last executing test programs: 8.101193332s ago: executing program 3 (id=854): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2042, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xb0, 0x401, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x7f2050855560937d, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) unshare$auto(0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) write$auto(r2, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) listen$auto(0x3, 0x81) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, r1) sendmsg$auto_TCP_METRICS_CMD_DEL(r1, 0x0, 0x0) 5.40273921s ago: executing program 2 (id=863): mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, 0x0, 0x24000080) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0xa, 0x9) bind$auto(r0, &(0x7f0000000140), 0x10) mmap$auto(0x0, 0x20007, 0x7, 0x100000011, 0xffffffffffffffff, 0xf46) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0xfffffffffffffffd, 0xc0000b, 0x4, 0x11, r1, 0xb9) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x400c091) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x801, 0x3ff) bind$auto(0x3, 0x0, 0x6a) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8000, 0x4, 0x5, 0xd3b, 0x34, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) 5.289893027s ago: executing program 1 (id=864): ioctl$auto_XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x101, 0x7ff, 0x1, 0x80000000}) io_uring_register$auto_IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000040)="eedb3e34bd6e0ee3f192500379cec82f6a22b9d8c830ad24523992bdb9379891a5763c67bca6fa1a93fd748ba3a24b0fbbe29c2cdadfab5eafa455fb0068e76a35c342edbfb5f3ca893f54d3dd9b3f02bd7ea77344cd2a372bb6f3fce67fa177e2c9fedb260d747a48490bdd689c7aeee234b587c6da89c1a0513a0652cb9e0b767a850f43355b5e30f25e23b0402401b42ff83d4fbfa3b9138f36eddbd5f3e7d11b1379af13c7e92511736ade09d52bd3800aa5062ef3be69e31c3a580803daf49c", 0x700000) (async) r1 = openat$auto(r0, &(0x7f0000000140)='./file0\x00', 0x1c, 0xc4) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x40100, 0x0) (async) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x2000850) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/cgroup\x00', 0x8900, 0x0) mlock$auto(0x9, 0x7fffffffffffffff) r3 = prctl$auto_PR_SET_SECCOMP(0x16, 0x410, 0x9, 0x9, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async) setsockopt$auto_SO_TIMESTAMP_OLD(r2, 0xec8, 0x1d, &(0x7f0000000400)='{^\x00', 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), r1) (async) ioctl$auto_TIOCSCTTY(r3, 0x540e, &(0x7f0000000480)="bec999602676766081114a4a39123fb6ed7249916fe9eebeee1739576d1309957cc04381d6a14c56eb21c19a7ecce31c65a6058400e39d72a16ec1886fe266767b") (async) r4 = ioctl$auto_TUNSETNOCSUM(r3, 0x400454c8, &(0x7f0000000500)=0x7) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000580), r0) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2011}, 0x20040800) (async) personality$auto(0x0) (async) write$auto_fops_atomic_t_(r4, &(0x7f0000000680)="52181496b4598887c097312f31ca527e21d2a12dafec0647b6f2b90f603e4251a5dab85fe1a2360198acae3dbd1a397cff5e1714487ce11e9e5772af96d82bc66737cc4b222556a2f4cb", 0x4a) (async) mprotect$auto(0x8, 0x9, 0x4) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000700), r1) (async) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000740), 0x2ec0, 0x0) ioctl$auto_RTC_IRQP_SET(r6, 0x4008700c, &(0x7f0000000780)=0x6) (async) read$auto_proc_single_file_operations_base(r4, &(0x7f00000007c0)=""/74, 0x4a) (async) select$auto(0x358, &(0x7f0000000840)={[0xffffffffffffffff, 0xd41, 0xfa, 0xd93, 0x100000001, 0x0, 0x8, 0xd71, 0x80000001, 0xfffffffffffffff7, 0x5, 0x6, 0x9, 0x4, 0xf, 0x2]}, &(0x7f00000008c0)={[0x2, 0x5220c65a, 0x266d, 0x1, 0x6, 0x6, 0xcc0, 0x1, 0x62, 0x50cd, 0x8, 0x6, 0x8, 0x95, 0x6, 0x3]}, &(0x7f0000000940)={[0x6, 0x5, 0x6, 0x10001, 0x200, 0x1, 0xffffffff, 0x5fc7, 0x4000, 0xe4, 0x8000000000000001, 0x100000001, 0x22, 0x9, 0x7, 0x4]}, &(0x7f00000009c0)={0x98, 0x4}) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) utimes$auto(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x7ff, 0x6}) (async) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000a80), 0x8000, 0x0) (async) r7 = socketpair$auto(0xd, 0x5, 0x6, &(0x7f0000000ac0)=0x9) fcntl$getown(r6, 0x9) (async) write$auto_dfs_sched_itmt_fops_itmt(r7, &(0x7f0000000b00)="eb2b5182013803e71d34f2d2f61f24c314c391a0382e87a3a0a9f3aa6edf194a49eaee099971ec631d4de08a5aa93e1345b014762c8f5686311ae4f319a86caf40d9a2359970ee903d583316f80b17657c4ed89c3a12e98714535a719f9919b5f7", 0x61) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b80)={'geneve0\x00'}) 4.845419322s ago: executing program 1 (id=865): close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000004c0), 0x2000, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) ioctl$auto_FS_IOC_ZERO_RANGE(r1, 0x40305839, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) sendfile$auto(r0, r2, 0x0, 0x19) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x2, 0x8000) fchown$auto(0xffffffffffffffff, 0xffffffff, 0x0) (async) fchown$auto(0xffffffffffffffff, 0xffffffff, 0x0) r3 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/oom_score_adj\x00', 0x20202, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000000c0)="4c2a28c58ff9e9995b91a7d23b2a5a2f88", 0x11) read$auto_proc_oom_score_adj_operations_base(r3, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) 4.384280573s ago: executing program 3 (id=868): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x9210642d, 0xc5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x101000, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r0, 0x40045702, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x18, r0, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x18, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC2\x00', 0x8080, 0x0) (async) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC2\x00', 0x8080, 0x0) personality$auto(0xb7) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\f\r\a\x00\xf6OL\xc8\xbe\x94\xf2\xa2\x00\xfbr(\x83\";\xa8\xd7\x05uXR\xa3\xb3@T\x89\x8e\xd4Q\xdd\xb80\xc7\xad\\\xf7C\xb3\x8f\r?\xb3>r\xdf\x99%\xd6S\xe3\x8b*\xe2\xbc\xc9\x8bV\xf0\xb7\xec.\xae\xe1\\s^\x96\xaa', 0x2db) (async) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\f\r\a\x00\xf6OL\xc8\xbe\x94\xf2\xa2\x00\xfbr(\x83\";\xa8\xd7\x05uXR\xa3\xb3@T\x89\x8e\xd4Q\xdd\xb80\xc7\xad\\\xf7C\xb3\x8f\r?\xb3>r\xdf\x99%\xd6S\xe3\x8b*\xe2\xbc\xc9\x8bV\xf0\xb7\xec.\xae\xe1\\s^\x96\xaa', 0x2db) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, 0x0) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x482142, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x482142, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x80002, 0x0) mq_open$auto(0x0, 0x60d6, 0x1, &(0x7f0000000100)={0xea28, 0x7, 0x7, 0x101}) (async) mq_open$auto(0x0, 0x60d6, 0x1, &(0x7f0000000100)={0xea28, 0x7, 0x7, 0x101}) dup$auto(0xffffffffffffffff) (async) dup$auto(0xffffffffffffffff) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r4, 0x4018620d, 0x9) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r5, 0x4018620d, 0x9) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.35707534s ago: executing program 2 (id=869): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/hci1/force_wakeup\x00', 0x101200, 0x0) (async) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) socketpair$auto(0x1f, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) r0 = socket(0xa, 0x3, 0x3b) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x20000, 0x0) mmap$auto(0x10000000000000, 0x20009, 0x4000000000df, 0x16, 0x401, 0x8000) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) r1 = socketpair$auto(0xfffffffd, 0x1, 0x2, 0x0) recvmmsg$auto(r1, 0x0, 0x6, 0x700, 0x0) close_range$auto(0x0, 0x5, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r3) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) close_range$auto(0x2, 0xa, 0x0) (async) read$auto_trace_fops_debugfs(r1, 0x0, 0x0) (async) timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x0) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x36}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x140) (async) mmap$auto(0x0, 0xe981, 0xe0, 0xd41f, r0, 0x8000) 4.245028105s ago: executing program 1 (id=870): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xf, 0x80000, 0x4) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) writev$auto(r0, &(0x7f0000000340)={0x0, 0xda7e}, 0x9) mmap$auto(0xfffffffffffffff7, 0x81, 0x4000000000e0, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) r1 = socket(0x2, 0x5, 0x0) setsockopt$auto(r1, 0x0, 0x10, 0x0, 0x17) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r1, 0x8, 0x0) socket(0xa, 0x1, 0x4000084) prctl$auto(0xfff, 0x1, 0x0, 0x108, 0x13) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x20008, 0xc, 0x0, 0x800000000001, 0x0) write$auto(r2, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) madvise$auto(0x0, 