last executing test programs: 11m12.418969554s ago: executing program 2 (id=2202): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/wbt_lat_usec\x00', 0x2101, 0x0) write$auto(r0, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) 11m12.22767633s ago: executing program 2 (id=2205): socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x38, 0x0, 0x20056b) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/wbt_lat_usec\x00', 0x2101, 0x0) ioctl$auto(0xc8, 0x400454cb, 0x0) write$auto(r0, &(0x7f0000000240)='802.15.4 MAC\x00', 0x3) 11m11.660801471s ago: executing program 2 (id=2208): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x0, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x3, 0x5, 0x4, @inferred, @enumerated={0x3, 0x800, "c832bcbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50f1aaa18fb20cabb4f176263bb0e781e3d0a2f992e8fcdcec86d9", 0x400, 0xc278}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) (fail_nth: 1) 11m11.162864168s ago: executing program 2 (id=2210): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) (fail_nth: 1) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x0, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x3, 0x5, 0x4, @inferred, @enumerated={0x3, 0x800, "c832bcbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50f1aaa18fb20cabb4f176263bb0e781e3d0a2f992e8fcdcec86d9", 0x400, 0xc278}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) 11m10.90614944s ago: executing program 2 (id=2211): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x0, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x3, 0x5, 0x4, @inferred, @enumerated={0x3, 0x800, "c832bcbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50f1aaa18fb20cabb4f176263bb0e781e3d0a2f992e8fcdcec86d9", 0x400, 0xc278}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) 11m10.758221982s ago: executing program 2 (id=2212): mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0x2a8380, 0x0) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/fcloop/ctl/del_local_port\x00', 0x80001, 0x0) open(0x0, 0x14d27e, 0x72) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x80000000000000d4, 0x1, 0x6, 0x0, 0x5, 0x4, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0xb, 0x0, 0x9, 0x81, 0xfffffffffbff628e, 0x800000a747, 0xdead, 0x804}) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x28000, 0x0) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454d9, 0x38) mmap$auto(0x0, 0x5, 0xff7, 0x16, 0x4, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) fcntl$auto(0x2, 0x40c, 0x7f) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10m54.963767837s ago: executing program 32 (id=2212): mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0x2a8380, 0x0) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/fcloop/ctl/del_local_port\x00', 0x80001, 0x0) open(0x0, 0x14d27e, 0x72) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x80000000000000d4, 0x1, 0x6, 0x0, 0x5, 0x4, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0xb, 0x0, 0x9, 0x81, 0xfffffffffbff628e, 0x800000a747, 0xdead, 0x804}) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x28000, 0x0) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454d9, 0x38) mmap$auto(0x0, 0x5, 0xff7, 0x16, 0x4, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) fcntl$auto(0x2, 0x40c, 0x7f) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4m53.350791649s ago: executing program 0 (id=3306): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) mmap$auto(0x0, 0x20400008, 0x8, 0x9b72, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0x40603d10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) mmap$auto(0x1, 0x40008, 0xdf, 0x12, 0x7, 0x28000) close_range$auto(r1, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r2, 0x0) epoll_ctl$auto(0x5, 0x3, r2, 0x0) socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) r3 = getsockopt$auto(0x100000006, 0x6, 0x1, 0xfffffffffffffffe, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x3a) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto_NS_GET_PARENT(r3, 0xb702, 0x0) adjtimex$auto(&(0x7f0000000000)={0xfffffff0, 0x0, 0x7, 0x9c, 0xe1d, 0x7, 0x3, 0x0, 0xfffffffffffffffb, 0x1, 0x80000000004, {0x0, 0x2}, 0x8000000252, 0x5, 0x3, 0x1, 0x0, 0x4, 0x9, 0xc576, 0x1, 0x80000000000003fc, 0x7ff}) readv$auto(0x3, &(0x7f0000000040)={&(0x7f0000000000), 0x36a}, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd700000dcdf2502000000080002005e457aa7"], 0x1c}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) 4m53.202807503s ago: executing program 0 (id=3307): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/driver/nvram\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, &(0x7f0000002cc0)=""/148, 0x94) 4m53.166262747s ago: executing program 0 (id=3308): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/driver/nvram\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, &(0x7f0000002cc0)=""/148, 0x94) (fail_nth: 1) 4m53.099094929s ago: executing program 4 (id=3309): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01ff000000000000001f0d000000"], 0x14}, 0x1, 0xffffffa6}, 0x8000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub3/xrun_injection\x00', 0x8a180, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0xd1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x80106f53, r2) 4m52.570732674s ago: executing program 0 (id=3311): r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) ioctl$auto_PPPIOCSMAXCID(r0, 0x40047451, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) 4m52.483958144s ago: executing program 4 (id=3312): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x4}, 0x1da) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYBLOB="000326bd69dbd97f59f712780000"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x400c080) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) connect$auto(0x3, 0x0, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x8, 0x9, 0x2000000000ffb, 0x8000000008011, r3, 0xfffffffffffffffd) syz_clone3(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto(0x4, 0x0, 0xfdef) clone3$auto(&(0x7f0000002c40)={0x6, 0x8, 0x100000001, 0xffff, 0x8, 0xffff, 0x4, 0x4, 0x7f, 0x0, 0x40000000000000}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/mdc800/bind\x00', 0x14b142, 0x0) 4m52.351208499s ago: executing program 0 (id=3314): socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88418, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r2, 0x0, 0x2, 0x6, &(0x7f0000000240)={0x2000000000000003, 0x101}) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="99e7daa24511691d42a963", 0x1000}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(0x0, 0x6041, 0x0) socket(0x6, 0x2, 0x6) semctl$auto_SETVAL(0x0, 0xfffffff5, 0x10, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) mincore$auto(0x1000, 0x8001, 0x0) read$auto(r3, 0x0, 0x20) 4m51.075284285s ago: executing program 4 (id=3316): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x6, 0x2040007, 0x40, 0x15, r0, 0x200000000002) (async, rerun: 64) r1 = userfaultfd$auto(0xffffffff) (async, rerun: 64) ioctl$auto(0xffffffffffffffff, 0xa3, 0xf0b) (async) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) (async) socket(0x23, 0xa, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x7ffd) (async, rerun: 64) read$auto(0xffffffffffffffff, 0x0, 0x20) (async, rerun: 64) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400009487, 0x4000000000000003, 0x35f4da08, 0x3, 0x7, 0x63, 0x7, 0xe, 0x800, 0x7, 0x1, 0xb]}, 0x0) (async, rerun: 32) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x28800, 0x0) (async) socket(0x2d, 0x2, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x40200, 0x0) (async) pread64$auto(r1, &(0x7f00000001c0)=')\x0e', 0xffffffffffffffff, 0x9) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x28c81, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1025, 0x0, 0x9) (async) close_range$auto(0x2, 0xa, 0x0) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (async, rerun: 32) close_range$auto(r0, r3, 0x81) (rerun: 32) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) (async, rerun: 64) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) (rerun: 64) sendfile$auto(r5, r4, 0x0, 0x1000202) (async) removexattr$auto(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)='/dev/mtdblock0\x00') 4m50.918963668s ago: executing program 4 (id=3317): socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r2, 0x0, 0x2, 0x6, &(0x7f0000000240)={0x2000000000000003, 0x101}) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000180)="78655a861232319992c94f12dc1c495fc9945b4a8ede96ec11f33f29c707f364dc94672cd923b993d525c1233038350b3969bb54389da3d19b89ef96ae2e06b8bb4f222bc807", 0xb1}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000008000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0xe8) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x1438bf, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x14) connect$auto(0xffffffffffffffff, 0x0, 0x54) ioctl$auto(0x3, 0x80000541b, 0x38) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4m50.414012919s ago: executing program 0 (id=3319): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2, 0xa, 0xe57a) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) mmap$auto(0xfffffffffffffffd, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) 4m48.871625588s ago: executing program 4 (id=3321): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x9eb, 0x0, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x8e051, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x100000005) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x5410, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/statistics/tx_packets\x00', 0x82200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/192, 0xc0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r4 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/setgroups\x00', 0x8102, 0x0) write$auto_proc_setgroups_operations_base(r4, &(0x7f00000000c0)="15e53a6fdd580f23", 0x8) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) read$auto(0x3, 0x0, 0x80) sendfile$auto(r5, r5, 0x0, 0x5) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/pcmC1D1c\x00', 0x80001, 0x0) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r6, 0x80083314, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m47.747962873s ago: executing program 4 (id=3324): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2, 0xa, 0xe57a) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) mmap$auto(0xfffffffffffffffd, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) 4m35.13013682s ago: executing program 33 (id=3319): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2, 0xa, 0xe57a) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) mmap$auto(0xfffffffffffffffd, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) 4m32.615597149s ago: executing program 34 (id=3324): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2, 0xa, 0xe57a) ioctl$auto(0x3, 0x9, 0xfffffffffffff4e0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) mmap$auto(0xfffffffffffffffd, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) get_mempolicy$auto(0x0, &(0x7f00000000c0), 0xffffffff80000001, 0x7ff, 0x3) 3m40.980270886s ago: executing program 5 (id=3504): io_cancel$auto(0x4, &(0x7f0000000040)={0x3ff, 0x2, 0x10, 0x4, 0x5, 0xffffffffffffffff, 0x2, 0xe0000000, 0x8, 0x0, 0x8de}, &(0x7f0000000080)={0x2, 0x200000000000000b, 0x7, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="010025bd7000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x50b880, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/driver/nvram\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r3, &(0x7f0000002cc0)=""/148, 0x94) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r5 = gettid() ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{@inferred=r4, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r5}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) madvise$auto(0x0, 0x20499d, 0x9) 3m38.707143816s ago: executing program 5 (id=3509): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/mountinfo\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) getpriority$auto_PRIO_USER(0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) sendmmsg$auto(r0, 0x0, 0x5, 0x20000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r0) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, 0x0, 0x40) mmap$auto(0x1, 0x400009, 0x70, 0x9b73, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) socket(0x2, 0x3, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 3m37.606604537s ago: executing program 5 (id=3512): io_cancel$auto(0x4, &(0x7f0000000040)={0x3ff, 0x2, 0x10, 0x4, 0x5, 0xffffffffffffffff, 0x2, 0xe0000000, 0x8, 0x0, 0x8de}, &(0x7f0000000080)={0x2, 0x200000000000000b, 0x7, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="010025bd7000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x50b880, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/driver/nvram\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r3, &(0x7f0000002cc0)=""/148, 0x94) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{@inferred=r4, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4"}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) madvise$auto(0x0, 0x20499d, 0x9) 3m36.704170373s ago: executing program 5 (id=3515): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8", 0x3c) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), r2) sendmsg$auto_IPVS_CMD_SET_DEST(r2, &(0x7f00000014c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1258, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x120, 0x1, 0x0, 0x1, [@nested={0x11c, 0x84, 0x0, 0x1, [@typed={0xd2, 0x47, 0x0, 0x0, @binary="69f2f357f18b614dc7845d7df8fece204c887c90d1d7243ec3d32b9923f530666dfe304e5396b586f11ceb1d31faecabfce411bac6c4e71ca47820f9eb0402a20c0d525cd0e0fcfd3de8434f486027e598a31af57406800d51dd298e9286a73a6b5a32f6de31a180162f748853dcf5f06f1e3cbf987f0a5b42675b72e601e06125795678b7fef957d8f8c6895c2661199a4658f56190179c6e91072d02ef81daac44e31dd39c7108b87af3ccba597d00a94605e249e4a34ac48011c157679d89eafcd2312e4465a55ef57f027e41"}, @nested={0x4, 0x71}, @generic="f7e0e9e4d725757f5107ca2fbe74442c4718ab98230423d3411563c066efbe64d72197e3a9655f99a0b53d06ce53e90e7b239fc37f3e39acd951c4a5", @nested={0x4, 0xab}]}]}, @IPVS_CMD_ATTR_SERVICE={0x111c, 0x1, 0x0, 0x1, [@nested={0x77, 0x13f, 0x0, 0x1, [@generic="b289e80a00c8cb7f448603fe6bf3bbc9777ee44dd08ded5cb627db8e9fb18c80f07abab9d1ffb972f96d4141ebd13f77d1d9b10f014f7e87db9027d10d64ccc1720922cfc04d2f5cc2fcf455b24cda9888c2492d134282e168b0e73000c6210dd5eb3b688e9b54f8a5e80cb29b5e28", @nested={0x4, 0x40}]}, @typed={0xc, 0x49, 0x0, 0x0, @u64=0x8}, @nested={0x1093, 0xb7, 0x0, 0x1, [@typed={0x8, 0xac, 0x0, 0x0, @fd=r2}, @generic="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", @typed={0x4, 0x39}, @typed={0x8, 0xf8, 0x0, 0x0, @pid}, @generic="35654cf3c0049f39212ef1cb19065c71096ef7e3252caf1a0dfb336313540a7532eb0a114a74a1eebf601528596a7a6d08332032b813490c9a85745d0496ae550a832ad74e32d9524af359dd02f572733c7b1139a2fd6a6a5be9c6ffa585722c60da38c9ec21977b14dfcc6a6016829c0a87eeaa815e328096d118"]}]}]}, 0x1258}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) bpf$auto(0x5, 0x0, 0x102) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x10, 0x0, 0xffffffffffffffff, 0x2, 0x96) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r5, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 3m34.836844874s ago: executing program 5 (id=3520): mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket(0x23, 0x80805, 0x0) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) futex$auto(&(0x7f0000000080)=0x1, 0x6, 0x1, 0x0, 0x0, 0x1) futex$auto(&(0x7f0000000080)=0x4, 0x1, 0xffffcfe4, 0x0, 0x0, 0x440a48d3) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cec26\x00', 0x1a9602, 0x0) ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xc02, 0x0) ioctl$auto(r4, 0xc0205648, r4) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x1) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r5 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8953, 0x0) lremovexattr$auto(&(0x7f00000002c0)='\x00', &(0x7f0000000040)='nfsd\x00') getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x8, 0x10, &(0x7f0000000180)='nfsd\x00', &(0x7f00000001c0)=0xfe) fchown$auto(r4, 0x0, 0x5) 3m33.751648676s ago: executing program 5 (id=3525): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x9eb, 0x0, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x8e051, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x100000005) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x5410, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000, 0xc, 0xf, 0x40000000088fd6, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x3, 0x0, 0x4, 0x7, 0x100000000001, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/statistics/tx_packets\x00', 0x82200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/192, 0xc0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r4 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/setgroups\x00', 0x8102, 0x0) write$auto_proc_setgroups_operations_base(r4, &(0x7f00000000c0)="15e53a6fdd580f23", 0x8) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) read$auto(0x3, 0x0, 0x80) sendfile$auto(r5, r5, 0x0, 0x5) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/pcmC1D1c\x00', 0x80001, 0x0) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r6, 0x80083314, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m18.399295551s ago: executing program 35 (id=3525): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x9eb, 0x0, 0x7) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x8e051, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x100000005) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x5410, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000, 0xc, 0xf, 0x40000000088fd6, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x3, 0x0, 0x4, 0x7, 0x100000000001, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/statistics/tx_packets\x00', 0x82200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/192, 0xc0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r4 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/setgroups\x00', 0x8102, 0x0) write$auto_proc_setgroups_operations_base(r4, &(0x7f00000000c0)="15e53a6fdd580f23", 0x8) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) read$auto(0x3, 0x0, 0x80) sendfile$auto(r5, r5, 0x0, 0x5) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/pcmC1D1c\x00', 0x80001, 0x0) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r6, 0x80083314, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13.599634087s ago: executing program 1 (id=4045): unshare$auto(0x40000080) unshare$auto(0x17d0) semctl$auto_SETVAL(0x328, 0xd77, 0x10, 0x9) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x4004ae99, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1144ccafdd80500ffffffffdfff1a0e00"/56, 0x38) r4 = prctl$auto(0x3e, 0x0, 0x0, 0x2, 0x0) eventfd$auto(0x2200000c) socket(0x2, 0x3, 0x6) ioctl$auto_SG_GET_ACCESS_COUNT(r4, 0x2289, &(0x7f00000002c0)="9e450daa73a4feb3f0e8bca4f7a3468561d26a8fee043cb8530c73eab96ee666bdc24df3651b1256d81fee4fb6293a22b58465850fd53feac35a9ab3cd86c238f6cdc49ae3ace90b2093d4caac451a15c9a68651feef3192430cb3f9b7f9df546b0c495b50ddd389423eca80f11c2e8933930d31cee7de08ecfcad6475777a7eeba160c82dc1e690656c7fda9268d18e2712a8c3406f2da67531f914999360fd3e790b8b4baebccdd9525ff5679991d431e1e051650e6590746d0ca0f9869747c7eddef674e1fc67feacff4ad36813015d4ad6e10e211d9df7e6602940191210aaa7f000f6a1dc0c301d2cee9ef7d21b10ce7211e6") setsockopt$auto(0x4, 0x0, 0x16, 0xfffffffffffffffe, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000008000) io_uring_setup$auto(0x1406, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r5, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) 13.522670114s ago: executing program 3 (id=4047): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) fadvise64$auto_POSIX_FADV_RANDOM(r0, 0xfffffffffffffff7, 0xfffffffa, 0x1) 13.087572612s ago: executing program 3 (id=4049): mmap$auto(0x0, 0xa00006, 0x400005, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x3, 0xff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x1b, 0x3, 0x76) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\x00F\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccv\xd8\x96d\x06\xd9\x92\xaca4R\x8c\xc7$\xd1\xe5}\x0f,\xde\xa5m\x18\x19&\xe9#\xa4\x94\xa1HR,\xe8tO\xb9\xbc\xe1\x94\xa1\x90\\ifwN\xdeSF\xaf#\xe7b\xad\xf4\xcc\xad\xf7\xf1_\xf5*\x02&\x12\xef\x89\x86\x83\xaf\x04e\a\n.\xcfJ\xd7\x143A\xba(\xa4:\x04\xbe8\xd7\xcc\x7f\xe6[\x15\xe2\xf7.