last executing test programs: 2m21.437935694s ago: executing program 0 (id=2194): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0x40104d01, r0) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x7, &(0x7f0000000140)='\x00', &(0x7f0000000180)="b4e87e7cc51b48e337774dbcd1b2efacc4be959fbf1937d2979359ea7ce2424b7412b3f2d40a6ce2a03213204a5daa32d3b0b0a8fcea28f78ebbe570545e97b41929bb86ac22b46ddcda160a0277ff3c53c015c38de09e7146", 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) preadv$auto(0x3, 0x0, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x1d, 0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) mremap$auto(0x1, 0x4, 0x3, 0x50a, 0x6) 2m20.609134186s ago: executing program 0 (id=2197): syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/020/001\x00', 0x80000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x1001, 0x804) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0xa8200, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x687ca0b, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0xb}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x801ffde, 0x1, 0x2000000000000006, 0x3, 0x8, 0x5, 0x6, 0x7, 0x1, 0x9, 0x2, 0x3, 0x5, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x3bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xffffffff00000000, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0x5, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0xffffff9e}, 0x40000) 2m20.200842174s ago: executing program 0 (id=2198): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x5) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) ioctl$auto(r2, 0x80046f45, 0x38) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sched_setattr$auto(0x0, 0x0, 0x7b) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 2m19.431276657s ago: executing program 0 (id=2201): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x2020009, 0x3, 0x75, 0xfffffffffffffffa, 0x8000) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x2440, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6e642, 0x0) write$auto(r1, &(0x7f00000002c0)='}\t\x00\x00/audio1\x005qG=\x15\xd2\xd8\x82\x15+\xffo\x10\xa2\x90\x11\x1f\xe8\xcf\x12\xecTI\x9d\xb0i\xf8\xac\xf5n\t\xce_R\xfe7\x19\xe7\xb2\xf3u\xf0\xd44|\xbf\xd7\xd0\xfd9K\x05\x11A\xe0nM?y\xa0/\xf2\x00\xec\xe4\xae\xbc\xcfp\t\x82\x14+\x94G\x9c\x83\x00\x85kf$I\xde\xcb\x0e', 0x100000a3d9) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) close_range$auto(0x2, 0x8, 0x0) r2 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) read$auto(r1, 0x0, 0x39bd) ioctl$auto(0xffffffffffffffff, 0x1, 0xffffffffffffffff) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r2, 0x0, 0x10000000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) semctl$auto_SETVAL(0x80000000, 0xf, 0x10, 0x0) sendmsg$auto_NL80211_CMD_TDLS_OPER(r3, 0x0, 0x0) r4 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xffffffff00000000, 0x3, 0xeb1, r4, 0x8000) close_range$auto(0x2, r1, 0x2001ff) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2m18.144565199s ago: executing program 0 (id=2203): write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r0, 0x6) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) fsopen$auto(0x0, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m16.889164316s ago: executing program 0 (id=2208): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x24000000) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2000d, 0x8, 0xeb1, 0x404, 0x80000000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001bc0)="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", 0x63c) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0xcfb7, 0x9, 0x6]}, 0x0) wait4$auto(0x0, 0x0, 0x80000001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x282403, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x8008, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) 2m1.584579487s ago: executing program 32 (id=2208): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x24000000) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2000d, 0x8, 0xeb1, 0x404, 