0xffffffffffff0001, 0x4000015) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x492101, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose3/carrier\x00', 0x502, 0x0) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x20000009b72, 0x2, 0x8000) sysfs$auto(0x9, 0x4d, 0x0) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) 4.129446033s ago: executing program 2 (id=871): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sg0\x00', 0x8102, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x101b00, 0x0) ioctl$auto_SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000001180)) 3.991418528s ago: executing program 2 (id=872): socketpair$auto(0x800022, 0x8, 0x2, 0x0) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) kill$auto(0x0, 0x11) r0 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x401, 0x0) write$auto_bm_register_operations_binfmt_misc(r0, 0x0, 0x0) prctl$auto(0x42, 0x7b1, 0x0, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r1 = socket(0xf, 0xa, 0xf) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/tty/tty26/power/runtime_status\x00', 0x171400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)=""/110, 0x6e) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xae481, 0x0) r3 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x11d802, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r3, 0x0, 0x20000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc5}, 0x2, 0x0, 0x7, 0xa502}, 0x8006}, 0x7, 0x4008) connect$auto(0x3, &(0x7f0000000000), 0x55) setsockopt$auto(r3, 0x8, 0x3, 0x0, 0x7) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @local}, 0x6a) connect$auto(r1, &(0x7f0000000080)=@llc={0x1a, 0x3, 0x6, 0x6, 0x5, 0xb, @random="9fdcf5efbbe8"}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x6, 0x1, 0xff, 0x3, 0xd) r4 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x191e00, 0x0) read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000100)=""/240, 0xf0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x2, 0x44f, 0x7, 0x7fffffff, 0x1007181, 0xde1, 0x7, 0x6, 0x7ff, 0x8b, 0x26, 0x4, 0x80200000000001, 0x384, 0xfffffffff7fffffa, 0x8, 0x7, 0x30, 0xffffffff, 0x864, 0xe, 0x62000, 0x9, 0x80000000, 0x84, 0x0, 0x0, 0x0, 0xf4, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x6fff, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x200000000, 0x0, 0x8c]}, 0x9, 0xc) r5 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0xfffffff7effffd05, &(0x7f00000001c0)) sysfs$auto(0x2, 0x100000000000036, 0x0) fsopen$auto(0x0, 0x1) 2.465951583s ago: executing program 1 (id=875): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) mmap$auto(0x0, 0x8, 0x5, 0x9b72, 0x2, 0x8000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 2.206468056s ago: executing program 3 (id=876): brk$auto(0x9) (async) mmap$auto(0x0, 0x400008, 0x1000470, 0x12, 0x2, 0x8000) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/misc/hw_random/rng_quality\x00', 0x180, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x9) (async) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44b, 0x7, 0x5, 0x1007181, 0xd1, 0x7, 0x7, 0x7ff, 0x800c, 0x80000001, 0x4, 0x200000000001, 0x384, 0xde3, 0x800000000008, 0x0, 0x2, 0x0, 0xffffff38, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44cd98b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfff]}, 0xa, 0xd) (async) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffffffffffd02, &(0x7f00000001c0)) (async) io_uring_enter$auto(r1, 0x7, 0x5, 0x2, &(0x7f0000000000)="a2f641af6dce728688d57d5250f2744bce7ef8082312ffcbf91c7fc9aa05e93b2961def15c319d4ad2e7fdf7ffd61fbc382b9a1940a5c619d8247f872f664adf51d7d1ba53713bc504d7f69673d75fab0e3009dac1231b199cb0eec4b338912338409812cb893c29ebf05c8840af90e21650a50233723efe5911fa84e4f85f14691350a0ef48df40f27e62114c6d5d7e96693b3fc1af978e026702f00ac8b0297c4b1ab4c929f4d79a8d10f6e0e2e031765a590097741b5b24a92566de8871104abc562bd6199c4431a21b6c3add6f38fd1cdf5effcf5f2589f72332", 0x8d82) 2.203547645s ago: executing program 0 (id=877): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x3, 0x9) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xa0302, 0x0) writev$auto(r0, 0x0, 0x3) unshare$auto(0x40000080) mmap$auto(0x1, 0x1, 0x7, 0xeb2, r0, 0x10008000) mmap$auto(0x0, 0x2020009, 0x7d, 0x16, 0xfffffffffffffffa, 0x80008000) r1 = socket(0x10, 0x2, 0x0) ioctl$auto(r1, 0x8946, 0x24) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x38ca40, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x6, r1}) dup3$auto(r1, r2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x1000009, 0x5, 0x0, 0x1003e0000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) write$auto(r3, &(0x7f0000000080)='9\x00;T\x16\b\x06\x00\x00\x00', 0x10) 2.199554955s ago: executing program 2 (id=878): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x3, 0x9) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xa0302, 0x0) writev$auto(r0, 0x0, 0x3) unshare$auto(0x40000080) mmap$auto(0x1, 0x1, 0x7, 0xeb2, r0, 0x10008000) mmap$auto(0x0, 0x2020009, 0x7d, 0x16, 0xfffffffffffffffa, 0x80008000) r1 = socket(0x10, 0x2, 0x0) ioctl$auto(r1, 0x8946, 0x24) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x38ca40, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x6, r1}) dup3$auto(r1, r2, 0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x1000009, 0x5, 0x0, 0x1003e0000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) write$auto(r3, &(0x7f0000000080)='9\x00;T\x16\b\x06\x00\x00\x00', 0x10) 1.385429688s ago: executing program 3 (id=879): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto_TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0xcad) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) 1.296740292s ago: executing program 1 (id=880): getsockopt$auto(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$auto(r1, 0x0, 0xa) write$auto(r1, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001bc0), r2) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000004a80), r2) sendmsg$auto_NET_SHAPER_CMD_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x946d}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000003900)='\t', 0x1) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x1e1842, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/4096, 0x1000) 1.16539002s ago: executing program 3 (id=881): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x9) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10b402, 0x0) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x45, 0x0) fsopen$auto(0x0, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/3/smp_affinity_list\x00', 0x8f3b7a51b8162d21, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x0, 0x0) socketpair$auto(0x1, 0x4, 0x10010000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) sysfs$auto(0x7, 0x21, 0xf) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54) 1.164718462s ago: executing program 2 (id=889): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2b, 0x1, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae44, 0x10000000000402) (async) ioctl$auto(0x3, 0xae44, 0x10000000000402) add_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) 916.704222ms ago: executing program 3 (id=882): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x141400, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) munmap$auto(0x4, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/hwflags\x00', 0x101000, 0x0) read$auto_hwflags_ops_debugfs(r2, 0x0, 0x0) read$auto(0x3, 0x0, 0x7fffffff) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1b9183, 0x0) write$auto(r3, 0x0, 0x4) unshare$auto(0x40000080) 882.124196ms ago: executing program 0 (id=883): move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x1, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_GET_SE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xc4}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x800}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '('}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '!'