f as /devices/virtual/input/input92 [ 1034.112705][T20959] binder: 20958:20959 ioctl c018620c 0 returned -1 [ 1035.076024][T20966] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1035.510807][T20971] binder: 20970:20971 ioctl c018620c 0 returned -1 [ 1037.894764][T21002] input: f as /devices/virtual/input/input93 [ 1040.011516][T21023] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1040.132757][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1040.528357][T21026] binder: 21025:21026 ioctl c018620c 0 returned -1 [ 1040.602580][T21031] binder: 21029:21031 ioctl c018620c 0 returned -1 [ 1041.032752][T21039] input: f as /devices/virtual/input/input94 [ 1042.095501][T21048] input: f as /devices/virtual/input/input95 [ 1042.295000][T21054] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2930'. [ 1043.226752][T21066] snd_aloop snd_aloop.0: control 7:265:7::2 is already present [ 1044.458640][T21083] binder: 21082:21083 ioctl c018620c 0 returned -1 [ 1044.938245][T21089] binder: 21088:21089 ioctl c018620c 0 returned -1 [ 1045.957696][T21094] binder: 21093:21094 ioctl c018620c 0 returned -1 [ 1046.374067][T21099] binder: 21097:21099 ioctl c018620c 0 returned -1 [ 1046.829120][T21103] bond0: option all_slaves_active: invalid value () [ 1047.163420][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1047.306686][T21108] input: f as /devices/virtual/input/input96 [ 1047.860665][T21119] FAULT_INJECTION: forcing a failure. [ 1047.860665][T21119] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.873616][T21119] CPU: 1 UID: 0 PID: 21119 Comm: syz.2.2942 Not tainted syzkaller #0 PREEMPT(full) [ 1047.873640][T21119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1047.873650][T21119] Call Trace: [ 1047.873655][T21119] [ 1047.873662][T21119] dump_stack_lvl+0x16c/0x1f0 [ 1047.873684][T21119] should_fail_ex+0x512/0x640 [ 1047.873701][T21119] ? kmem_cache_alloc_lru_noprof+0x66/0x720 [ 1047.873720][T21119] should_failslab+0xc2/0x120 [ 1047.873741][T21119] kmem_cache_alloc_lru_noprof+0x79/0x720 [ 1047.873758][T21119] ? shmem_alloc_inode+0x25/0x50 [ 1047.873778][T21119] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 1047.873793][T21119] ? shmem_alloc_inode+0x25/0x50 [ 1047.873809][T21119] shmem_alloc_inode+0x25/0x50 [ 1047.873824][T21119] alloc_inode+0x64/0x240 [ 1047.873839][T21119] new_inode+0x22/0x1c0 [ 1047.873855][T21119] shmem_get_inode+0x19a/0xfb0 [ 1047.873877][T21119] shmem_mknod+0x1a8/0x450 [ 1047.873897][T21119] vfs_mknod+0x6f3/0xac0 [ 1047.873917][T21119] do_mknodat+0x36a/0x6f0 [ 1047.873936][T21119] ? __pfx_do_mknodat+0x10/0x10 [ 1047.873954][T21119] ? getname_flags.part.0+0x1c5/0x550 [ 1047.873972][T21119] __x64_sys_mknod+0x87/0xb0 [ 1047.873992][T21119] do_syscall_64+0xcd/0xf80 [ 1047.874010][T21119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.874024][T21119] RIP: 0033:0x7f7588f8f7c9 [ 1047.874037][T21119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1047.874050][T21119] RSP: 002b:00007f7589df4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1047.874064][T21119] RAX: ffffffffffffffda RBX: 00007f75891e6090 RCX: 00007f7588f8f7c9 [ 1047.874073][T21119] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 1047.874082][T21119] RBP: 00007f7589013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1047.874090][T21119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.874098][T21119] R13: 00007f75891e6128 R14: 00007f75891e6090 R15: 00007ffcccd146b8 [ 1047.874118][T21119] [ 1048.236225][T21118] netlink: zone id is out of range [ 1049.525045][T21139] input: f as /devices/virtual/input/input98 [ 1049.886890][T21146] binder: 21145:21146 ioctl c018620c 0 returned -1 [ 1049.968222][T21149] binder: 21148:21149 ioctl c018620c 0 returned -1 [ 1051.074183][T21161] binder: 21160:21161 ioctl c018620c 0 returned -1 [ 1051.255472][T21164] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input99 [ 1052.522611][T21166] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input100 [ 1053.705875][T21183] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1053.748868][T21184] input: jJǸ-9%vJ86 as /devices/virtual/input/input102 [ 1054.375660][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.381992][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.708589][T21193] FAULT_INJECTION: forcing a failure. [ 1054.708589][T21193] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1054.761315][T21193] CPU: 0 UID: 0 PID: 21193 Comm: syz.0.2956 Not tainted syzkaller #0 PREEMPT(full) [ 1054.761339][T21193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1054.761348][T21193] Call Trace: [ 1054.761355][T21193] [ 1054.761361][T21193] dump_stack_lvl+0x16c/0x1f0 [ 1054.761383][T21193] should_fail_ex+0x512/0x640 [ 1054.761404][T21193] should_fail_alloc_page+0xe7/0x130 [ 1054.761427][T21193] prepare_alloc_pages+0x3c2/0x610 [ 1054.761450][T21193] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 1054.761469][T21193] ? rcu_is_watching+0x12/0xc0 [ 1054.761489][T21193] ? trace_mm_page_alloc+0x11b/0x180 [ 1054.761507][T21193] ? __alloc_frozen_pages_noprof+0x292/0x2440 [ 1054.761524][T21193] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1054.761540][T21193] ? find_held_lock+0x2b/0x80 [ 1054.761559][T21193] ? is_bpf_text_address+0x8a/0x1a0 [ 1054.761579][T21193] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1054.761616][T21193] ? kernel_text_address+0x8d/0x100 [ 1054.761634][T21193] ? __kernel_text_address+0xd/0x40 [ 1054.761650][T21193] ? unwind_get_return_address+0x59/0xa0 [ 1054.761674][T21193] alloc_pages_bulk_noprof+0x77b/0x1010 [ 1054.761690][T21193] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1054.761711][T21193] ? policy_nodemask+0xea/0x4e0 [ 1054.761732][T21193] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1054.761748][T21193] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1054.761769][T21193] ? set_page_refcounted+0xbd/0x230 [ 1054.761790][T21193] kasan_populate_vmalloc+0x112/0x2d0 [ 1054.761806][T21193] ? alloc_vmap_area+0x894/0x29a0 [ 1054.761827][T21193] alloc_vmap_area+0x93d/0x29a0 [ 1054.761852][T21193] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1054.761874][T21193] __get_vm_area_node+0x1ca/0x330 [ 1054.761904][T21193] __vmalloc_node_range_noprof+0x271/0x1480 [ 1054.761926][T21193] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1054.761949][T21193] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1054.761969][T21193] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1054.761995][T21193] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1054.762010][T21193] vmalloc_user_noprof+0x9e/0xe0 [ 1054.762030][T21193] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1054.762046][T21193] vb2_vmalloc_alloc+0x135/0x3f0 [ 1054.762062][T21193] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1054.762077][T21193] __vb2_queue_alloc+0x8c9/0x1280 [ 1054.762101][T21193] vb2_core_reqbufs+0xa90/0xfe0 [ 1054.762119][T21193] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1054.762145][T21193] __vb2_init_fileio+0x3f1/0x1100 [ 1054.762159][T21193] ? lockdep_hardirqs_on+0x7c/0x110 [ 1054.762176][T21193] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1054.762192][T21193] ? __pollwait+0x271/0x460 [ 1054.762211][T21193] vb2_core_poll+0x5ec/0x700 [ 1054.762227][T21193] vb2_poll+0x4b/0xe0 [ 1054.762248][T21193] vb2_fop_poll+0x10f/0x2c0 [ 1054.762263][T21193] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1054.762275][T21193] v4l2_poll+0x163/0x320 [ 1054.762294][T21193] ? __pfx_v4l2_poll+0x10/0x10 [ 1054.762310][T21193] do_sys_poll+0x55c/0xdf0 [ 1054.762334][T21193] ? __pfx_do_sys_poll+0x10/0x10 [ 1054.762349][T21193] ? __lock_acquire+0x433/0x22f0 [ 1054.762381][T21193] ? __futex_wait+0x24b/0x2f0 [ 1054.762399][T21193] ? __pfx___pollwait+0x10/0x10 [ 1054.762418][T21193] ? __pfx_pollwake+0x10/0x10 [ 1054.762463][T21193] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1054.762480][T21193] ? ktime_get_ts64+0x2d2/0x400 [ 1054.762496][T21193] ? read_tsc+0x9/0x20 [ 1054.762511][T21193] ? ktime_get_ts64+0x256/0x400 [ 1054.762531][T21193] __x64_sys_poll+0x1a6/0x450 [ 1054.762548][T21193] ? __pfx___x64_sys_poll+0x10/0x10 [ 1054.762572][T21193] do_syscall_64+0xcd/0xf80 [ 1054.762589][T21193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.762604][T21193] RIP: 0033:0x7fa73038f7c9 [ 1054.762616][T21193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1054.762630][T21193] RSP: 002b:00007fa73119e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1054.762644][T21193] RAX: ffffffffffffffda RBX: 00007fa7305e5fa0 RCX: 00007fa73038f7c9 [ 1054.762655][T21193] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 1054.762664][T21193] RBP: 00007fa730413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1054.762673][T21193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1054.762682][T21193] R13: 00007fa7305e6038 R14: 00007fa7305e5fa0 R15: 00007ffc80b731a8 [ 1054.762701][T21193] [ 1054.762759][T21193] syz.0.2956: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1055.205948][T21196] binder: 21195:21196 ioctl c018620c 0 returned -1 [ 1055.283249][T21193] ,cpuset=/,mems_allowed=0-1 [ 1055.288092][T21193] CPU: 0 UID: 0 PID: 21193 Comm: syz.0.2956 Not tainted syzkaller #0 PREEMPT(full) [ 1055.288126][T21193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1055.288142][T21193] Call Trace: [ 1055.288151][T21193] [ 1055.288161][T21193] dump_stack_lvl+0x16c/0x1f0 [ 1055.288198][T21193] warn_alloc+0x248/0x3a0 [ 1055.288228][T21193] ? __pfx_warn_alloc+0x10/0x10 [ 1055.288259][T21193] ? __get_vm_area_node+0x2cd/0x330 [ 1055.288299][T21193] ? __get_vm_area_node+0x2cd/0x330 [ 1055.288333][T21193] ? __get_vm_area_node+0x208/0x330 [ 1055.288374][T21193] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 1055.288422][T21193] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1055.288461][T21193] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1055.288510][T21193] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1055.288539][T21193] vmalloc_user_noprof+0x9e/0xe0 [ 1055.288573][T21193] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1055.288602][T21193] vb2_vmalloc_alloc+0x135/0x3f0 [ 1055.288631][T21193] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1055.288660][T21193] __vb2_queue_alloc+0x8c9/0x1280 [ 1055.288707][T21193] vb2_core_reqbufs+0xa90/0xfe0 [ 1055.288743][T21193] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1055.288793][T21193] __vb2_init_fileio+0x3f1/0x1100 [ 1055.288818][T21193] ? lockdep_hardirqs_on+0x7c/0x110 [ 1055.288856][T21193] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1055.288885][T21193] ? __pollwait+0x271/0x460 [ 1055.288922][T21193] vb2_core_poll+0x5ec/0x700 [ 1055.288952][T21193] vb2_poll+0x4b/0xe0 [ 1055.288991][T21193] vb2_fop_poll+0x10f/0x2c0 [ 1055.289019][T21193] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1055.289045][T21193] v4l2_poll+0x163/0x320 [ 1055.289078][T21193] ? __pfx_v4l2_poll+0x10/0x10 [ 1055.289109][T21193] do_sys_poll+0x55c/0xdf0 [ 1055.289154][T21193] ? __pfx_do_sys_poll+0x10/0x10 [ 1055.289183][T21193] ? __lock_acquire+0x433/0x22f0 [ 1055.289247][T21193] ? __futex_wait+0x24b/0x2f0 [ 1055.289281][T21193] ? __pfx___pollwait+0x10/0x10 [ 1055.289318][T21193] ? __pfx_pollwake+0x10/0x10 [ 1055.289405][T21193] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1055.289438][T21193] ? ktime_get_ts64+0x2d2/0x400 [ 1055.289468][T21193] ? read_tsc+0x9/0x20 [ 1055.289497][T21193] ? ktime_get_ts64+0x256/0x400 [ 1055.289534][T21193] __x64_sys_poll+0x1a6/0x450 [ 1055.289567][T21193] ? __pfx___x64_sys_poll+0x10/0x10 [ 1055.289611][T21193] do_syscall_64+0xcd/0xf80 [ 1055.289645][T21193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.289671][T21193] RIP: 0033:0x7fa73038f7c9 [ 1055.289693][T21193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1055.289717][T21193] RSP: 002b:00007fa73119e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1055.289741][T21193] RAX: ffffffffffffffda RBX: 00007fa7305e5fa0 RCX: 00007fa73038f7c9 [ 1055.289759][T21193] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 1055.289776][T21193] RBP: 00007fa730413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1055.289790][T21193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1055.289805][T21193] R13: 00007fa7305e6038 R14: 00007fa7305e5fa0 R15: 00007ffc80b731a8 [ 1055.289848][T21193] [ 1055.289857][T21193] Mem-Info: [ 1055.585587][T21197] zswap: compressor not available [ 1055.659554][T21193] active_anon:26815 inactive_anon:3680 isolated_anon:0 [ 1055.659554][T21193] active_file:6350 inactive_file:86876 isolated_file:0 [ 1055.659554][T21193] unevictable:768 dirty:729 writeback:0 [ 1055.659554][T21193] slab_reclaimable:15467 slab_unreclaimable:104646 [ 1055.659554][T21193] mapped:29053 shmem:1588 pagetables:1300 [ 1055.659554][T21193] sec_pagetables:0 bounce:0 [ 1055.659554][T21193] kernel_misc_reclaimable:0 [ 1055.659554][T21193] free:1240976 free_pcp:16736 free_cma:0 [ 1055.872184][T21193] Node 0 active_anon:104476kB inactive_anon:14724kB active_file:25120kB inactive_file:346092kB unevictable:1536kB isolated(anon):2300kB isolated(file):0kB mapped:112168kB dirty:2984kB writeback:0kB shmem:10464kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:88064kB kernel_stack:11288kB pagetables:4928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1055.885867][T21212] binder: 21211:21212 ioctl c018620c 0 returned -1 [ 1056.049376][T21193] Node 1 active_anon:0kB inactive_anon:0kB active_file:280kB inactive_file:1364kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:572kB