0x80000000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001bc0)="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", 0x63c) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x7, 0xfffffffffffffffb, 0x15f4da05, 0x10, 0x1000, 0x3, 0x4000008000001f, 0x6, 0x6d3e, 0xcfb7, 0x9, 0x6]}, 0x0) wait4$auto(0x0, 0x0, 0x80000001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x282403, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x8008, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) 24.642403536s ago: executing program 1 (id=2441): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) bpf$auto(0x9, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x2) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2400000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(0x0, r2) gettid() close_range$auto(r1, r0, 0xf8c) sendmsg$auto_TASKSTATS_CMD_GET(r2, 0x0, 0x20008010) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) shutdown$auto(0x200000003, 0x2) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) 20.051211597s ago: executing program 1 (id=2452): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0xffffffffffffff7f, 0x368e, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0x7, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdead, 0x804}) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D1\x00', 0x581402, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0xc0403d11, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, &(0x7f0000000280)={@siginfo_0_0={0x200, 0x0, 0x6, @_sigsys={&(0x7f00000000c0)="55eb8df319677f9aebf453b195011dc75b314a6a2de037085459dc03a1ad19978559dbc978c89a4fb1f552151699faea53575d94e9e2f930abeb4f1cd2fa58efd12b9315baeca5f900c19f32e51de1ba99fb4f82871232b3", 0x1000, 0x826}}}, 0x3, &(0x7f0000000300)={{0xda0000000000000, 0x969d}, {0x2, 0x6}, 0x8000000000000000, 0xa, 0x8, 0x9, 0xb871, 0x6, 0x9ffd, 0x81, 0x0, 0x1000000000f8c5, 0x1000, 0x81, 0xc, 0xd}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x1d) pwrite64$auto(0xc8, 0x0, 0xfded, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4G\x0f\xed\xc0D\xd6\xaf%\xa5\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xccT\fZq', 0x100000a3da) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) open(&(0x7f0000000040)='./cgroup\x00', 0x80, 0xb5d1af1605322de0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) 16.467062844s ago: executing program 1 (id=2458): mmap$auto(0x4, 0x400007, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sysfs$auto(0x2, 0xd, 0x0) fsopen$auto(0x0, 0x1) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, 0x0) r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, 0x0, 0x0) semctl$auto(0x0, 0xe3, 0x0, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c800000", @ANYRES16=r4, @ANYBLOB="01002dbf7000f9dbdf250100000006000200000000000500070080000000080009000600000008000a000800000014001f002001000000000000000000000000000114002000fe80000000000000000000000000003a"], 0x5c}, 0x1, 0x0, 0x0, 0x4048080}, 0x400c004) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00'}) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyw6\x00', 0x200, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) r6 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, 0x0) r7 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r7, 0x40383d0c, 0x0) 12.543599433s ago: executing program 1 (id=2465): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000002c0)={0x1, 0x17b7, "e5d02ebff1a0f22827060519362f2f88e79b08745cfeeb517c6dc57b7e6cdc606f490e7822d765e620e59b384bb7a4767cef31f639bb12efa4922229c5b4918f", "957bb98f6817aa559f6d1846dba8340fd7ad51f4595586d2c600434e68629cea1e53bc48eae23140d90b519394bf8df11a3924c9253960b4e9ab012fc27ef6ab0965734454d6662aa9e4680705010b14", 0x4, 0x2, "8568cf815dcbb782114b268bb324a302a4842e0b7270da771be7a331349e3b3cb06f60eabb01da08aaee3bafb4fda1fa3d27f74dd006547ab43c2200128038c7"}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296", 0x2e) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) r3 = io_uring_setup$auto(0x1, 