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000c5) 648.951631ms ago: executing program 0 (id=884): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/neigh/veth0/gc_stale_time\x00', 0x80400, 0x0) read$auto(r0, 0x0, 0x1ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/rnbd-client/ctl/map_device\x00', 0x60442, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r1 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$auto(r1, 0x0, 0x5) 460.195199ms ago: executing program 0 (id=885): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/oss\x00', 0x88400, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) (async, rerun: 64) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) (async) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) (async) setitimer$auto_ITIMER_VIRTUAL(0x1, 0x0, 0xffffffffffffffff) 404.499607ms ago: executing program 1 (id=886): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) write$auto_sg_fops_sg(r0, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) (async) write$auto_sg_fops_sg(r0, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) read$auto(r0, 0x0, 0x1) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x2, 0x0, 0x21) (async) set_mempolicy$auto(0x2, 0x0, 0x21) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(r1, 0x0, 0x412a, 0x7fffffffffffffff) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x98c7) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f00000001c0)={0x5, "ec21b6bf", 0x6, 0xfffffffffffffffd, 0x1a2, 0x0, 0x8000000000000001, 0x9, 0x5, 0x7, 0x87b9, 0xffffffffffffffff, 0x9, 0x8, 0x5fe4, 0x4, 0x80, 0x5, 0xc450, "646ebb5f960fe40956f60edb7cad66a91b4576e5"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x80000541b, 0x38) socket(0x18, 0x800, 0x2) bind$auto(0x3, &(0x7f0000000180)=@l2={0x1f, 0xe, @none, 0x8, 0x2}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, &(0x7f0000001a80)="ac863ca40621ffb171f8b115a721ad893190d706b1ea1f476f23e619817f3f20e8f9a4483325306b5c51cc0644ac226fcca186311e3c89beffb07049f0320e08671c87581328e1e94a3ff8297beddf3380a30bead275a26afb78cc1b65589b43048765557e1391c1f7cfeff9b841411b6ece9c17561641065bd3f69338129209de095776a78d4203d0b96f37efde9f77caf070799de4abf9017d05ebf9c96be7abae128f8fd74cbc60f7619467991865d6cbdf7e7c68ebba387651f866e059c34f998a7e0e28136e2133d114a1bb84308b4558362190ae1e921cf4608837250e66849a141006a049b5ba8257cf47d1b4187efd7168d7eb1cb866f41b972b338a196ab6fc805bd54d47900db2173e025b7d2719d8c78cbaff1221b19f68d66eb63bfd59c81f14d5fa284c250ad3eb8d3dac54260478edbd4b59cb97ba78d54c6787c41c57b8010c2f21b362727d8f045df225f8f478f9ce03b6fc56bda2cfd47447b4d6c14a9728b6db6276388cd38f12a88462a02bb1ac5acf93265900d01f5258d0a43bf36040708ea188530ea2d089333952ca6a38b54f340ac208872bee01893d3788fe871db4648f59e2fc9167b33e9af1f32df743390d57de86a4fc02f83c9775d482f2b98fa631d4fbd8651e80f9c24ebc0cf1c30b9881961c94ef0cb9b301b3f30c490247ea7d7e6b54d1a6b4cc289cc0407b70540fe6e193dd359435fa4e607186481d0c3418c2b095660d80561419523796b6c59345eeeeff8d1c619cbaff76fd2ef7b5ecf5005431cd626f4bbc60b4ed8f0e1311fb72ea016d6e67b816303319388dfda063f00025cc823b0df80a36b61012e63f15bc40a8345bb1e42ec9fe1577aa3ffc6812fddf4f5905051ebb88ac69df97d9c27bf7b7cbf3770c4ccd96c65c1c08ab9b9a6b062340ecf3de01c3777d1f4020feeb79851cab37a6ba9166f34b21ff8f2c343df5675e6fa594270afda1f2192d30abbe3a98d46b3ba3f06f06beb93a08fd5196c8e51871c6d9aecbeac3f914629dc50c0e6a6ffd895039f5494ff494c507b885fb3367d6a9237a51d7b84304c4f0687735c0b85162deb72c988c38d04c717b492cf59a6b01d9ccdcda7102568285112891ee2a5d1ae193287b4a04d8f8655a90a983bea7a7f5f12006ac4d8ad1e156898c57dcc8f4e5d070ba8ed8c3cd93524132d32187e5b687990a05544563957e872b58569ca5c3f48b918c5e5a774cc8d47fab8fd9d8fd07918bd076bd61ad087ad34d0594035ee7da9d826407e4ffcc4ee345099fcb3251458383a876d442561240538ac7b01036b9c5") (async) ioctl$auto_I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, &(0x7f0000001a80)="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") openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty45\x00', 0x201, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty45\x00', 0x201, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$auto(r3, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$auto_tty_fops_tty_io(r2, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a6", 0x28f) (async) write$auto_tty_fops_tty_io(r2, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a6", 0x28f) socket(0x359542ee6b843955, 0x80000, 0x3) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x42000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000009c0)={{@raw, 0x1, 0x6, 0x2, "da14cf93e7670976d4df4660872c34e34ab92824711bacf3578dcec408cf5180d03a4d126edb3169db6d48ac", @raw=0x7fff}, 0x1, @integer64=@value_ptr=&(0x7f00000000c0)=0x3, "a8949c7d9c57acd66da4c5f111166031ad47ebfed172b36a28d7b0204e3a90e9a6c41064df45da18212d9c4e61a29b8146bd0c0284d89751eb5c58cb32c2abf739599063c9a0820f08f1c1b3645f00006dcd033a712822785eeb6a2c41b6d7c00f5e965c1d0000000000000000000000000400"}) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f00000009c0)={{@raw, 0x1, 0x6, 0x2, "da14cf93e7670976d4df4660872c34e34ab92824711bacf3578dcec408cf5180d03a4d126edb3169db6d48ac", @raw=0x7fff}, 0x1, @integer64=@value_ptr=&(0x7f00000000c0)=0x3, "a8949c7d9c57acd66da4c5f111166031ad47ebfed172b36a28d7b0204e3a90e9a6c41064df45da18212d9c4e61a29b8146bd0c0284d89751eb5c58cb32c2abf739599063c9a0820f08f1c1b3645f00006dcd033a712822785eeb6a2c41b6d7c00f5e965c1d0000000000000000000000000400"}) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) 141.330107ms ago: executing program 0 (id=887): shmctl$auto(0x6, 0x3, 0x0) r0 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1824ccafdd80500ffffffffdfff1a0e00"/56, 0x38) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) read$auto(r2, &(0x7f0000000000)='}!.)],\x00', 0x6eaaa7d3) 0s ago: executing program 0 (id=888): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x3, 0x9) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xa0302, 0x0) writev$auto(r0, 0x0, 0x3) unshare$auto(0x40000080) mmap$auto(0x1, 0x1, 0x7, 0xeb2, r0, 0x10008000) mmap$auto(0x0, 0x2020009, 0x7d, 0x16, 0xfffffffffffffffa, 0x80008000) r1 = socket(0x10, 0x2, 0x0) ioctl$auto(r1, 0x8946, 0x24) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x38ca40, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x6, r1}) dup3$auto(r1, r2, 0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x1000009, 0x5, 0x0, 0x1003e0000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) write$auto(r3, &(0x7f0000000080)='9\x00;T\x16\b\x06\x00\x00\x00', 0x10) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                         getty: ttyS0: read error: Resource temporarily unavailable syzkaller syzkaller login: [ 266.822843][ T9206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.631'. [ 266.962770][ T9211] HfR: entered promiscuous mode [ 267.091784][ T9213] FAULT_INJECTION: forcing a failure. [ 267.091784][ T9213] name failslab, interval 1, probability 0, space 0, times 0 [ 267.225913][ T9218] random: crng reseeded on system resumption [ 267.235592][ T9213] CPU: 0 UID: 0 PID: 9213 Comm: syz.0.633 Not tainted syzkaller #0 PREEMPT(full) [ 267.235616][ T9213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 267.235627][ T9213] Call Trace: [ 267.235631][ T9213] [ 267.235638][ T9213] dump_stack_lvl+0x16c/0x1f0 [ 267.235661][ T9213] should_fail_ex+0x512/0x640 [ 267.235683][ T9213] ? __kmalloc_noprof+0xca/0x880 [ 267.235706][ T9213] should_failslab+0xc2/0x120 [ 267.235724][ T9213] __kmalloc_noprof+0xdd/0x880 [ 267.235746][ T9213] ? memcg_list_lru_alloc+0x4e9/0x740 [ 267.235764][ T9213] ? memcg_list_lru_alloc+0x4e9/0x740 [ 267.235777][ T9213] memcg_list_lru_alloc+0x4e9/0x740 [ 267.235796][ T9213] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 267.235819][ T9213] __memcg_slab_post_alloc_hook+0x133/0x940 [ 267.235842][ T9213] ? kasan_save_track+0x14/0x30 [ 267.235859][ T9213] kmem_cache_alloc_lru_noprof+0x556/0x6e0 [ 267.235874][ T9213] ? find_held_lock+0x2b/0x80 [ 267.235888][ T9213] ? alloc_inode+0xc3/0x240 [ 267.235909][ T9213] ? alloc_inode+0xc3/0x240 [ 267.235926][ T9213] alloc_inode+0xc3/0x240 [ 267.235943][ T9213] path_from_stashed+0x25b/0x750 [ 267.235962][ T9213] ? do_raw_read_unlock+0x44/0xe0 [ 267.235978][ T9213] ns_get_path+0x60/0x80 [ 267.235993][ T9213] proc_ns_get_link+0x121/0x230 [ 267.236011][ T9213] ? __pfx_proc_ns_get_link+0x10/0x10 [ 267.236029][ T9213] ? atime_needs_update+0x8b/0x710 [ 267.236049][ T9213] ? __pfx_proc_ns_get_link+0x10/0x10 [ 267.236065][ T9213] step_into+0x196c/0x21a0 [ 267.236082][ T9213] ? __pfx_step_into+0x10/0x10 [ 267.236099][ T9213] ? find_held_lock+0x2b/0x80 [ 267.236119][ T9213] path_openat+0x6db/0x2cb0 [ 267.236140][ T9213] ? __pfx_path_openat+0x10/0x10 [ 267.236156][ T9213] ? __lock_acquire+0xb8a/0x1c90 [ 267.236176][ T9213] do_filp_open+0x20b/0x470 [ 267.236191][ T9213] ? __pfx_do_filp_open+0x10/0x10 [ 267.236219][ T9213] ? alloc_fd+0x471/0x7d0 [ 267.236237][ T9213] do_sys_openat2+0x11b/0x1d0 [ 267.236258][ T9213] ? __pfx_do_sys_openat2+0x10/0x10 [ 267.236284][ T9213] __x64_sys_openat+0x174/0x210 [ 267.236304][ T9213] ? __pfx___x64_sys_openat+0x10/0x10 [ 267.236331][ T9213] do_syscall_64+0xcd/0xfa0 [ 267.236348][ T9213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.236362][ T9213] RIP: 0033:0x7f3c0198d810 [ 267.236374][ T9213] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 267.236387][ T9213] RSP: 002b:00007f3c02775f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 267.236402][ T9213] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f3c0198d810 [ 267.236411][ T9213] RDX: 0000000000000002 RSI: 00007f3c02775fa0 RDI: 00000000ffffff9c [ 267.236420][ T9213] RBP: 00007f3c02775fa0 R08: 0000000000000000 R09: 0000000000000000 [ 