dirty:132kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1056.195254][T21193] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1056.533261][T21193] lowmem_reserve[]: 0 2482 2484 2484 2484 [ 1056.539174][T21193] Node 0 DMA32 free:1065432kB boost:0kB min:34344kB low:42928kB high:51512kB reserved_highatomic:0KB free_highatomic:0KB active_anon:113076kB inactive_anon:14724kB active_file:27984kB inactive_file:351468kB unevictable:1536kB writepending:9176kB zspages:780kB present:3129332kB managed:2542496kB mlocked:0kB bounce:0kB free_pcp:28852kB local_pcp:18748kB free_cma:0kB [ 1056.970060][T21193] lowmem_reserve[]: 0 0 1 1 1 [ 1056.997948][T21193] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1057.341543][T21193] lowmem_reserve[]: 0 0 0 0 0 [ 1057.476637][T21193] Node 1 Normal free:3878840kB boost:0kB min:55532kB low:69412kB high:83292kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:280kB inactive_file:1364kB unevictable:1536kB writepending:132kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:26752kB local_pcp:22656kB free_cma:0kB [ 1057.639348][T21227] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1057.680383][T21193] lowmem_reserve[]: 0 0 0 0 0 [ 1057.764581][T21234] netlink: 206 bytes leftover after parsing attributes in process `syz.2.2964'. [ 1057.800266][T21193] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1057.823181][T21193] Node 0 DMA32: 1552*4kB (UM) 1780*8kB (UME) 1309*16kB (UME) 1426*32kB (UME) 950*64kB (UME) 731*128kB (UME) 556*256kB (UME) 338*512kB (UME) 227*1024kB (UME) 27*2048kB (UME) 55*4096kB (UM) = 1069808kB [ 1057.843297][T21193] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1057.855704][T21193] Node 1 Normal: 152*4kB (UME) 67*8kB (UME) 40*16kB (UME) 148*32kB (UME) 99*64kB (UME) 29*128kB (UME) 11*256kB (UME) 6*512kB (UM) 4*1024kB (UME) 9*2048kB (UME) 936*4096kB (M) = 3878840kB [ 1057.995462][T21193] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.073136][T21193] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1058.182647][T21193] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1058.254604][T21193] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1058.287003][T21193] 98767 total pagecache pages [ 1058.291695][T21193] 51 pages in swap cache [ 1058.303358][T21193] Free swap = 120344kB [ 1058.307614][T21193] Total swap = 124996kB [ 1058.311756][T21193] 2097051 pages RAM [ 1058.348227][T21193] 0 pages HighMem/MovableOnly [ 1058.352961][T21193] 429337 pages reserved [ 1058.367800][T21193] 0 pages cma reserved [ 1059.339207][T21241] random: crng reseeded on system resumption [ 1059.389458][T21242] input: jJǸ-9%vJ86 as /devices/virtual/input/input104 [ 1059.537066][ T5845] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 1060.567070][T21255] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1062.835827][T21290] input: jJǸ-9%vJ86 as /devices/virtual/input/input105 [ 1063.346355][T21294] FAULT_INJECTION: forcing a failure. [ 1063.346355][T21294] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1063.359693][T21294] CPU: 1 UID: 0 PID: 21294 Comm: syz.3.2977 Not tainted syzkaller #0 PREEMPT(full) [ 1063.359727][T21294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1063.359742][T21294] Call Trace: [ 1063.359751][T21294] [ 1063.359760][T21294] dump_stack_lvl+0x16c/0x1f0 [ 1063.359798][T21294] should_fail_ex+0x512/0x640 [ 1063.359836][T21294] should_fail_alloc_page+0xe7/0x130 [ 1063.359878][T21294] prepare_alloc_pages+0x3c2/0x610 [ 1063.359914][T21294] ? rcu_is_watching+0x12/0xc0 [ 1063.359952][T21294] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 1063.359985][T21294] ? rcu_is_watching+0x12/0xc0 [ 1063.360024][T21294] ? trace_mm_page_alloc+0x11b/0x180 [ 1063.360056][T21294] ? __alloc_frozen_pages_noprof+0x292/0x2440 [ 1063.360088][T21294] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1063.360120][T21294] ? find_held_lock+0x2b/0x80 [ 1063.360156][T21294] ? is_bpf_text_address+0x8a/0x1a0 [ 1063.360194][T21294] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1063.360225][T21294] ? kernel_text_address+0x8d/0x100 [ 1063.360256][T21294] ? __kernel_text_address+0xd/0x40 [ 1063.360286][T21294] ? unwind_get_return_address+0x59/0xa0 [ 1063.360330][T21294] alloc_pages_bulk_noprof+0x77b/0x1010 [ 1063.360360][T21294] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1063.360399][T21294] ? policy_nodemask+0xea/0x4e0 [ 1063.360438][T21294] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1063.360468][T21294] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1063.360509][T21294] ? set_page_refcounted+0xbd/0x230 [ 1063.360547][T21294] kasan_populate_vmalloc+0x112/0x2d0 [ 1063.360578][T21294] ? alloc_vmap_area+0x894/0x29a0 [ 1063.360617][T21294] alloc_vmap_area+0x93d/0x29a0 [ 1063.360665][T21294] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1063.360709][T21294] __get_vm_area_node+0x1ca/0x330 [ 1063.360772][T21294] __vmalloc_node_range_noprof+0x271/0x1480 [ 1063.360810][T21294] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1063.360851][T21294] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1063.360890][T21294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1063.360939][T21294] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1063.360969][T21294] vmalloc_user_noprof+0x9e/0xe0 [ 1063.361012][T21294] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 1063.361043][T21294] vb2_vmalloc_alloc+0x135/0x3f0 [ 1063.361074][T21294] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 1063.361103][T21294] __vb2_queue_alloc+0x8c9/0x1280 [ 1063.361148][T21294] vb2_core_reqbufs+0xa90/0xfe0 [ 1063.361185][T21294] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1063.361234][T21294] __vb2_init_fileio+0x3f1/0x1100 [ 1063.361261][T21294] ? lockdep_hardirqs_on+0x7c/0x110 [ 1063.361292][T21294] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1063.361322][T21294] ? __pollwait+0x271/0x460 [ 1063.361358][T21294] vb2_core_poll+0x5ec/0x700 [ 1063.361389][T21294] vb2_poll+0x4b/0xe0 [ 1063.361431][T21294] vb2_fop_poll+0x10f/0x2c0 [ 1063.361459][T21294] ? __pfx_vb2_fop_poll+0x10/0x10 [ 1063.361484][T21294] v4l2_poll+0x163/0x320 [ 1063.361518][T21294] ? __pfx_v4l2_poll+0x10/0x10 [ 1063.361548][T21294] do_sys_poll+0x55c/0xdf0 [ 1063.361593][T21294] ? __pfx_do_sys_poll+0x10/0x10 [ 1063.361622][T21294] ? __lock_acquire+0x433/0x22f0 [ 1063.361684][T21294] ? __futex_wait+0x24b/0x2f0 [ 1063.361719][T21294] ? __pfx___pollwait+0x10/0x10 [ 1063.361755][T21294] ? __pfx_pollwake+0x10/0x10 [ 1063.361842][T21294] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1063.361874][T21294] ? ktime_get_ts64+0x2d2/0x400 [ 1063.361904][T21294] ? read_tsc+0x9/0x20 [ 1063.361933][T21294] ? ktime_get_ts64+0x256/0x400 [ 1063.361971][T21294] __x64_sys_poll+0x1a6/0x450 [ 1063.362004][T21294] ? __pfx___x64_sys_poll+0x10/0x10 [ 1063.362057][T21294] do_syscall_64+0xcd/0xf80 [ 