\nci\x88\xcb\xae\x1c?Y\xbf\x8a\x92\x06\xfbs\xd7\xbc\x10\xc1', 0x100000a3d5) select$auto(0x10006, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x58, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x11c, 0x1, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, 0x0, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1f000001", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 10.189694188s ago: executing program 3 (id=4054): socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r1 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r1, 0x0, 0x2, 0x6, &(0x7f0000000240)={0x2000000000000003, 0x101}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x1438bf, 0x0) 10.179144389s ago: executing program 1 (id=4055): io_cancel$auto(0x4, 0x0, &(0x7f0000000080)={0x2, 0x200000000000000b, 0x7, 0x2}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="010025bd7000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8010) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x50b880, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/driver/nvram\x00', 0x20000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r3, &(0x7f0000002cc0)=""/148, 0x94) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, 0x0, 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) socket(0xa, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) waitid$auto_P_ALL(0x0, 0x468e, &(0x7f00000001c0)={@siginfo_0_0={0x7, 0x4, 0x309, @_rt={0x0, 0x0, @sival_ptr=&(0x7f00000000c0)}}}, 0x3, &(0x7f0000000340)={{0x8, 0x5}, {0x7, 0xffe}, 0x7, 0x1af, 0xfffffffffffffffa, 0x2, 0xfffffffffffff5a2, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x4e6033bf, 0x6, 0x101, 0x8}) r5 = gettid() r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) pread64$auto(r6, 0x0, 0x8, 0x7fff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000440)={{@inferred=r4, 0x80, 0x3, 0x1, "977d648a0881449f3ce8ba5b483e904dfacb519a28d0b90b462bf9ad3e3c7e488826dc0852829cf353806ac4", @inferred=r5}, 0x0, 0x7, 0x4, @raw=0x9, @integer={0x5, 0xfffffffffffffff4, 0x4}, "b957b0168b84987d4211529b4bf24c25c2a1e7c1cbcff5c254d7954a4ffb435e9426e9c83a87cd49439334e9a0bf167595e50bfb2200e43a76fd8e68ce7be399"}) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x20499d, 0x9) 7.328278891s ago: executing program 1 (id=4059): unshare$auto(0x40000080) unshare$auto(0x17d0) semctl$auto_SETVAL(0x328, 0xd77, 0x10, 0x9) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0x4004ae99, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1144ccafdd80500ffffffffdfff1a0e00"/56, 0x38) r3 = prctl$auto(0x3e, 0x0, 0x0, 0x2, 0x0) eventfd$auto(0x2200000c) socket(0x2, 0x3, 0x6) ioctl$auto_SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f00000002c0)="9e450daa73a4feb3f0e8bca4f7a3468561d26a8fee043cb8530c73eab96ee666bdc24df3651b1256d81fee4fb6293a22b58465850fd53feac35a9ab3cd86c238f6cdc49ae3ace90b2093d4caac451a15c9a68651feef3192430cb3f9b7f9df546b0c495b50ddd389423eca80f11c2e8933930d31cee7de08ecfcad6475777a7eeba160c82dc1e690656c7fda9268d18e2712a8c3406f2da67531f914999360fd3e790b8b4baebccdd9525ff5679991d431e1e051650e6590746d0ca0f9869747c7eddef674e1fc67feacff4ad36813015d4ad6e10e211d9df7e6602940191210aaa7f000f6a1dc0c301d2cee9ef7d21b10ce7211e6") setsockopt$auto(0x4, 0x0, 0x16, 0xfffffffffffffffe, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000008000) io_uring_setup$auto(0x1406, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r4, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) 5.982567155s ago: executing program 3 (id=4062): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x401}, 0x6, 0x0) (async) ioctl$auto(0xffffffffffffffff, 0x40246f4c, 0x38) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) (async) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) (async) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) (async) openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy7/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats_csv\x00', 0x200800, 0x0) (async) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x9a28) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) read$auto_proc_fail_nth_operations_base(r3, &(0x7f0000000040)=""/221, 0xdd) r4 = socket(0xa, 0x2, 0x3a) (async) mq_open$auto(0x0, 0x0, 0x7d, &(0x7f0000000040)={0xfffffffffffffffd, 0x6, 0xffffffffffffffc0, 0x800000000000006}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) bind$auto(r4, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x66) (async) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 5.7569896s ago: executing program 1 (id=4065): socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r2, 0x0, 0x2, 0x6, &(0x7f0000000240)={0x2000000000000003, 0x101}) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000180)="78655a861232319992c94f12dc1c495fc9945b4a8ede96ec11f33f29c707f364dc94672cd923b993d525c1233038350b3969bb54389da3d19b89ef96ae2e06b8bb4f222bc807", 0xb1}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000008000) read$auto(0xffffffffffffffff, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x1438bf, 0x0) 5.590903168s ago: executing program 3 (id=4067): socket(0x1a, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, 0x0, 0x381000, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r2, 0x0, 0x2, 0x6, &(0x7f0000000240)={0x2000000000000003, 0x101}) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000180)="78655a861232319992c94f12dc1c495fc9945b4a8ede96ec11f33f29c707f364dc94672cd923b993d525c1233038350b3969bb54389da3d19b89ef96ae2e06b8bb4f222bc807", 0xb1}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000008000) read$auto(0xffffffffffffffff, 0x0, 0xe8) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x1438bf, 0x0) 5.275798067s ago: executing program 7 (id=4068): prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x0, 0x65) io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x5) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8000, 0x0, 0x0, &(0x7f0000000240)={[0x80000000000008, 0x3, 0x5, 0x8fd6, 0x948b, 0x3, 0x100000001, 0x4000000000005, 0x6, 0x2, 0x8, 0xfffffffffffffffc, 0x1, 0xffffffef, 0x100, 0x18]}, 0x0) write$auto(r0, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffgP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98|\x010y\xcf \xa4\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccq\xfff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = clone$auto(0x292, 0x7ff, &(0x7f00000001c0)=0xff, &(0x7f0000000200)=0x9, 0x9) prctl$auto(0x8, 0x1, r2, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x40, 0x102003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/rose7/flags\x00', 0x2262, 0x0) write$auto(r3, &(0x7f0000000140)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) write$auto(r3, &(0x7f0000000640)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V98\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\x80\x04z\xd0I>\x8f\x00\xd7\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x97nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb6\x9f4[!\x0f3u\xaf\x97\x97\x9d\x1dp\xf3\xab\xdfE[5\x86\xa2\xb92\xc0\x15L\xda\xe3\x04\\M\x85}\xdfh\xd2\xd93e\xf61^\x04\x0f\x85\xc7_\xd0\x8d9\xbd\xc6\xf3R\xea\x10\xb9\xa2\x94]\xf2\r\t\xff$\xeb\xfd1\x8d\x97\x80\x81\x95]\xb2H\xf4\x1c\x8c\xcf\x8eM\x0eB\xb0\x83\xa3\bF\xc7\xae\x1a\xa7r\x9c\xfe\xa5\xa0~\xe4o+\x9d\xb0\xa6\xe8\a\x9a}\x88\x0eKd\xe07\xf0\x88\xf2\xb7\xe3\xe3\b\xac\x1e\xa2a0\x83\x0f\x06\x9eD\xd0\xc6\xba\xa4\x13(l\xf6\xbc\x982\xa0@\xda\xe0\x96\xdc0X\x9c\n\xb3fs\xe1\xf51\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents64$auto(r0, 0x0, 0x18) 3.269230894s ago: executing program 1 (id=4071): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4b9b3f3068", 0x26) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r1, 0x4004af07, &(0x7f00000001c0)=r1) r4 = open_by_handle_at$auto(r3, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r4, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x200000c0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf257e000000000066004e21000000002680000002000400000000006300000000000000010009000000000001000400000000000200070000000000980006000000000014010f000000000007001f5198dea666bad033b7aea5d7529adf1ae5607ef3d022c60a57cd1649952c00000080004dec6ee46088e64587adba9ba7537f79f056fbd60490f11a3498560bfa783badf6fa39e3aa9815705e629beb9573271a53f5c4ee3859bf0313d7dad665a019c4e908768bb5b896533bbd3b39e4768150289646864a302e8ded90a5b83ada85575e6657023fb727d3723ff97af53540e2fbc15e85a0c6a5644432b997ba3bdc423b0be181bf0d501cf098551e7b2ce99ac721bf9145ebc91fe7c9230b30f9b88ac5b2c404ddfac531ea9fcaf6d514daf8c13a9f382059488c3280a13754303b49d3eddff53520086a38cbb1075e09f556c208c26f727717e52ad91b929b37df820ffca5a077087bc540d3c30fa84b5986b17605e72c7af63bd4264355ec1e043e6ae397fd5b925bc6ee277f7e42b305fbe861e8e9974efb062206bd7fef4b13f19f926c090b1367e4599ea549d1e97c1c2b214d06c5de3e7dc0bae99b9030f72ae011f303fa7ea798a612fd252f9e9c238f07ccc755d8c4aff22798a08e567e0b8f3975fc1b30522f1b82ed37fecc8927a2f8265cb2423f4272359a5b097f54bdb65f51f0911ca880641493cce6f3f00edfefe3d7f007bc5c57214dde959740b9e0a70b28d191e10eb5c3eccfdf045407c80e026f4e9fe766eca822b77df002210db69f60480ae2e21fced2bf22dde077e0ccbe2e05f58ba0db3d9f6469382574a23009202a928c2e7a67623eeeb3976036936871d6056bca11541ed5d795853e233149c9ea3e3d478b5e35cf5e551002a79ac8a33d81b60fde70ccbf125c4b4243160db218068b7a2db851b3dfad23f584b6db1b9ec1428635f27d4bb08cb9b0d4d9c725595fbd59622038dc6cb2f70282ae273c9927dfc884b8e99578c897e90ffeec2c4f3b1e4c5cadc23ff40dd06e618b0f798c0d4a87c7728de7b03a7a8021dcdbd1f4c8b29ea50d2130cf3099a8b37a4d894a5020bc583feaf86c00b8d917567b988f875af819935a325517e76850262d5558ff1fcf9f5b7b26a9645bb26d20104227757359a6e52317edbdd2fde26c3b3f26ee6e2714d9668cfafe1f1c83c24d7e3b55127b38315b1b9053d3ed9561c14e0cf3b173f89e739337a63e5d13fb97466b9b36556adb4af4e9b18d4778c369692333cb70c72d968aff999fe3f08690fdc345eceedb90782bc907b20d4a06867f2930ebb553494aeceabf2f33f1295753241986835af90226970a126a27d9c1f3a04f9b917fa57524fb70f161e619ab83cff4edceef04362c497dc4804af7e7837a4b4241521a2cb28a08fe7001ce941a8cf3f2a4266dbc5fd02c56a5a16fe2a0af334673588ea9b161c65b7ab9a67e4808f1e8c6cf55641a97082348e1e31ed07154364d1fb134e988d32277a2c5224985ab2e3b518c927af3338cfeab947dc38466b8e58f40402d97417a895d335dcd5ccf6ed33ba8a54c80ea0cfe0c66993e86f8b2699d860ff1b2d00db394a18a92e0ed026737e46d52978bae076c156be5e6530222fe8c93c8e4ecd29bfd1823b2730515eb3e99ecb867e0117fafafb495f34fe5c82c7af4e163ef7c543d5327b011b65e661db58838a0821f66c65a9b2d598fe497d778ced9bb1c48369c70a3ab32dd9626f0b575d47a0b7398fcaebce8048504cc3ebcc4498894bf079758aa008906c570f9a4ce0c5faefd8326dde933dccf7a2896a3b86ceb8add2b7f69943b006c8ca893916b156458c9dd28e1e21770e7ba6d7fb8ebdde22ff23346cd0f6d0c90a093fae2f128f759418402b13fae56d033f6adde7442b46db3aedb8665718b37055df3b0710f5e31ea2e04abbca71d7c8cc71325a1124d38c4245587ff29c5e0f1cbfdf7b865099a395dd9c2f7e29200bda2c2b20b17b7f33e1c277c57925b59aca80821a48085b7eab507385849a0e22c2ac4a526e7b786fd9442fd2df0eb05cb1df98795853536dc12b6fea234a4c32a57059049c0dedee032615da106c88fe54e73226cb88b4863c1f905dac6dffd4e5e53873f746e19ee631e8cab802ef174df5cb6e88e513aa10a0e1dd7d43075bc19b94491b9cb8fe1efac7d300e4c6253d42198c94f76fef50405405c348b9bfe0c4e09b6668655baaff6d464b20c5db5aa72b6e5345aa6af3c2b2e508ab94ed2f3ae27947c30f6c9435396cccca249745963693d456f0b13551ebd2714a5d2aa5eec9d61d2d6b9aba3d482f4c49906435b1d783f381a7180a5077358717dfc2e117d31e141382b11db23fb0c7d8ec13b0e2e542cfe4b44f2e9b0a440dcf9143f3be9494f3bc2004047e86405b4190fb667d269f2a7d1c48509fbdc3bb3e99d6f68a309ffff000006007347b9c70c7a48913b05957bbb9826fc681df1b98ace4a88eebe405b8400e41aa87a86c1aca27323448d0dfed2b28ecfa7d65c7264311080712e8fa3874f7ee38b02120b885602b84d954479702f51ac45a331dfe2ef76c45014c84415189885b9c9613c2acb7a41c6ace876ee5af4fc50407fc3361a128a2e59e60f11b47277c9a5f3cbe0424d3886a3a3a0f40c5ef46d2b331ca3d83f2f444bc6998d06926c6a1cb162ef14fb7ab2ee731fdc7f0fc553a3c07226a2160d350ed7f30000360103e17d2b53cce133a6674f5b8600a49a8403c6bdfd3e0c464ed8a2fe254a5939fb09cb1dc350c9230c189febda65557207893e11deb595e622008d945c914692afa24b99bf04b003881b9fc35a628e8a1f7dd36490920c7ce2dbffcf61124f39b5329db3d8f56f48af0b3b31b588771b14d045e0ea69404cf54596db22abd3d35b4f3d484faa4ac1eca1bbbe82ed861aee4715f465c010e98899929b521dea88b03c97f8d005000000987004d3b262d91b7e4b6d005ebb201517953c89225c186080b4836ccb358d624f4b134a11c7ec39e49d80d2c40312c250508a0e8c0969f1fe6830e50c3f2623b31882a5409300737b3fe096e8da90fa050194db696c605c6f82e18f9fc334aa232483df49ed13478a9bd48a"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_GET_MPP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x18, r6, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x18}}, 0x8002) read$auto(r5, 0x0, 0xb4d3) 3.071491307s ago: executing program 6 (id=4072): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r2, 0xc0045401, r2) getsockopt$auto(r1, 0x84, 0x9, 0x0, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(r3, 0x29, 0x30, 0x0, 0x20000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x0, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x3, 0x5, 0x4, @inferred, @enumerated={0x3, 0x800, "c832bcbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50f1aaa18fb20cabb4f176263bb0e781e3d0a2f992e8fcdcec86d9", 0x400, 0xc278}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) 2.474697109s ago: executing program 6 (id=4073): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x1003f, 0x806, 0x0) shutdown$auto(0x200000003, 0x2) 2.197939811s ago: executing program 7 (id=4074): mmap$auto(0x0, 0x20009, 0x4000000002df, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x1000000003b, 0x2, 0x0, 0x3, 0x2a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad62011d9ab5dc40c92828"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x3a) socket(0x2b, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_register$auto_IORING_REGISTER_ENABLE_RINGS(r0, 0xc, &(0x7f0000000080)="e2a24d403c48b274bba86b36c48148aeda1822f347c637d16fc9b4a7b5bd66b4e8adda5d0fba743106c8deecf997e060395f5eb68c692afed3087c2007d9417d9b440d75b415e8bb8a14a10e0e6a4866081580bd3b35447aa486cac9103d441c227979a339c1f5473576c41a20e7464fc2aee09cf5bb7dfa9f0b540c64c0ccd0f1a5d0623a63cf3102", 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x40400, 0x48) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getitimer$auto_ITIMER_PROF(0x2, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x8, 0x80000008000000a, 0x40000402, 0x9, 0x8, 0xffffffff80008000, 0x800000000000d, 0x6, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x6) 2.1073685s ago: executing program 6 (id=4075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000180), r0) sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x44, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, 0xffffffffffff125f}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xb}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x32a0}, @IEEE802154_ATTR_PHY_NAME={0x4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xe2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = timerfd_create$auto(0x9, 0x0) timerfd_gettime$auto(r3, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00', 0x0}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0x0, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2c483400200ff803636166b00"}, 0x1c) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x100}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r5}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4855}, 0x0) 1.946318329s ago: executing program 6 (id=4076): syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x9, 0x6, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32=r3, @ANYBLOB="060006ff05000000080003009b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="7de298368de3557f43bd7968e454efeb0990a63d7a8d4de0f03b274d47ebb76e95e8dbaf846c2369272d9f98fb1772d1465016fad299aee5be8d3f7e9371ec3ff7285eb45998c9fe43fdb625eb4ffb3670d8f23e93fda4ed37be49536b10daba8ade9ba7e1a7b2bc7d93c3cf0237334056ad45b74906282c286d2497807106ecaf9b200fbbd6afa3c7ef338868579e879725b6b3f178b0411169bc4c696208758bfd8589935860ec01061f8a2bf30c1e98cc14472de3433546efbc4b790e433a849501bdfbcccfa7a3b8b214b5a1388ff2e5f087ec12115ee2acb5bd699a56dc68f18e514a87d2a6", @ANYBLOB="130026bd7000fddbdf250200000008000300", @ANYRES32=r5, @ANYBLOB=' \x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) 1.669243104s ago: executing program 7 (id=4077): r0 = bpf$auto(0x2, &(0x7f0000000040)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4000751, 0x2, 0xffffffffffffffff, @relative_id=0x2, 0x3}, 0x92) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='d\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) mount$auto(&(0x7f0000001780)='veth0_to_batadv\x00', &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)='^&$%%\\\x00', 0x2, &(0x7f0000001f80)="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") sendmsg$auto_NETDEV_CMD_QUEUE_GET(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r4, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r5) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf250d0000000c00060001000000000000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = clone$auto(0x10000, 0xb, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x3, 0x8000000000000000) r8 = geteuid() msgctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000200)={{0x7ff, 0xffffffffffffffff, 0xee00, 0x1, 0x1ff, 0x7, 0x9}, &(0x7f0000000180)=0x40, &(0x7f00000001c0)=0x9, 0x1, 0x0, 0x400, 0x5, 0x5, 0x7, 0x400, 0x8, @raw=0x6, @raw=0x3}) fstat$auto(0xffffffffffffffff, &(0x7f0000000280)={0x8, 0xc, 0x5, 0x1ab8, r8, r9, 0x0, 0x5, 0x5, 0xff, 0x80, 0x5, 0x9, 0x6, 0x8, 0x7, 0x8000}) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000280)={"48309cfe4edd67fe778abdd3b6a59f3c6a292031977dc5dd7771e4ed966142d5", 0x3, 0x1, 0x80000, 0x1, 0x7ff, 0xffffffffffffffff}) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000001740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x13f8, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0x1034, 0x2d, 0x0, 0x1, [@nested={0x10, 0x87, 0x0, 0x1, [@typed={0x8, 0xe9, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x101}]}, @nested={0x1020, 0xf2, 0x0, 0x1, [@nested={0x4, 0x6d}, @typed={0x14, 0x9f, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="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", @typed={0x4, 0xd2}]}]}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x4c57}, @NL802154_ATTR_WPAN_PHY_CAPS={0x3a3, 0x18, 0x0, 0x1, [@generic="e66bcaaba3b18c4e2f6e070aba54c82f6f69c8c7705ced06ce8e9fb8635e8e4ab1013d3a088658c1b407d28257b94104210883e139ca301ae66c5133c5c3ca6de41399227869113388be620dea7d269b8e404143ea1a21773052f75fd767265152b837c9995fcf", @generic="cb5fb781cbc6506f4424fb9ae7a4cf276624747cc510dab04155d1a43225c0dcb79fe9e3c75b0dcdaf28b21d913d7fa310ead48e0fdb16ca2638f93f800121a89bbaabc2ecdddf380425ebfa9e526a00626a5f8fd5a40d13d87298eb875816af23ee5de83df046c2899995f11a03e21729764597e189b432775fdf1faae5a0feef28501f550dbdf46c3419e69ee18149c909daababd01947a1bcd68f6d3ed556aaed508d923bbdc595599131da1ffad7838d58ce339406e5bf8374f84d00227889381cc5cc6c3f0375c03757b8c25ea9348c09", @nested={0x44, 0x135, 0x0, 0x1, [@generic="f6c913fb94e79c61699d51958e84754acc2a16c0336d52f4ecd9de531595dda0c873ea1e35087359a9124bd014228a2c231cb8c0", @typed={0xc, 0x14, 0x0, 0x0, @u64=0x2}]}, @generic="4421c69cf90c6814c53f0d8864b6c90ada04719cf2465469a3bbfe5ecaa05b5e068f54e79cf15d3607290a1f8ab11743c7be71272ce9061e2a7d77f9f899830cdbe6e160553e172380884294c6c0976e01d94ff285035fdbd99fb4ba1b2fbd90be3afa37592a381bfad52879a754b21a37531c64f520825bf0062c2b1549d3051f91dd1933b83ad37e2e19e2f37185f9ae08b8c11544ec1873deb5798500b5f53832c3f29a2af5cd51b7d7361c70e8d043201ab8530c695852bca0acd2a6c981360048da85bfb92b6e637a53660d0c4edee4bdf27d54867fdef0a2d61abb5c36cb5ae4237d592cd17968e70ab194b299a3", @nested={0xd3, 0x2d, 0x0, 0x1, [@typed={0x2f, 0x82, 0x0, 0x0, @binary="fc172a9344103dd30277a985fe07f7e53b60ce4ec9a7a0e42c5135c394521dbb90f50eb7969439bb2d0ac9"}, @generic="ce", @typed={0x7, 0xd8, 0x0, 0x0, @str='\\{\x00'}, @typed={0x8, 0x44, 0x0, 0x0, @pid=r7}, @typed={0x8, 0x41, 0x0, 0x0, @uid=r8}, @generic="c18cf213d7b7520d5e7e3b42746fddaa30e3d442edb4c5fba4d0effa0be944c83d582fccf393e49e1c7f5d5f9341a623e9df296e3c2dcbc72cf9a6f375b57bb804ad76f73c1cbb4a02c9426415e306bd5dedd4c7bdf35f1474d03dc08c68a7be48034174f02de13221667a16a8a96ff37829560d9ab2", @typed={0x8, 0x121, 0x0, 0x0, @pid=r10}, @typed={0x6, 0x9c, 0x0, 0x0, @str='/\x00'}]}, @generic="99fe663e2425a2dbd4d8937d45971b8bfba91265056b9b6dafae795b15274f8c28e361952fa642bddc5fc9966eb601ef4a16c80611e96412ed1b9cd3ef7994a3e8aefdd19a20c9ec355cd693a11c2c78cbd07f542b362e5a3c2fba", @generic="cc"]}]}, 0x13f8}, 0x1, 0x0, 0x0, 0x4000084}, 0x58000) 1.435566449s ago: executing program 3 (id=4078): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0xfffffffd, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x1d30, 0x6, 0xffffffffffffffff, @relative_id=0x2, 0x7}, 0xa3) sendto$auto(r0, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_SOUND_MIXER_WRITE_RECSRC2(r1, 0xc0044dff, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) setsockopt$auto_SO_BSDCOMPAT(0xffffffffffffffff, 0x5, 0xe, &(0x7f0000000000)='+D^-$([:&\'\x00', 0x7fffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x73) sendto$auto(0x4, 0x0, 0x3f000000, 0x10000, &(0x7f0000000140)=@in={0x23, 0x4e33}, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x11, 0x80000, 0x7) 1.262996968s ago: executing program 7 (id=4079): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) clock_gettime$auto(0xfffffffffffffff0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x2, 0x7, 0xd, 0x2, 0x2, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x3fffffffffd, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001240}, 0xa, 0x7fffffffffffffff) lseek$auto(0x3, 0x8, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000140)='0[.[\x00', 0xcd04) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory0/state\x00', 0x1e1842, 0x0) sendfile$auto(r3, r3, 0x0, 0xe00000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000180), 0x0) r5 = socket(0xa, 0x1, 0x84) getsockopt$auto(r5, 0x84, 0x4, 0x0, 0x0) 847.638428ms ago: executing program 6 (id=4080): pidfd_open$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x8) io_uring_setup$auto(0x4, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r0, 0x0, 0x3e) ioctl$auto_SNAPSHOT_FREE(r0, 0x3305, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000400), 0xffffffffffffffff) ioctl$auto_TIOCSWINSZ2(0xffffffffffffffff, 0x5414, &(0x7f0000000080)="a2") close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bond_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\x00\x00', @ANYRES32=r3, @ANYBLOB="140002006970766c616e3000000000000000000008000100", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x48001}, 0x4048850) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/maps\x00', 0x2000, 0x0) 587.223456ms ago: executing program 1 (id=4081): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x52141, 0x0) socket(0x1b, 0x3, 0x76) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) madvise$auto(0x0, 0x2000040080000003, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x4, 0x8, 0xfff, 0x12, 0x2, 0x7ffd) socket(0x15, 0xa, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x20020, 0x0, 0x4) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) prctl$auto(0x3, 0xab, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x106) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x20) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cec30\x00', 0x1a9202, 0x0) ioctl$auto_CEC_DQEVENT(r2, 0xc0506107, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0xffffffff) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) symlink$auto(&(0x7f00000001c0)='\\\':.