267.236428][ T9213] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 267.236436][ T9213] R13: 00007f3c01be6038 R14: 00007f3c01be5fa0 R15: 00007fffff419b98 [ 267.236455][ T9213] [ 268.777232][ T9261] tipc: Trying to set illegal importance in message [ 269.115215][ T9280] input: jJǸ-9lQ J86 as /devices/virtual/input/input16 [ 269.591388][ T9307] netlink: 342 bytes leftover after parsing attributes in process `syz.1.652'. [ 269.840865][ T9318] mmap: syz.1.654 (9318) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 271.580137][ T9370] tipc: Trying to set illegal importance in message [ 272.078074][ T9387] FAULT_INJECTION: forcing a failure. [ 272.078074][ T9387] name failslab, interval 1, probability 0, space 0, times 0 [ 272.162214][ T9387] CPU: 0 UID: 0 PID: 9387 Comm: syz.1.663 Not tainted syzkaller #0 PREEMPT(full) [ 272.162237][ T9387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 272.162246][ T9387] Call Trace: [ 272.162251][ T9387] [ 272.162258][ T9387] dump_stack_lvl+0x16c/0x1f0 [ 272.162277][ T9387] should_fail_ex+0x512/0x640 [ 272.162299][ T9387] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 272.162316][ T9387] should_failslab+0xc2/0x120 [ 272.162335][ T9387] kmem_cache_alloc_noprof+0x75/0x6e0 [ 272.162348][ T9387] ? __proc_create+0x2ce/0x8e0 [ 272.162372][ T9387] ? __proc_create+0x2ce/0x8e0 [ 272.162390][ T9387] __proc_create+0x2ce/0x8e0 [ 272.162410][ T9387] ? __pfx___proc_create+0x10/0x10 [ 272.162429][ T9387] ? __lock_acquire+0x622/0x1c90 [ 272.162453][ T9387] proc_create_reg+0x7d/0x180 [ 272.162475][ T9387] proc_create_net_data+0x8e/0x1c0 [ 272.162495][ T9387] ? __pfx_proc_create_net_data+0x10/0x10 [ 272.162517][ T9387] ? lockdep_init_map_type+0x5c/0x280 [ 272.162539][ T9387] nfnl_log_net_init+0xe1/0x1c0 [ 272.162554][ T9387] ? __pfx_nfnl_log_net_init+0x10/0x10 [ 272.162566][ T9387] ops_init+0x1e2/0x5f0 [ 272.162583][ T9387] setup_net+0x100/0x390 [ 272.162599][ T9387] ? __pfx_setup_net+0x10/0x10 [ 272.162614][ T9387] ? debug_mutex_init+0x37/0x70 [ 272.162631][ T9387] copy_net_ns+0x2f8/0x690 [ 272.162649][ T9387] create_new_namespaces+0x3ea/0xa90 [ 272.162669][ T9387] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 272.162695][ T9387] ksys_unshare+0x45b/0xa40 [ 272.162715][ T9387] ? __pfx_ksys_unshare+0x10/0x10 [ 272.162734][ T9387] ? xfd_validate_state+0x61/0x180 [ 272.162760][ T9387] __x64_sys_unshare+0x31/0x40 [ 272.162777][ T9387] do_syscall_64+0xcd/0xfa0 [ 272.162794][ T9387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.162809][ T9387] RIP: 0033:0x7f9ffd38efc9 [ 272.162821][ T9387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.162835][ T9387] RSP: 002b:00007f9ffe26e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 272.162848][ T9387] RAX: ffffffffffffffda RBX: 00007f9ffd5e5fa0 RCX: 00007f9ffd38efc9 [ 272.162858][ T9387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 272.162867][ T9387] RBP: 00007f9ffd411f91 R08: 0000000000000000 R09: 0000000000000000 [ 272.162875][ T9387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.162884][ T9387] R13: 00007f9ffd5e6038 R14: 00007f9ffd5e5fa0 R15: 00007ffd21a4d478 [ 272.162903][ T9387] [ 273.690621][ T9420] nfs: Unknown parameter '' [ 273.827735][ T9427] bond0: option all_slaves_active: invalid value () [ 273.950886][ T9422] tipc: Trying to set illegal importance in message [ 274.328526][ T9443] kafs: addr_prefs: Invalid Command [ 274.684638][ T9444] FAULT_INJECTION: forcing a failure. [ 274.684638][ T9444] name failslab, interval 1, probability 0, space 0, times 0 [ 274.920746][ T9444] CPU: 0 UID: 0 PID: 9444 Comm: syz.0.676 Not tainted syzkaller #0 PREEMPT(full) [ 274.920769][ T9444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.920777][ T9444] Call Trace: [ 274.920782][ T9444] [ 274.920788][ T9444] dump_stack_lvl+0x16c/0x1f0 [ 274.920809][ T9444] should_fail_ex+0x512/0x640 [ 274.920832][ T9444] ? __kmalloc_noprof+0xca/0x880 [ 274.920856][ T9444] should_failslab+0xc2/0x120 [ 274.920875][ T9444] __kmalloc_noprof+0xdd/0x880 [ 274.920895][ T9444] ? splice_from_pipe_next+0x1f7/0x5d0 [ 274.920909][ T9444] ? copy_splice_read+0x1a8/0xc20 [ 274.920924][ T9444] ? copy_splice_read+0x1a8/0xc20 [ 274.920936][ T9444] copy_splice_read+0x1a8/0xc20 [ 274.920949][ T9444] ? __pfx_pipe_to_null+0x10/0x10 [ 274.920968][ T9444] ? __pfx_copy_splice_read+0x10/0x10 [ 274.920988][ T9444] ? pipe_unlock+0x4a/0x70 [ 274.921004][ T9444] ? __pfx_splice_from_pipe+0x10/0x10 [ 274.921022][ T9444] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 274.921037][ T9444] ? __pfx_copy_splice_read+0x10/0x10 [ 274.921058][ T9444] do_splice_read+0x285/0x370 [ 274.921073][ T9444] splice_direct_to_actor+0x2a1/0xa30 [ 274.921087][ T9444] ? __pfx_direct_splice_actor+0x10/0x10 [ 274.921104][ T9444] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 274.921122][ T9444] do_splice_direct+0x174/0x240 [ 274.921136][ T9444] ? __pfx_do_splice_direct+0x10/0x10 [ 274.921149][ T9444] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 274.921171][ T9444] ? bpf_lsm_file_permission+0x9/0x10 [ 274.921187][ T9444] ? security_file_permission+0x71/0x210 [ 274.921202][ T9444] ? rw_verify_area+0xcf/0x6c0 [ 274.921217][ T9444] do_sendfile+0xb06/0xe50 [ 274.921233][ T9444] ? __pfx_do_sendfile+0x10/0x10 [ 274.921250][ T9444] ? __x64_sys_futex+0x1e0/0x4c0 [ 274.921268][ T9444] ? __x64_sys_futex+0x1e9/0x4c0 [ 274.921291][ T9444] __x64_sys_sendfile64+0x1d8/0x220 [ 274.921316][ T9444] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 274.921340][ T9444] do_syscall_64+0xcd/0xfa0 [ 274.921357][ T9444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.921372][ T9444] RIP: 0033:0x7f3c0198efc9 [ 274.921383][ T9444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.921405][ T9444] RSP: 002b:00007f3bffbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 274.921419][ T9444] RAX: ffffffffffffffda RBX: 00007f3c01be6180 RCX: 00007f3c0198efc9 [ 274.921429][ T9444] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 274.921437][ T9444] RBP: 00007f3c01a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 274.921446][ T9444] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 274.921455][ T9444] R13: 00007f3c01be6218 R14: 00007f3c01be6180 R15: 00007fffff419b98 [ 274.921474][ T9444] [ 275.897144][ T9456] kexec: Could not allocate control_code_buffer [ 276.120051][ T9468] zswap: compressor not available [ 276.643426][ T9499] HfR: entered promiscuous mode [ 277.020989][ T9509] netlink: 8 bytes leftover after parsing attributes in process `syz.3.688'. [ 277.091240][ T9509] netlink: 342 bytes leftover after parsing attributes in process `syz.3.688'. [ 278.423189][ T9391] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 280.255691][ T9604] openvswitch: HfR: Dropping previously announced user features [ 280.509990][ T9615] FAULT_INJECTION: forcing a failure. [ 280.509990][ T9615] name failslab, interval 1, probability 0, space 0, times 0 [ 280.547678][ T9615] CPU: 0 UID: 0 PID: 9615 Comm: syz.2.710 Not tainted syzkaller #0 PREEMPT(full) [ 280.547701][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.547710][ T9615] Call Trace: [ 280.547715][ T9615] [ 280.547721][ T9615] dump_stack_lvl+0x16c/0x1f0 [ 280.547744][ T9615] should_fail_ex+0x512/0x640 [ 280.547771][ T9615] ? __kmalloc_cache_noprof+0x5f/0x780 [ 280.547796][ T9615] should_failslab+0xc2/0x120 [ 280.547815][ T9615] __kmalloc_cache_noprof+0x72/0x780 [ 280.547836][ T9615] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 280.547855][ T9615] ? kvm_dev_ioctl+0xa8a/0x1a80 [ 280.547870][ T9615] kvm_dev_ioctl+0xa8a/0x1a80 [ 280.547888][ T9615] ? find_held_lock+0x2b/0x80 [ 280.547903][ T9615] ? hook_file_ioctl_common+0x145/0x410 [ 280.547918][ T9615] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 280.547936][ T9615] ? __fget_files+0x20e/0x3c0 [ 280.547952][ T9615] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 280.547969][ T9615] __x64_sys_ioctl+0x18e/0x210 [ 280.547989][ T9615] do_syscall_64+0xcd/0xfa0 [ 280.548006][ T9615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.548020][ T9615] RIP: 0033:0x7efc95f8efc9 [ 280.548032][ T9615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.548045][ T9615] RSP: 002b:00007efc96e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 280.548059][ T9615] RAX: ffffffffffffffda RBX: 00007efc961e5fa0 RCX: 00007efc95f8efc9 [ 280.548068][ T9615] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 280.548076][ T9615] RBP: 00007efc96011f91 R08: 0000000000000000 R09: 0000000000000000 [ 280.548085][ T9615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.548092][ T9615] R13: 00007efc961e6038 R14: 00007efc961e5fa0 R15: 00007ffcb5be0ce8 [ 280.548112][ T9615] [ 282.586338][ T9650] openvswitch: HfR: Dropping previously announced user features [ 283.731673][ T9660] kexec: Could not allocate control_code_buffer [ 