0x0) syz_clone3(&(0x7f0000000540)={0x902000, &(0x7f0000000180), &(0x7f0000000240), &(0x7f00000003c0)=0x0, {0x17}, &(0x7f0000000400)=""/172, 0xac, &(0x7f00000004c0)=""/23, &(0x7f0000000500)=[0xffffffffffffffff], 0x1, {r3}}, 0x58) ptrace$auto_PTRACE_GETREGSET(0x4204, r4, 0x7, 0xfffffffffffff5fe) bpf$auto(0x7e71, 0x0, 0x9) getpid() r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) write$auto(r5, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fcntl$auto(0xff80000000000000, 0x409, 0x3f) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xd, 0x6, 0xf, 0x29f, 0x103, 0x6, 0x6, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c1, 0xb, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 9.961718672s ago: executing program 4 (id=2471): r0 = socket(0x1e, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0ro\x00', 0x10400, 0x0) close_range$auto(r2, 0xfffffffffffff000, 0x6) close_range$auto(0x0, 0x5, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x400008, 0xdf, 0x9b71, r2, 0x7fff) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCSCLOCKID(r5, 0x400445a0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd15/queue/io_poll\x00', 0x400040, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000640)="018fac297e857e25b7371f9d3e9a350e7ac811c087f2794823b838385544315f18c78aee068e8971ca6feb7f5f21444f160ffbc6db39677d21dec99144eadfc787b697614aa78b2a09a39bcb0208ff082e47645c25907bbc783bdd342c0650e39eca7a57213fceadff804bb496b0e41c2e02a57a5ef51c54f23bf5287e1db445733328b476535b7090cb672953e1120510e1a584e9fcfc1c4808ac9cede07dd7e98c09a3995a9da60b347a878e0f225d96e77240f4a7fa722cbb4c8227aff94545ceeb882986e65511321297dbb4499c00000000000019c766a6278ff3c4630cc2a2ec836612116b9e025e852d42e7584d4a0f60125302c5c74ea60ed92538424e4622d1250cc2ce405778e9957a7cb1b94ff1f3e3817ae961cc6df39e5fd5f0f3728179ba600fc6fecf9f8d2a0b1a8f11eec6bdd4b76bc2a9016c4aa19e0050504a34252502d6d09ceadd2153c18f3b4641fec28a498a5e89a03a111cd6b127481c7de2e3cdd0b24dfdae8716990506ab3f120cdbb47350a2079a81f79cd1765cdd52bbeb74f1d2412174a9760c9781cec2b69b458f73ccae98b745dfaa4264f3701df6f9f67efb7dca62f60aab39b339eeae128beb47e77e61cbb0f19a30ca4c3855a1", 0x8) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r6, 0x545c, 0x0) ioctl$auto_MEMGETREGIONCOUNT(r4, 0x80044d07, 0x0) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) 8.829075975s ago: executing program 4 (id=2474): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0x80000e9e, 0xa, 0xc2, 0x9, 0x100000000, 0x5, 0x8000020180, 0x4, 0x4, 0xd, 0x0, 0xfc, 0xff, 0xfffffffffffffffb, 0x1000100000005]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x19U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x81\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xecWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xfbJ7\xd1\xdc\xe1\x80yi\xef\x91M\xfbB\x97\x80\x9a\xbep\x86\x93\xcc4\xe5\xba\x015I\x1d\r\xdf\xc1Q\x8eM\xa6\t$\xb7ZR\xdcs\x94\xccn\x05\xb8\x06', 0x500000a3d9) socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x1480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0x5452, &(0x7f0000000080)={0x80, 0xbed0}) mmap$auto(0x7, 0x2020009, 0x0, 0x1000000000000ebe, 0xfffffffffffffffa, 0x8000) r2 = io_uring_setup$auto(0x401, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) ioctl$auto_MEMLOCK(r2, 0x40084d05, &(0x7f00000000c0)={0xfffffffe, 0x7fffffff}) timer_gettime$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xcff, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 7.314546642s ago: executing program 1 (id=2478): mmap$auto(0x0, 0x2020009, 0x3, 0x4000000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x80, 0x6, 0xeb1, 0x401, 0xffffffffffff7fff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) bpf$auto(0x0, 0x0, 0x4f4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0xffffffffffffaee1, 0xfffffffffffffffe, 0x2, 0x7, 0xbfb, 0x79, 0x30, 0x3, 0x2}) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x400, 0x3, 0x462, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) setsockopt$auto_SO_SELECT_ERR_QUEUE(r3, 0xf, 0x2d, &(0x7f0000000200)='::,+\x00', 0x101) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/33u\x00', 