\x00', &(0x7f0000000180)='\\\':.\x00') socket(0x2, 0x801, 0x84) 0s ago: executing program 7 (id=4082): r0 = socket(0x2, 0x3, 0xa) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, r0, 0x999) socket$nl_generic(0x10, 0x3, 0x10) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) (async) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x540b, 0xfffffffffffffffd) (async) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f00000000c0)="7eb547a3c5d44595598a97dc6e207d60bd1dea57e9f8111c3c02c25aaf735b723e5528db1fc61307e4cfafb8a206708a1f0b986f3b617c6980c02f94ab3ce96326d627a147628bbc746bb7365f31e8639c746e42ba567825d79067a18e4256", 0x6}, 0x4000000000000000, 0x5, 0x10001) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r2, r3, 0x0, 0x1000200) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x5, 0xe983, 0x1, 0xebf, r1, 0x10000008) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x111800, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x800, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/nr12/power/runtime_suspended_time\x00', 0x313360, 0x0) read$auto(r6, 0x0, 0x20) (async) writev$auto(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffffb}, 0x9) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) (async) sendmsg$auto_NL80211_CMD_SET_PMKSA(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x10c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MPATH_NEXT_HOP={0xd2, 0x1a, "cad1c26a85dcf8f337fd87206ea19639b8abe29f4508ac72080d9b28c90d915df0520d4327378158160f3456649a764db1c09d496452d2b98b644ef675bac322acc3af89d17515a74ae544bab6b9ec83a2ee665679cc745151dd0ed75bcdde7fae50c91500e3b0d87fe166ccbb82a49681d3f03d6d34e2bc7e01ada2b8d73903d2bffe2843e1f24d4e0e008060e7668f3d41060399df1dc933498ad1539deb2a423f5a05e370e6fae3913afe06b1b0cc82010d97e190bd43d0e42a5aaa89ec40195ecc588cb857e629c963c98bd4"}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x8}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0xcb5}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x10c}}, 0x44000) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) (async) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af03, r4) kernel console output (not intermixed with test programs): 74][T27289] should_fail_ex+0x512/0x640 [ 1475.716907][T27289] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1475.716941][T27289] should_failslab+0xc2/0x120 [ 1475.716974][T27289] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1475.717004][T27289] ? security_file_alloc+0x34/0x2b0 [ 1475.717043][T27289] security_file_alloc+0x34/0x2b0 [ 1475.717077][T27289] init_file+0x93/0x4c0 [ 1475.717111][T27289] alloc_empty_file+0x73/0x1e0 [ 1475.717148][T27289] path_openat+0xda/0x2cb0 [ 1475.717175][T27289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.717214][T27289] ? __pfx_path_openat+0x10/0x10 [ 1475.717246][T27289] ? __lock_acquire+0xb97/0x1ce0 [ 1475.717282][T27289] do_filp_open+0x20b/0x470 [ 1475.717313][T27289] ? __pfx_do_filp_open+0x10/0x10 [ 1475.717367][T27289] ? _raw_spin_unlock+0x28/0x50 [ 1475.717395][T27289] ? alloc_fd+0x471/0x7d0 [ 1475.717432][T27289] do_sys_openat2+0x11b/0x1d0 [ 1475.717468][T27289] ? __pfx_do_sys_openat2+0x10/0x10 [ 1475.717518][T27289] __x64_sys_open+0x153/0x1e0 [ 1475.717554][T27289] ? __pfx___x64_sys_open+0x10/0x10 [ 1475.717597][T27289] ? rcu_is_watching+0x12/0xc0 [ 1475.717625][T27289] do_syscall_64+0xcd/0x490 [ 1475.717668][T27289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1475.717693][T27289] RIP: 0033:0x7fed4db8ebe9 [ 1475.717714][T27289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1475.717737][T27289] RSP: 002b:00007fed4e993038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1475.717761][T27289] RAX: ffffffffffffffda RBX: 00007fed4ddc6180 RCX: 00007fed4db8ebe9 [ 1475.717779][T27289] RDX: 0000000000000045 RSI: 000000000012ba7e RDI: 0000200000000000 [ 1475.717796][T27289] RBP: 00007fed4e993090 R08: 0000000000000000 R09: 0000000000000000 [ 1475.717812][T27289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1475.717826][T27289] R13: 00007fed4ddc6218 R14: 00007fed4ddc6180 R15: 00007ffcd9c9dca8 [ 1475.717860][T27289] [ 1476.300465][T27306] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3498'. [ 1476.734563][T27293] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3497'. [ 1482.810093][T27400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3513'. [ 1484.564444][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.570941][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.300989][T27476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3528'. [ 1492.044196][T27521] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3533'. [ 1494.049142][T27569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3540'. [ 1494.567893][T27573] bond0: option all_slaves_active: invalid value () [ 1494.913872][T27555] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3538'. [ 1495.737822][T27576] FAULT_INJECTION: forcing a failure. [ 1495.737822][T27576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1495.754888][T27576] CPU: 1 UID: 0 PID: 27576 Comm: syz.3.3542 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1495.754932][T27576] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1495.754943][T27576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1495.754957][T27576] Call Trace: [ 1495.754965][T27576] [ 1495.754975][T27576] dump_stack_lvl+0x16c/0x1f0 [ 1495.755012][T27576] should_fail_ex+0x512/0x640 [ 1495.755051][T27576] _copy_to_user+0x32/0xd0 [ 1495.755078][T27576] tomoyo_flush+0x161/0x520 [ 1495.755120][T27576] tomoyo_set_string+0xaf/0xe0 [ 1495.755157][T27576] tomoyo_read_domain+0x3d0/0x9e0 [ 1495.755205][T27576] tomoyo_read_control+0x29c/0x540 [ 1495.755234][T27576] ? __pfx_tomoyo_read+0x10/0x10 [ 1495.755270][T27576] vfs_read+0x1e4/0xcf0 [ 1495.755304][T27576] ? __pfx___mutex_lock+0x10/0x10 [ 1495.755338][T27576] ? __pfx_vfs_read+0x10/0x10 [ 1495.755374][T27576] ? __fget_files+0x20e/0x3c0 [ 1495.755414][T27576] ksys_read+0x12a/0x250 [ 1495.755434][T27576] ? __pfx_ksys_read+0x10/0x10 [ 1495.755456][T27576] do_syscall_64+0xcd/0x490 [ 1495.755476][T27576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1495.755491][T27576] RIP: 0033:0x7f1e7998ebe9 [ 1495.755504][T27576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1495.755518][T27576] RSP: 002b:00007f1e7a867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1495.755532][T27576] RAX: ffffffffffffffda RBX: 00007f1e79bc5fa0 RCX: 00007f1e7998ebe9 [ 1495.755541][T27576] RDX: 000000000000b4d3 RSI: 0000000000000000 RDI: 0000000000000003 [ 1495.755550][T27576] RBP: 00007f1e7a867090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.755559][T27576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1495.755567][T27576] R13: 00007f1e79bc6038 R14: 00007f1e79bc5fa0 R15: 00007fff0345b018 [ 1495.755586][T27576] [ 1496.520632][ T30] audit: type=1800 audit(4294968136.139:8): pid=27595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3545" name="members" dev="configfs" ino=167468 res=0 errno=0 [ 1496.960380][T27600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3546'. [ 1498.900027][ T5184] Bluetooth: hci5: unexpected event 0x1d length: 6 > 5 [ 1500.482930][T27635] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3553'. [ 1501.171050][T27647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3554'. [ 1501.584476][T21019] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1501.593703][T21019] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1501.602265][T21019] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1501.620979][T21019] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1501.634184][T21019] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1502.057414][T27646] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3555'. [ 1503.545165][T27649] chnl_net:caif_netlink_parms(): no params data found [ 1503.675373][ T5184] Bluetooth: hci6: command tx timeout [ 1504.092335][T27649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.103232][T27649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.120040][T27649] bridge_slave_0: entered allmulticast mode [ 1504.139836][T27649] bridge_slave_0: entered promiscuous mode [ 1504.250560][T27649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.273566][T27649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.296970][T27649] bridge_slave_1: entered allmulticast mode [ 1504.318570][T27649] bridge_slave_1: entered promiscuous mode [ 1504.639536][T27649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.670250][T27649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1504.901816][T27649] team0: Port device team_slave_0 added [ 1504.909690][T27649] team0: Port device team_slave_1 added [ 1505.211369][T27649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.224946][T27649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.253567][T27649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.397821][T27649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.411924][T27649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.494918][T27649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.543258][T27695] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3564'. [ 1505.755231][ T5184] Bluetooth: hci6: command tx timeout [ 1505.796564][T27649] hsr_slave_0: entered promiscuous mode [ 1505.813577][T27649] hsr_slave_1: entered promiscuous mode [ 1505.850632][T27649] debugfs: 'hsr0' already exists in 'hsr' [ 1505.861601][T27649] Cannot create hsr debugfs directory [ 1505.882260][T27701] FAULT_INJECTION: forcing a failure. [ 1505.882260][T27701] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.940911][T27701] CPU: 0 UID: 0 PID: 27701 Comm: syz.6.3566 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1505.940959][T27701] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1505.940970][T27701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1505.940986][T27701] Call Trace: [ 1505.940994][T27701] [ 1505.941003][T27701] dump_stack_lvl+0x16c/0x1f0 [ 1505.941039][T27701] should_fail_ex+0x512/0x640 [ 1505.941072][T27701] ? __kmalloc_node_noprof+0xc5/0x500 [ 1505.941106][T27701] should_failslab+0xc2/0x120 [ 1505.941139][T27701] __kmalloc_node_noprof+0xd8/0x500 [ 1505.941167][T27701] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1505.941196][T27701] ? alloc_slab_obj_exts+0x41/0xa0 [ 1505.941223][T27701] alloc_slab_obj_exts+0x41/0xa0 [ 1505.941247][T27701] new_slab+0x27d/0x330 [ 1505.941273][T27701] ___slab_alloc+0xcf2/0x1740 [ 1505.941299][T27701] ? alloc_pipe_info+0x1ec/0x590 [ 1505.941345][T27701] ? alloc_pipe_info+0x1ec/0x590 [ 1505.941376][T27701] ? __slab_alloc.constprop.0+0x56/0xb0 [ 1505.941401][T27701] __slab_alloc.constprop.0+0x56/0xb0 [ 1505.941430][T27701] ? alloc_pipe_info+0x1ec/0x590 [ 1505.941458][T27701] __kmalloc_noprof+0x2f2/0x510 [ 1505.941493][T27701] alloc_pipe_info+0x1ec/0x590 [ 1505.941527][T27701] splice_direct_to_actor+0x77d/0xa30 [ 1505.941555][T27701] ? __lock_acquire+0x62e/0x1ce0 [ 1505.941584][T27701] ? __pfx_direct_splice_actor+0x10/0x10 [ 1505.941612][T27701] ? __pfx_aa_file_perm+0x10/0x10 [ 1505.941656][T27701] ? find_held_lock+0x2b/0x80 [ 1505.941681][T27701] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1505.941705][T27701] ? get_pid_task+0xfc/0x250 [ 1505.941748][T27701] do_splice_direct+0x174/0x240 [ 1505.941776][T27701] ? __pfx_do_splice_direct+0x10/0x10 [ 1505.941803][T27701] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1505.941836][T27701] ? rw_verify_area+0xcf/0x6c0 [ 1505.941865][T27701] do_sendfile+0xb06/0xe50 [ 1505.941897][T27701] ? __pfx_do_sendfile+0x10/0x10 [ 1505.941927][T27701] ? __fget_files+0x20e/0x3c0 [ 1505.941964][T27701] __x64_sys_sendfile64+0x1d8/0x220 [ 1505.941997][T27701] ? ksys_write+0x1ac/0x250 [ 1505.942023][T27701] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1505.942068][T27701] do_syscall_64+0xcd/0x490 [ 1505.942104][T27701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.942128][T27701] RIP: 0033:0x7f184a18ebe9 [ 1505.942145][T27701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1505.942163][T27701] RSP: 002b:00007f184afa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1505.942182][T27701] RAX: ffffffffffffffda RBX: 00007f184a3c5fa0 RCX: 00007f184a18ebe9 [ 1505.942198][T27701] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1505.942213][T27701] RBP: 00007f184afa9090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.942229][T27701] R10: 0000400000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1505.942242][T27701] R13: 00007f184a3c6038 R14: 00007f184a3c5fa0 R15: 00007fff16b53f08 [ 1505.942276][T27701] [ 1506.870707][T27697] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3563'. [ 1507.205895][T27649] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1507.232215][T27649] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1507.293051][T27713] FAULT_INJECTION: forcing a failure. [ 1507.293051][T27713] name failslab, interval 1, probability 0, space 0, times 0 [ 1507.335566][T27649] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1507.337827][T27713] CPU: 1 UID: 0 PID: 27713 Comm: syz.6.3569 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1507.337871][T27713] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1507.337882][T27713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1507.337897][T27713] Call Trace: [ 1507.337907][T27713] [ 1507.337918][T27713] dump_stack_lvl+0x16c/0x1f0 [ 1507.337954][T27713] should_fail_ex+0x512/0x640 [ 1507.337987][T27713] ? fs_reclaim_acquire+0xae/0x150 [ 1507.338025][T27713] ? tomoyo_encode2+0x100/0x3e0 [ 1507.338057][T27713] should_failslab+0xc2/0x120 [ 1507.338089][T27713] __kmalloc_noprof+0xd2/0x510 [ 1507.338118][T27713] ? d_absolute_path+0x136/0x1a0 [ 1507.338158][T27713] tomoyo_encode2+0x100/0x3e0 [ 1507.338196][T27713] tomoyo_encode+0x29/0x50 [ 1507.338237][T27713] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1507.338281][T27713] tomoyo_get_exe+0x63/0xa0 [ 1507.338309][T27713] tomoyo_write_control+0x689/0x1430 [ 1507.338349][T27713] ? __pfx_tomoyo_write_control+0x10/0x10 [ 1507.338383][T27713] ? __pfx_tomoyo_write+0x10/0x10 [ 1507.338416][T27713] vfs_write+0x29d/0x11d0 [ 1507.338451][T27713] ? __pfx___mutex_lock+0x10/0x10 [ 1507.338485][T27713] ? __pfx_vfs_write+0x10/0x10 [ 1507.338530][T27713] ? __fget_files+0x20e/0x3c0 [ 1507.338567][T27713] ksys_write+0x12a/0x250 [ 1507.338596][T27713] ? __pfx_ksys_write+0x10/0x10 [ 1507.338634][T27713] do_syscall_64+0xcd/0x490 [ 1507.338670][T27713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1507.338703][T27713] RIP: 0033:0x7f184a18ebe9 [ 1507.338724][T27713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1507.338747][T27713] RSP: 002b:00007f184af88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1507.338771][T27713] RAX: ffffffffffffffda RBX: 00007f184a3c6090 RCX: 00007f184a18ebe9 [ 1507.338788][T27713] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1507.338803][T27713] RBP: 00007f184af88090 R08: 0000000000000000 R09: 0000000000000000 [ 1507.338819][T27713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1507.338834][T27713] R13: 00007f184a3c6128 R14: 00007f184a3c6090 R15: 00007fff16b53f08 [ 1507.338870][T27713] [ 1507.338896][T27713] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1507.616133][T27649] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1507.834927][ T5184] Bluetooth: hci6: command tx timeout [ 1508.201111][T27719] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3568'. [ 1508.384399][T27649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1508.662190][T27649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.090148][T22497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.097306][T22497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.452263][T22497] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.459436][T22497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1509.915448][ T5184] Bluetooth: hci6: command tx timeout [ 1510.510708][T27649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1511.237936][T27766] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1511.237936][T27766] The task syz.6.3576 (27766) triggered the difference, watch for misbehavior. [ 1511.273117][T27774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 1511.356761][T27649] veth0_vlan: entered promiscuous mode [ 1511.373703][T27649] veth1_vlan: entered promiscuous mode [ 1511.440076][T27649] veth0_macvtap: entered promiscuous mode [ 1511.452446][T27649] veth1_macvtap: entered promiscuous mode [ 1511.485306][T27649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1511.582761][T27649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1511.620706][T22497] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.635051][T22497] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.662621][T22497] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.791469][T22497] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1511.931851][T22498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.961618][T22498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1512.131727][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1512.169565][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.743324][T27838] FAULT_INJECTION: forcing a failure. [ 1514.743324][T27838] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.766542][T27838] CPU: 0 UID: 0 PID: 27838 Comm: syz.1.3589 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1514.766591][T27838] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1514.766603][T27838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1514.766618][T27838] Call Trace: [ 1514.766627][T27838] [ 1514.766637][T27838] dump_stack_lvl+0x16c/0x1f0 [ 1514.766674][T27838] should_fail_ex+0x512/0x640 [ 1514.766708][T27838] ? fs_reclaim_acquire+0xae/0x150 [ 1514.766746][T27838] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1514.766781][T27838] should_failslab+0xc2/0x120 [ 1514.766815][T27838] __kmalloc_noprof+0xd2/0x510 [ 1514.766853][T27838] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1514.766907][T27838] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1514.766940][T27838] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1514.767008][T27838] ? do_raw_spin_lock+0x12c/0x2b0 [ 1514.767055][T27838] tomoyo_file_open+0x6b/0x90 [ 1514.767082][T27838] security_file_open+0x84/0x1e0 [ 1514.767116][T27838] do_dentry_open+0x596/0x1530 [ 1514.767158][T27838] vfs_open+0x82/0x3f0 [ 1514.767198][T27838] path_openat+0x1de4/0x2cb0 [ 1514.767240][T27838] ? __pfx_path_openat+0x10/0x10 [ 1514.767279][T27838] do_filp_open+0x20b/0x470 [ 1514.767310][T27838] ? __pfx_do_filp_open+0x10/0x10 [ 1514.767366][T27838] ? alloc_fd+0x471/0x7d0 [ 1514.767404][T27838] do_sys_openat2+0x11b/0x1d0 [ 1514.767440][T27838] ? __pfx_do_sys_openat2+0x10/0x10 [ 1514.767480][T27838] ? __fget_files+0x20e/0x3c0 [ 1514.767514][T27838] __x64_sys_openat+0x174/0x210 [ 1514.767551][T27838] ? __pfx___x64_sys_openat+0x10/0x10 [ 1514.767587][T27838] ? ksys_write+0x1ac/0x250 [ 1514.767629][T27838] do_syscall_64+0xcd/0x490 [ 1514.767666][T27838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.767693][T27838] RIP: 0033:0x7fed4db8ebe9 [ 1514.767713][T27838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1514.767737][T27838] RSP: 002b:00007fed4e9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1514.767763][T27838] RAX: ffffffffffffffda RBX: 00007fed4ddc5fa0 RCX: 00007fed4db8ebe9 [ 1514.767781][T27838] RDX: 0000000000169000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1514.767798][T27838] RBP: 00007fed4e9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.767814][T27838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.767829][T27838] R13: 00007fed4ddc6038 R14: 00007fed4ddc5fa0 R15: 00007ffcd9c9dca8 [ 1514.767871][T27838] [ 1514.767882][T27838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1515.788851][T27855] ptrace attach of "./syz-executor exec"[27861] was attempted by "./syz-executor exec"[27855] [ 1516.486191][T27836] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3586'. [ 1518.680781][T27877] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3595'. [ 1518.712938][T27870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3594'. [ 1518.787117][T27894] blktrace: Concurrent blktraces are not allowed on ram7 [ 1519.862227][T27913] FAULT_INJECTION: forcing a failure. [ 1519.862227][T27913] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1519.892419][T27913] CPU: 1 UID: 0 PID: 27913 Comm: syz.7.3602 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1519.892467][T27913] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1519.892478][T27913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1519.892492][T27913] Call Trace: [ 1519.892501][T27913] [ 1519.892511][T27913] dump_stack_lvl+0x16c/0x1f0 [ 1519.892549][T27913] should_fail_ex+0x512/0x640 [ 1519.892581][T27913] should_fail_alloc_page+0xe7/0x130 [ 1519.892603][T27913] prepare_alloc_pages+0x3c2/0x610 [ 1519.892627][T27913] ? rcu_is_watching+0x12/0xc0 [ 1519.892643][T27913] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1519.892660][T27913] ? css_rstat_updated+0x1c2/0x510 [ 1519.892676][T27913] ? __pfx_css_rstat_updated+0x10/0x10 [ 1519.892698][T27913] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1519.892722][T27913] ? __lock_acquire+0x62e/0x1ce0 [ 1519.892743][T27913] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1519.892764][T27913] ? policy_nodemask+0xea/0x4e0 [ 1519.892783][T27913] alloc_pages_mpol+0x1fb/0x550 [ 1519.892802][T27913] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1519.892821][T27913] ? __lock_acquire+0x62e/0x1ce0 [ 1519.892840][T27913] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1519.892862][T27913] vma_alloc_folio_noprof+0xed/0x1e0 [ 1519.892881][T27913] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1519.892907][T27913] do_pte_missing+0x2230/0x3ba0 [ 1519.892922][T27913] ? find_held_lock+0x2b/0x80 [ 1519.892941][T27913] __handle_mm_fault+0x152a/0x2a50 [ 1519.892961][T27913] ? __pfx___handle_mm_fault+0x10/0x10 [ 