284.685132][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 285.082229][ T9709] openvswitch: HfR: Dropping previously announced user features [ 285.357772][ T9713] openvswitch: HfR: Dropping previously announced user features [ 286.063212][ T9726] FAULT_INJECTION: forcing a failure. [ 286.063212][ T9726] name failslab, interval 1, probability 0, space 0, times 0 [ 286.189403][ T9726] CPU: 0 UID: 0 PID: 9726 Comm: syz.0.735 Not tainted syzkaller #0 PREEMPT(full) [ 286.189428][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.189437][ T9726] Call Trace: [ 286.189442][ T9726] [ 286.189448][ T9726] dump_stack_lvl+0x16c/0x1f0 [ 286.189469][ T9726] should_fail_ex+0x512/0x640 [ 286.189491][ T9726] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 286.189509][ T9726] should_failslab+0xc2/0x120 [ 286.189528][ T9726] kmem_cache_alloc_noprof+0x75/0x6e0 [ 286.189542][ T9726] ? sk_prot_alloc+0x60/0x2a0 [ 286.189562][ T9726] ? sk_prot_alloc+0x60/0x2a0 [ 286.189576][ T9726] sk_prot_alloc+0x60/0x2a0 [ 286.189593][ T9726] sk_alloc+0x36/0xc20 [ 286.189614][ T9726] smc_create+0x114/0x2a0 [ 286.189629][ T9726] __sock_create+0x338/0x8d0 [ 286.189649][ T9726] __sys_socket+0x14d/0x260 [ 286.189666][ T9726] ? __fget_files+0x20e/0x3c0 [ 286.189680][ T9726] ? __pfx___sys_socket+0x10/0x10 [ 286.189698][ T9726] ? xfd_validate_state+0x61/0x180 [ 286.189722][ T9726] __x64_sys_socket+0x72/0xb0 [ 286.189738][ T9726] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.189753][ T9726] do_syscall_64+0xcd/0xfa0 [ 286.189770][ T9726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.189784][ T9726] RIP: 0033:0x7f3c0198efc9 [ 286.189796][ T9726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.189809][ T9726] RSP: 002b:00007f3c02755038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 286.189823][ T9726] RAX: ffffffffffffffda RBX: 00007f3c01be6090 RCX: 00007f3c0198efc9 [ 286.189832][ T9726] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 286.189841][ T9726] RBP: 00007f3c01a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 286.189849][ T9726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.189856][ T9726] R13: 00007f3c01be6128 R14: 00007f3c01be6090 R15: 00007fffff419b98 [ 286.189875][ T9726] [ 286.387298][ C0] vkms_vblank_simulate: vblank timer overrun [ 287.406723][ T9845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.742'. [ 287.855551][ T9858] HfR: entered promiscuous mode [ 288.574235][ T9875] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 289.638268][ T9903] FAULT_INJECTION: forcing a failure. [ 289.638268][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 289.709024][ T9903] CPU: 0 UID: 0 PID: 9903 Comm: syz.2.754 Not tainted syzkaller #0 PREEMPT(full) [ 289.709046][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.709055][ T9903] Call Trace: [ 289.709061][ T9903] [ 289.709067][ T9903] dump_stack_lvl+0x16c/0x1f0 [ 289.709088][ T9903] should_fail_ex+0x512/0x640 [ 289.709109][ T9903] ? fs_reclaim_acquire+0xae/0x150 [ 289.709130][ T9903] should_failslab+0xc2/0x120 [ 289.709149][ T9903] kmem_cache_alloc_noprof+0x75/0x6e0 [ 289.709162][ T9903] ? __pfx_map_id_range_down+0x10/0x10 [ 289.709184][ T9903] ? security_inode_alloc+0x3b/0x2b0 [ 289.709207][ T9903] ? security_inode_alloc+0x3b/0x2b0 [ 289.709226][ T9903] security_inode_alloc+0x3b/0x2b0 [ 289.709247][ T9903] inode_init_always_gfp+0xce4/0x1030 [ 289.709265][ T9903] alloc_inode+0x86/0x240 [ 289.709283][ T9903] new_inode+0x22/0x1c0 [ 289.709299][ T9903] ? trace_cap_capable+0x18d/0x200 [ 289.709320][ T9903] shmem_get_inode+0x19a/0xfb0 [ 289.709340][ T9903] ? __vm_enough_memory+0x184/0x3f0 [ 289.709359][ T9903] __shmem_file_setup+0x279/0x330 [ 289.709381][ T9903] shmem_zero_setup+0x93/0x1a0 [ 289.709397][ T9903] __mmap_region+0x2076/0x27a0 [ 289.709413][ T9903] ? __pfx___mmap_region+0x10/0x10 [ 289.709425][ T9903] ? finish_task_switch.isra.0+0x21c/0xc10 [ 289.709441][ T9903] ? rcu_is_watching+0x12/0xc0 [ 289.709455][ T9903] ? finish_task_switch.isra.0+0x221/0xc10 [ 289.709468][ T9903] ? lockdep_hardirqs_on+0x7c/0x110 [ 289.709483][ T9903] ? finish_task_switch.isra.0+0x221/0xc10 [ 289.709514][ T9903] ? __pfx___schedule+0x10/0x10 [ 289.709549][ T9903] ? trace_cap_capable+0x18d/0x200 [ 289.709574][ T9903] mmap_region+0x1ab/0x3f0 [ 289.709587][ T9903] ? __get_unmapped_area+0x267/0x440 [ 289.709607][ T9903] do_mmap+0xa3e/0x1210 [ 289.709627][ T9903] ? __pfx_do_mmap+0x10/0x10 [ 289.709644][ T9903] ? __pfx_down_write_killable+0x10/0x10 [ 289.709666][ T9903] vm_mmap_pgoff+0x29e/0x470 [ 289.709687][ T9903] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 289.709708][ T9903] ? __x64_sys_futex+0x1e0/0x4c0 [ 289.709725][ T9903] ? __x64_sys_futex+0x1e9/0x4c0 [ 289.709750][ T9903] ksys_mmap_pgoff+0x7d/0x5c0 [ 289.709768][ T9903] ? syscall_user_dispatch+0x78/0x140 [ 289.709800][ T9903] __x64_sys_mmap+0x125/0x190 [ 289.709824][ T9903] do_syscall_64+0xcd/0xfa0 [ 289.709841][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.709855][ T9903] RIP: 0033:0x7efc95f8efc9 [ 289.709868][ T9903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.709881][ T9903] RSP: 002b:00007efc96e77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 289.709896][ T9903] RAX: ffffffffffffffda RBX: 00007efc961e5fa0 RCX: 00007efc95f8efc9 [ 289.709906][ T9903] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 289.709914][ T9903] RBP: 00007efc96011f91 R08: 00040000000000a5 R09: 0000000000008000 [ 289.709923][ T9903] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 289.709932][ T9903] R13: 00007efc961e6038 R14: 00007efc961e5fa0 R15: 00007ffcb5be0ce8 [ 289.709951][ T9903] [ 290.016004][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.604451][ T9913] FAULT_INJECTION: forcing a failure. [ 291.604451][ T9913] name failslab, interval 1, probability 0, space 0, times 0 [ 291.684781][ T9913] CPU: 0 UID: 0 PID: 9913 Comm: syz.0.756 Not tainted syzkaller #0 PREEMPT(full) [ 291.684803][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.684811][ T9913] Call Trace: [ 291.684817][ T9913] [ 291.684823][ T9913] dump_stack_lvl+0x16c/0x1f0 [ 291.684845][ T9913] should_fail_ex+0x512/0x640 [ 291.684866][ T9913] ? __kmalloc_noprof+0xca/0x880 [ 291.684897][ T9913] should_failslab+0xc2/0x120 [ 291.684917][ T9913] __kmalloc_noprof+0xdd/0x880 [ 291.684939][ T9913] ? __register_sysctl_table+0xb3/0x1900 [ 291.684962][ T9913] ? __register_sysctl_table+0xb3/0x1900 [ 291.684981][ T9913] __register_sysctl_table+0xb3/0x1900 [ 291.685001][ T9913] ? is_module_address+0x5f/0xf0 [ 291.685023][ T9913] ? __pfx___register_sysctl_table+0x10/0x10 [ 291.685042][ T9913] ? is_module_address+0x69/0xf0 [ 291.685060][ T9913] ? register_net_sysctl_sz+0x228/0x3e0 [ 291.685080][ T9913] ? __asan_memcpy+0x3c/0x60 [ 291.685096][ T9913] nf_conntrack_pernet_init+0x83e/0xb40 [ 291.685117][ T9913] ? __pfx_nf_conntrack_pernet_init+0x10/0x10 [ 291.685135][ T9913] ops_init+0x1e2/0x5f0 [ 291.685151][ T9913] setup_net+0x100/0x390 [ 291.685165][ T9913] ? __pfx_setup_net+0x10/0x10 [ 291.685180][ T9913] ? debug_mutex_init+0x37/0x70 [ 291.685196][ T9913] copy_net_ns+0x2f8/0x690 [ 291.685214][ T9913] create_new_namespaces+0x3ea/0xa90 [ 291.685234][ T9913] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 291.685252][ T9913] ksys_unshare+0x45b/0xa40 [ 291.685270][ T9913] ? __pfx_ksys_unshare+0x10/0x10 [ 291.685288][ T9913] ? xfd_validate_state+0x61/0x180 [ 291.685312][ T9913] __x64_sys_unshare+0x31/0x40 [ 291.685330][ T9913] do_syscall_64+0xcd/0xfa0 [ 291.685347][ T9913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.685362][ T9913] RIP: 0033:0x7f3c0198efc9 [ 291.685373][ T9913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.685387][ T9913] RSP: 002b:00007f3bffbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 291.685402][ T9913] RAX: ffffffffffffffda RBX: 00007f3c01be6180 RCX: 00007f3c0198efc9 [ 291.685412][ T9913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 291.685420][ T9913] RBP: 00007f3c01a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 291.685428][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.685436][ T9913] R13: 00007f3c01be6218 R14: 00007f3c01be6180 R15: 00007fffff419b98 [ 291.685455][ T9913] [ 291.926938][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.934513][ T9915] openvswitch: HfR: Dropping previously announced user features [ 292.605831][ T9930] zero sized request [ 292.737454][ T9928] could not allocate digest TFM handle [ 292.867063][ T9941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.761'. [ 293.901469][ T9960] snd_aloop snd_aloop.0: control 7:257:7::0 is already present [ 294.190719][ T9969] FAULT_INJECTION: forcing a failure. [ 294.190719][ T9969] name failslab, interval 1, probability 0, space 0, times 0 [ 294.258497][ T9969] CPU: 0 UID: 0 PID: 9969 Comm: syz.0.767 Not tainted syzkaller #0 PREEMPT(full) [ 294.258519][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.258528][ T9969] Call Trace: [ 294.258533][ T9969] [ 294.258539][ T9969] dump_stack_lvl+0x16c/0x1f0 [ 294.258559][ T9969] should_fail_ex+0x512/0x640 [ 294.258581][ T9969] ? __kmalloc_noprof+0xca/0x880 [ 294.258605][ T9969] should_failslab+0xc2/0x120 [ 294.258623][ T9969] __kmalloc_noprof+0xdd/0x880 [ 294.258642][ T9969] ? __init_waitqueue_head+0xca/0x150 [ 294.258663][ T9969] ? __netlink_kernel_create+0x17f/0x750 [ 294.258681][ T9969] ? __netlink_kernel_create+0x17f/0x750 [ 294.258695][ T9969] __netlink_kernel_create+0x17f/0x750 [ 294.258710][ T9969] ? __pfx___netlink_kernel_create+0x10/0x10 [ 294.258724][ T9969] ? find_held_lock+0x2b/0x80 [ 294.258738][ T9969] ? audit_net_init+0x190/0x440 [ 294.258760][ T9969] audit_net_init+0x1ae/0x440 [ 294.258777][ T9969] ? __pfx_audit_net_init+0x10/0x10 [ 294.258795][ T9969] ? rcu_is_watching+0x12/0xc0 [ 294.258808][ T9969] ? __pfx_audit_receive+0x10/0x10 [ 294.258827][ T9969] ? __pfx_audit_multicast_bind+0x10/0x10 [ 294.258846][ T9969] ? __pfx_audit_multicast_unbind+0x10/0x10 [ 294.258866][ T9969] ? __pfx_genl_unbind+0x10/0x10 [ 294.258881][ T9969] ? ops_init+0x77/0x5f0 [ 294.258897][ T9969] ? __pfx_audit_net_init+0x10/0x10 [ 294.258914][ T9969] ops_init+0x1e2/0x5f0 [ 294.258930][ T9969] setup_net+0x100/0x390 [ 294.258944][ T9969] ? __pfx_setup_net+0x10/0x10 [ 294.258958][ T9969] ? debug_mutex_init+0x37/0x70 [ 294.258974][ T9969] copy_net_ns+0x2f8/0x690 [ 294.258992][ T9969] create_new_namespaces+0x3ea/0xa90 [ 294.259012][ T9969] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 294.259030][ T9969] ksys_unshare+0x45b/0xa40 [ 294.259048][ T9969] ? __pfx_ksys_unshare+0x10/0x10 [ 294.259066][ T9969] ? xfd_validate_state+0x61/0x180 [ 294.259091][ T9969] __x64_sys_unshare+0x31/0x40 [ 294.259108][ T9969] do_syscall_64+0xcd/0xfa0 [ 294.259125][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.259139][ T9969] RIP: 0033:0x7f3c0198efc9 [ 294.259151][ T9969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.259164][ T9969] RSP: 002b:00007f3c02776038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 294.259178][ T9969] RAX: ffffffffffffffda RBX: 00007f3c01be5fa0 RCX: 00007f3c0198efc9 [ 294.259187][ T9969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 294.259196][ T9969] RBP: 00007f3c01a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 294.259204][ T9969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.259212][ T9969] R13: 00007f3c01be6038 R14: 00007f3c01be5fa0 R15: 00007fffff419b98 [ 294.259231][ T9969] [ 294.259294][ T9969] audit: cannot initialize netlink socket in namespace [ 295.701023][ T9970] kexec: Could not allocate control_code_buffer [ 295.723893][ T9991] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input17 [ 295.953052][ T9999] db_root: cannot open: ^a [ 296.286190][ T9991] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 296.383156][ T9994] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 296.803687][T10025] snd_aloop snd_aloop.0: control 7:257:7::0 is already present [ 297.073868][T10029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.169613][T10028] FAULT_INJECTION: forcing a failure. [ 297.169613][T10028] name failslab, interval 1, probability 0, space 0, times 0 [ 297.245643][T10028] CPU: 0 UID: 0 PID: 10028 Comm: syz.2.778 Not tainted syzkaller #0 PREEMPT(full) [ 297.245665][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.245674][T10028] Call Trace: [ 297.245679][T10028] [ 297.245685][T10028] dump_stack_lvl+0x16c/0x1f0 [ 297.245706][T10028] should_fail_ex+0x512/0x640 [ 297.245732][T10028] should_failslab+0xc2/0x120 [ 297.245751][T10028] kmem_cache_alloc_node_noprof+0x78/0x770 [ 297.245767][T10028] ? zswap_store+0x850/0x2830 [ 297.245792][T10028] ? zswap_store+0x850/0x2830 [ 297.245814][T10028] zswap_store+0x850/0x2830 [ 297.245845][T10028] ? __pfx_zswap_store+0x10/0x10 [ 297.245868][T10028] ? folio_free_swap+0x141/0x4b0 [ 297.245887][T10028] ? do_raw_spin_unlock+0x172/0x230 [ 297.245910][T10028] ? _raw_spin_unlock+0x28/0x50 [ 297.245924][T10028] ? folio_free_swap+0x19d/0x4b0 [ 297.245941][T10028] ? __pfx_try_to_unmap+0x10/0x10 [ 297.245969][T10028] swap_writeout+0x3f4/0x1090 [ 297.246002][T10028] shrink_folio_list+0x3e50/0x4800 [ 297.246032][T10028] ? __pfx_shrink_folio_list+0x10/0x10 [ 297.246052][T10028] ? css_rstat_updated+0x1c2/0x510 [ 297.246069][T10028] ? trace_cgroup_rstat_lock_contended.constprop.0+0x210/0x220 [ 297.246116][T10028] ? trace_sched_set_need_resched_tp+0xf3/0x150 [ 297.246133][T10028] ? __pfx___resched_curr+0x10/0x10 [ 297.246148][T10028] reclaim_folio_list+0xda/0x5d0 [ 297.246168][T10028] ? __pfx_css_rstat_updated+0x10/0x10 [ 297.246186][T10028] ? __pfx_reclaim_folio_list+0x10/0x10 [ 297.246216][T10028] ? lru_gen_update_size+0x543/0xe10 [ 297.246242][T10028] ? lru_gen_del_folio+0x32b/0x540 [ 297.246264][T10028] reclaim_pages+0x3ec/0x570 [ 297.246279][T10028] ? __pfx_reclaim_pages+0x10/0x10 [ 297.246292][T10028] ? madvise_cold_or_pageout_pte_range+0x1e2f/0x20d0 [ 297.246318][T10028] madvise_cold_or_pageout_pte_range+0x14d1/0x20d0 [ 297.246346][T10028] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 297.246367][T10028] ? __page_table_check_zero+0x33c/0x5d0 [ 297.246387][T10028] ? lock_acquire+0x179/0x350 [ 297.246405][T10028] ? css_rstat_updated+0x1c2/0x510 [ 297.246421][T10028] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 297.246443][T10028] walk_pgd_range+0xc05/0x1f50 [ 297.246472][T10028] ? __pfx_walk_pgd_range+0x10/0x10 [ 297.246492][T10028] __walk_page_range+0x163/0x820 [ 297.246511][T10028] ? __lock_acquire+0xb8a/0x1c90 [ 297.246534][T10028] walk_page_range_vma+0x2c7/0xa20 [ 297.246553][T10028] ? __pfx_walk_page_range_vma+0x10/0x10 [ 297.246569][T10028] ? find_held_lock+0x2b/0x80 [ 297.246590][T10028] madvise_pageout+0x257/0x540 [ 297.246610][T10028] ? __pfx_madvise_pageout+0x10/0x10 [ 297.246639][T10028] ? mtree_range_walk+0x718/0xc00 [ 297.246658][T10028] madvise_vma_behavior+0xb14/0x2d50 [ 297.246683][T10028] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 297.246706][T10028] ? __pfx_mt_find+0x10/0x10 [ 297.246728][T10028] ? find_vma_prev+0xd3/0x150 [ 297.246751][T10028] ? find_vma+0xbf/0x140 [ 297.246766][T10028] ? __pfx_find_vma+0x10/0x10 [ 297.246783][T10028] ? __futex_wait+0x24b/0x2f0 [ 297.246808][T10028] madvise_walk_vmas+0x31f/0x9c0 [ 297.246831][T10028] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 297.246857][T10028] madvise_do_behavior+0x1e2/0x530 [ 297.246876][T10028] ? futex_private_hash_put+0x18a/0x300 [ 297.246895][T10028] ? __pfx_madvise_do_behavior+0x10/0x10 [ 297.246916][T10028] ? down_read+0x13d/0x480 [ 297.246943][T10028] do_madvise+0x176/0x240 [ 297.246962][T10028] ? __pfx_do_madvise+0x10/0x10 [ 297.246985][T10028] ? do_futex+0x122/0x350 [ 297.247017][T10028] ? xfd_validate_state+0x61/0x180 [ 297.247037][T10028] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 297.247058][T10028] __x64_sys_madvise+0xa9/0x110 [ 297.247078][T10028] ? lockdep_hardirqs_on+0x7c/0x110 [ 297.247094][T10028] do_syscall_64+0xcd/0xfa0 [ 297.247111][T10028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.247126][T10028] RIP: 0033:0x7efc95f8efc9 [ 297.247139][T10028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.247153][T10028] RSP: 002b:00007efc96e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 297.247167][T10028] RAX: ffffffffffffffda RBX: 00007efc961e5fa0 RCX: 00007efc95f8efc9 [ 297.247177][T10028] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 297.247185][T10028] RBP: 00007efc96011f91 R08: 0000000000000000 R09: 0000000000000000 [ 297.247194][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.247202][T10028] R13: 00007efc961e6038 R14: 00007efc961e5fa0 R15: 00007ffcb5be0ce8 [ 297.247222][T10028] [ 298.414065][T10053] FAULT_INJECTION: forcing a failure. [ 298.414065][T10053] name failslab, interval 1, probability 0, space 0, times 0 [ 298.471647][T10053] CPU: 0 UID: 0 PID: 10053 Comm: syz.1.784 Not tainted syzkaller #0 PREEMPT(full) [ 298.471670][T10053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 298.471678][T10053] Call Trace: [ 298.471683][T10053] [ 298.471689][T10053] dump_stack_lvl+0x16c/0x1f0 [ 298.471711][T10053] should_fail_ex+0x512/0x640 [ 298.471733][T10053] ? __kmalloc_noprof+0xca/0x880 [ 298.471757][T10053] should_failslab+0xc2/0x120 [ 298.471776][T10053] __kmalloc_noprof+0xdd/0x880 [ 298.471799][T10053] ? __netlink_kernel_create+0x17f/0x750 [ 298.471817][T10053] ? __netlink_kernel_create+0x17f/0x750 [ 298.471835][T10053] __netlink_kernel_create+0x17f/0x750 [ 298.471849][T10053] ? __lock_acquire+0x622/0x1c90 [ 298.471869][T10053] ? __pfx___netlink_kernel_create+0x10/0x10 [ 298.471890][T10053] rtnetlink_net_init+0xb9/0x140 [ 298.471912][T10053] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 298.471931][T10053] ? lockdep_init_map_type+0x5c/0x280 [ 