1063.362092][T21294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.362119][T21294] RIP: 0033:0x7f055038f7c9 [ 1063.362141][T21294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.362166][T21294] RSP: 002b:00007f055129b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1063.362191][T21294] RAX: ffffffffffffffda RBX: 00007f05505e5fa0 RCX: 00007f055038f7c9 [ 1063.362210][T21294] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000200000000480 [ 1063.362227][T21294] RBP: 00007f0550413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1063.362244][T21294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.362261][T21294] R13: 00007f05505e6038 R14: 00007f05505e5fa0 R15: 00007ffc1506f398 [ 1063.362299][T21294] [ 1064.103816][T21302] binder: 21301:21302 ioctl c018620c 0 returned -1 [ 1064.596890][T21295] zswap: compressor not available [ 1065.952277][T21323] binder: 21322:21323 ioctl c018620c 0 returned -1 [ 1066.585963][T21329] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1066.875169][T21331] input: f as /devices/virtual/input/input106 [ 1067.344452][T21337] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1067.673932][T21345] bond0: option all_slaves_active: invalid value () [ 1068.346307][T21355] input: f as /devices/virtual/input/input107 [ 1069.427892][T21371] binder: 21370:21371 ioctl c018620c 0 returned -1 [ 1070.691918][T21380] input: f as /devices/virtual/input/input108 [ 1071.545235][T21390] input: f as /devices/virtual/input/input109 [ 1071.913962][T21397] input: f as /devices/virtual/input/input110 [ 1072.222855][T21406] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1072.999673][T21423] bond0: option all_slaves_active: invalid value () [ 1073.014420][T21422] input: f as /devices/virtual/input/input111 [ 1073.237165][T21428] binder: 21426:21428 ioctl c018620c 0 returned -1 [ 1074.569122][T21450] input: f as /devices/virtual/input/input112 [ 1075.610930][T21478] binder: 21474:21478 ioctl c018620c 0 returned -1 [ 1076.765616][T21493] binder: 21492:21493 ioctl c018620c 0 returned -1 [ 1076.850368][T21490] Invalid ELF header magic: != ELF [ 1076.918512][T21497] binder: 21495:21497 ioctl c018620c 0 returned -1 [ 1077.804294][T21504] input: f as /devices/virtual/input/input113 [ 1078.030284][T21508] input: f as /devices/virtual/input/input114 [ 1078.864373][T21519] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1079.816463][T21532] input: f as /devices/virtual/input/input115 [ 1080.337940][T21539] bond0: option all_slaves_active: invalid value () [ 1080.907803][T21546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3022'. [ 1081.069128][T21550] netlink: zone id is out of range [ 1081.495372][T21554] input: f as /devices/virtual/input/input116 [ 1082.529704][T21566] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1083.693881][T21588] binder: 21587:21588 ioctl c018620c 0 returned -1 [ 1083.982208][T21592] input: f as /devices/virtual/input/input117 [ 1084.041441][T21580] netlink: 206 bytes leftover after parsing attributes in process `syz.0.3029'. [ 1084.885159][T21601] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1085.906908][T21611] binder: 21610:21611 ioctl c018620c 0 returned -1 [ 1086.150891][T21614] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1086.835917][T21621] binder: 21620:21621 ioctl c018620c 0 returned -1 [ 1087.794960][T21633] input: f as /devices/virtual/input/input118 [ 1090.473369][T21670] netlink: 206 bytes leftover after parsing attributes in process `syz.3.3046'. [ 1091.353252][T21682] input: f as /devices/virtual/input/input119 [ 1092.629912][T21690] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1093.331528][ T5845] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1093.808216][T21697] netlink: zone id is out of range [ 1093.811644][T21701] netlink: set zone limit has 8 unknown bytes [ 1093.865109][T21697] netlink: del zone limit has 4 unknown bytes [ 1095.074860][T21722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3056'. [ 1095.406716][T13465] Bluetooth: hci2: command 0x0406 tx timeout [ 1096.763778][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1096.930550][T21743] input: f as /devices/virtual/input/input120 [ 1097.378844][T21751] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1098.983406][ T5845] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1099.295770][T21767] netlink: zone id is out of range [ 1099.558245][T21767] netlink: del zone limit has 4 unknown bytes [ 1099.598214][T21771] netlink: set zone limit has 8 unknown bytes [ 1100.163831][T21777] netlink: 206 bytes leftover after parsing attributes in process `syz.1.3065'. [ 1101.003347][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 1101.214211][T21801] input: f as /devices/virtual/input/input121 [ 1102.506692][T21813] input: f as /devices/virtual/input/input122 [ 1102.608848][T21816] binder: 21815:21816 ioctl c018620c 0 returned -1 [ 1103.497082][T21830] binder: 21829:21830 ioctl c018620c 0 returned -1 [ 1103.706728][ T5845] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1104.062017][T21835] netlink: zone id is out of range [ 1104.092865][T21842] input: f as /devices/virtual/input/input123 [ 1104.100318][T21838] netlink: set zone limit has 8 unknown bytes [ 1104.140552][T21835] netlink: del zone limit has 4 unknown bytes [ 1104.484982][T21849] netlink: 206 bytes leftover after parsing attributes in process `syz.2.3079'. [ 1104.982356][T21855] binder: 21854:21855 ioctl c018620c 0 returned -1 [ 1105.723283][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 1106.310549][T21873] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1106.488954][T21875] input: f as /devices/virtual/input/input124 [ 1106.582865][T21877] input: f as /devices/virtual/input/input125 [ 1107.442695][T21891] binder: 21890:21891 ioctl c018620c 0 returned -1 [ 1107.477348][T21889] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1107.671366][T21898] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1107.757029][T21898] nfs: Unknown parameter 'w`_I+; HY ' [ 1107.821350][T21899] binder: 21897:21899 ioctl c018620c 0 returned -1 [ 1108.801662][T21911] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1108.827508][T21911] nfs: Unknown parameter 'w`_I+; HY ' [ 1108.901188][T21912] binder: 21910:21912 ioctl c018620c 0 returned -1 [ 1108.971009][T21914] binder: 21913:21914 ioctl c018620c 0 returned -1 [ 1109.431789][T21925] binder: 21924:21925 ioctl c018620c 0 returned -1 [ 1110.588986][T21940] input: f as /devices/virtual/input/input126 [ 1111.570068][T21960] binder: 21959:21960 ioctl c018620c 0 returned -1 [ 1111.898679][ T5845] Bluetooth: hci3: unknown advertising packet type: 0xea [ 1111.934675][T21964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3103'. [ 1112.038872][T21968] binder: 21966:21968 ioctl c018620c 0 returned -1 [ 