1519.892977][T27913] ? __pte_offset_map_lock+0x174/0x310 [ 1519.892996][T27913] ? find_held_lock+0x2b/0x80 [ 1519.893015][T27913] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1519.893040][T27913] handle_mm_fault+0x589/0xd10 [ 1519.893058][T27913] __get_user_pages+0x551/0x34a0 [ 1519.893085][T27913] ? __pfx___get_user_pages+0x10/0x10 [ 1519.893111][T27913] populate_vma_page_range+0x267/0x3f0 [ 1519.893133][T27913] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1519.893153][T27913] ? __pfx_find_vma_intersection+0x10/0x10 [ 1519.893173][T27913] ? do_mmap+0x69c/0x1210 [ 1519.893193][T27913] __mm_populate+0x1d8/0x380 [ 1519.893215][T27913] ? __pfx___mm_populate+0x10/0x10 [ 1519.893236][T27913] ? up_write+0x1b2/0x520 [ 1519.893257][T27913] vm_mmap_pgoff+0x37f/0x470 [ 1519.893279][T27913] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1519.893302][T27913] ? __x64_sys_futex+0x1e0/0x4c0 [ 1519.893319][T27913] ? __x64_sys_futex+0x1e9/0x4c0 [ 1519.893338][T27913] ksys_mmap_pgoff+0x7d/0x5c0 [ 1519.893367][T27913] ? xfd_validate_state+0x61/0x180 [ 1519.893388][T27913] ? __pfx_do_preadv+0x10/0x10 [ 1519.893406][T27913] __x64_sys_mmap+0x125/0x190 [ 1519.893430][T27913] do_syscall_64+0xcd/0x490 [ 1519.893450][T27913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.893466][T27913] RIP: 0033:0x7f0210f8ebe9 [ 1519.893479][T27913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1519.893493][T27913] RSP: 002b:00007f0211d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1519.893508][T27913] RAX: ffffffffffffffda RBX: 00007f02111c5fa0 RCX: 00007f0210f8ebe9 [ 1519.893519][T27913] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1519.893528][T27913] RBP: 00007f0211011e19 R08: 0000000000000002 R09: 0000000000008000 [ 1519.893537][T27913] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1519.893550][T27913] R13: 00007f02111c6038 R14: 00007f02111c5fa0 R15: 00007fffd02f1818 [ 1519.893579][T27913] [ 1520.292503][T27911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3601'. [ 1521.186204][T27934] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3606'. [ 1521.496016][T27940] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3607'. [ 1523.004428][T27942] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1523.586938][T27971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3612'. [ 1525.352482][T28003] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3618'. [ 1526.381297][T28019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3624'. [ 1526.802444][T28027] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1529.974897][T28064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3632'. [ 1530.131291][ T30] audit: type=1800 audit(4294968169.749:9): pid=28078 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3637" name="members" dev="configfs" ino=170751 res=0 errno=0 [ 1530.296735][T28070] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3633'. [ 1531.053976][T28093] netlink: 21 bytes leftover after parsing attributes in process `syz.7.3639'. [ 1532.552153][T28095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3640'. [ 1533.487960][T28137] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1533.511488][T28137] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1533.521296][T28137] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1533.564281][T28137] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1533.660372][T28137] page dumped because: unmovable page [ 1533.698819][T28137] page_owner tracks the page as allocated [ 1533.710670][T28137] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1533.750073][T28137] post_alloc_hook+0x1c0/0x230 [ 1533.807558][T28137] get_page_from_freelist+0x132b/0x38e0 [ 1533.813404][T28137] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1533.823515][T28137] alloc_pages_mpol+0x1fb/0x550 [ 1533.831107][T28137] alloc_pages_noprof+0x131/0x390 [ 1533.841907][T28137] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1533.852306][T28137] vmalloc_user_noprof+0x9e/0xe0 [ 1533.907351][T28137] kcov_ioctl+0x4c/0x730 [ 1533.918763][T28136] : Can't lookup blockdev [ 1533.972431][T28137] __x64_sys_ioctl+0x18e/0x210 [ 1533.995969][T28137] do_syscall_64+0xcd/0x490 [ 1534.031245][T28137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1534.044853][T28137] page last free pid 0 tgid 0 stack trace: [ 1534.054760][T28137] __free_frozen_pages+0x7d5/0x10f0 [ 1534.060020][T28137] rcu_core+0x799/0x1530 [ 1534.064351][T28137] handle_softirqs+0x216/0x8e0 [ 1534.071071][T28137] __irq_exit_rcu+0x109/0x170 [ 1534.081246][T28137] irq_exit_rcu+0x9/0x30 [ 1534.091403][T28137] sysvec_call_function_single+0xa4/0xc0 [ 1534.241880][T28137] asm_sysvec_call_function_single+0x1a/0x20 [ 1536.193286][T28180] FAULT_INJECTION: forcing a failure. [ 1536.193286][T28180] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.212834][T28177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3651'. [ 1536.222280][T28180] CPU: 1 UID: 0 PID: 28180 Comm: syz.1.3653 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1536.222322][T28180] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1536.222333][T28180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1536.222348][T28180] Call Trace: [ 1536.222364][T28180] [ 1536.222374][T28180] dump_stack_lvl+0x16c/0x1f0 [ 1536.222416][T28180] should_fail_ex+0x512/0x640 [ 1536.222450][T28180] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1536.222484][T28180] should_failslab+0xc2/0x120 [ 1536.222532][T28180] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1536.222564][T28180] ? security_file_alloc+0x34/0x2b0 [ 1536.222603][T28180] security_file_alloc+0x34/0x2b0 [ 1536.222636][T28180] init_file+0x93/0x4c0 [ 1536.222665][T28180] alloc_empty_file+0x73/0x1e0 [ 1536.222696][T28180] path_openat+0xda/0x2cb0 [ 1536.222723][T28180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.222762][T28180] ? __pfx_path_openat+0x10/0x10 [ 1536.222799][T28180] do_filp_open+0x20b/0x470 [ 1536.222831][T28180] ? __pfx_do_filp_open+0x10/0x10 [ 1536.222902][T28180] ? alloc_fd+0x471/0x7d0 [ 1536.222945][T28180] do_sys_openat2+0x11b/0x1d0 [ 1536.222983][T28180] ? __pfx_do_sys_openat2+0x10/0x10 [ 1536.223033][T28180] ? find_held_lock+0x2b/0x80 [ 1536.223069][T28180] __x64_sys_openat+0x174/0x210 [ 1536.223108][T28180] ? __pfx___x64_sys_openat+0x10/0x10 [ 1536.223161][T28180] do_syscall_64+0xcd/0x490 [ 1536.223194][T28180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.223218][T28180] RIP: 0033:0x7fed4db8d550 [ 1536.223245][T28180] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1536.223269][T28180] RSP: 002b:00007fed4e9d4fe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1536.223293][T28180] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fed4db8d550 [ 1536.223311][T28180] RDX: 0000000000000002 RSI: 00007fed4dc120d3 RDI: 00000000ffffff9c [ 1536.223327][T28180] RBP: 00007fed4dc120d3 R08: 0000000000000000 R09: 00007fed4e9d6000 [ 1536.223344][T28180] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1536.223359][T28180] R13: 00007fed4ddc6038 R14: 00007fed4ddc5fa0 R15: 00007ffcd9c9dca8 [ 1536.223394][T28180] [ 1536.752137][ T30] audit: type=1326 audit(4294968176.369:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28175 comm="syz.7.3652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0210f8ebe9 code=0x0 [ 1539.638632][T28235] ima: policy update failed [ 1539.727847][ T30] audit: type=1802 audit(4294968179.339:11): pid=28235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3661" res=0 errno=0 [ 1542.388500][T28270] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3667'. [ 1544.581778][T28302] FAULT_INJECTION: forcing a failure. [ 1544.581778][T28302] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.634670][T28302] CPU: 0 UID: 0 PID: 28302 Comm: syz.7.3675 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1544.634704][T28302] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1544.634713][T28302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1544.634727][T28302] Call Trace: [ 1544.634735][T28302] [ 1544.634746][T28302] dump_stack_lvl+0x16c/0x1f0 [ 1544.634774][T28302] should_fail_ex+0x512/0x640 [ 1544.634794][T28302] ? fs_reclaim_acquire+0xae/0x150 [ 1544.634817][T28302] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1544.634837][T28302] should_failslab+0xc2/0x120 [ 1544.634855][T28302] __kmalloc_noprof+0xd2/0x510 [ 1544.634876][T28302] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1544.634903][T28302] ? tomoyo_profile+0x47/0x60 [ 1544.634917][T28302] tomoyo_path_number_perm+0x245/0x580 [ 1544.634934][T28302] ? tomoyo_path_number_perm+0x237/0x580 [ 1544.634952][T28302] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1544.634970][T28302] ? find_held_lock+0x2b/0x80 [ 1544.635000][T28302] ? find_held_lock+0x2b/0x80 [ 1544.635013][T28302] ? hook_file_ioctl_common+0x145/0x410 [ 1544.635036][T28302] ? __fget_files+0x20e/0x3c0 [ 1544.635055][T28302] security_file_ioctl+0x9b/0x240 [ 1544.635074][T28302] __x64_sys_ioctl+0xb7/0x210 [ 1544.635097][T28302] do_syscall_64+0xcd/0x490 [ 1544.635118][T28302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.635133][T28302] RIP: 0033:0x7f0210f8ebe9 [ 1544.635146][T28302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1544.635159][T28302] RSP: 002b:00007f0211d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1544.635173][T28302] RAX: ffffffffffffffda RBX: 00007f02111c5fa0 RCX: 00007f0210f8ebe9 [ 1544.635183][T28302] RDX: 0000000000000003 RSI: 0000000000002272 RDI: 0000000000000003 [ 1544.635191][T28302] RBP: 00007f0211d47090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.635200][T28302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.635208][T28302] R13: 00007f02111c6038 R14: 00007f02111c5fa0 R15: 00007fffd02f1818 [ 1544.635226][T28302] [ 1544.888250][T28302] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1546.035547][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.061000][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.146019][T28322] random: crng reseeded on system resumption [ 1547.096859][T28314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3678'. [ 1548.074873][T21019] Bluetooth: hci2: command 0x0406 tx timeout [ 1549.718651][T28357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3685'. [ 1549.954692][T28376] netlink: Unknown conntrack attr (type=146, max=9) [ 1550.364156][T28367] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3688'. [ 1550.903321][T28385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3692'. [ 1552.298133][T28392] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3693'. [ 1553.195682][T21019] Bluetooth: hci5: command 0x0406 tx timeout [ 1557.063211][T28467] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3707'. [ 1557.722578][T28489] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3710'. [ 1557.823608][T28485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3709'. [ 1558.770047][T28503] FAULT_INJECTION: forcing a failure. [ 1558.770047][T28503] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.785004][T28503] CPU: 1 UID: 0 PID: 28503 Comm: syz.7.3713 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1558.785051][T28503] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1558.785062][T28503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1558.785077][T28503] Call Trace: [ 1558.785086][T28503] [ 1558.785097][T28503] dump_stack_lvl+0x16c/0x1f0 [ 1558.785132][T28503] should_fail_ex+0x512/0x640 [ 1558.785165][T28503] ? fs_reclaim_acquire+0xae/0x150 [ 1558.785204][T28503] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1558.785236][T28503] should_failslab+0xc2/0x120 [ 1558.785268][T28503] __kmalloc_noprof+0xd2/0x510 [ 1558.785307][T28503] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1558.785352][T28503] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1558.785385][T28503] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1558.785461][T28503] ? do_raw_spin_lock+0x12c/0x2b0 [ 1558.785507][T28503] tomoyo_file_open+0x6b/0x90 [ 1558.785533][T28503] security_file_open+0x84/0x1e0 [ 1558.785567][T28503] do_dentry_open+0x596/0x1530 [ 1558.785610][T28503] vfs_open+0x82/0x3f0 [ 1558.785650][T28503] path_openat+0x1de4/0x2cb0 [ 1558.785690][T28503] ? __pfx_path_openat+0x10/0x10 [ 1558.785733][T28503] do_filp_open+0x20b/0x470 [ 1558.785765][T28503] ? __pfx_do_filp_open+0x10/0x10 [ 1558.785822][T28503] ? alloc_fd+0x471/0x7d0 [ 1558.785860][T28503] do_sys_openat2+0x11b/0x1d0 [ 1558.785896][T28503] ? __pfx_do_sys_openat2+0x10/0x10 [ 1558.785936][T28503] ? __fget_files+0x20e/0x3c0 [ 1558.785971][T28503] __x64_sys_openat+0x174/0x210 [ 1558.786009][T28503] ? __pfx___x64_sys_openat+0x10/0x10 [ 1558.786045][T28503] ? ksys_write+0x1ac/0x250 [ 1558.786087][T28503] do_syscall_64+0xcd/0x490 [ 1558.786124][T28503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.786150][T28503] RIP: 0033:0x7f0210f8ebe9 [ 1558.786171][T28503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1558.786196][T28503] RSP: 002b:00007f0211d26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1558.786221][T28503] RAX: ffffffffffffffda RBX: 00007f02111c6090 RCX: 00007f0210f8ebe9 [ 1558.786239][T28503] RDX: 0000000000088400 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 1558.786256][T28503] RBP: 00007f0211d26090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.786271][T28503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1558.786286][T28503] R13: 00007f02111c6128 R14: 00007f02111c6090 R15: 00007fffd02f1818 [ 1558.786317][T28503] [ 1558.786615][T28503] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1561.592116][T28532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3721'. [ 1562.835365][T28562] FAULT_INJECTION: forcing a failure. [ 1562.835365][T28562] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.854305][T28562] CPU: 0 UID: 0 PID: 28562 Comm: syz.1.3724 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1562.854356][T28562] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1562.854367][T28562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1562.854382][T28562] Call Trace: [ 1562.854392][T28562] [ 1562.854402][T28562] dump_stack_lvl+0x16c/0x1f0 [ 1562.854440][T28562] should_fail_ex+0x512/0x640 [ 1562.854475][T28562] ? fs_reclaim_acquire+0xae/0x150 [ 1562.854514][T28562] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1562.854549][T28562] should_failslab+0xc2/0x120 [ 1562.854582][T28562] __kmalloc_noprof+0xd2/0x510 [ 1562.854622][T28562] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1562.854668][T28562] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1562.854704][T28562] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1562.854764][T28562] ? do_raw_spin_lock+0x12c/0x2b0 [ 1562.854807][T28562] tomoyo_file_open+0x6b/0x90 [ 1562.854832][T28562] security_file_open+0x84/0x1e0 [ 1562.854864][T28562] do_dentry_open+0x596/0x1530 [ 1562.854903][T28562] vfs_open+0x82/0x3f0 [ 1562.854942][T28562] path_openat+0x1de4/0x2cb0 [ 1562.854984][T28562] ? __pfx_path_openat+0x10/0x10 [ 1562.855022][T28562] do_filp_open+0x20b/0x470 [ 1562.855052][T28562] ? __pfx_do_filp_open+0x10/0x10 [ 1562.855107][T28562] ? alloc_fd+0x471/0x7d0 [ 1562.855144][T28562] do_sys_openat2+0x11b/0x1d0 [ 1562.855180][T28562] ? __pfx_do_sys_openat2+0x10/0x10 [ 1562.855219][T28562] ? __pfx___might_resched+0x10/0x10 [ 1562.855253][T28562] ? rcu_is_watching+0x12/0xc0 [ 1562.855278][T28562] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 1562.855314][T28562] __x64_sys_openat+0x174/0x210 [ 1562.855351][T28562] ? __pfx___x64_sys_openat+0x10/0x10 [ 1562.855387][T28562] ? ksys_write+0x1ac/0x250 [ 1562.855427][T28562] do_syscall_64+0xcd/0x490 [ 1562.855464][T28562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.855489][T28562] RIP: 0033:0x7fed4db8ebe9 [ 1562.855510][T28562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.855535][T28562] RSP: 002b:00007fed4e951038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1562.855560][T28562] RAX: ffffffffffffffda RBX: 00007fed4ddc6360 RCX: 00007fed4db8ebe9 [ 1562.855578][T28562] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1562.855594][T28562] RBP: 00007fed4e951090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.855611][T28562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.855627][T28562] R13: 00007fed4ddc63f8 R14: 00007fed4ddc6360 R15: 00007ffcd9c9dca8 [ 1562.855660][T28562] [ 1563.132525][T28562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1564.700872][T28587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3730'. [ 1567.155295][T28625] ptrace attach of "./syz-executor exec"[28626] was attempted by "./syz-executor exec"[28625] [ 1571.366700][T28663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3745'. [ 1573.638381][T28693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3748'. [ 1574.860725][T28724] random: crng reseeded on system resumption [ 1574.928899][T28724] FAULT_INJECTION: forcing a failure. [ 1574.928899][T28724] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1574.950601][T28724] CPU: 1 UID: 0 PID: 28724 Comm: syz.7.3752 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1574.950650][T28724] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1574.950661][T28724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1574.950675][T28724] Call Trace: [ 1574.950686][T28724] [ 1574.950696][T28724] dump_stack_lvl+0x16c/0x1f0 [ 1574.950734][T28724] should_fail_ex+0x512/0x640 [ 1574.950777][T28724] should_fail_alloc_page+0xe7/0x130 [ 1574.950806][T28724] prepare_alloc_pages+0x3c2/0x610 [ 1574.950827][T28724] ? rcu_is_watching+0x12/0xc0 [ 1574.950844][T28724] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1574.950867][T28724] ? stack_trace_save+0x8e/0xc0 [ 1574.950883][T28724] ? __pfx_stack_trace_save+0x10/0x10 [ 1574.950902][T28724] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1574.950921][T28724] ? kasan_save_stack+0x42/0x60 [ 1574.950936][T28724] ? kasan_save_stack+0x33/0x60 [ 1574.950953][T28724] ? do_dentry_open+0x97f/0x1530 [ 1574.950970][T28724] ? vfs_open+0x82/0x3f0 [ 1574.950987][T28724] ? path_openat+0x1de4/0x2cb0 [ 1574.951001][T28724] ? do_filp_open+0x20b/0x470 [ 1574.951016][T28724] ? do_sys_openat2+0x11b/0x1d0 [ 1574.951043][T28724] ? __x64_sys_openat+0x174/0x210 [ 1574.951063][T28724] ? do_syscall_64+0xcd/0x490 [ 1574.951081][T28724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.951096][T28724] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1574.951116][T28724] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1574.951137][T28724] ? policy_nodemask+0xea/0x4e0 [ 1574.951156][T28724] alloc_pages_mpol+0x1fb/0x550 [ 1574.951175][T28724] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1574.951198][T28724] alloc_pages_noprof+0x131/0x390 [ 1574.951216][T28724] get_zeroed_page_noprof+0x18/0xb0 [ 1574.951235][T28724] get_image_page+0x18/0x190 [ 1574.951250][T28724] alloc_rtree_node+0x3c/0xb0 [ 1574.951265][T28724] memory_bm_create+0x519/0x810 [ 1574.951286][T28724] create_basic_memory_bitmaps+0xbd/0x320 [ 1574.951304][T28724] snapshot_open+0x235/0x2b0 [ 1574.951321][T28724] ? __pfx_snapshot_open+0x10/0x10 [ 1574.951337][T28724] misc_open+0x35d/0x420 [ 1574.951353][T28724] ? __pfx_misc_open+0x10/0x10 [ 1574.951367][T28724] chrdev_open+0x231/0x6a0 [ 1574.951383][T28724] ? __pfx_apparmor_file_open+0x10/0x10 [ 1574.951399][T28724] ? __pfx_chrdev_open+0x10/0x10 [ 1574.951417][T28724] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1574.951436][T28724] do_dentry_open+0x97f/0x1530 [ 1574.951454][T28724] ? __pfx_chrdev_open+0x10/0x10 [ 1574.951474][T28724] vfs_open+0x82/0x3f0 [ 1574.951496][T28724] path_openat+0x1de4/0x2cb0 [ 1574.951519][T28724] ? __pfx_path_openat+0x10/0x10 [ 1574.951540][T28724] do_filp_open+0x20b/0x470 [ 1574.951557][T28724] ? __pfx_do_filp_open+0x10/0x10 [ 1574.951587][T28724] ? alloc_fd+0x471/0x7d0 [ 1574.951607][T28724] do_sys_openat2+0x11b/0x1d0 [ 1574.951627][T28724] ? __pfx_do_sys_openat2+0x10/0x10 [ 1574.951654][T28724] __x64_sys_openat+0x174/0x210 [ 1574.951683][T28724] ? __pfx___x64_sys_openat+0x10/0x10 [ 1574.951729][T28724] do_syscall_64+0xcd/0x490 [ 1574.951768][T28724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.951796][T28724] RIP: 0033:0x7f0210f8ebe9 [ 1574.951820][T28724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1574.951846][T28724] RSP: 002b:00007f0211d26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1574.951873][T28724] RAX: ffffffffffffffda RBX: 00007f02111c6090 RCX: 00007f0210f8ebe9 [ 1574.951892][T28724] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1574.951910][T28724] RBP: 00007f0211011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1574.951928][T28724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.951945][T28724] R13: 00007f02111c6128 R14: 00007f02111c6090 R15: 00007fffd02f1818 [ 1574.951983][T28724] [ 1575.442830][T28736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3753'. [ 1579.973682][T28789] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3764'. [ 1580.706448][T28804] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1580.720470][T28804] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1580.732119][T28804] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1580.785104][T28804] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1580.797990][T28804] page dumped because: unmovable page [ 1580.814218][T28804] page_owner tracks the page as allocated [ 1580.820928][T28804] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1580.940641][T28804] post_alloc_hook+0x1c0/0x230 [ 1580.946031][T28804] get_page_from_freelist+0x132b/0x38e0 [ 1580.952526][T28804] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1580.959384][T28804] alloc_pages_mpol+0x1fb/0x550 [ 1580.964362][T28804] alloc_pages_noprof+0x131/0x390 [ 1580.971411][T28804] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1580.977406][T28804] vmalloc_user_noprof+0x9e/0xe0 [ 1580.983473][T28804] kcov_ioctl+0x4c/0x730 [ 1580.987825][T28804] __x64_sys_ioctl+0x18e/0x210 [ 1580.992618][T28804] do_syscall_64+0xcd/0x490 [ 1580.997214][T28804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1581.003148][T28804] page