298.471950][T10053] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 298.471968][T10053] ? __pfx_rtnetlink_bind+0x10/0x10 [ 298.471987][T10053] ? lockdep_init_map_type+0x5c/0x280 [ 298.472006][T10053] ? debug_mutex_init+0x37/0x70 [ 298.472022][T10053] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 298.472041][T10053] ops_init+0x1e2/0x5f0 [ 298.472057][T10053] setup_net+0x100/0x390 [ 298.472072][T10053] ? __pfx_setup_net+0x10/0x10 [ 298.472087][T10053] ? debug_mutex_init+0x37/0x70 [ 298.472103][T10053] copy_net_ns+0x2f8/0x690 [ 298.472121][T10053] create_new_namespaces+0x3ea/0xa90 [ 298.472141][T10053] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 298.472158][T10053] ksys_unshare+0x45b/0xa40 [ 298.472177][T10053] ? __pfx_ksys_unshare+0x10/0x10 [ 298.472195][T10053] ? xfd_validate_state+0x61/0x180 [ 298.472219][T10053] __x64_sys_unshare+0x31/0x40 [ 298.472237][T10053] do_syscall_64+0xcd/0xfa0 [ 298.472254][T10053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.472268][T10053] RIP: 0033:0x7f9ffd38efc9 [ 298.472280][T10053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.472293][T10053] RSP: 002b:00007f9ffe26e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 298.472308][T10053] RAX: ffffffffffffffda RBX: 00007f9ffd5e5fa0 RCX: 00007f9ffd38efc9 [ 298.472317][T10053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 298.472325][T10053] RBP: 00007f9ffd411f91 R08: 0000000000000000 R09: 0000000000000000 [ 298.472334][T10053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.472342][T10053] R13: 00007f9ffd5e6038 R14: 00007f9ffd5e5fa0 R15: 00007ffd21a4d478 [ 298.472362][T10053] [ 298.939612][T10035] kexec: Could not allocate control_code_buffer [ 299.449116][T10062] openvswitch: HfR: Dropping previously announced user features [ 300.325765][T10066] openvswitch: HfR: Dropping previously announced user features [ 300.337162][T10067] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 300.584230][T10070] snd_aloop snd_aloop.0: control 7:257:7::0 is already present [ 300.612255][T10073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.789'. [ 300.795876][T10067] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 300.867163][T10071] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 301.436569][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.796'. [ 301.516530][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.794'. [ 301.604986][T10094] team0: Port device team_slave_1 removed [ 301.648410][T10096] ovs_: entered promiscuous mode [ 301.664065][T10097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.898080][T10097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.640498][T10104] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 302.666987][T10104] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 302.677950][T10104] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.697053][T10104] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 302.869874][T10122] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 303.349950][T10129] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 303.515004][T10122] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 304.476174][ T9391] Bluetooth: hci0: command 0x0c1a tx timeout [ 304.716282][ T9391] Bluetooth: hci3: command 0x0c1a tx timeout [ 304.722319][ T9391] Bluetooth: hci2: command 0x0c1a tx timeout [ 304.728713][ T9391] Bluetooth: hci1: command 0x0c1a tx timeout [ 304.997183][T10176] FAULT_INJECTION: forcing a failure. [ 304.997183][T10176] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.088087][T10176] CPU: 0 UID: 0 PID: 10176 Comm: syz.0.817 Not tainted syzkaller #0 PREEMPT(full) [ 305.088110][T10176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 305.088119][T10176] Call Trace: [ 305.088124][T10176] [ 305.088130][T10176] dump_stack_lvl+0x16c/0x1f0 [ 305.088153][T10176] should_fail_ex+0x512/0x640 [ 305.088185][T10176] should_fail_alloc_page+0xe7/0x130 [ 305.088207][T10176] prepare_alloc_pages+0x3c2/0x610 [ 305.088229][T10176] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 305.088253][T10176] ? find_held_lock+0x2b/0x80 [ 305.088267][T10176] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 305.088284][T10176] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 305.088300][T10176] ? is_bpf_text_address+0x94/0x1a0 [ 305.088322][T10176] ? unwind_get_return_address+0x59/0xa0 [ 305.088337][T10176] ? arch_stack_walk+0xa6/0x100 [ 305.088352][T10176] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.088375][T10176] ? policy_nodemask+0xea/0x4e0 [ 305.088395][T10176] alloc_pages_mpol+0x1fb/0x550 [ 305.088413][T10176] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 305.088436][T10176] alloc_pages_noprof+0x131/0x390 [ 305.088455][T10176] __pud_alloc+0x3b/0x6b0 [ 305.088474][T10176] __handle_mm_fault+0x1394/0x2aa0 [ 305.088497][T10176] ? mt_find+0x3e2/0xa20 [ 305.088514][T10176] ? __pfx___handle_mm_fault+0x10/0x10 [ 305.088551][T10176] handle_mm_fault+0x589/0xd10 [ 305.088575][T10176] __get_user_pages+0x54e/0x3530 [ 305.088597][T10176] ? __pfx_validate_mm+0x10/0x10 [ 305.088620][T10176] ? __pfx___get_user_pages+0x10/0x10 [ 305.088644][T10176] get_user_pages_remote+0x243/0xab0 [ 305.088665][T10176] ? __pfx_get_user_pages_remote+0x10/0x10 [ 305.088682][T10176] ? __pfx_vma_link+0x10/0x10 [ 305.088702][T10176] get_arg_page+0xf4/0x310 [ 305.088716][T10176] ? __pfx_get_arg_page+0x10/0x10 [ 305.088728][T10176] ? up_write+0x1b2/0x520 [ 305.088752][T10176] copy_string_kernel+0x182/0x520 [ 305.088769][T10176] do_execveat_common.isra.0+0x2ed/0x610 [ 305.088787][T10176] __x64_sys_execve+0x8e/0xb0 [ 305.088802][T10176] do_syscall_64+0xcd/0xfa0 [ 305.088819][T10176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.088834][T10176] RIP: 0033:0x7f3c0198efc9 [ 305.088852][T10176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.088866][T10176] RSP: 002b:00007f3c02776038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 305.088881][T10176] RAX: ffffffffffffffda RBX: 00007f3c01be5fa0 RCX: 00007f3c0198efc9 [ 305.088890][T10176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 305.088899][T10176] RBP: 00007f3c01a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 305.088907][T10176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.088916][T10176] R13: 00007f3c01be6038 R14: 00007f3c01be5fa0 R15: 00007fffff419b98 [ 305.088936][T10176] [ 307.117810][T10181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.818'. [ 307.271664][T10181] team0: Port device team_slave_1 removed [ 308.126834][T10194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.822'. [ 310.645257][T10245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.830'. [ 311.615651][T10273] bridge0: port 3(gretap0) entered blocking state [ 311.673816][T10273] bridge0: port 3(gretap0) entered disabled state [ 311.735798][T10273] gretap0: entered allmulticast mode [ 311.803215][T10273] gretap0: entered promiscuous mode [ 311.853937][T10273] bridge0: port 3(gretap0) entered blocking state [ 311.860709][T10273] bridge0: port 3(gretap0) entered forwarding state [ 311.994497][T10278] delete_channel: no stack [ 312.118758][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.837'. [ 312.191498][T10284] sd 0:0:1:0: device reset [ 312.762454][T10306] ima: Unable to open file: / (-2) [ 313.135545][T10311] vivid-003: ================= START STATUS ================= [ 313.135575][T10311] vivid-003: Radio HW Seek Mode: Bounded [ 313.135597][T10311] vivid-003: Radio Programmable HW Seek: false [ 313.135614][T10311] vivid-003: RDS Rx I/O Mode: Block I/O [ 313.135629][T10311] vivid-003: Generate RBDS Instead of RDS: false [ 313.135644][T10311] vivid-003: RDS Reception: true [ 313.135659][T10311] vivid-003: RDS Program Type: 0 inactive [ 313.135679][T10311] vivid-003: RDS PS Name: inactive [ 313.135697][T10311] vivid-003: RDS Radio Text: inactive [ 313.135714][T10311] vivid-003: RDS Traffic Announcement: false inactive [ 313.135732][T10311] vivid-003: RDS Traffic Program: false inactive [ 313.135749][T10311] vivid-003: RDS Music: false inactive [ 313.135767][T10311] vivid-003: ================== END STATUS ================== [ 313.151046][T10298] ima: policy update failed [ 313.153743][ T30] audit: type=1802 audit(1762108835.397:11): pid=10298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.840" res=0 errno=0 [ 313.558402][T10313] zswap: compressor not available [ 316.628097][T10361] bond0: option primary_reselect: invalid value () [ 317.204711][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.211131][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.170531][T10386] zswap: compressor not available [ 319.869579][T10419] netlink: 334 bytes leftover after parsing attributes in process `syz.0.866'. [ 320.956956][T10441] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 321.008260][T10169] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 