0x20202, 0x0) pread64$auto(r4, 0x0, 0xfffe, 0x9) close_range$auto(0x2, 0xa, 0x0) kexec_load$auto(0xa9d, 0xffffffff7fffffff, &(0x7f0000000340)={@buf=&(0x7f0000000240)="04f354fd18a72c6c12050946e733d8c887968e288257204f9d8e6edec08568dbcaa8d7bdb4", 0x0, 0x8}, 0x4) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pts/ptmx\x00', 0xa0540, 0x0) ioctl$auto(r5, 0x80045430, 0x38) epoll_create$auto(0x12b8) 7.064398551s ago: executing program 4 (id=2479): io_uring_register$auto(0xffffffffffffffff, 0x1f, 0x0, 0x1) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000240)='/\x9d\xfbK\xbede\x02\x00\x00\x00\x00\xff#@\x83\x01\xbcMY\xb4\xaf9}J\x8a\xd7\x96`\x01\xfa%\rL\x81\xc2\xeft\xb3mg\xfak\xad\xe76\xce\x84Q\xbfk\vw\xb8\'\x18\xbc\x17_\x8d\r\x1f\xae{hR\xdcF\x8f\xd1\x92\x8a\x1a6\xd7\xf2\x14\x87M\xd1of\xe1\xfc\xfef\xd6\xe2Z8k\xdc\xa7\x8b0s\xe7\x12%\xe2\x88\x1c\x01U\\r\xc0N\x8f-So\xb6\xd3\x86\v\x1ef\xeb\xed\x05\xfc\x17G\xc1\xdf\t\xb7^Q>\v\xe9L\x036\x0f\xc7}\x96(m\xd70\a~KE+s\x92\xbe\xf5\x98\xde\xfa\x04\x16\x90K\xa6\x12\xcc\xe4\xd9\xcba\xa1\xfc\xb5fj\x04\xbaU\xbev\xc7\x00\x81\xc8G\xd6g\xc4\x185\xdf\xee\x8d\x86\xb6x\xd5\xbb;P\xa2M\xf2\xe3\xaf\xe9', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @multicast2}, 0x54) mmap$auto(0x761a, 0xe983, 0xd, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x10001, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x6) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0xffffffff}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000037, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x52, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r1, 0x4, &(0x7f0000000100)='/dev/fuse\x00', &(0x7f0000001580), 0x0) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers_autoprobe\x00', 0x141000, 0x0) socket(0x10, 0x2, 0xc) 6.013567303s ago: executing program 3 (id=2482): mmap$auto(0x0, 0x10400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(&(0x7f0000000000)='/dev/loop7\x00', 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) read$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000080)=""/5, 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) read$auto(r2, 0x0, 0x18) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) close_range$auto(0x2, 0x8, 0x0) fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00') setgroups$auto(0xe32, 0x0) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x142, 0x0) setsockopt$auto(r3, 0x9, 0xfffff92c, &(0x7f0000000040)='\x00', 0x7) 5.521285275s ago: executing program 2 (id=2483): mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x141180, 0x0) pread64$auto(r1, 0x0, 0x1000f42d, 0x100) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x80000010, r3, 0xe2) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80981, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r5) sendmsg$auto_NBD_CMD_STATUS(r5, 0x0, 0x4008050) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2082, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000280)=""/175, 0xaf) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 5.52001573s ago: executing program 4 (id=2491): mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x0) open(0x0, 0x261c2, 0x22) socket(0x18, 0xa, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa042, 0x0) socketpair$auto(0x1, 0x3, 0x0, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 5.228926564s ago: executing program 4 (id=2484): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x80000000df, 0x9b72, 0x2, 0x8000) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, 0x0, 0x4080, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/cmdline\x00', 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, r0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="00042cbd7000fddbdf252f000000050013000500000005001500850000000500"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) connect$auto(0x3, 0x0, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) get_robust_list$auto(0x1, 0x0, 0x0) mlock$auto(0x10fbe8, 0x4) 5.002023926s ago: executing program 3 (id=2485): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x24) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x3, 0xb, 0x14, 0x4008df3, 0x1) mbind$auto(0x4, 0x3b, 0x0, &(0x7f0000000040)=0x1, 0x1, 0x6) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) ioctl$auto_BLKPG2(0xffffffffffffffff, 0x1269, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) 4.151179808s ago: executing program 2 (id=2486): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r1, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0xf92b, 0x0) r2 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r2, 0x11) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0x1000200) 3.946620693s ago: executing program 1 (id=2487): r0 = socket(0x1e, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0ro\x00', 0x10400, 0x0) close_range$auto(r2, 0xfffffffffffff000, 0x6) close_range$auto(0x0, 0x5, 0x0) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x400008, 0xdf, 0x9b71, r2, 0x7fff) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCSCLOCKID(r5, 0x400445a0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd15/queue/io_poll\x00', 0x400040, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000640)="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", 0x8) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4, 0x7f, 0x40eb1, 0xffffffffffffffff, 0x3000001ffffd) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r6, 0x545c, 0x0) ioctl$auto_MEMGETREGIONCOUNT(r4, 0x80044d07, 0x0) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) 3.437774927s ago: executing program 3 (id=2488): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/ns/cgroup\x00', 0x200800, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x1ffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)={0x14, r4, 0x1b, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@buf=&(0x7f0000000d80), 0x2, 0x8000, 0x3000}, 0x4) fcntl$auto(0x8000000000000001, 0x5, 0x8) 3.072301765s ago: executing program 2 (id=2489): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0x5, 0x9b72, 0x2, 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x1, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) pwrite64$auto(0xffffffffffffffff, 0x0, 0xb, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/ieee80211/phy0/hwsim/ps\x00', 0x100, 0x0) read$auto_hwsim_fops_ps_(r1, 0x0, 0x0) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x3ef) 2.004438289s ago: executing program 4 (id=2490): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000000)='/sys/devices/virtual/sound/ctl-led/speaker/card2/detach\x00', 0x7fffffff) mmap$auto(0x1, 0x9, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x29, 0x800, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() setsockopt$auto_SO_TYPE(r0, 0x53, 0x3, &(0x7f0000000040)='\x00', 0x9) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x7) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r2) write$auto(r4, &(0x7f0000000000)='//\xf2\x00', 0x80000000) prctl$auto(0x1, 0xfffffffffffff8a9, r3, 0x4, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) read$auto_fragmentation_threshold_ops_(r2, &(0x7f00000000c0)=""/118, 0x76) msync$auto(0x0, 0xe0, 0x6) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x401, 0x15) r5 = openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) pread64$auto(r5, &(0x7f0000000000)='\x00\x80_\x93gX\x90\x8cA;O0\x03\xcab\xa6\x8bU/t\xc5', 0xd56c, 0xa84) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.000808831s ago: executing program 3 (id=2499): io_uring_register$auto(0xffffffffffffffff, 0x1f, 0x0, 0x1) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000240)='/\x9d\xfbK\xbede\x02\x00\x00\x00\x00\xff#@\x83\x01\xbcMY\xb4\xaf9}J\x8a\xd7\x96`\x01\xfa%\rL\x81\xc2\xeft\xb3mg\xfak\xad\xe76\xce\x84Q\xbfk\vw\xb8\'\x18\xbc\x17_\x8d\r\x1f\xae{hR\xdcF\x8f\xd1\x92\x8a\x1a6\xd7\xf2\x14\x87M\xd1of\xe1\xfc\xfef\xd6\xe2Z8k\xdc\xa7\x8b0s\xe7\x12%\xe2\x88\x1c\x01U\\r\xc0N\x8f-So\xb6\xd3\x86\v\x1ef\xeb\xed\x05\xfc\x17G\xc1\xdf\t\xb7^Q>\v\xe9L\x036\x0f\xc7}\x96(m\xd70\a~KE+s\x92\xbe\xf5\x98\xde\xfa\x04\x16\x90K\xa6\x12\xcc\xe4\xd9\xcba\xa1\xfc\xb5fj\x04\xbaU\xbev\xc7\x00\x81\xc8G\xd6g\xc4\x185\xdf\xee\x8d\x86\xb6x\xd5\xbb;P\xa2M\xf2\xe3\xaf\xe9', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @multicast2}, 