last free pid 0 tgid 0 stack trace: [ 1581.009250][T28804] __free_frozen_pages+0x7d5/0x10f0 [ 1581.014569][T28804] rcu_core+0x799/0x1530 [ 1581.018861][T28804] handle_softirqs+0x216/0x8e0 [ 1581.023731][T28804] __irq_exit_rcu+0x109/0x170 [ 1581.029477][T28804] irq_exit_rcu+0x9/0x30 [ 1581.034197][T28804] sysvec_call_function_single+0xa4/0xc0 [ 1581.047847][T28804] asm_sysvec_call_function_single+0x1a/0x20 [ 1581.520677][T28808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3770'. [ 1584.154373][T28831] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3774'. [ 1584.847306][T28850] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3776'. [ 1589.361193][T28918] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 1589.725538][T28926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3790'. [ 1590.087054][T28920] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 1590.848899][T28934] random: crng reseeded on system resumption [ 1590.920242][T28934] FAULT_INJECTION: forcing a failure. [ 1590.920242][T28934] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1590.996310][T28934] CPU: 0 UID: 0 PID: 28934 Comm: syz.7.3792 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1590.996361][T28934] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1590.996372][T28934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1590.996388][T28934] Call Trace: [ 1590.996397][T28934] [ 1590.996407][T28934] dump_stack_lvl+0x16c/0x1f0 [ 1590.996448][T28934] should_fail_ex+0x512/0x640 [ 1590.996490][T28934] should_fail_alloc_page+0xe7/0x130 [ 1590.996527][T28934] prepare_alloc_pages+0x3c2/0x610 [ 1590.996566][T28934] ? rcu_is_watching+0x12/0xc0 [ 1590.996598][T28934] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1590.996643][T28934] ? stack_trace_save+0x8e/0xc0 [ 1590.996673][T28934] ? __pfx_stack_trace_save+0x10/0x10 [ 1590.996706][T28934] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1590.996745][T28934] ? kasan_save_stack+0x42/0x60 [ 1590.996771][T28934] ? kasan_save_stack+0x33/0x60 [ 1590.996805][T28934] ? do_dentry_open+0x97f/0x1530 [ 1590.996843][T28934] ? vfs_open+0x82/0x3f0 [ 1590.996878][T28934] ? path_openat+0x1de4/0x2cb0 [ 1590.996908][T28934] ? do_filp_open+0x20b/0x470 [ 1590.996938][T28934] ? do_sys_openat2+0x11b/0x1d0 [ 1590.996975][T28934] ? __x64_sys_openat+0x174/0x210 [ 1590.997013][T28934] ? do_syscall_64+0xcd/0x490 [ 1590.997046][T28934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.997093][T28934] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1590.997131][T28934] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1590.997171][T28934] ? policy_nodemask+0xea/0x4e0 [ 1590.997209][T28934] alloc_pages_mpol+0x1fb/0x550 [ 1590.997257][T28934] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1590.997304][T28934] alloc_pages_noprof+0x131/0x390 [ 1590.997344][T28934] get_zeroed_page_noprof+0x18/0xb0 [ 1590.997382][T28934] get_image_page+0x18/0x190 [ 1590.997410][T28934] alloc_rtree_node+0x3c/0xb0 [ 1590.997439][T28934] memory_bm_create+0x519/0x810 [ 1590.997482][T28934] create_basic_memory_bitmaps+0x10b/0x320 [ 1590.997512][T28934] ? pm_notifier_call_chain_robust+0x2c/0x60 [ 1590.997553][T28934] snapshot_open+0x235/0x2b0 [ 1590.997591][T28934] ? __pfx_snapshot_open+0x10/0x10 [ 1590.997624][T28934] misc_open+0x35d/0x420 [ 1590.997655][T28934] ? __pfx_misc_open+0x10/0x10 [ 1590.997683][T28934] chrdev_open+0x231/0x6a0 [ 1590.997715][T28934] ? __pfx_apparmor_file_open+0x10/0x10 [ 1590.997745][T28934] ? __pfx_chrdev_open+0x10/0x10 [ 1590.997781][T28934] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1590.997819][T28934] do_dentry_open+0x97f/0x1530 [ 1590.997853][T28934] ? __pfx_chrdev_open+0x10/0x10 [ 1590.997893][T28934] vfs_open+0x82/0x3f0 [ 1590.997936][T28934] path_openat+0x1de4/0x2cb0 [ 1590.997980][T28934] ? __pfx_path_openat+0x10/0x10 [ 1590.998022][T28934] do_filp_open+0x20b/0x470 [ 1590.998054][T28934] ? __pfx_do_filp_open+0x10/0x10 [ 1590.998114][T28934] ? alloc_fd+0x471/0x7d0 [ 1590.998153][T28934] do_sys_openat2+0x11b/0x1d0 [ 1590.998192][T28934] ? __pfx_do_sys_openat2+0x10/0x10 [ 1590.998254][T28934] __x64_sys_openat+0x174/0x210 [ 1590.998296][T28934] ? __pfx___x64_sys_openat+0x10/0x10 [ 1590.998353][T28934] do_syscall_64+0xcd/0x490 [ 1590.998393][T28934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1590.998422][T28934] RIP: 0033:0x7f0210f8ebe9 [ 1590.998444][T28934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1590.998468][T28934] RSP: 002b:00007f020f1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1590.998495][T28934] RAX: ffffffffffffffda RBX: 00007f02111c6180 RCX: 00007f0210f8ebe9 [ 1590.998515][T28934] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1590.998534][T28934] RBP: 00007f0211011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1590.998550][T28934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1590.998567][T28934] R13: 00007f02111c6218 R14: 00007f02111c6180 R15: 00007fffd02f1818 [ 1590.998604][T28934] [ 1591.729334][T28930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3791'. [ 1591.794133][T28953] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3795'. [ 1594.116226][T28986] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3797'. [ 1595.681122][T29010] FAULT_INJECTION: forcing a failure. [ 1595.681122][T29010] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1595.713618][T29010] CPU: 1 UID: 0 PID: 29010 Comm: syz.3.3804 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1595.713664][T29010] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1595.713675][T29010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1595.713688][T29010] Call Trace: [ 1595.713697][T29010] [ 1595.713707][T29010] dump_stack_lvl+0x16c/0x1f0 [ 1595.713746][T29010] should_fail_ex+0x512/0x640 [ 1595.713792][T29010] should_fail_alloc_page+0xe7/0x130 [ 1595.713819][T29010] prepare_alloc_pages+0x3c2/0x610 [ 1595.713843][T29010] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1595.713860][T29010] ? arch_stack_walk+0xa6/0x100 [ 1595.713883][T29010] ? stack_trace_save+0x8e/0xc0 [ 1595.713900][T29010] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1595.713915][T29010] ? rcu_is_watching+0x12/0xc0 [ 1595.713936][T29010] ? kasan_save_track+0x14/0x30 [ 1595.713951][T29010] ? __kasan_slab_alloc+0x89/0x90 [ 1595.713967][T29010] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1595.713982][T29010] ? __pmd_alloc+0xbf/0x930 [ 1595.714001][T29010] ? __handle_mm_fault+0xa06/0x2a50 [ 1595.714014][T29010] ? handle_mm_fault+0x589/0xd10 [ 1595.714029][T29010] ? __get_user_pages+0x551/0x34a0 [ 1595.714048][T29010] ? populate_vma_page_range+0x267/0x3f0 [ 1595.714069][T29010] ? __mm_populate+0x1d8/0x380 [ 1595.714087][T29010] ? vm_mmap_pgoff+0x37f/0x470 [ 1595.714105][T29010] ? ksys_mmap_pgoff+0x7d/0x5c0 [ 1595.714122][T29010] ? __x64_sys_mmap+0x125/0x190 [ 1595.714141][T29010] ? do_syscall_64+0xcd/0x490 [ 1595.714159][T29010] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1595.714181][T29010] ? policy_nodemask+0xea/0x4e0 [ 1595.714201][T29010] alloc_pages_mpol+0x1fb/0x550 [ 1595.714220][T29010] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1595.714243][T29010] alloc_pages_noprof+0x131/0x390 [ 1595.714262][T29010] pte_alloc_one+0x1c/0x3a0 [ 1595.714277][T29010] __pte_alloc+0x6d/0x3c0 [ 1595.714295][T29010] ? __pfx___pte_alloc+0x10/0x10 [ 1595.714315][T29010] ? do_raw_spin_lock+0x12c/0x2b0 [ 1595.714338][T29010] do_pte_missing+0x285a/0x3ba0 [ 1595.714353][T29010] ? do_raw_spin_unlock+0x172/0x230 [ 1595.714374][T29010] ? _raw_spin_unlock+0x28/0x50 [ 1595.714390][T29010] ? __pmd_alloc+0x3fb/0x930 [ 1595.714412][T29010] __handle_mm_fault+0x152a/0x2a50 [ 1595.714432][T29010] ? __pfx___handle_mm_fault+0x10/0x10 [ 1595.714463][T29010] handle_mm_fault+0x589/0xd10 [ 1595.714481][T29010] __get_user_pages+0x551/0x34a0 [ 1595.714508][T29010] ? __pfx___get_user_pages+0x10/0x10 [ 1595.714534][T29010] populate_vma_page_range+0x267/0x3f0 [ 1595.714557][T29010] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1595.714577][T29010] ? __pfx_find_vma_intersection+0x10/0x10 [ 1595.714597][T29010] ? do_mmap+0x69c/0x1210 [ 1595.714618][T29010] __mm_populate+0x1d8/0x380 [ 1595.714641][T29010] ? __pfx___mm_populate+0x10/0x10 [ 1595.714663][T29010] ? up_write+0x1b2/0x520 [ 1595.714696][T29010] vm_mmap_pgoff+0x37f/0x470 [ 1595.714729][T29010] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1595.714763][T29010] ? __fget_files+0x20e/0x3c0 [ 1595.714814][T29010] ksys_mmap_pgoff+0x7d/0x5c0 [ 1595.714847][T29010] ? __pfx_ksys_write+0x10/0x10 [ 1595.714881][T29010] __x64_sys_mmap+0x125/0x190 [ 1595.714922][T29010] do_syscall_64+0xcd/0x490 [ 1595.714958][T29010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1595.714984][T29010] RIP: 0033:0x7f1e7998ebe9 [ 1595.715004][T29010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1595.715038][T29010] RSP: 002b:00007f1e7a846038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1595.715063][T29010] RAX: ffffffffffffffda RBX: 00007f1e79bc6090 RCX: 00007f1e7998ebe9 [ 1595.715081][T29010] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1595.715097][T29010] RBP: 00007f1e7a846090 R08: 0000000000000002 R09: 0000000000008000 [ 1595.715113][T29010] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 1595.715129][T29010] R13: 00007f1e79bc6128 R14: 00007f1e79bc6090 R15: 00007fff0345b018 [ 1595.715165][T29010] [ 1596.545404][T29012] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3801'. [ 1596.802419][T29014] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3802'. [ 1597.203054][T26304] svc: failed to register nfsdv3 RPC service (errno 512). [ 1597.217341][T26304] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1598.249440][T29032] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1598.274824][T29032] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1598.338023][T29032] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1598.394030][T29032] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1598.513178][T29032] page dumped because: unmovable page [ 1598.538744][T29032] page_owner tracks the page as allocated [ 1598.602296][T29032] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1598.624148][T29028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1598.684836][T29032] post_alloc_hook+0x1c0/0x230 [ 1598.689770][T29032] get_page_from_freelist+0x132b/0x38e0 [ 1598.759108][T29032] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1598.789168][T29032] alloc_pages_mpol+0x1fb/0x550 [ 1598.809244][T29032] alloc_pages_noprof+0x131/0x390 [ 1598.852588][T29023] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3806'. [ 1598.872679][T29032] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1598.880589][T29032] vmalloc_user_noprof+0x9e/0xe0 [ 1598.886599][T29032] kcov_ioctl+0x4c/0x730 [ 1598.894868][T29032] __x64_sys_ioctl+0x18e/0x210 [ 1598.910358][T29032] do_syscall_64+0xcd/0x490 [ 1598.992981][T29032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.019786][T29032] page last free pid 0 tgid 0 stack trace: [ 1599.025772][T29032] __free_frozen_pages+0x7d5/0x10f0 [ 1599.030987][T29032] rcu_core+0x799/0x1530 [ 1599.035549][T29032] handle_softirqs+0x216/0x8e0 [ 1599.040342][T29032] __irq_exit_rcu+0x109/0x170 [ 1599.045182][T29032] irq_exit_rcu+0x9/0x30 [ 1599.049564][T29032] sysvec_call_function_single+0xa4/0xc0 [ 1599.055387][T29032] asm_sysvec_call_function_single+0x1a/0x20 [ 1601.548906][T29084] random: crng reseeded on system resumption [ 1601.993162][T29088] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1602.092525][T29088] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1602.124973][T29088] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1602.133724][T29088] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1602.153681][T29088] page dumped because: unmovable page [ 1602.159432][T29088] page_owner tracks the page as allocated [ 1602.165314][T29088] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1602.186615][T29088] post_alloc_hook+0x1c0/0x230 [ 1602.191440][T29088] get_page_from_freelist+0x132b/0x38e0 [ 1602.234816][T29088] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1602.268408][T29088] alloc_pages_mpol+0x1fb/0x550 [ 1602.315760][T29088] alloc_pages_noprof+0x131/0x390 [ 1602.324860][T29088] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1602.332223][T29088] vmalloc_user_noprof+0x9e/0xe0 [ 1602.344760][T29088] kcov_ioctl+0x4c/0x730 [ 1602.349070][T29088] __x64_sys_ioctl+0x18e/0x210 [ 1602.353877][T29088] do_syscall_64+0xcd/0x490 [ 1602.371271][T29088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.395083][T29088] page last free pid 0 tgid 0 stack trace: [ 1602.401206][T29088] __free_frozen_pages+0x7d5/0x10f0 [ 1602.407464][T29088] rcu_core+0x799/0x1530 [ 1602.414446][T29088] handle_softirqs+0x216/0x8e0 [ 1602.419815][T29088] __irq_exit_rcu+0x109/0x170 [ 1602.424546][T29088] irq_exit_rcu+0x9/0x30 [ 1602.440779][T29088] sysvec_call_function_single+0xa4/0xc0 [ 1602.461418][T29088] asm_sysvec_call_function_single+0x1a/0x20 [ 1604.881457][T29127] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1604.910412][T29127] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1604.939403][T29117] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3822'. [ 1604.951910][T29127] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1605.005093][T29127] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1605.042498][T29127] page dumped because: unmovable page [ 1605.134849][T29127] page_owner tracks the page as allocated [ 1605.140605][T29127] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1605.165230][T29127] post_alloc_hook+0x1c0/0x230 [ 1605.176065][T29127] get_page_from_freelist+0x132b/0x38e0 [ 1605.181653][T29127] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1605.225912][T29127] alloc_pages_mpol+0x1fb/0x550 [ 1605.242262][T29127] alloc_pages_noprof+0x131/0x390 [ 1605.248130][T29127] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1605.254289][T29127] vmalloc_user_noprof+0x9e/0xe0 [ 1605.265795][T29127] kcov_ioctl+0x4c/0x730 [ 1605.275988][T29127] __x64_sys_ioctl+0x18e/0x210 [ 1605.284929][T29127] do_syscall_64+0xcd/0x490 [ 1605.289964][T29127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.296126][T29127] page last free pid 0 tgid 0 stack trace: [ 1605.305056][T29127] __free_frozen_pages+0x7d5/0x10f0 [ 1605.332543][T29127] rcu_core+0x799/0x1530 [ 1605.339242][T29127] handle_softirqs+0x216/0x8e0 [ 1605.347989][T29127] __irq_exit_rcu+0x109/0x170 [ 1605.353941][T29123] random: crng reseeded on system resumption [ 1605.360189][T29127] irq_exit_rcu+0x9/0x30 [ 1605.364938][T29127] sysvec_call_function_single+0xa4/0xc0 [ 1605.371994][T29127] asm_sysvec_call_function_single+0x1a/0x20 [ 1605.452453][T29123] FAULT_INJECTION: forcing a failure. [ 1605.452453][T29123] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1605.478941][T29123] CPU: 1 UID: 0 PID: 29123 Comm: syz.1.3823 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1605.478989][T29123] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1605.479006][T29123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1605.479021][T29123] Call Trace: [ 1605.479031][T29123] [ 1605.479052][T29123] dump_stack_lvl+0x16c/0x1f0 [ 1605.479092][T29123] should_fail_ex+0x512/0x640 [ 1605.479130][T29123] should_fail_alloc_page+0xe7/0x130 [ 1605.479190][T29123] prepare_alloc_pages+0x3c2/0x610 [ 1605.479236][T29123] ? rcu_is_watching+0x12/0xc0 [ 1605.479275][T29123] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1605.479317][T29123] ? stack_trace_save+0x8e/0xc0 [ 1605.479343][T29123] ? __pfx_stack_trace_save+0x10/0x10 [ 1605.479374][T29123] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1605.479408][T29123] ? kasan_save_stack+0x42/0x60 [ 1605.479434][T29123] ? kasan_save_stack+0x33/0x60 [ 1605.479465][T29123] ? do_dentry_open+0x97f/0x1530 [ 1605.479492][T29123] ? vfs_open+0x82/0x3f0 [ 1605.479523][T29123] ? path_openat+0x1de4/0x2cb0 [ 1605.479549][T29123] ? do_filp_open+0x20b/0x470 [ 1605.479574][T29123] ? do_sys_openat2+0x11b/0x1d0 [ 1605.479607][T29123] ? __x64_sys_openat+0x174/0x210 [ 1605.479640][T29123] ? do_syscall_64+0xcd/0x490 [ 1605.479673][T29123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.479702][T29123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1605.479740][T29123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1605.479779][T29123] ? policy_nodemask+0xea/0x4e0 [ 1605.479816][T29123] alloc_pages_mpol+0x1fb/0x550 [ 1605.479853][T29123] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1605.479897][T29123] alloc_pages_noprof+0x131/0x390 [ 1605.479933][T29123] get_zeroed_page_noprof+0x18/0xb0 [ 1605.479970][T29123] get_image_page+0x18/0x190 [ 1605.479998][T29123] alloc_rtree_node+0x3c/0xb0 [ 1605.480027][T29123] memory_bm_create+0x519/0x810 [ 1605.480083][T29123] create_basic_memory_bitmaps+0x10b/0x320 [ 1605.480121][T29123] snapshot_open+0x235/0x2b0 [ 1605.480152][T29123] ? __pfx_snapshot_open+0x10/0x10 [ 1605.480185][T29123] misc_open+0x35d/0x420 [ 1605.480214][T29123] ? __pfx_misc_open+0x10/0x10 [ 1605.480242][T29123] chrdev_open+0x231/0x6a0 [ 1605.480274][T29123] ? __pfx_apparmor_file_open+0x10/0x10 [ 1605.480305][T29123] ? __pfx_chrdev_open+0x10/0x10 [ 1605.480342][T29123] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1605.480380][T29123] do_dentry_open+0x97f/0x1530 [ 1605.480414][T29123] ? __pfx_chrdev_open+0x10/0x10 [ 1605.480455][T29123] vfs_open+0x82/0x3f0 [ 1605.480497][T29123] path_openat+0x1de4/0x2cb0 [ 1605.480541][T29123] ? __pfx_path_openat+0x10/0x10 [ 1605.480582][T29123] do_filp_open+0x20b/0x470 [ 1605.480615][T29123] ? __pfx_do_filp_open+0x10/0x10 [ 1605.480673][T29123] ? alloc_fd+0x471/0x7d0 [ 1605.480712][T29123] do_sys_openat2+0x11b/0x1d0 [ 1605.480750][T29123] ? __pfx_do_sys_openat2+0x10/0x10 [ 1605.480801][T29123] __x64_sys_openat+0x174/0x210 [ 1605.480841][T29123] ? __pfx___x64_sys_openat+0x10/0x10 [ 1605.480896][T29123] do_syscall_64+0xcd/0x490 [ 1605.480935][T29123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.480963][T29123] RIP: 0033:0x7fed4db8ebe9 [ 1605.480986][T29123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1605.481011][T29123] RSP: 002b:00007fed4e972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1605.481047][T29123] RAX: ffffffffffffffda RBX: 00007fed4ddc6270 RCX: 00007fed4db8ebe9 [ 1605.481066][T29123] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1605.481085][T29123] RBP: 00007fed4dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1605.481102][T29123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1605.481119][T29123] R13: 00007fed4ddc6308 R14: 00007fed4ddc6270 R15: 00007ffcd9c9dca8 [ 1605.481159][T29123] [ 1605.868270][T29131] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3825'. [ 1607.438519][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.454194][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.069170][T29169] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1608.095008][T29169] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1608.104597][T29169] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1608.125020][T29169] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1608.139321][T29169] page dumped because: unmovable page [ 1608.147403][T29169] page_owner tracks the page as allocated [ 1608.163069][T29169] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1608.212202][T29169] post_alloc_hook+0x1c0/0x230 [ 1608.249162][T29169] get_page_from_freelist+0x132b/0x38e0 [ 1608.255157][T29169] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1608.263532][T29169] alloc_pages_mpol+0x1fb/0x550 [ 1608.269321][T29169] alloc_pages_noprof+0x131/0x390 [ 1608.274502][T29169] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1608.291294][T29169] vmalloc_user_noprof+0x9e/0xe0 [ 1608.296747][T29169] kcov_ioctl+0x4c/0x730 [ 1608.301151][T29169] __x64_sys_ioctl+0x18e/0x210 [ 1608.311714][T29169] do_syscall_64+0xcd/0x490 [ 1608.316504][T29169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1608.322588][T29169] page last free pid 0 tgid 0 stack trace: [ 1608.334326][T29169] __free_frozen_pages+0x7d5/0x10f0 [ 1608.357783][T29169] rcu_core+0x799/0x1530 [ 1608.362205][T29169] handle_softirqs+0x216/0x8e0 [ 1608.368320][T29169] __irq_exit_rcu+0x109/0x170 [ 1608.373859][T29169] irq_exit_rcu+0x9/0x30 [ 1608.379785][T29169] sysvec_call_function_single+0xa4/0xc0 [ 1608.389393][T29169] asm_sysvec_call_function_single+0x1a/0x20 [ 1610.859827][T29192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3839'. [ 1612.551405][T29244] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1612.566010][T29244] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1612.576485][T29244] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1612.587814][T29244] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1612.598763][T29244] page dumped because: unmovable page [ 1612.606064][T29244] page_owner tracks the page as allocated [ 1612.615628][T29244] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1612.635820][T29244] post_alloc_hook+0x1c0/0x230 [ 1612.645549][T29244] get_page_from_freelist+0x132b/0x38e0 [ 1612.653831][T29244] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1612.659900][T29244] alloc_pages_mpol+0x1fb/0x550 [ 1612.665572][T29244] alloc_pages_noprof+0x131/0x390 [ 1612.671430][T29244] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1612.681088][T29244] vmalloc_user_noprof+0x9e/0xe0 [ 1612.690431][T29244] kcov_ioctl+0x4c/0x730 [ 1612.696905][T29244] __x64_sys_ioctl+0x18e/0x210 [ 1612.734543][T29244] do_syscall_64+0xcd/0x490 [ 1612.739609][T29244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.746269][T29244] page last free pid 0 tgid 0 stack trace: [ 1612.752193][T29244] __free_frozen_pages+0x7d5/0x10f0 [ 1612.758035][T29244] rcu_core+0x799/0x1530 [ 1612.762405][T29244] handle_softirqs+0x216/0x8e0 [ 1612.767931][T29244] __irq_exit_rcu+0x109/0x170 [ 1612.772737][T29244] irq_exit_rcu+0x9/0x30 [ 1612.777529][T29244] sysvec_call_function_single+0xa4/0xc0 [ 1612.788390][T29244] asm_sysvec_call_function_single+0x1a/0x20 [ 1613.913185][T29263] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3861'. [ 1614.306308][T29278] random: crng reseeded on system resumption [ 1615.514480][T29299] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1615.840641][T29306] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3862'. [ 1616.139345][T29312] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1616.149939][T29312] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1616.326331][T29312] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1616.346865][T29312] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1616.386819][T29312] page dumped because: unmovable page [ 1616.398066][T29312] page_owner tracks the page as allocated [ 1616.433092][T29312] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1616.475347][T29312] post_alloc_hook+0x1c0/0x230 [ 1616.485851][T29312] get_page_from_freelist+0x132b/0x38e0 [ 1616.538887][T29312] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1616.548686][T29312] alloc_pages_mpol+0x1fb/0x550 [ 1616.563328][T29312] alloc_pages_noprof+0x131/0x390 [ 1616.582121][T29312] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1616.594606][T29312] vmalloc_user_noprof+0x9e/0xe0 [ 1616.599877][T29312] kcov_ioctl+0x4c/0x730 [ 1616.604177][T29312] __x64_sys_ioctl+0x18e/0x210 [ 1616.609154][T29312] do_syscall_64+0xcd/0x490 [ 1616.613874][T29312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1616.624063][T29312] page last free pid 0 tgid 0 stack trace: [ 1616.630348][T29312] __free_frozen_pages+0x7d5/0x10f0 [ 1616.636136][T29312] rcu_core+0x799/0x1530 [ 1616.640498][T29312] handle_softirqs+0x216/0x8e0 [ 1616.645351][T29312] __irq_exit_rcu+0x109/0x170 [ 1616.650262][T29312] irq_exit_rcu+0x9/0x30 [ 1616.654541][T29312] sysvec_call_function_single+0xa4/0xc0 [ 1616.660468][T29312] asm_sysvec_call_function_single+0x1a/0x20 [ 1618.650749][T29327] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3867'. [ 1619.503282][T29344] random: crng reseeded on system resumption [ 1620.318235][T29373] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3875'. [ 1620.790493][T29383] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1620.801404][T29383] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1620.811163][T29383] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1620.822043][T29383] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1620.902470][T29383] page dumped because: unmovable page [ 1620.910454][T29383] page_owner tracks the page as allocated [ 1620.939643][T29383] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1621.003638][T29383] post_alloc_hook+0x1c0/0x230 [ 1621.008552][T29383] get_page_from_freelist+0x132b/0x38e0 [ 1621.014418][T29383] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1621.020653][T29383] alloc_pages_mpol+0x1fb/0x550 [ 1621.026667][T29383] alloc_pages_noprof+0x131/0x390 [ 1621.043666][T29383] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1621.051145][T29383] vmalloc_user_noprof+0x9e/0xe0 [ 1621.056500][T29383] kcov_ioctl+0x4c/0x730 [ 1621.060895][T29383] __x64_sys_ioctl+0x18e/0x210 [ 1621.066075][T29383] do_syscall_64+0xcd/0x490 [ 1621.070646][T29383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.081646][T29383] page last free pid 0 tgid 0 stack trace: [ 1621.087957][T29383] __free_frozen_pages+0x7d5/0x10f0 [ 1621.093928][T29383] rcu_core+0x799/0x1530 [ 1621.098377][T29383] handle_softirqs+0x216/0x8e0 [ 1621.103193][T29383] __irq_exit_rcu+0x109/0x170 [ 1621.180184][T29383] irq_exit_rcu+0x9/0x30 [ 1621.190296][T29383] sysvec_call_function_single+0xa4/0xc0 [ 1621.199171][T29383] asm_sysvec_call_function_single+0x1a/0x20 [ 1624.276579][T29424] random: crng reseeded on system resumption [ 1624.880254][ T5184] Bluetooth: hci6: command 0x0406 tx timeout [ 1625.292917][T29419] random: crng reseeded on system resumption [ 1628.628753][T29474] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3897'. [ 1628.869560][T29501] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3902'. [ 1630.394123][T29519] queue_state_write: operation too long [ 1630.433762][T29519] queue_state_write: use 'run', 'start' or 'kick' [ 1632.786862][T29549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3912'. [ 1632.894357][T29551] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3913'. [ 1633.515396][T29568] netlink: 326 bytes leftover after parsing attributes in process `syz.7.3916'. [ 1633.891407][T29579] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1633.924542][T29579] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1633.989297][T29579] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1633.998557][T29579] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1634.075537][T29579] page dumped because: unmovable page [ 1634.081005][T29579] page_owner tracks the page as allocated [ 1634.091332][T29579] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1634.166146][T29579] post_alloc_hook+0x1c0/0x230 [ 1634.209050][T29579] get_page_from_freelist+0x132b/0x38e0 [ 1634.260324][T29579] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1634.273073][T29579] alloc_pages_mpol+0x1fb/0x550 [ 1634.299862][T29579] alloc_pages_noprof+0x131/0x390 [ 1634.305415][T29579] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1634.311471][T29579] vmalloc_user_noprof+0x9e/0xe0 [ 1634.353392][T29579] kcov_ioctl+0x4c/0x730 [ 1634.501243][T29579] __x64_sys_ioctl+0x18e/0x210 [ 1634.518421][T29579] do_syscall_64+0xcd/0x490 [ 1634.522984][T29579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.533638][T29579] page last free pid 0 tgid 0 stack trace: [ 1634.540162][T29579] __free_frozen_pages+0x7d5/0x10f0 [ 1634.645123][T29579] rcu_core+0x799/0x1530 [ 1634.649423][T29579] handle_softirqs+0x216/0x8e0 [ 1634.732314][T29579] __irq_exit_rcu+0x109/0x170 [ 1634.737162][T29579] irq_exit_rcu+0x9/0x30 [ 1634.741622][T29579] sysvec_call_function_single+0xa4/0xc0 [ 1634.747644][T29579] asm_sysvec_call_function_single+0x1a/0x20 [ 1635.612855][T29590] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3919'. [ 1638.582484][T29652] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1638.623759][T29652] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1638.743301][T29652] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1638.785370][T29652] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1638.852518][T29652] page dumped because: unmovable page [ 1638.862516][T29652] page_owner tracks the page as allocated [ 1638.869199][T29652] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1638.892916][T29652] post_alloc_hook+0x1c0/0x230 [ 1638.899318][T29652] get_page_from_freelist+0x132b/0x38e0 [ 1638.906753][T29652] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1638.912736][T29652] alloc_pages_mpol+0x1fb/0x550 [ 1638.917713][T29652] alloc_pages_noprof+0x131/0x390 [ 1638.922796][T29652] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1638.928818][T29652] vmalloc_user_noprof+0x9e/0xe0 [ 1638.991449][T29652] kcov_ioctl+0x4c/0x730 [ 1639.010530][T29652] __x64_sys_ioctl+0x18e/0x210 [ 1639.020980][T29652] do_syscall_64+0xcd/0x490 [ 1639.028927][T29652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.035751][T29652] page last free pid 0 tgid 0 stack trace: [ 1639.041595][T29652] __free_frozen_pages+0x7d5/0x10f0 [ 1639.127410][T29652] rcu_core+0x799/0x1530 [ 1639.138219][T29652] handle_softirqs+0x216/0x8e0 [ 1639.143126][T29652] __irq_exit_rcu+0x109/0x170 [ 1639.162697][T29652] irq_exit_rcu+0x9/0x30 [ 1639.200245][T29652] sysvec_call_function_single+0xa4/0xc0 [ 1639.231217][T29652] asm_sysvec_call_function_single+0x1a/0x20 [ 1639.923120][T29680] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1639.935823][T29680] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1639.988517][T29680] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1640.068940][T29680] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1640.084844][T29680] page dumped because: unmovable page [ 1640.111081][T29680] page_owner tracks the page as allocated [ 1640.243613][T29680] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1640.364514][T29680] post_alloc_hook+0x1c0/0x230 [ 1640.372723][T29680] get_page_from_freelist+0x132b/0x38e0 [ 1640.390953][T29680] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1640.401213][T29680] alloc_pages_mpol+0x1fb/0x550 [ 1640.414328][T29680] alloc_pages_noprof+0x131/0x390 [ 1640.421208][T29680] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1640.433784][T29680] vmalloc_user_noprof+0x9e/0xe0 [ 1640.440562][T29680] kcov_ioctl+0x4c/0x730 [ 1640.450332][T29680] __x64_sys_ioctl+0x18e/0x210 [ 1640.459224][T29680] do_syscall_64+0xcd/0x490 [ 1640.473647][T29689] __vm_enough_memory: pid: 29689, comm: syz.3.3939, bytes: 4398046511104 not enough memory for the allocation [ 1640.489623][T29680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1640.576343][T29680] page last free pid 0 tgid 0 stack trace: [ 1640.634983][T29680] __free_frozen_pages+0x7d5/0x10f0 [ 1640.671699][T29680] rcu_core+0x799/0x1530 [ 1640.688379][T29680] handle_softirqs+0x216/0x8e0 [ 1640.700130][T29680] __irq_exit_rcu+0x109/0x170 [ 1640.705408][T29680] irq_exit_rcu+0x9/0x30 [ 1640.714592][T29680] sysvec_call_function_single+0xa4/0xc0 [ 1640.720955][T29680] asm_sysvec_call_function_single+0x1a/0x20 [ 1642.243735][T29714] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3942'. [ 1642.806004][T29721] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1642.827113][T29721] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1642.887791][T29721] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1642.902498][T29721] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1642.989229][T29721] page dumped because: unmovable page [ 1643.000590][T29721] page_owner tracks the page as allocated [ 1643.008043][T29721] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1643.051105][T29721] post_alloc_hook+0x1c0/0x230 [ 1643.069294][T29721] get_page_from_freelist+0x132b/0x38e0 [ 1643.079339][T29721] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1643.087807][T29721] alloc_pages_mpol+0x1fb/0x550 [ 1643.092792][T29721] alloc_pages_noprof+0x131/0x390 [ 1643.122812][T29721] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1643.131295][T29721] vmalloc_user_noprof+0x9e/0xe0 [ 1643.143507][T29721] kcov_ioctl+0x4c/0x730 [ 1643.148514][T29721] __x64_sys_ioctl+0x18e/0x210 [ 1643.154818][T29721] do_syscall_64+0xcd/0x490 [ 1643.159371][T29721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.191285][T29721] page last free pid 0 tgid 0 stack trace: [ 1643.201232][T29721] __free_frozen_pages+0x7d5/0x10f0 [ 1643.209268][T29721] rcu_core+0x799/0x1530 [ 1643.213566][T29721] handle_softirqs+0x216/0x8e0 [ 1643.219083][T29721] __irq_exit_rcu+0x109/0x170 [ 1643.223807][T29721] irq_exit_rcu+0x9/0x30 [ 1643.231544][T29721] sysvec_call_function_single+0xa4/0xc0 [ 1643.244103][T29721] asm_sysvec_call_function_single+0x1a/0x20 [ 1644.011676][T29710] random: crng reseeded on system resumption [ 1644.514910][T29743] FAULT_INJECTION: forcing a failure. [ 1644.514910][T29743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1644.594819][T29743] CPU: 1 UID: 0 PID: 29743 Comm: syz.7.3948 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1644.594865][T29743] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1644.594872][T29743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1644.594880][T29743] Call Trace: [ 1644.594886][T29743] [ 1644.594893][T29743] dump_stack_lvl+0x16c/0x1f0 [ 1644.594917][T29743] should_fail_ex+0x512/0x640 [ 1644.594939][T29743] _copy_to_user+0x32/0xd0 [ 1644.594954][T29743] snd_pcm_oss_read2+0x294/0x410 [ 1644.594971][T29743] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1644.594985][T29743] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 1644.595003][T29743] ? snd_pcm_oss_prepare+0x11e/0x220 [ 1644.595026][T29743] snd_pcm_oss_read+0x5d3/0x760 [ 1644.595044][T29743] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1644.595060][T29743] vfs_read+0x1e4/0xcf0 [ 1644.595081][T29743] ? __pfx_vfs_read+0x10/0x10 [ 1644.595095][T29743] ? find_held_lock+0x2b/0x80 [ 1644.595116][T29743] ? __fget_files+0x204/0x3c0 [ 1644.595134][T29743] ? __fget_files+0x20e/0x3c0 [ 1644.595154][T29743] ksys_read+0x12a/0x250 [ 1644.595170][T29743] ? __pfx_ksys_read+0x10/0x10 [ 1644.595191][T29743] do_syscall_64+0xcd/0x490 [ 1644.595212][T29743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.595227][T29743] RIP: 0033:0x7f0210f8ebe9 [ 1644.595240][T29743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1644.595254][T29743] RSP: 002b:00007f0211d26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1644.595268][T29743] RAX: ffffffffffffffda RBX: 00007f02111c6090 RCX: 00007f0210f8ebe9 [ 1644.595278][T29743] RDX: 0000000000000f3c RSI: 0000000000000000 RDI: 0000000000000003 [ 1644.595286][T29743] RBP: 00007f0211d26090 R08: 0000000000000000 R09: 0000000000000000 [ 1644.595295][T29743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.595304][T29743] R13: 00007f02111c6128 R14: 00007f02111c6090 R15: 00007fffd02f1818 [ 1644.595322][T29743] [ 1646.478776][T29754] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3949'. [ 1647.501379][T29803] random: crng reseeded on system resumption [ 1651.768399][T21019] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1652.286078][T29877] ima: policy update failed [ 1652.291016][ T30] audit: type=1802 audit(4294968291.909:12): pid=29877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.3969" res=0 errno=0 [ 1653.262882][T29891] random: crng reseeded on system resumption [ 1653.905880][T29902] FAULT_INJECTION: forcing a failure. [ 1653.905880][T29902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1653.919255][T29902] CPU: 1 UID: 0 PID: 29902 Comm: syz.6.3973 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1653.919302][T29902] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1653.919314][T29902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1653.919329][T29902] Call Trace: [ 1653.919339][T29902] [ 1653.919350][T29902] dump_stack_lvl+0x16c/0x1f0 [ 1653.919387][T29902] should_fail_ex+0x512/0x640 [ 1653.919427][T29902] _copy_from_iter+0x29f/0x1720 [ 1653.919475][T29902] ? __pfx__copy_from_iter+0x10/0x10 [ 1653.919520][T29902] ? __pfx___might_resched+0x10/0x10 [ 1653.919555][T29902] file_tty_write.constprop.0+0x488/0x9b0 [ 1653.919600][T29902] vfs_write+0x7d0/0x11d0 [ 1653.919631][T29902] ? __pfx_tty_write+0x10/0x10 [ 1653.919666][T29902] ? __pfx_vfs_write+0x10/0x10 [ 1653.919692][T29902] ? find_held_lock+0x2b/0x80 [ 1653.919740][T29902] ksys_write+0x12a/0x250 [ 1653.919770][T29902] ? __pfx_ksys_write+0x10/0x10 [ 1653.919809][T29902] do_syscall_64+0xcd/0x490 [ 1653.919846][T29902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.919873][T29902] RIP: 0033:0x7f184a18ebe9 [ 1653.919894][T29902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1653.919918][T29902] RSP: 002b:00007f184afa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1653.919942][T29902] RAX: ffffffffffffffda RBX: 00007f184a3c5fa0 RCX: 00007f184a18ebe9 [ 1653.919959][T29902] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1653.919975][T29902] RBP: 00007f184afa9090 R08: 0000000000000000 R09: 0000000000000000 [ 1653.919990][T29902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1653.920006][T29902] R13: 00007f184a3c6038 R14: 00007f184a3c5fa0 R15: 00007fff16b53f08 [ 1653.920042][T29902] [ 1654.956284][T29917] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1654.967100][T29917] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1654.990090][T29917] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1654.999816][T29917] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1655.066898][T29917] page dumped because: unmovable page [ 1655.118458][T29917] page_owner tracks the page as allocated [ 1655.124391][T29917] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1655.202654][T29917] post_alloc_hook+0x1c0/0x230 [ 1655.212990][T29917] get_page_from_freelist+0x132b/0x38e0 [ 1655.219514][T29917] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1655.236139][T29917] alloc_pages_mpol+0x1fb/0x550 [ 1655.241053][T29917] alloc_pages_noprof+0x131/0x390 [ 1655.254724][T29917] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1655.322577][T29917] vmalloc_user_noprof+0x9e/0xe0 [ 1655.328083][T29917] kcov_ioctl+0x4c/0x730 [ 1655.332373][T29917] __x64_sys_ioctl+0x18e/0x210 [ 1655.337249][T29917] do_syscall_64+0xcd/0x490 [ 1655.341784][T29917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1655.377983][T29917] page last free pid 0 tgid 0 stack trace: [ 1655.388839][T29917] __free_frozen_pages+0x7d5/0x10f0 [ 1655.394274][T29917] rcu_core+0x799/0x1530 [ 1655.398736][T29917] handle_softirqs+0x216/0x8e0 [ 1655.403537][T29917] __irq_exit_rcu+0x109/0x170 [ 1655.408306][T29917] irq_exit_rcu+0x9/0x30 [ 1655.412581][T29917] sysvec_call_function_single+0xa4/0xc0 [ 1655.549082][T29917] asm_sysvec_call_function_single+0x1a/0x20 [ 1657.168731][T29936] random: crng reseeded on system resumption [ 1657.888988][T29965] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1659.077676][T29971] FAULT_INJECTION: forcing a failure. [ 1659.077676][T29971] name failslab, interval 1, probability 0, space 0, times 0 [ 1659.164738][T29971] CPU: 1 UID: 0 PID: 29971 Comm: syz.7.3983 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1659.164787][T29971] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1659.164799][T29971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1659.164813][T29971] Call Trace: [ 1659.164821][T29971] [ 1659.164832][T29971] dump_stack_lvl+0x16c/0x1f0 [ 1659.164868][T29971] should_fail_ex+0x512/0x640 [ 1659.164903][T29971] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1659.164938][T29971] should_failslab+0xc2/0x120 [ 1659.164971][T29971] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1659.165001][T29971] ? __pfx_stack_trace_save+0x10/0x10 [ 1659.165029][T29971] ? __d_alloc+0x32/0xae0 [ 1659.165061][T29971] __d_alloc+0x32/0xae0 [ 1659.165093][T29971] d_alloc_parallel+0x111/0x1480 [ 1659.165139][T29971] ? find_held_lock+0x2b/0x80 [ 1659.165165][T29971] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1659.165205][T29971] ? __d_lookup+0x266/0x4a0 [ 1659.165249][T29971] lookup_open.isra.0+0x665/0x1580 [ 1659.165283][T29971] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1659.165324][T29971] ? __pfx_down_write+0x10/0x10 [ 1659.165354][T29971] ? mnt_get_write_access+0x20c/0x300 [ 1659.165394][T29971] path_openat+0x893/0x2cb0 [ 1659.165433][T29971] ? __pfx_path_openat+0x10/0x10 [ 1659.165463][T29971] ? __lock_acquire+0xb97/0x1ce0 [ 1659.165499][T29971] do_filp_open+0x20b/0x470 [ 1659.165530][T29971] ? __pfx_do_filp_open+0x10/0x10 [ 1659.165585][T29971] ? _raw_spin_unlock+0x28/0x50 [ 1659.165614][T29971] ? alloc_fd+0x471/0x7d0 [ 1659.165651][T29971] do_sys_openat2+0x11b/0x1d0 [ 1659.165696][T29971] ? __pfx_do_sys_openat2+0x10/0x10 [ 1659.165747][T29971] __x64_sys_open+0x153/0x1e0 [ 1659.165785][T29971] ? __pfx___x64_sys_open+0x10/0x10 [ 1659.165830][T29971] ? rcu_is_watching+0x12/0xc0 [ 1659.165860][T29971] do_syscall_64+0xcd/0x490 [ 1659.165896][T29971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1659.165923][T29971] RIP: 0033:0x7f0210f8ebe9 [ 1659.165943][T29971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1659.165967][T29971] RSP: 002b:00007f020f1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1659.165998][T29971] RAX: ffffffffffffffda RBX: 00007f02111c6180 RCX: 00007f0210f8ebe9 [ 1659.166015][T29971] RDX: 0000000000000045 RSI: 000000000012ba7e RDI: 0000200000000000 [ 1659.166032][T29971] RBP: 00007f020f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1659.166048][T29971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1659.166064][T29971] R13: 00007f02111c6218 R14: 00007f02111c6180 R15: 00007fffd02f1818 [ 1659.166100][T29971] [ 1660.392041][T29998] FAULT_INJECTION: forcing a failure. [ 1660.392041][T29998] name failslab, interval 1, probability 0, space 0, times 0 [ 1660.508864][T29998] CPU: 0 UID: 0 PID: 29998 Comm: syz.7.3990 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1660.508909][T29998] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1660.508919][T29998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1660.508933][T29998] Call Trace: [ 1660.508942][T29998] [ 1660.508952][T29998] dump_stack_lvl+0x16c/0x1f0 [ 1660.508988][T29998] should_fail_ex+0x512/0x640 [ 1660.509026][T29998] should_failslab+0xc2/0x120 [ 1660.509059][T29998] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1660.509089][T29998] ? skb_clone+0x190/0x3f0 [ 1660.509126][T29998] skb_clone+0x190/0x3f0 [ 1660.509153][T29998] netlink_deliver_tap+0xabd/0xd30 [ 1660.509176][T29998] netlink_unicast+0x64c/0x870 [ 1660.509198][T29998] ? __pfx_netlink_unicast+0x10/0x10 [ 1660.509217][T29998] ? __pfx___might_resched+0x10/0x10 [ 1660.509231][T29998] ? __lock_acquire+0xb97/0x1ce0 [ 1660.509255][T29998] netlink_sendmsg+0x8d1/0xdd0 [ 1660.509277][T29998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1660.509298][T29998] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1660.509317][T29998] ____sys_sendmsg+0xa95/0xc70 [ 1660.509331][T29998] ? copy_msghdr_from_user+0x10a/0x160 [ 1660.509349][T29998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1660.509374][T29998] ___sys_sendmsg+0x134/0x1d0 [ 1660.509394][T29998] ? __pfx____sys_sendmsg+0x10/0x10 [ 1660.509435][T29998] __sys_sendmsg+0x16d/0x220 [ 1660.509454][T29998] ? __pfx___sys_sendmsg+0x10/0x10 [ 1660.509484][T29998] do_syscall_64+0xcd/0x490 [ 1660.509505][T29998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.509519][T29998] RIP: 0033:0x7f0210f8ebe9 [ 1660.509531][T29998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1660.509545][T29998] RSP: 002b:00007f0211d47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1660.509559][T29998] RAX: ffffffffffffffda RBX: 00007f02111c5fa0 RCX: 00007f0210f8ebe9 [ 1660.509569][T29998] RDX: 0000000004004040 RSI: 0000200000000280 RDI: 0000000000000003 [ 1660.509578][T29998] RBP: 