321.008284][T10169] Bluetooth: hci0: unexpected subevent 0x0c length: 727 > 5 [ 321.023398][T10169] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 321.023418][T10169] Bluetooth: hci0: unexpected subevent 0x0c length: 727 > 5 [ 321.056189][T10446] FAULT_INJECTION: forcing a failure. [ 321.056189][T10446] name failslab, interval 1, probability 0, space 0, times 0 [ 321.123535][T10446] CPU: 0 UID: 0 PID: 10446 Comm: syz.3.868 Not tainted syzkaller #0 PREEMPT(full) [ 321.123556][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.123566][T10446] Call Trace: [ 321.123570][T10446] [ 321.123576][T10446] dump_stack_lvl+0x16c/0x1f0 [ 321.123597][T10446] should_fail_ex+0x512/0x640 [ 321.123618][T10446] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 321.123635][T10446] should_failslab+0xc2/0x120 [ 321.123654][T10446] kmem_cache_alloc_noprof+0x75/0x6e0 [ 321.123668][T10446] ? __kernfs_new_node+0xd2/0x8e0 [ 321.123689][T10446] ? __kernfs_new_node+0xd2/0x8e0 [ 321.123710][T10446] __kernfs_new_node+0xd2/0x8e0 [ 321.123728][T10446] ? kernfs_add_one+0x14e/0x840 [ 321.123747][T10446] ? __pfx___kernfs_new_node+0x10/0x10 [ 321.123769][T10446] ? find_held_lock+0x2b/0x80 [ 321.123785][T10446] ? kernfs_root+0xee/0x2a0 [ 321.123806][T10446] kernfs_new_node+0x13c/0x1e0 [ 321.123829][T10446] kernfs_create_link+0xcc/0x240 [ 321.123845][T10446] sysfs_do_create_link_sd+0x90/0x140 [ 321.123864][T10446] sysfs_create_link+0x61/0xc0 [ 321.123881][T10446] device_add+0x50a/0x1aa0 [ 321.123903][T10446] ? alloc_workqueue_noprof+0x198/0x200 [ 321.123922][T10446] ? __pfx_device_add+0x10/0x10 [ 321.123950][T10446] nfc_register_device+0x41/0x3c0 [ 321.123968][T10446] nci_register_device+0x7f1/0xb80 [ 321.123991][T10446] ? __pfx_nci_register_device+0x10/0x10 [ 321.124014][T10446] ? lockdep_init_map_type+0x5c/0x280 [ 321.124037][T10446] virtual_ncidev_open+0x141/0x220 [ 321.124053][T10446] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 321.124068][T10446] misc_open+0x26d/0x450 [ 321.124090][T10446] ? __pfx_misc_open+0x10/0x10 [ 321.124109][T10446] chrdev_open+0x234/0x6a0 [ 321.124125][T10446] ? __pfx_apparmor_file_open+0x10/0x10 [ 321.124146][T10446] ? __pfx_chrdev_open+0x10/0x10 [ 321.124164][T10446] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 321.124183][T10446] do_dentry_open+0x982/0x1530 [ 321.124199][T10446] ? __pfx_chrdev_open+0x10/0x10 [ 321.124219][T10446] vfs_open+0x82/0x3f0 [ 321.124241][T10446] path_openat+0x1de4/0x2cb0 [ 321.124263][T10446] ? __pfx_path_openat+0x10/0x10 [ 321.124279][T10446] ? __lock_acquire+0xb8a/0x1c90 [ 321.124299][T10446] do_filp_open+0x20b/0x470 [ 321.124314][T10446] ? __pfx_do_filp_open+0x10/0x10 [ 321.124343][T10446] ? alloc_fd+0x471/0x7d0 [ 321.124363][T10446] do_sys_openat2+0x11b/0x1d0 [ 321.124382][T10446] ? __pfx_do_sys_openat2+0x10/0x10 [ 321.124409][T10446] __x64_sys_openat+0x174/0x210 [ 321.124429][T10446] ? __pfx___x64_sys_openat+0x10/0x10 [ 321.124457][T10446] do_syscall_64+0xcd/0xfa0 [ 321.124474][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.124488][T10446] RIP: 0033:0x7f37f5b8efc9 [ 321.124500][T10446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.124513][T10446] RSP: 002b:00007f37f69a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 321.124528][T10446] RAX: ffffffffffffffda RBX: 00007f37f5de5fa0 RCX: 00007f37f5b8efc9 [ 321.124537][T10446] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 321.124546][T10446] RBP: 00007f37f5c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 321.124554][T10446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.124562][T10446] R13: 00007f37f5de6038 R14: 00007f37f5de5fa0 R15: 00007fffa338d108 [ 321.124582][T10446] [ 322.191391][T10459] openvswitch: HfR: Dropping previously announced user features [ 322.203646][T10440] kexec: Could not allocate control_code_buffer [ 323.421606][T10472] kexec: Could not allocate control_code_buffer [ 323.818478][T10486] zswap: compressor not available [ 324.711997][ T781] ================================================================== [ 324.712009][ T781] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1a6f/0x1e60 [ 324.712032][ T781] Write of size 8 at addr ffffc90003e99280 by task kworker/0:2/781 [ 324.712045][ T781] [ 324.712052][ T781] CPU: 0 UID: 0 PID: 781 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 324.712089][ T781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 324.712102][ T781] Workqueue: events_power_efficient fb_flashcursor [ 324.712126][ T781] Call Trace: [ 324.712131][ T781] [ 324.712137][ T781] dump_stack_lvl+0x116/0x1f0 [ 324.712154][ T781] print_report+0xcd/0x630 [ 324.712172][ T781] ? __virt_addr_valid+0x81/0x610 [ 324.712192][ T781] ? sys_imageblit+0x1a6f/0x1e60 [ 324.712206][ T781] kasan_report+0xe0/0x110 [ 324.712223][ T781] ? sys_imageblit+0x1a6f/0x1e60 [ 324.712243][ T781] sys_imageblit+0x1a6f/0x1e60 [ 324.712260][ T781] ? __pfx_sys_imageblit+0x10/0x10 [ 324.712282][ T781] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 324.712299][ T781] soft_cursor+0x524/0xa10 [ 324.712322][ T781] bit_cursor+0xe8c/0x17e0 [ 324.712344][ T781] ? __pfx_bit_cursor+0x10/0x10 [ 324.712367][ T781] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 324.712390][ T781] ? get_color+0x1da/0x450 [ 324.712407][ T781] ? __pfx_bit_cursor+0x10/0x10 [ 324.712427][ T781] fb_flashcursor+0x310/0x400 [ 324.712445][ T781] process_one_work+0x9cf/0x1b70 [ 324.712469][ T781] ? __pfx_free_obj_work+0x10/0x10 [ 324.712486][ T781] ? __pfx_process_one_work+0x10/0x10 [ 324.712508][ T781] ? assign_work+0x1a0/0x250 [ 324.712528][ T781] worker_thread+0x6c8/0xf10 [ 324.712550][ T781] ? __kthread_parkme+0x19e/0x250 [ 324.712567][ T781] ? __pfx_worker_thread+0x10/0x10 [ 324.712588][ T781] kthread+0x3c5/0x780 [ 324.712606][ T781] ? __pfx_kthread+0x10/0x10 [ 324.712626][ T781] ? rcu_is_watching+0x12/0xc0 [ 324.712640][ T781] ? __pfx_kthread+0x10/0x10 [ 324.712659][ T781] ret_from_fork+0x675/0x7d0 [ 324.712678][ T781] ? __pfx_kthread+0x10/0x10 [ 324.712697][ T781] ret_from_fork_asm+0x1a/0x30 [ 324.712721][ T781] [ 324.712726][ T781] [ 324.712729][ T781] The buggy address belongs to a vmalloc virtual mapping [ 324.712740][ T781] Memory state around the buggy address: [ 324.712752][ T781] ffffc90003e99180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 324.712762][ T781] ffffc90003e99200: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 324.712771][ T781] >ffffc90003e99280: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 324.712778][ T781] ^ [ 324.712785][ T781] ffffc90003e99300: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 324.712794][ T781] ffffc90003e99380: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 324.712801][ T781] ================================================================== [ 324.712809][ T781] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 324.712818][ T781] CPU: 0 UID: 0 PID: 781 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) [ 324.712834][ T781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 324.712843][ T781] Workqueue: events_power_efficient fb_flashcursor [ 324.712861][ T781] Call Trace: [ 324.712866][ T781] [ 324.712871][ T781] dump_stack_lvl+0x3d/0x1f0 [ 324.712885][ T781] vpanic+0x640/0x6f0 [ 324.712905][ T781] panic+0xca/0xd0 [ 324.712923][ T781] ? __pfx_panic+0x10/0x10 [ 324.712944][ T781] ? check_panic_on_warn+0x1f/0xb0 [ 324.712964][ T781] check_panic_on_warn+0xab/0xb0 [ 324.712984][ T781] end_report+0x107/0x170 [ 324.713001][ T781] kasan_report+0xee/0x110 [ 324.713018][ T781] ? sys_imageblit+0x1a6f/0x1e60 [ 324.713035][ T781] sys_imageblit+0x1a6f/0x1e60 [ 324.713053][ T781] ? __pfx_sys_imageblit+0x10/0x10 [ 324.713075][ T781] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 324.713090][ T781] soft_cursor+0x524/0xa10 [ 324.713117][ T781] bit_cursor+0xe8c/0x17e0 [ 324.713140][ T781] ? __pfx_bit_cursor+0x10/0x10 [ 324.713163][ T781] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 324.713184][ T781] ? get_color+0x1da/0x450 [ 324.713202][ T781] ? __pfx_bit_cursor+0x10/0x10 [ 324.713222][ T781] fb_flashcursor+0x310/0x400 [ 324.713240][ T781] process_one_work+0x9cf/0x1b70 [ 324.713263][ T781] ? __pfx_free_obj_work+0x10/0x10 [ 324.713278][ T781] ? __pfx_process_one_work+0x10/0x10 [ 324.713301][ T781] ? assign_work+0x1a0/0x250 [ 324.713321][ T781] worker_thread+0x6c8/0xf10 [ 324.713343][ T781] ? __kthread_parkme+0x19e/0x250 [ 324.713360][ T781] ? __pfx_worker_thread+0x10/0x10 [ 324.713381][ T781] kthread+0x3c5/0x780 [ 324.713400][ T781] ? __pfx_kthread+0x10/0x10 [ 324.713419][ T781] ? rcu_is_watching+0x12/0xc0 [ 324.713433][ T781] ? __pfx_kthread+0x10/0x10 [ 324.713452][ T781] ret_from_fork+0x675/0x7d0 [ 324.713471][ T781] ? __pfx_kthread+0x10/0x10 [ 324.713490][ T781] ret_from_fork_asm+0x1a/0x30 [ 324.713512][ T781] [ 324.713573][ T781] Kernel Offset: disabled