1113.690750][T21996] input: f as /devices/virtual/input/input127 [ 1114.475235][T22017] binder: 22015:22017 ioctl c018620c 0 returned -1 [ 1114.908054][T22030] input: f as /devices/virtual/input/input128 [ 1115.036391][T22032] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1115.111658][T22032] nfs: Unknown parameter 'w`_I+; HY ' [ 1115.808887][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.823420][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.956430][T22040] binder: 22038:22040 ioctl c018620c 0 returned -1 [ 1117.628982][T22071] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1118.482142][T22076] binder: 22075:22076 ioctl c018620c 0 returned -1 [ 1118.490061][T22079] input: f as /devices/virtual/input/input129 [ 1118.584749][T22083] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1118.682173][T22083] nfs: Unknown parameter 'w`_I+; HY ' [ 1120.510305][T22108] binder: 22107:22108 ioctl c018620c 0 returned -1 [ 1121.007384][T22112] FAULT_INJECTION: forcing a failure. [ 1121.007384][T22112] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.022171][T22112] CPU: 0 UID: 0 PID: 22112 Comm: syz.3.3130 Not tainted syzkaller #0 PREEMPT(full) [ 1121.022208][T22112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1121.022224][T22112] Call Trace: [ 1121.022233][T22112] [ 1121.022243][T22112] dump_stack_lvl+0x16c/0x1f0 [ 1121.022287][T22112] should_fail_ex+0x512/0x640 [ 1121.022318][T22112] ? __kmalloc_cache_node_noprof+0x62/0x790 [ 1121.022353][T22112] should_failslab+0xc2/0x120 [ 1121.022388][T22112] __kmalloc_cache_node_noprof+0x75/0x790 [ 1121.022417][T22112] ? tracing_mark_open+0x44f/0x6f0 [ 1121.022456][T22112] ? tracing_mark_open+0x44f/0x6f0 [ 1121.022488][T22112] tracing_mark_open+0x44f/0x6f0 [ 1121.022529][T22112] do_dentry_open+0x748/0x1590 [ 1121.022560][T22112] ? __pfx_tracing_mark_open+0x10/0x10 [ 1121.022602][T22112] vfs_open+0x82/0x3f0 [ 1121.022630][T22112] path_openat+0x2078/0x3140 [ 1121.022673][T22112] ? __pfx_path_openat+0x10/0x10 [ 1121.022720][T22112] do_filp_open+0x20b/0x470 [ 1121.022755][T22112] ? __pfx_do_filp_open+0x10/0x10 [ 1121.022817][T22112] ? alloc_fd+0x471/0x7d0 [ 1121.022861][T22112] do_sys_openat2+0x11f/0x280 [ 1121.022887][T22112] ? __pfx_do_sys_openat2+0x10/0x10 [ 1121.022925][T22112] __x64_sys_openat+0x174/0x210 [ 1121.022952][T22112] ? __pfx___x64_sys_openat+0x10/0x10 [ 1121.022994][T22112] do_syscall_64+0xcd/0xf80 [ 1121.023030][T22112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.023055][T22112] RIP: 0033:0x7f055038f7c9 [ 1121.023076][T22112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1121.023100][T22112] RSP: 002b:00007f055129b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1121.023123][T22112] RAX: ffffffffffffffda RBX: 00007f05505e5fa0 RCX: 00007f055038f7c9 [ 1121.023139][T22112] RDX: 0000000000000201 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1121.023164][T22112] RBP: 00007f0550413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1121.023181][T22112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1121.023197][T22112] R13: 00007f05505e6038 R14: 00007f05505e5fa0 R15: 00007ffc1506f398 [ 1121.023236][T22112] [ 1122.105443][T22120] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1123.638107][T22138] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1123.694247][T22138] nfs: Unknown parameter 'w`_I+; HY ' [ 1124.166674][T22143] bond0: option all_slaves_active: invalid value () [ 1124.352424][T22146] input: f as /devices/virtual/input/input130 [ 1124.457752][T22148] binder: 22147:22148 ioctl c018620c 0 returned -1 [ 1124.632487][T22153] binder: 22152:22153 ioctl c018620c 0 returned -1 [ 1124.641332][T22153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1126.830249][T22179] bond0: option all_slaves_active: invalid value () [ 1126.956261][T22179] bond0: option all_slaves_active: invalid value () [ 1127.370403][T22189] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1127.417620][T22189] nfs: Unknown parameter 'w`_I+; HY Lu>>uh' [ 1127.896168][T22201] binder: 22200:22201 ioctl c018620c 0 returned -1 [ 1129.049036][T22215] binder: 22214:22215 ioctl c018620c 0 returned -1 [ 1129.066178][T22215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3152'. [ 1130.113836][T22225] bond0: option all_slaves_active: invalid value () [ 1131.705552][T22248] input: f as /devices/virtual/input/input131 [ 1133.507926][T22285] bond0: option all_slaves_active: invalid value () [ 1133.992061][T22294] input: f as /devices/virtual/input/input132 [ 1134.351331][T22301] input: f as /devices/virtual/input/input133 [ 1134.548040][T22304] bond0: option all_slaves_active: invalid value () [ 1135.375609][T22323] input: f as /devices/virtual/input/input134 [ 1136.097738][T22333] binder: 22332:22333 ioctl c018620c 0 returned -1 [ 1136.131949][T22333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3172'. [ 1136.203629][T22325] blktrace: Concurrent blktraces are not allowed on loop5 [ 1136.922723][T22344] binder: 22342:22344 ioctl c018620c 0 returned -1 [ 1137.012636][T22344] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3174'. [ 1137.437780][T22352] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3176'. [ 1137.459328][T22352] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3176'. [ 1138.459901][T22365] binder: 22362:22365 ioctl c018620c 0 returned -1 [ 1138.509412][T22365] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3179'. [ 1138.855294][T22374] input: f as /devices/virtual/input/input135 [ 1139.643993][T22382] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1139.676113][T22382] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+' [ 1139.886749][T22386] binder: 22384:22386 ioctl c018620c 0 returned -1 [ 1139.938468][T22386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3185'. [ 1139.988380][T22389] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1140.025755][T22389] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+' [ 1141.843238][T22414] input: f as /devices/virtual/input/input136 [ 1142.818399][T22428] input: f as /devices/virtual/input/input137 [ 1142.838505][T22433] binder: 22431:22433 ioctl c018620c 0 returned -1 [ 1142.920190][T22433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3193'. [ 1143.185934][T22441] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1143.195916][T22441] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1144.096588][T22446] binder: 22444:22446 ioctl c018620c 0 returned -1 [ 1144.118502][T22446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3197'. [ 1145.501300][T22468] bond0: option all_slaves_active: invalid value () [ 1145.878331][T22480] binder: 22478:22480 ioctl c018620c 0 returned -1 [ 1145.930031][T22480] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3204'. [ 1147.014813][T22488] FAULT_INJECTION: forcing a failure. [ 