00007f0211d47090 R08: 0000000000000000 R09: 0000000000000000 [ 1660.509586][T29998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1660.509595][T29998] R13: 00007f02111c6038 R14: 00007f02111c5fa0 R15: 00007fffd02f1818 [ 1660.509620][T29998] [ 1662.122625][T29994] random: crng reseeded on system resumption [ 1663.792478][T30036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3994'. [ 1664.826076][T30051] program syz.6.3999 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1664.916765][T30054] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 1664.997702][T30053] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(5) [ 1667.857285][T30099] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4006'. [ 1668.420913][T30107] FAULT_INJECTION: forcing a failure. [ 1668.420913][T30107] name failslab, interval 1, probability 0, space 0, times 0 [ 1668.524966][T30107] CPU: 1 UID: 0 PID: 30107 Comm: syz.3.4009 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1668.525014][T30107] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1668.525025][T30107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1668.525041][T30107] Call Trace: [ 1668.525050][T30107] [ 1668.525060][T30107] dump_stack_lvl+0x16c/0x1f0 [ 1668.525098][T30107] should_fail_ex+0x512/0x640 [ 1668.525131][T30107] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1668.525165][T30107] should_failslab+0xc2/0x120 [ 1668.525198][T30107] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1668.525228][T30107] ? ptlock_alloc+0x1f/0x70 [ 1668.525259][T30107] ptlock_alloc+0x1f/0x70 [ 1668.525288][T30107] pte_alloc_one+0x82/0x3a0 [ 1668.525316][T30107] do_pte_missing+0x1afc/0x3ba0 [ 1668.525345][T30107] ? do_raw_spin_unlock+0x172/0x230 [ 1668.525383][T30107] ? __pmd_alloc+0x3fb/0x930 [ 1668.525421][T30107] __handle_mm_fault+0x152a/0x2a50 [ 1668.525453][T30107] ? mt_find+0x3ef/0xa30 [ 1668.525490][T30107] ? __pfx___handle_mm_fault+0x10/0x10 [ 1668.525515][T30107] ? __pfx_mt_find+0x10/0x10 [ 1668.525581][T30107] ? find_vma+0xbf/0x140 [ 1668.525613][T30107] ? __pfx_find_vma+0x10/0x10 [ 1668.525649][T30107] handle_mm_fault+0x589/0xd10 [ 1668.525677][T30107] ? trace_raw_output_exceptions+0x131/0x150 [ 1668.525718][T30107] do_user_addr_fault+0x7a6/0x1370 [ 1668.525759][T30107] ? rcu_is_watching+0x12/0xc0 [ 1668.525790][T30107] exc_page_fault+0x5c/0xb0 [ 1668.525822][T30107] asm_exc_page_fault+0x26/0x30 [ 1668.525847][T30107] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1668.525875][T30107] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1668.525901][T30107] RSP: 0018:ffffc900239977e0 EFLAGS: 00050246 [ 1668.525922][T30107] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000000008 [ 1668.525939][T30107] RDX: fffff52004732f57 RSI: 0000000000000000 RDI: ffffc90023997ab0 [ 1668.525956][T30107] RBP: 0000000000000000 R08: 0000000000000001 R09: fffff52004732f56 [ 1668.525973][T30107] R10: ffffc90023997ab7 R11: 0000000000000000 R12: ffffc90023997c58 [ 1668.525990][T30107] R13: 0000000000000008 R14: ffffc90023997ab0 R15: 00007ffffffff000 [ 1668.526027][T30107] _copy_from_iter+0x383/0x1720 [ 1668.526075][T30107] ? __pfx__copy_from_iter+0x10/0x10 [ 1668.526121][T30107] ? find_held_lock+0x2b/0x80 [ 1668.526153][T30107] ping_common_sendmsg+0xc4/0x2e0 [ 1668.526182][T30107] ping_v4_sendmsg+0x19a/0x1a40 [ 1668.526213][T30107] ? register_lock_class+0x41/0x4c0 [ 1668.526247][T30107] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 1668.526275][T30107] ? __lock_acquire+0xb97/0x1ce0 [ 1668.526321][T30107] ? reacquire_held_locks+0xcd/0x1f0 [ 1668.526353][T30107] ? release_sock+0x21/0x220 [ 1668.526393][T30107] ? find_held_lock+0x2b/0x80 [ 1668.526427][T30107] ? inet_autobind+0x145/0x1a0 [ 1668.526461][T30107] ? __local_bh_enable_ip+0xa4/0x120 [ 1668.526492][T30107] ? inet_autobind+0x14a/0x1a0 [ 1668.526528][T30107] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 1668.526563][T30107] inet_sendmsg+0x11c/0x140 [ 1668.526591][T30107] sock_write_iter+0x4aa/0x5b0 [ 1668.526618][T30107] ? __pfx_sock_write_iter+0x10/0x10 [ 1668.526657][T30107] ? bpf_lsm_file_permission+0x9/0x10 [ 1668.526692][T30107] ? security_file_permission+0x71/0x210 [ 1668.526727][T30107] ? rw_verify_area+0xcf/0x6c0 [ 1668.526758][T30107] vfs_write+0x7d0/0x11d0 [ 1668.526788][T30107] ? __pfx_sock_write_iter+0x10/0x10 [ 1668.526817][T30107] ? __pfx_vfs_write+0x10/0x10 [ 1668.526843][T30107] ? find_held_lock+0x2b/0x80 [ 1668.526892][T30107] ksys_write+0x1f8/0x250 [ 1668.526921][T30107] ? __pfx_ksys_write+0x10/0x10 [ 1668.526960][T30107] do_syscall_64+0xcd/0x490 [ 1668.526997][T30107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1668.527022][T30107] RIP: 0033:0x7f1e7998ebe9 [ 1668.527043][T30107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1668.527067][T30107] RSP: 002b:00007f1e7a867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1668.527091][T30107] RAX: ffffffffffffffda RBX: 00007f1e79bc5fa0 RCX: 00007f1e7998ebe9 [ 1668.527109][T30107] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1668.527125][T30107] RBP: 00007f1e7a867090 R08: 0000000000000000 R09: 0000000000000000 [ 1668.527142][T30107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1668.527158][T30107] R13: 00007f1e79bc6038 R14: 00007f1e79bc5fa0 R15: 00007fff0345b018 [ 1668.527194][T30107] [ 1668.972785][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.014817][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.210562][T30115] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4010'. [ 1672.580299][T30147] random: crng reseeded on system resumption [ 1672.665495][T30147] Restarting kernel threads ... [ 1672.676286][T30147] Done restarting kernel threads. [ 1675.061802][T30181] FAULT_INJECTION: forcing a failure. [ 1675.061802][T30181] name failslab, interval 1, probability 0, space 0, times 0 [ 1675.304786][T30181] CPU: 1 UID: 0 PID: 30181 Comm: syz.6.4024 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1675.304835][T30181] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1675.304846][T30181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1675.304860][T30181] Call Trace: [ 1675.304869][T30181] [ 1675.304878][T30181] dump_stack_lvl+0x16c/0x1f0 [ 1675.304925][T30181] should_fail_ex+0x512/0x640 [ 1675.304959][T30181] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1675.304994][T30181] should_failslab+0xc2/0x120 [ 1675.305030][T30181] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1675.305061][T30181] ? __d_alloc+0x32/0xae0 [ 1675.305096][T30181] __d_alloc+0x32/0xae0 [ 1675.305124][T30181] ? __lock_acquire+0xb97/0x1ce0 [ 1675.305159][T30181] d_alloc_parallel+0x111/0x1480 [ 1675.305197][T30181] ? kasan_save_free_info+0x3b/0x60 [ 1675.305233][T30181] ? __kasan_slab_free+0x60/0x70 [ 1675.305262][T30181] ? walk_component+0x1a2/0x5b0 [ 1675.305287][T30181] ? link_path_walk+0x511/0xe20 [ 1675.305311][T30181] ? path_openat+0x1b0/0x2cb0 [ 1675.305338][T30181] ? do_sys_openat2+0x11b/0x1d0 [ 1675.305377][T30181] ? __lock_acquire+0xb97/0x1ce0 [ 1675.305408][T30181] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1675.305449][T30181] ? lockdep_init_map_type+0x5c/0x280 [ 1675.305483][T30181] ? lockdep_init_map_type+0x5c/0x280 [ 1675.305524][T30181] __lookup_slow+0x193/0x460 [ 1675.305562][T30181] ? __pfx___lookup_slow+0x10/0x10 [ 1675.305621][T30181] ? lookup_fast+0x156/0x610 [ 1675.305652][T30181] walk_component+0x353/0x5b0 [ 1675.305682][T30181] link_path_walk+0x627/0xe20 [ 1675.305722][T30181] path_openat+0x1b0/0x2cb0 [ 1675.305749][T30181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.305789][T30181] ? __pfx_path_openat+0x10/0x10 [ 1675.305829][T30181] do_filp_open+0x20b/0x470 [ 1675.305860][T30181] ? __pfx_do_filp_open+0x10/0x10 [ 1675.305909][T30181] ? __pfx_kfree_link+0x10/0x10 [ 1675.305957][T30181] ? alloc_fd+0x471/0x7d0 [ 1675.305995][T30181] do_sys_openat2+0x11b/0x1d0 [ 1675.306031][T30181] ? __pfx_do_sys_openat2+0x10/0x10 [ 1675.306071][T30181] ? __fget_files+0x20e/0x3c0 [ 1675.306106][T30181] __x64_sys_openat+0x174/0x210 [ 1675.306143][T30181] ? __pfx___x64_sys_openat+0x10/0x10 [ 1675.306179][T30181] ? ksys_write+0x1ac/0x250 [ 1675.306221][T30181] do_syscall_64+0xcd/0x490 [ 1675.306257][T30181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1675.306284][T30181] RIP: 0033:0x7f184a18d550 [ 1675.306305][T30181] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1675.306330][T30181] RSP: 002b:00007f184afa8f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1675.306355][T30181] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f184a18d550 [ 1675.306372][T30181] RDX: 0000000000000002 RSI: 00007f184afa8fa0 RDI: 00000000ffffff9c [ 1675.306389][T30181] RBP: 00007f184afa8fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1675.306406][T30181] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1675.306422][T30181] R13: 00007f184a3c6038 R14: 00007f184a3c5fa0 R15: 00007fff16b53f08 [ 1675.306458][T30181] [ 1676.850111][T30188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4026'. [ 1678.158803][T30210] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4029'. [ 1680.317644][T30221] random: crng reseeded on system resumption [ 1680.351348][T30226] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1680.391136][T30226] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1680.401267][T30226] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1680.410642][T30226] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1680.424855][T30226] page dumped because: unmovable page [ 1680.430380][T30226] page_owner tracks the page as allocated [ 1680.436948][T30226] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1680.474705][T30226] post_alloc_hook+0x1c0/0x230 [ 1680.480037][T30226] get_page_from_freelist+0x132b/0x38e0 [ 1680.622876][T30226] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1680.659739][T30226] alloc_pages_mpol+0x1fb/0x550 [ 1680.682099][T30226] alloc_pages_noprof+0x131/0x390 [ 1680.724407][T30226] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1680.738654][T30226] vmalloc_user_noprof+0x9e/0xe0 [ 1680.744829][T30226] kcov_ioctl+0x4c/0x730 [ 1680.749140][T30226] __x64_sys_ioctl+0x18e/0x210 [ 1680.755568][T30226] do_syscall_64+0xcd/0x490 [ 1680.762413][T30226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.770215][T30226] page last free pid 0 tgid 0 stack trace: [ 1680.796841][T30226] __free_frozen_pages+0x7d5/0x10f0 [ 1680.802098][T30226] rcu_core+0x799/0x1530 [ 1680.820541][T30226] handle_softirqs+0x216/0x8e0 [ 1680.825764][T30226] __irq_exit_rcu+0x109/0x170 [ 1680.830480][T30226] irq_exit_rcu+0x9/0x30 [ 1680.970772][T30226] sysvec_call_function_single+0xa4/0xc0 [ 1681.011401][T30226] asm_sysvec_call_function_single+0x1a/0x20 [ 1681.231862][T30221] Restarting kernel threads ... [ 1681.255452][T30221] Done restarting kernel threads. [ 1682.037204][T30250] ceph: Failed to parse sending metrics switch value 'P^' [ 1682.062563][T30249] delete_channel: no stack [ 1682.473758][T30255] random: crng reseeded on system resumption [ 1682.513635][T30255] FAULT_INJECTION: forcing a failure. [ 1682.513635][T30255] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1682.595838][T30255] CPU: 0 UID: 0 PID: 30255 Comm: syz.1.4036 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1682.595892][T30255] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1682.595905][T30255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1682.595920][T30255] Call Trace: [ 1682.595930][T30255] [ 1682.595940][T30255] dump_stack_lvl+0x16c/0x1f0 [ 1682.595980][T30255] should_fail_ex+0x512/0x640 [ 1682.596022][T30255] should_fail_alloc_page+0xe7/0x130 [ 1682.596062][T30255] prepare_alloc_pages+0x3c2/0x610 [ 1682.596099][T30255] ? rcu_is_watching+0x12/0xc0 [ 1682.596131][T30255] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1682.596173][T30255] ? stack_trace_save+0x8e/0xc0 [ 1682.596204][T30255] ? __pfx_stack_trace_save+0x10/0x10 [ 1682.596237][T30255] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1682.596269][T30255] ? kasan_save_stack+0x42/0x60 [ 1682.596295][T30255] ? kasan_save_stack+0x33/0x60 [ 1682.596323][T30255] ? do_dentry_open+0x97f/0x1530 [ 1682.596361][T30255] ? vfs_open+0x82/0x3f0 [ 1682.596390][T30255] ? path_openat+0x1de4/0x2cb0 [ 1682.596414][T30255] ? do_filp_open+0x20b/0x470 [ 1682.596437][T30255] ? do_sys_openat2+0x11b/0x1d0 [ 1682.596465][T30255] ? __x64_sys_openat+0x174/0x210 [ 1682.596495][T30255] ? do_syscall_64+0xcd/0x490 [ 1682.596520][T30255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.596545][T30255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1682.596575][T30255] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1682.596607][T30255] ? policy_nodemask+0xea/0x4e0 [ 1682.596636][T30255] alloc_pages_mpol+0x1fb/0x550 [ 1682.596665][T30255] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1682.596701][T30255] alloc_pages_noprof+0x131/0x390 [ 1682.596729][T30255] get_zeroed_page_noprof+0x18/0xb0 [ 1682.596758][T30255] get_image_page+0x18/0x190 [ 1682.596781][T30255] alloc_rtree_node+0x3c/0xb0 [ 1682.596804][T30255] memory_bm_create+0x519/0x810 [ 1682.596843][T30255] create_basic_memory_bitmaps+0x10b/0x320 [ 1682.596874][T30255] snapshot_open+0x235/0x2b0 [ 1682.596901][T30255] ? __pfx_snapshot_open+0x10/0x10 [ 1682.596929][T30255] misc_open+0x35d/0x420 [ 1682.596953][T30255] ? __pfx_misc_open+0x10/0x10 [ 1682.596975][T30255] chrdev_open+0x231/0x6a0 [ 1682.597004][T30255] ? __pfx_apparmor_file_open+0x10/0x10 [ 1682.597028][T30255] ? __pfx_chrdev_open+0x10/0x10 [ 1682.597057][T30255] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1682.597088][T30255] do_dentry_open+0x97f/0x1530 [ 1682.597114][T30255] ? __pfx_chrdev_open+0x10/0x10 [ 1682.597146][T30255] vfs_open+0x82/0x3f0 [ 1682.597179][T30255] path_openat+0x1de4/0x2cb0 [ 1682.597214][T30255] ? __pfx_path_openat+0x10/0x10 [ 1682.597247][T30255] do_filp_open+0x20b/0x470 [ 1682.597272][T30255] ? __pfx_do_filp_open+0x10/0x10 [ 1682.597335][T30255] ? alloc_fd+0x471/0x7d0 [ 1682.597370][T30255] do_sys_openat2+0x11b/0x1d0 [ 1682.597403][T30255] ? __pfx_do_sys_openat2+0x10/0x10 [ 1682.597447][T30255] __x64_sys_openat+0x174/0x210 [ 1682.597481][T30255] ? __pfx___x64_sys_openat+0x10/0x10 [ 1682.597524][T30255] do_syscall_64+0xcd/0x490 [ 1682.597555][T30255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.597577][T30255] RIP: 0033:0x7fed4db8ebe9 [ 1682.597596][T30255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1682.597619][T30255] RSP: 002b:00007fed4e972038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1682.597641][T30255] RAX: ffffffffffffffda RBX: 00007fed4ddc6270 RCX: 00007fed4db8ebe9 [ 1682.597657][T30255] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1682.597673][T30255] RBP: 00007fed4dc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1682.597688][T30255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1682.597702][T30255] R13: 00007fed4ddc6308 R14: 00007fed4ddc6270 R15: 00007ffcd9c9dca8 [ 1682.597733][T30255] [ 1683.540721][T30268] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1683.552144][T30268] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1683.563318][T30268] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1683.572443][T30268] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1683.664946][T30268] page dumped because: unmovable page [ 1683.670373][T30268] page_owner tracks the page as allocated [ 1683.676512][T30268] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1683.696753][T30268] post_alloc_hook+0x1c0/0x230 [ 1683.702352][T30268] get_page_from_freelist+0x132b/0x38e0 [ 1683.711192][T30268] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1683.722875][T30268] alloc_pages_mpol+0x1fb/0x550 [ 1683.727857][T30268] alloc_pages_noprof+0x131/0x390 [ 1683.733034][T30268] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1683.739051][T30268] vmalloc_user_noprof+0x9e/0xe0 [ 1683.744087][T30268] kcov_ioctl+0x4c/0x730 [ 1683.770698][T30268] __x64_sys_ioctl+0x18e/0x210 [ 1683.781127][T30268] do_syscall_64+0xcd/0x490 [ 1683.789042][T30268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1683.822469][T30268] page last free pid 0 tgid 0 stack trace: [ 1683.878198][T30268] __free_frozen_pages+0x7d5/0x10f0 [ 1683.910930][T30268] rcu_core+0x799/0x1530 [ 1683.917360][T30268] handle_softirqs+0x216/0x8e0 [ 1683.964394][T30268] __irq_exit_rcu+0x109/0x170 [ 1683.974694][T30268] irq_exit_rcu+0x9/0x30 [ 1683.984838][T30268] sysvec_call_function_single+0xa4/0xc0 [ 1684.352118][T30268] asm_sysvec_call_function_single+0x1a/0x20 [ 1685.765875][T30293] FAULT_INJECTION: forcing a failure. [ 1685.765875][T30293] name failslab, interval 1, probability 0, space 0, times 0 [ 1685.821393][T30293] CPU: 1 UID: 0 PID: 30293 Comm: syz.7.4046 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1685.821445][T30293] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1685.821456][T30293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1685.821473][T30293] Call Trace: [ 1685.821483][T30293] [ 1685.821493][T30293] dump_stack_lvl+0x16c/0x1f0 [ 1685.821532][T30293] should_fail_ex+0x512/0x640 [ 1685.821569][T30293] ? __kmalloc_noprof+0xbf/0x510 [ 1685.821601][T30293] ? iter_file_splice_write+0x1cc/0x12e0 [ 1685.821630][T30293] should_failslab+0xc2/0x120 [ 1685.821660][T30293] __kmalloc_noprof+0xd2/0x510 [ 1685.821698][T30293] iter_file_splice_write+0x1cc/0x12e0 [ 1685.821734][T30293] ? kfree+0x2b4/0x4d0 [ 1685.821770][T30293] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1685.821801][T30293] ? __lock_acquire+0xb97/0x1ce0 [ 1685.821840][T30293] ? __pfx_copy_splice_read+0x10/0x10 [ 1685.821887][T30293] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1685.821919][T30293] direct_splice_actor+0x192/0x6c0 [ 1685.821952][T30293] splice_direct_to_actor+0x345/0xa30 [ 1685.821982][T30293] ? __pfx_direct_splice_actor+0x10/0x10 [ 1685.822026][T30293] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1685.822067][T30293] do_splice_direct+0x174/0x240 [ 1685.822099][T30293] ? __pfx_do_splice_direct+0x10/0x10 [ 1685.822129][T30293] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1685.822164][T30293] ? rw_verify_area+0xcf/0x6c0 [ 1685.822196][T30293] do_sendfile+0xb06/0xe50 [ 1685.822231][T30293] ? __pfx_do_sendfile+0x10/0x10 [ 1685.822267][T30293] ? __x64_sys_futex+0x1e0/0x4c0 [ 1685.822298][T30293] ? __x64_sys_futex+0x1e9/0x4c0 [ 1685.822336][T30293] __x64_sys_sendfile64+0x1d8/0x220 [ 1685.822374][T30293] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1685.822422][T30293] do_syscall_64+0xcd/0x490 [ 1685.822461][T30293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1685.822489][T30293] RIP: 0033:0x7f0210f8ebe9 [ 1685.822511][T30293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1685.822537][T30293] RSP: 002b:00007f0211d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1685.822563][T30293] RAX: ffffffffffffffda RBX: 00007f02111c5fa0 RCX: 00007f0210f8ebe9 [ 1685.822582][T30293] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1685.822599][T30293] RBP: 00007f0211011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1685.822615][T30293] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1685.822631][T30293] R13: 00007f02111c6038 R14: 00007f02111c5fa0 R15: 00007fffd02f1818 [ 1685.822669][T30293] [ 1687.917189][T30319] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4051'. [ 1688.033389][T30304] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1688.092544][T30304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1688.183505][T30304] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1688.190995][T30304] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1688.197518][T30304] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1688.261810][T30304] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1688.271866][T30304] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1688.309820][T30304] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1688.333360][T30304] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1688.348953][T30304] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1688.642124][T30304] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1688.649843][T30304] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1688.701756][T30332] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4053'. [ 1688.724745][T21019] Bluetooth: hci4: command 0x0c1a tx timeout [ 1688.733417][T30303] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1690.154880][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 1690.170285][T21019] Bluetooth: hci3: command 0x0c1a tx timeout [ 1690.219338][T30358] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1690.229669][T30358] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1690.239865][T30358] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1690.255046][ T5184] Bluetooth: hci1: command 0x0c1a tx timeout [ 1690.294969][T30358] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1690.305635][T30358] page dumped because: unmovable page [ 1690.311106][T30358] page_owner tracks the page as allocated [ 1690.317261][T30358] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1690.337520][T30358] post_alloc_hook+0x1c0/0x230 [ 1690.342434][T30358] get_page_from_freelist+0x132b/0x38e0 [ 1690.348115][T30358] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1690.354143][T30358] alloc_pages_mpol+0x1fb/0x550 [ 1690.367119][T30358] alloc_pages_noprof+0x131/0x390 [ 1690.374918][T30358] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1690.386604][T30359] random: crng reseeded on system resumption [ 1690.392513][ T5184] Bluetooth: hci2: command 0x0406 tx timeout [ 1690.398781][ T5184] Bluetooth: hci5: command 0x0406 tx timeout [ 1690.482654][T30359] FAULT_INJECTION: forcing a failure. [ 1690.482654][T30359] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1690.500757][T30358] vmalloc_user_noprof+0x9e/0xe0 [ 1690.511962][T30358] kcov_ioctl+0x4c/0x730 [ 1690.522802][T30358] __x64_sys_ioctl+0x18e/0x210 [ 1690.529973][T30358] do_syscall_64+0xcd/0x490 [ 1690.557093][T30359] CPU: 0 UID: 0 PID: 30359 Comm: syz.3.4054 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1690.557146][T30359] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1690.557158][T30359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1690.557172][T30359] Call Trace: [ 1690.557181][T30359] [ 1690.557192][T30359] dump_stack_lvl+0x16c/0x1f0 [ 1690.557232][T30359] should_fail_ex+0x512/0x640 [ 1690.557272][T30359] should_fail_alloc_page+0xe7/0x130 [ 1690.557308][T30359] prepare_alloc_pages+0x3c2/0x610 [ 1690.557346][T30359] ? rcu_is_watching+0x12/0xc0 [ 1690.557385][T30359] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1690.557430][T30359] ? stack_trace_save+0x8e/0xc0 [ 1690.557459][T30359] ? __pfx_stack_trace_save+0x10/0x10 [ 1690.557492][T30359] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1690.557529][T30359] ? kasan_save_stack+0x42/0x60 [ 1690.557556][T30359] ? kasan_save_stack+0x33/0x60 [ 1690.557590][T30359] ? do_dentry_open+0x97f/0x1530 [ 1690.557618][T30359] ? vfs_open+0x82/0x3f0 [ 1690.557650][T30359] ? path_openat+0x1de4/0x2cb0 [ 1690.557678][T30359] ? do_filp_open+0x20b/0x470 [ 1690.557705][T30359] ? do_sys_openat2+0x11b/0x1d0 [ 1690.557740][T30359] ? __x64_sys_openat+0x174/0x210 [ 1690.557776][T30359] ? do_syscall_64+0xcd/0x490 [ 1690.557809][T30359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.557838][T30359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1690.557874][T30359] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1690.557914][T30359] ? policy_nodemask+0xea/0x4e0 [ 1690.557950][T30359] alloc_pages_mpol+0x1fb/0x550 [ 1690.557986][T30359] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1690.558029][T30359] alloc_pages_noprof+0x131/0x390 [ 1690.558064][T30359] get_zeroed_page_noprof+0x18/0xb0 [ 1690.558102][T30359] get_image_page+0x18/0x190 [ 1690.558129][T30359] alloc_rtree_node+0x3c/0xb0 [ 1690.558157][T30359] memory_bm_create+0x519/0x810 [ 1690.558199][T30359] create_basic_memory_bitmaps+0x10b/0x320 [ 1690.558235][T30359] snapshot_open+0x235/0x2b0 [ 1690.558265][T30359] ? __pfx_snapshot_open+0x10/0x10 [ 1690.558297][T30359] misc_open+0x35d/0x420 [ 1690.558326][T30359] ? __pfx_misc_open+0x10/0x10 [ 1690.558353][T30359] chrdev_open+0x231/0x6a0 [ 1690.558395][T30359] ? __pfx_apparmor_file_open+0x10/0x10 [ 1690.558426][T30359] ? __pfx_chrdev_open+0x10/0x10 [ 1690.558461][T30359] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1690.558498][T30359] do_dentry_open+0x97f/0x1530 [ 1690.558531][T30359] ? __pfx_chrdev_open+0x10/0x10 [ 1690.558571][T30359] vfs_open+0x82/0x3f0 [ 1690.558619][T30359] path_openat+0x1de4/0x2cb0 [ 1690.558664][T30359] ? __pfx_path_openat+0x10/0x10 [ 1690.558706][T30359] do_filp_open+0x20b/0x470 [ 1690.558738][T30359] ? __pfx_do_filp_open+0x10/0x10 [ 1690.558795][T30359] ? alloc_fd+0x471/0x7d0 [ 1690.558832][T30359] do_sys_openat2+0x11b/0x1d0 [ 1690.558869][T30359] ? __pfx_do_sys_openat2+0x10/0x10 [ 1690.558921][T30359] __x64_sys_openat+0x174/0x210 [ 1690.558959][T30359] ? __pfx___x64_sys_openat+0x10/0x10 [ 1690.559013][T30359] do_syscall_64+0xcd/0x490 [ 1690.559050][T30359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.559077][T30359] RIP: 0033:0x7f1e7998ebe9 [ 1690.559098][T30359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1690.559124][T30359] RSP: 002b:00007f1e7a804038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1690.559151][T30359] RAX: ffffffffffffffda RBX: 00007f1e79bc6270 RCX: 00007f1e7998ebe9 [ 1690.559170][T30359] RDX: 00000000001438bf RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1690.559189][T30359] RBP: 00007f1e79a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1690.559206][T30359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1690.559223][T30359] R13: 00007f1e79bc6308 R14: 00007f1e79bc6270 R15: 00007fff0345b018 [ 1690.559259][T30359] [ 1690.561021][T30358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.729580][T21019] Bluetooth: hci6: command 0x0406 tx timeout [ 1691.074795][T30358] page last free pid 0 tgid 0 stack trace: [ 1691.104606][T30358] __free_frozen_pages+0x7d5/0x10f0 [ 1691.144791][T30358] rcu_core+0x799/0x1530 [ 1691.183952][T30358] handle_softirqs+0x216/0x8e0 [ 1691.194103][T30358] __irq_exit_rcu+0x109/0x170 [ 1691.231069][T30358] irq_exit_rcu+0x9/0x30 [ 1691.247520][T30358] sysvec_call_function_single+0xa4/0xc0 [ 1691.253187][T30358] asm_sysvec_call_function_single+0x1a/0x20 [ 1692.315001][T21019] Bluetooth: hci1: command 0x0c1a tx timeout [ 1692.484755][T21019] Bluetooth: hci5: command 0x0406 tx timeout [ 1692.484883][ T5184] Bluetooth: hci2: command 0x0406 tx timeout [ 1693.034971][ T5184] Bluetooth: hci6: command 0x0406 tx timeout [ 1694.554777][ T5184] Bluetooth: hci5: command 0x0406 tx timeout [ 1695.314305][T30390] random: crng reseeded on system resumption [ 1696.211222][T30417] FAULT_INJECTION: forcing a failure. [ 1696.211222][T30417] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1696.232518][T30417] CPU: 0 UID: 0 PID: 30417 Comm: syz.7.4069 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1696.232569][T30417] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1696.232581][T30417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1696.232596][T30417] Call Trace: [ 1696.232605][T30417] [ 1696.232616][T30417] dump_stack_lvl+0x16c/0x1f0 [ 1696.232656][T30417] should_fail_ex+0x512/0x640 [ 1696.232696][T30417] get_futex_key+0x1d0/0x1560 [ 1696.232744][T30417] ? __pfx_get_futex_key+0x10/0x10 [ 1696.232778][T30417] ? __pick_eevdf+0x30a/0x670 [ 1696.232817][T30417] futex_wait_setup+0x9d/0x550 [ 1696.232865][T30417] __futex_wait+0x194/0x2f0 [ 1696.232903][T30417] ? __pfx___futex_wait+0x10/0x10 [ 1696.232937][T30417] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1696.232969][T30417] ? lockdep_hardirqs_on+0x7c/0x110 [ 1696.233005][T30417] ? __pfx_futex_wake_mark+0x10/0x10 [ 1696.233048][T30417] ? futex_private_hash_put+0x176/0x300 [ 1696.233083][T30417] ? futex_private_hash_put+0x18a/0x300 [ 1696.233117][T30417] futex_wait+0xe8/0x380 [ 1696.233153][T30417] ? __pfx_futex_wait+0x10/0x10 [ 1696.233200][T30417] ? ksys_write+0x190/0x250 [ 1696.233235][T30417] do_futex+0x229/0x350 [ 1696.233266][T30417] ? __pfx_do_futex+0x10/0x10 [ 1696.233303][T30417] __x64_sys_futex+0x1e0/0x4c0 [ 1696.233335][T30417] ? fput+0x9b/0xd0 [ 1696.233366][T30417] ? __pfx___x64_sys_futex+0x10/0x10 [ 1696.233403][T30417] ? xfd_validate_state+0x61/0x180 [ 1696.233436][T30417] ? __pfx_ksys_write+0x10/0x10 [ 1696.233473][T30417] do_syscall_64+0xcd/0x490 [ 1696.233508][T30417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1696.233533][T30417] RIP: 0033:0x7f0210f8ebe9 [ 1696.233553][T30417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1696.233578][T30417] RSP: 002b:00007f0211d260e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1696.233603][T30417] RAX: ffffffffffffffda RBX: 00007f02111c6098 RCX: 00007f0210f8ebe9 [ 1696.233620][T30417] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f02111c6098 [ 1696.233634][T30417] RBP: 00007f02111c6090 R08: 0000000000000000 R09: 0000000000000000 [ 1696.233648][T30417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1696.233665][T30417] R13: 00007f02111c6128 R14: 00007fffd02f1730 R15: 00007fffd02f1818 [ 1696.233696][T30417] [ 1696.779767][T30399] random: crng reseeded on system resumption [ 1696.917805][T30433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4074'. [ 1696.959698][T30433] netlink: 'syz.7.4074': attribute type 1 has an invalid length. [ 1697.002287][T30433] netlink: 13 bytes leftover after parsing attributes in process `syz.7.4074'. [ 1697.283259][T30421] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4071'. [ 1697.630388][T30442] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4076'. [ 1698.054277][T30454] page: refcount:2 mapcount:1 mapping:0000000000000000 index:0xffff888078000dc0 pfn:0x78000 [ 1698.091004][T30454] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1698.134767][T30454] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1698.197920][T30454] raw: ffff888078000dc0 0000000000000000 0000000200000000 0000000000000000 [ 1698.206724][T30454] page dumped because: unmovable page [ 1698.212187][T30454] page_owner tracks the page as allocated [ 1698.222972][T30454] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 26483, tgid 26483 (syz-executor), ts 1424140059283, free_ts 1397805991483 [ 1698.242755][ C1] vkms_vblank_simulate: vblank timer overrun [ 1698.249103][T30454] post_alloc_hook+0x1c0/0x230 [ 1698.253949][T30454] get_page_from_freelist+0x132b/0x38e0 [ 1698.263383][T30454] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1698.269436][T30454] alloc_pages_mpol+0x1fb/0x550 [ 1698.274381][T30454] alloc_pages_noprof+0x131/0x390 [ 1698.284787][T30454] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 1698.307972][T30458] random: crng reseeded on system resumption [ 1698.319137][T30454] vmalloc_user_noprof+0x9e/0xe0 [ 1698.324162][T30454] kcov_ioctl+0x4c/0x730 [ 1698.328549][T30454] __x64_sys_ioctl+0x18e/0x210 [ 1698.333385][T30454] do_syscall_64+0xcd/0x490 [ 1698.338034][T30454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.343991][T30454] page last free pid 0 tgid 0 stack trace: [ 1698.349871][T30454] __free_frozen_pages+0x7d5/0x10f0 [ 1698.355164][T30454] rcu_core+0x799/0x1530 [ 1698.359450][T30454] handle_softirqs+0x216/0x8e0 [ 1698.367525][T30454] __irq_exit_rcu+0x109/0x170 [ 1698.404370][T30454] irq_exit_rcu+0x9/0x30 [ 1698.435628][T30454] sysvec_call_function_single+0xa4/0xc0 [ 1698.454793][T30454] asm_sysvec_call_function_single+0x1a/0x20 [ 1698.475483][T30458] Restarting kernel threads ... [ 1698.505239][T30458] Done restarting kernel threads. [ 1698.955308][ T31] INFO: task syz.4.3324:26331 blocked for more than 143 seconds. [ 1698.963107][ T31] Tainted: GF R U syzkaller #0 [ 1698.984735][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1698.993472][ T31] task:syz.4.3324 state:D stack:25512 pid:26331 tgid:26330 ppid:20856 task_flags:0x400140 flags:0x00004004 [ 1699.070299][ T31] Call Trace: [ 1699.073626][ T31] [ 1699.094713][ T31] __schedule+0x1190/0x5de0 [ 1699.099347][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1699.114879][ T31] ? stack_trace_save+0x8e/0xc0 [ 1699.131645][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1699.137310][ T31] ? __pfx___schedule+0x10/0x10 [ 1699.142206][ T31] ? find_held_lock+0x2b/0x80 [ 1699.163534][ T31] ? schedule+0x2d7/0x3a0 [ 1699.169735][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1699.540059][ T31] schedule+0xe7/0x3a0 [ 1699.551016][ T31] schedule_preempt_disabled+0x13/0x30 [ 1699.564671][ T31] __mutex_lock+0x81b/0x1060 [ 1699.575556][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1699.586653][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1699.600192][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1699.611631][ T31] ? net_generic+0xea/0x2a0 [ 1699.630768][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1699.646392][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1699.703548][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 1699.719146][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1699.731825][ T31] ? rcu_is_watching+0x12/0xc0 [ 1699.747144][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1699.762950][ T31] ? security_capable+0x7e/0x260 [ 1699.846339][ T31] genl_rcv_msg+0x55c/0x800 [ 1699.858767][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1699.888855][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1699.914371][ T31] netlink_rcv_skb+0x155/0x420 [ 1699.944757][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1699.950216][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1699.956301][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1699.961694][ T31] genl_rcv+0x28/0x40 [ 1699.965766][ T31] netlink_unicast+0x5aa/0x870 [ 1699.970570][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1699.982049][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1699.989801][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 1699.999676][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1700.010883][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1700.019612][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1700.027295][ T31] ____sys_sendmsg+0xa95/0xc70 [ 1700.039387][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1700.047852][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1700.056971][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1700.062451][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1700.072470][ T31] __sys_sendmsg+0x16d/0x220 [ 1700.081459][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1700.091136][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1700.101651][ T31] do_syscall_64+0xcd/0x490 [ 1700.106336][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.112964][ T31] RIP: 0033:0x7fa6c1f8ebe9 [ 1700.134249][ T31] RSP: 002b:00007fa6c2d4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1700.142943][ T31] RAX: ffffffffffffffda RBX: 00007fa6c21c5fa0 RCX: 00007fa6c1f8ebe9 [ 1700.151069][ T31] RDX: 0000000000040010 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1700.159280][ T31] RBP: 00007fa6c2011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1700.167367][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1700.175811][ T31] R13: 00007fa6c21c6038 R14: 00007fa6c21c5fa0 R15: 00007ffdda025628 [ 1700.184024][ T31] [ 1700.194233][ T31] INFO: task syz-executor:26486 blocked for more than 144 seconds. [ 1700.256616][ T31] Tainted: GF R U syzkaller #0 [ 1700.263157][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1700.284284][ T31] task:syz-executor state:D stack:24216 pid:26486 tgid:26486 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1700.296672][ T31] Call Trace: [ 1700.299974][ T31] [ 1700.302930][ T31] __schedule+0x1190/0x5de0 [ 1700.307798][ T31] ? __pfx___schedule+0x10/0x10 [ 1700.312748][ T31] ? find_held_lock+0x2b/0x80 [ 1700.317738][ T31] ? schedule+0x2d7/0x3a0 [ 1700.322431][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1700.329910][ T31] schedule+0xe7/0x3a0 [ 1700.334016][ T31] schedule_preempt_disabled+0x13/0x30 [ 1700.342949][ T31] __mutex_lock+0x81b/0x1060 [ 1700.349646][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1700.354776][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1700.360355][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1700.365695][ T31] ? net_generic+0xea/0x2a0 [ 1700.370220][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1700.375603][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1700.380737][ T31] nfsd_umount+0x48/0xe0 [ 1700.385031][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1700.390432][ T31] deactivate_super+0xde/0x100 [ 1700.395329][ T31] cleanup_mnt+0x225/0x450 [ 1700.399803][ T31] task_work_run+0x14d/0x240 [ 1700.404395][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1700.409690][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1700.415197][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1700.420508][ T31] do_syscall_64+0x3f6/0x490 [ 1700.425227][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.431138][ T31] RIP: 0033:0x7f3bc238ff17 [ 1700.436725][ T31] RSP: 002b:00007ffc105565c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1700.446606][ T31] RAX: 0000000000000000 RBX: 00007f3bc2411c05 RCX: 00007f3bc238ff17 [ 1700.454611][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc10556680 [ 1700.462757][ T31] RBP: 00007ffc10556680 R08: 0000000000000000 R09: 0000000000000000 [ 1700.470828][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc10557710 [ 1700.482282][ T31] R13: 00007f3bc2411c05 R14: 000000000016a956 R15: 00007ffc10557750 [ 1700.490683][ T31] [ 1700.493824][ T31] [ 1700.493824][ T31] Showing all locks held in the system: [ 1700.511938][ T31] 1 lock held by pool_workqueue_/3: [ 1700.521991][ T31] #0: ffffffff8e5cc678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1700.532389][ T31] 4 locks held by kworker/u8:0/12: [ 1700.560909][ T31] 1 lock held by khungtaskd/31: [ 1700.579133][ T31] #0: ffffffff8e5c10e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1700.589469][ T31] 4 locks held by kworker/u8:6/1907: [ 1700.595896][ T31] 2 locks held by getty/5624: [ 1700.607486][ T31] #0: ffff88814e0f60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1700.620020][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1700.630613][ T31] 2 locks held by syz.0.3319/26304: [ 1700.636708][ T31] #0: ffffffff9042acd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1700.647580][ T31] #1: ffffffff8e9d97c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1700.657872][ T31] 2 locks held by syz.4.3324/26331: [ 1700.663078][ T31] #0: ffffffff9042acd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1700.671647][ T31] #1: ffffffff8e9d97c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1700.681816][ T31] 2 locks held by syz-executor/26486: [ 1700.687251][ T31] #0: ffff88802a4360e0 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1700.697761][ T31] #1: ffffffff8e9d97c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1700.707454][ T31] 3 locks held by syz.3.4078/30456: [ 1700.712724][ T31] #0: ffffffff90371510 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1700.722542][ T31] #1: ffffffff90387808 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 1700.731955][ T31] #2: ffffffff8e5cc678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1700.742352][ T31] [ 1700.747422][ T31] ============================================= [ 1700.747422][ T31] [ 1700.755919][ T31] NMI backtrace for cpu 0 [ 1700.755941][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1700.755984][ T31] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1700.755994][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1700.756009][ T31] Call Trace: [ 1700.756019][ T31] [ 1700.756029][ T31] dump_stack_lvl+0x116/0x1f0 [ 1700.756067][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1700.756091][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1700.756121][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1700.756154][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1700.756181][ T31] watchdog+0xf0e/0x1260 [ 1700.756220][ T31] ? __pfx_watchdog+0x10/0x10 [ 1700.756252][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1700.756284][ T31] ? __kthread_parkme+0x19e/0x250 [ 1700.756324][ T31] ? __pfx_watchdog+0x10/0x10 [ 1700.756357][ T31] kthread+0x3c5/0x780 [ 1700.756392][ T31] ? __pfx_kthread+0x10/0x10 [ 1700.756429][ T31] ? rcu_is_watching+0x12/0xc0 [ 1700.756456][ T31] ? __pfx_kthread+0x10/0x10 [ 1700.756492][ T31] ret_from_fork+0x5d7/0x6f0 [ 1700.756528][ T31] ? __pfx_kthread+0x10/0x10 [ 1700.756562][ T31] ret_from_fork_asm+0x1a/0x30 [ 1700.756609][ T31] [ 1700.756620][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1700.890056][ C1] NMI backtrace for cpu 1 [ 1700.890078][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1700.890117][ C1] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1700.890128][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1700.890143][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1700.890178][ C1] Code: bc 64 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 11 19 00 fb f4 7c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1700.890201][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 1700.890220][ C1] RAX: 000000000155af4f RBX: 0000000000000001 RCX: ffffffff8b90fbf9 [ 1700.890240][ C1] RDX: 0000000000000000 RSI: ffffffff8de4dc69 RDI: ffffffff8c162f00 [ 1700.890256][ C1] RBP: ffffed1003c55b40 R08: 0000000000000001 R09: ffffed10170a6655 [ 1700.890272][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 1700.890287][ C1] R13: ffff88801e2ada00 R14: ffffffff90ab9290 R15: 0000000000000000 [ 1700.890303][ C1] FS: 0000000000000000(0000) GS:ffff8881247c0000(0000) knlGS:0000000000000000 [ 1700.890327][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1700.890343][ C1] CR2: 0000555571f115c8 CR3: 0000000075060000 CR4: 00000000003526f0 [ 1700.890359][ C1] Call Trace: [ 1700.890367][ C1] [ 1700.890375][ C1] default_idle+0x13/0x20 [ 1700.890406][ C1] default_idle_call+0x6d/0xb0 [ 1700.890438][ C1] do_idle+0x391/0x510 [ 1700.890463][ C1] ? __pfx_do_idle+0x10/0x10 [ 1700.890486][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 1700.890524][ C1] cpu_startup_entry+0x4f/0x60 [ 1700.890547][ C1] start_secondary+0x21d/0x2b0 [ 1700.890586][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1700.890621][ C1] common_startup_64+0x13e/0x148 [ 1700.890655][ C1] [ 1700.891256][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1701.076096][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: GF R U syzkaller #0 PREEMPT(full) [ 1701.086793][ T31] Tainted: [F]=FORCED_MODULE, [R]=FORCED_RMMOD, [U]=USER [ 1701.093813][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1701.103862][ T31] Call Trace: [ 1701.107133][ T31] [ 1701.110058][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1701.114655][ T31] vpanic+0x6e8/0x7a0 [ 1701.118641][ T31] ? __pfx_vpanic+0x10/0x10 [ 1701.123164][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1701.129176][ T31] panic+0xca/0xd0 [ 1701.132910][ T31] ? __pfx_panic+0x10/0x10 [ 1701.137332][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1701.142711][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1701.148883][ T31] ? watchdog+0xd78/0x1260 [ 1701.153402][ T31] ? watchdog+0xd6b/0x1260 [ 1701.157828][ T31] watchdog+0xd89/0x1260 [ 1701.162101][ T31] ? __pfx_watchdog+0x10/0x10 [ 1701.166785][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1701.171991][ T31] ? __kthread_parkme+0x19e/0x250 [ 1701.177017][ T31] ? __pfx_watchdog+0x10/0x10 [ 1701.181894][ T31] kthread+0x3c5/0x780 [ 1701.185993][ T31] ? __pfx_kthread+0x10/0x10 [ 1701.190587][ T31] ? rcu_is_watching+0x12/0xc0 [ 1701.195380][ T31] ? __pfx_kthread+0x10/0x10 [ 1701.200059][ T31] ret_from_fork+0x5d7/0x6f0 [ 1701.204658][ T31] ? __pfx_kthread+0x10/0x10 [ 1701.209691][ T31] ret_from_fork_asm+0x1a/0x30 [ 1701.214481][ T31] [ 1701.217737][ T31] Kernel Offset: disabled [ 1701.222052][ T31] Rebooting in 86400 seconds..