1147.014813][T22488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1147.084506][T22488] CPU: 0 UID: 0 PID: 22488 Comm: syz.2.3205 Not tainted syzkaller #0 PREEMPT(full) [ 1147.084541][T22488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1147.084557][T22488] Call Trace: [ 1147.084567][T22488] [ 1147.084577][T22488] dump_stack_lvl+0x16c/0x1f0 [ 1147.084613][T22488] should_fail_ex+0x512/0x640 [ 1147.084651][T22488] set_fd_set.part.0+0x36/0xc0 [ 1147.084685][T22488] core_sys_select+0x930/0xae0 [ 1147.084724][T22488] ? __pfx_core_sys_select+0x10/0x10 [ 1147.084763][T22488] ? futex_wait+0x120/0x380 [ 1147.084824][T22488] ? __pfx_do_futex+0x10/0x10 [ 1147.084863][T22488] kern_select+0x15d/0x1e0 [ 1147.084895][T22488] ? __pfx_kern_select+0x10/0x10 [ 1147.084930][T22488] ? syscall_user_dispatch+0x78/0x140 [ 1147.084968][T22488] __x64_sys_select+0xbd/0x160 [ 1147.084996][T22488] ? syscall_trace_enter+0x5e/0x220 [ 1147.085028][T22488] do_syscall_64+0xcd/0xf80 [ 1147.085056][T22488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.085082][T22488] RIP: 0033:0x7f7588f8f7c9 [ 1147.085104][T22488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1147.085127][T22488] RSP: 002b:00007f7589e15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1147.085148][T22488] RAX: ffffffffffffffda RBX: 00007f75891e5fa0 RCX: 00007f7588f8f7c9 [ 1147.085165][T22488] RDX: 00002000000005c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 1147.085178][T22488] RBP: 00007f7589013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1147.085192][T22488] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 1147.085208][T22488] R13: 00007f75891e6038 R14: 00007f75891e5fa0 R15: 00007ffcccd146b8 [ 1147.085238][T22488] [ 1147.350018][T22488] UHID_CREATE from different security context by process 3558 (syz.2.3205), this is not allowed. [ 1147.895240][T22502] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1147.981985][T22502] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+' [ 1148.152597][T22498] blktrace: Concurrent blktraces are not allowed on loop5 [ 1148.172324][T22508] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3210'. [ 1148.278872][T22508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1148.663739][T22508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.575732][T22536] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1149.656183][T22536] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1149.724805][T22538] Invalid ELF header magic: != ELF [ 1150.970658][T22555] FAULT_INJECTION: forcing a failure. [ 1150.970658][T22555] name failslab, interval 1, probability 0, space 0, times 0 [ 1151.038270][T22556] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1151.054418][T22556] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1151.070398][T22555] CPU: 1 UID: 0 PID: 22555 Comm: syz.1.3220 Not tainted syzkaller #0 PREEMPT(full) [ 1151.070437][T22555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1151.070453][T22555] Call Trace: [ 1151.070463][T22555] [ 1151.070473][T22555] dump_stack_lvl+0x16c/0x1f0 [ 1151.070511][T22555] should_fail_ex+0x512/0x640 [ 1151.070540][T22555] ? __kmalloc_cache_noprof+0x5f/0x770 [ 1151.070572][T22555] should_failslab+0xc2/0x120 [ 1151.070610][T22555] __kmalloc_cache_noprof+0x72/0x770 [ 1151.070639][T22555] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1151.070680][T22555] ? apply_subsystem_event_filter+0x460/0x17e0 [ 1151.070714][T22555] apply_subsystem_event_filter+0x460/0x17e0 [ 1151.070759][T22555] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1151.070800][T22555] ? _copy_from_user+0x59/0xd0 [ 1151.070835][T22555] subsystem_filter_write+0x95/0x120 [ 1151.070871][T22555] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1151.070902][T22555] vfs_write+0x2a0/0x11d0 [ 1151.070937][T22555] ? __pfx___mutex_lock+0x10/0x10 [ 1151.070967][T22555] ? irqentry_exit+0x1dd/0x8c0 [ 1151.070998][T22555] ? __pfx_vfs_write+0x10/0x10 [ 1151.071067][T22555] ksys_write+0x12a/0x250 [ 1151.071100][T22555] ? __pfx_ksys_write+0x10/0x10 [ 1151.071147][T22555] do_syscall_64+0xcd/0xf80 [ 1151.071181][T22555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.071215][T22555] RIP: 0033:0x7f58e4b8f7c9 [ 1151.071237][T22555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1151.071263][T22555] RSP: 002b:00007f58e2df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1151.071288][T22555] RAX: ffffffffffffffda RBX: 00007f58e4de5fa0 RCX: 00007f58e4b8f7c9 [ 1151.071306][T22555] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 1151.071322][T22555] RBP: 00007f58e4c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1151.071338][T22555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1151.071354][T22555] R13: 00007f58e4de6038 R14: 00007f58e4de5fa0 R15: 00007fff64374438 [ 1151.071394][T22555] [ 1151.851869][T22564] openvswitch: netlink: Message has 6 unknown bytes. [ 1151.907927][T22560] warning: `syz.2.3222' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1151.954649][T22567] input: f as /devices/virtual/input/input138 [ 1153.411621][T22585] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1154.873393][T22606] input: f as /devices/virtual/input/input139 [ 1157.614656][T22637] random: crng reseeded on system resumption [ 1158.930022][T22646] input: f as /devices/virtual/input/input140 [ 1160.027913][T22654] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1160.075318][T22654] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1160.344466][T22660] bond0: option all_slaves_active: invalid value () [ 1160.603306][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1161.772826][T22688] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input141 [ 1162.491356][T22689] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input142 [ 1162.510264][T22698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3251'. [ 1162.607951][T22700] input: f as /devices/virtual/input/input143 [ 1163.920168][T22717] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1163.965673][T22719] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1164.001515][T22717] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1164.055106][T22719] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1164.134912][T22718] random: crng reseeded on system resumption [ 1165.082182][T22731] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1165.207619][T22731] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1165.974865][T22736] hub 8-0:1.0: USB hub found [ 1166.023640][T22736] hub 8-0:1.0: 1 port detected [ 1166.109118][T22745] input: f as /devices/virtual/input/input144 [ 1167.163262][ T5845] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1167.448077][T22765] openvswitch: netlink: Message has 6 unknown bytes. [ 1167.524700][T22770] openvswitch: netlink: Key type 1699 is out of range max 32 [ 1167.525815][T22770] nfs: Unknown parameter 'w`_I+; HY Lu>>uh*C<+ ' [ 1168.711676][T22786] binder: 22785:22786 ioctl c018620c 0 returned -1 [ 1168.738206][T22786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3271'. [ 1170.592208][T22810] input: f as /devices/virtual/input/input145 [ 1171.252743][T22820] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input146 [ 1171.453936][T22824] FAULT_INJECTION: forcing a failure. [ 1171.453936][T22824] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1171.753182][T22824] CPU: 1 UID: 0 PID: 22824 Comm: syz.3.3277 Not tainted syzkaller #0 PREEMPT(full) [ 1171.753204][T22824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1171.753214][T22824] Call Trace: [ 1171.753220][T22824] [ 1171.753226][T22824] dump_stack_lvl+0x16c/0x1f0 [ 1171.753248][T22824] should_fail_ex+0x512/0x640 [ 1171.753268][T22824] should_fail_alloc_page+0xe7/0x130 [ 1171.753291][T22824] prepare_alloc_pages+0x3c2/0x610 [ 1171.753314][T22824] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 1171.753333][T22824] ? css_rstat_updated+0x1c2/0x510 [ 1171.753348][T22824] ? __pfx_css_rstat_updated+0x10/0x10 [ 1171.753362][T22824] ? find_held_lock+0x2b/0x80 [ 1171.753381][T22824] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1171.753398][T22824] ? memcg_rstat_updated.part.0+0x110/0x250 [ 1171.753416][T22824] ? __lock_acquire+0x433/0x22f0 [ 1171.753432][T22824] ? local_lock_release+0x99/0x130 [ 1171.753456][T22824] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1171.753477][T22824] ? policy_nodemask+0xea/0x4e0 [ 1171.753497][T22824] alloc_pages_mpol+0x1fb/0x550 [ 1171.753517][T22824] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1171.753536][T22824] ? __memcg_slab_post_alloc_hook+0x47c/0x940 [ 1171.753560][T22824] alloc_pages_noprof+0x12d/0x180 [ 1171.753579][T22824] pgd_alloc+0x4b/0x600 [ 1171.753600][T22824] mm_init+0x734/0x1140 [ 1171.753621][T22824] mm_alloc+0x9f/0xc0 [ 1171.753639][T22824] alloc_bprm+0x2af/0x710 [ 1171.753658][T22824] do_execveat_common.isra.0+0x1ce/0x610 [ 1171.753679][T22824] __x64_sys_execve+0x8e/0xb0 [ 1171.753697][T22824] do_syscall_64+0xcd/0xf80 [ 1171.753715][T22824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1171.753730][T22824] RIP: 0033:0x7f055038f7c9 [ 1171.753742][T22824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1171.753757][T22824] RSP: 002b:00007f055129b038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1171.753771][T22824] RAX: ffffffffffffffda RBX: 00007f05505e5fa0 RCX: 00007f055038f7c9 [ 1171.753782][T22824] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1171.753791][T22824] RBP: 00007f0550413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1171.753810][T22824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1171.753820][T22824] R13: 00007f05505e6038 R14: 00007f05505e5fa0 R15: 00007ffc1506f398 [ 1171.753840][T22824] [ 1172.945143][T22832] ================================================================== [ 1172.945163][T22832] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 1172.945209][T22832] Read of size 256 at addr ffff888046c13260 by task syz.2.3278/22832 [ 1172.945233][T22832] [ 1172.945245][T22832] CPU: 0 UID: 0 PID: 22832 Comm: syz.2.3278 Not tainted syzkaller #0 PREEMPT(full) [ 1172.945275][T22832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1172.945292][T22832] Call Trace: [ 1172.945300][T22832] [ 1172.945310][T22832] dump_stack_lvl+0x116/0x1f0 [ 1172.945343][T22832] print_report+0xcd/0x630 [ 1172.945378][T22832] ? __virt_addr_valid+0x81/0x610 [ 1172.945432][T22832] ? __phys_addr+0xe8/0x180 [ 1172.945471][T22832] ? fbcon_prepare_logo+0xa03/0xc70 [ 1172.945495][T22832] kasan_report+0xe0/0x110 [ 1172.945528][T22832] ? fbcon_prepare_logo+0xa03/0xc70 [ 1172.945558][T22832] kasan_check_range+0x100/0x1b0 [ 1172.945584][T22832] __asan_memcpy+0x23/0x60 [ 1172.945609][T22832] fbcon_prepare_logo+0xa03/0xc70 [ 1172.945641][T22832] fbcon_init+0xd77/0x1900 [ 1172.945668][T22832] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1172.945707][T22832] visual_init+0x320/0x620 [ 1172.945734][T22832] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1172.945772][T22832] store_bind+0x61d/0x760 [ 1172.945804][T22832] ? sysfs_file_kobj+0xe4/0x290 [ 1172.945830][T22832] ? __pfx_store_bind+0x10/0x10 [ 1172.945859][T22832] dev_attr_store+0x58/0x80 [ 1172.945883][T22832] ? __pfx_dev_attr_store+0x10/0x10 [ 1172.945907][T22832] sysfs_kf_write+0xf2/0x150 [ 1172.945931][T22832] kernfs_fop_write_iter+0x3af/0x570 [ 1172.945963][T22832] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1172.945989][T22832] iter_file_splice_write+0xa24/0x12b0 [ 1172.946032][T22832] ? copy_splice_read+0x89c/0xc20 [ 1172.946062][T22832] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1172.946097][T22832] ? __pfx_copy_splice_read+0x10/0x10 [ 1172.946137][T22832] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1172.946170][T22832] direct_splice_actor+0x192/0x6c0 [ 1172.946203][T22832] splice_direct_to_actor+0x345/0xa30 [ 1172.946236][T22832] ? __pfx_direct_splice_actor+0x10/0x10 [ 1172.946273][T22832] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1172.946333][T22832] do_splice_direct+0x174/0x240 [ 1172.946366][T22832] ? __pfx_do_splice_direct+0x10/0x10 [ 1172.946406][T22832] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1172.946444][T22832] ? rw_verify_area+0xcf/0x6c0 [ 1172.946476][T22832] do_sendfile+0xb06/0xe50 [ 1172.946509][T22832] ? __pfx_do_sendfile+0x10/0x10 [ 1172.946541][T22832] ? __x64_sys_futex+0x1e0/0x4c0 [ 1172.946570][T22832] ? __x64_sys_futex+0x1e9/0x4c0 [ 1172.946601][T22832] __x64_sys_sendfile64+0x1d8/0x220 [ 1172.946638][T22832] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1172.946678][T22832] do_syscall_64+0xcd/0xf80 [ 1172.946723][T22832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.946751][T22832] RIP: 0033:0x7f7588f8f7c9 [ 1172.946772][T22832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.946799][T22832] RSP: 002b:00007f7589dd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1172.946825][T22832] RAX: ffffffffffffffda RBX: 00007f75891e6180 RCX: 00007f7588f8f7c9 [ 1172.946844][T22832] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1172.946861][T22832] RBP: 00007f7589013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1172.946878][T22832] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1172.946892][T22832] R13: 00007f75891e6218 R14: 00007f75891e6180 R15: 00007ffcccd146b8 [ 1172.946920][T22832] [ 1172.946930][T22832] [ 1172.946937][T22832] The buggy address belongs to the physical page: [ 1172.946950][T22832] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888046c13740 pfn:0x46c10 [ 1172.946974][T22832] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1172.946995][T22832] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1172.947026][T22832] page_type: f8(unknown) [ 1172.947049][T22832] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1172.947074][T22832] raw: ffff888046c13740 0000000000000000 00000000f8000000 0000000000000000 [ 1172.947099][T22832] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 1172.947122][T22832] head: ffff888046c13740 0000000000000000 00000000f8000000 0000000000000000 [ 1172.947145][T22832] head: 00fff00000000002 ffffea00011b0401 00000000ffffffff 00000000ffffffff [ 1172.947166][T22832] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1172.947180][T22832] page dumped because: kasan: bad access detected [ 1172.947193][T22832] page_owner tracks the page as allocated [ 1172.947202][T22832] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_ZERO|__GFP_COMP), pid 22832, tgid 22821 (syz.2.3278), ts 1172838354187, free_ts 1166286164921 [ 1172.947243][T22832] post_alloc_hook+0x1af/0x220 [ 1172.947267][T22832] get_page_from_freelist+0xd0b/0x31a0 [ 1172.947291][T22832] __alloc_frozen_pages_noprof+0x25f/0x2440 [ 1172.947318][T22832] alloc_pages_mpol+0x1fb/0x550 [ 1172.947347][T22832] ___kmalloc_large_node+0xed/0x160 [ 1172.947376][T22832] __kmalloc_large_node_noprof+0x1c/0x70 [ 1172.947409][T22832] __kmalloc_noprof.cold+0xc/0x62 [ 1172.947439][T22832] vc_do_resize+0x1de/0x10e0 [ 1172.947466][T22832] fbcon_init+0xd53/0x1900 [ 1172.947489][T22832] visual_init+0x320/0x620 [ 1172.947512][T22832] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1172.947540][T22832] store_bind+0x61d/0x760 [ 1172.947567][T22832] dev_attr_store+0x58/0x80 [ 1172.947589][T22832] sysfs_kf_write+0xf2/0x150 [ 1172.947610][T22832] kernfs_fop_write_iter+0x3af/0x570 [ 1172.947642][T22832] iter_file_splice_write+0xa24/0x12b0 [ 1172.947673][T22832] page last free pid 22742 tgid 22742 stack trace: [ 1172.947700][T22832] __free_frozen_pages+0x7df/0x1160 [ 1172.947737][T22832] __put_partials+0x130/0x170 [ 1172.947758][T22832] qlist_free_all+0x4d/0x120 [ 1172.947785][T22832] kasan_quarantine_reduce+0x195/0x1e0 [ 1172.947814][T22832] __kasan_slab_alloc+0x69/0x90 [ 1172.947843][T22832] kmem_cache_alloc_noprof+0x250/0x720 [ 1172.947866][T22832] jbd2__journal_start+0x193/0x6a0 [ 1172.947899][T22832] __ext4_journal_start_sb+0x195/0x640 [ 1172.947924][T22832] ext4_dirty_inode+0xa1/0x130 [ 1172.947951][T22832] __mark_inode_dirty+0x1f7/0x1670 [ 1172.947976][T22832] generic_update_time+0xcf/0xf0 [ 1172.948010][T22832] file_update_time_flags+0x410/0x520 [ 1172.948031][T22832] ext4_page_mkwrite+0x33d/0x1880 [ 1172.948073][T22832] do_page_mkwrite+0x174/0x380 [ 1172.948097][T22832] do_pte_missing+0x29c/0x4000 [ 1172.948129][T22832] __handle_mm_fault+0x14ca/0x2a30 [ 1172.948162][T22832] [ 1172.948168][T22832] Memory state around the buggy address: [ 1172.948181][T22832] ffff888046c13100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1172.948201][T22832] ffff888046c13180: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1172.948219][T22832] >ffff888046c13200: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1172.948233][T22832] ^ [ 1172.948247][T22832] ffff888046c13280: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1172.948264][T22832] ffff888046c13300: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 1172.948278][T22832] ================================================================== [ 1172.948293][T22832] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1172.948311][T22832] CPU: 0 UID: 0 PID: 22832 Comm: syz.2.3278 Not tainted syzkaller #0 PREEMPT(full) [ 1172.948343][T22832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1172.948360][T22832] Call Trace: [ 1172.948368][T22832] [ 1172.948379][T22832] dump_stack_lvl+0x3d/0x1f0 [ 1172.948411][T22832] vpanic+0x640/0x6f0 [ 1172.948440][T22832] panic+0xca/0xd0 [ 1172.948465][T22832] ? __pfx_panic+0x10/0x10 [ 1172.948497][T22832] check_panic_on_warn+0xab/0xb0 [ 1172.948530][T22832] end_report+0x107/0x160 [ 1172.948564][T22832] kasan_report+0xee/0x110 [ 1172.948598][T22832] ? fbcon_prepare_logo+0xa03/0xc70 [ 1172.948629][T22832] kasan_check_range+0x100/0x1b0 [ 1172.948656][T22832] __asan_memcpy+0x23/0x60 [ 1172.948694][T22832] fbcon_prepare_logo+0xa03/0xc70 [ 1172.948729][T22832] fbcon_init+0xd77/0x1900 [ 1172.948762][T22832] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1172.948791][T22832] visual_init+0x320/0x620 [ 1172.948820][T22832] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1172.948857][T22832] store_bind+0x61d/0x760 [ 1172.948899][T22832] ? sysfs_file_kobj+0xe4/0x290 [ 1172.948923][T22832] ? __pfx_store_bind+0x10/0x10 [ 1172.948951][T22832] dev_attr_store+0x58/0x80 [ 1172.948976][T22832] ? __pfx_dev_attr_store+0x10/0x10 [ 1172.948999][T22832] sysfs_kf_write+0xf2/0x150 [ 1172.949024][T22832] kernfs_fop_write_iter+0x3af/0x570 [ 1172.949057][T22832] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1172.949083][T22832] iter_file_splice_write+0xa24/0x12b0 [ 1172.949128][T22832] ? copy_splice_read+0x89c/0xc20 [ 1172.949159][T22832] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1172.949196][T22832] ? __pfx_copy_splice_read+0x10/0x10 [ 1172.949237][T22832] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1172.949272][T22832] direct_splice_actor+0x192/0x6c0 [ 1172.949309][T22832] splice_direct_to_actor+0x345/0xa30 [ 1172.949342][T22832] ? __pfx_direct_splice_actor+0x10/0x10 [ 1172.949379][T22832] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1172.949417][T22832] do_splice_direct+0x174/0x240 [ 1172.949452][T22832] ? __pfx_do_splice_direct+0x10/0x10 [ 1172.949485][T22832] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1172.949520][T22832] ? rw_verify_area+0xcf/0x6c0 [ 1172.949552][T22832] do_sendfile+0xb06/0xe50 [ 1172.949597][T22832] ? __pfx_do_sendfile+0x10/0x10 [ 1172.949629][T22832] ? __x64_sys_futex+0x1e0/0x4c0 [ 1172.949659][T22832] ? __x64_sys_futex+0x1e9/0x4c0 [ 1172.949719][T22832] __x64_sys_sendfile64+0x1d8/0x220 [ 1172.949755][T22832] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1172.949796][T22832] do_syscall_64+0xcd/0xf80 [ 1172.949828][T22832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.949856][T22832] RIP: 0033:0x7f7588f8f7c9 [ 1172.949877][T22832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.949903][T22832] RSP: 002b:00007f7589dd3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1172.949927][T22832] RAX: ffffffffffffffda RBX: 00007f75891e6180 RCX: 00007f7588f8f7c9 [ 1172.949943][T22832] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1172.949956][T22832] RBP: 00007f7589013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1172.949984][T22832] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1172.950000][T22832] R13: 00007f75891e6218 R14: 00007f75891e6180 R15: 00007ffcccd146b8 [ 1172.950029][T22832] [ 1172.950404][T22832] Kernel Offset: disabled