0x54) mmap$auto(0x761a, 0xe983, 0xd, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x10001, 0x0) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x6) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0xffffffff}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000037, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x52, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto_JFFS2_COMPR_MODE_NONE(r1, 0x4, &(0x7f0000000100)='/dev/fuse\x00', &(0x7f0000001580), 0x0) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers_autoprobe\x00', 0x141000, 0x0) socket(0x10, 0x2, 0xc) 1.738838413s ago: executing program 2 (id=2492): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) write$auto(r0, 0x0, 0x100082) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0xe47, 0xd, 0x5, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x6, 0x8c48, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x1, 0x1, 0x1, 0x3, 0x40, 0x1000, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) r2 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r2, 0x0, 0x0) socketpair$auto(0x4, 0x3, 0xb, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f00000005c0)={0x0, 0x9e, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000fadbdf250f00000008000300", @ANYRES32=r4, @ANYBLOB="0500300000000000794f4dbd7aee651ff9e79a5d4ebe82b9ae3f4f4acd628fb79caae39230b2714dac04885d25940a0b77883047ea618735c772aaeba8da4e0e4996b47d79b23fd07bf61ec76645544e368eabd5a5e34483be76f7f8cbb01521d5dd9a07060cb35ee5f010379c863d7875abf0c22e27f2721ae15627c3a73b"], 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x140000e4) sendmsg$auto_BATADV_CMD_GET_MESH(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r5, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffffc}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_BLA_VID={0x6, 0x20, 0xc}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'wlan0\x00'}, @BATADV_ATTR_MESH_IFNAME={0x14, 0x4, 'veth0_to_hsr\x00'}, @BATADV_ATTR_TT_ADDRESS={0xa, 0x10, @multicast}]}, 0x64}}, 0x800c050) write$auto(0xca, &(0x7f0000000340)='\x04>2\x1b!\xe2\x00\x94\xf2\xa2\x00\x00z\x0e\x8d\xea!\xbc\xf8*\x84(rw\xee\x9c\xb4,\xdaW\x0f\xef7\xbf\n|\x9a\xd9\xc3\xe7%\xeb\x1b\xd0\xc4\xc0\xae\xf6\xdf\x90,\x84\x12o4\a\x87\xe6\xe6\x17t\xb3<\xed\x91*\x8a#\x938D\xb6s\x9f\x14\xd4\x97\fY\xad5\xf5\xe9Iv\xe0\xd9\xfd\xff\x02idN\x94\x81\xc3\xa6\xb1\x11pM->f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r6, 0x545c, 0x0) ioctl$auto_MEMGETREGIONCOUNT(r4, 0x80044d07, 0x0) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) 941.980593ms ago: executing program 2 (id=2494): mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0xd4, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x0) open(0x0, 0x261c2, 0x22) socket(0x18, 0xa, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa042, 0x0) socketpair$auto(0x1, 0x3, 0x0, 0x0) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 729.533079ms ago: executing program 2 (id=2495): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) read$auto(r1, 0x0, 0xb4d3) keyctl$auto(0x4, 0x0, 0x0, 0xffffffffffffffff, 0x8000000e) r2 = epoll_create1$auto(0x1) lseek$auto(r2, 0xffffffffff800002, 0xe) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8404050}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="8055defc50c40cc58f45e88e458cbbc2ec31c8d67b7774c6605ea0d07cec0360663b7382b35e59b8b9c6d9098b5c205b9785701138f9e227d4334dfa6f427178c0207bdaa69da93cc40e0389816ee640fca9ed0578bbf7ffed12c75746d46da80d043cd176056cfb08801825227e4f7ac312a1877257bb732f97335aef9853429e25f81e69d2c12aaf12"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x68800, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x80980, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r4, 0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x48, 0x0, 0x9) socket(0x10, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10002, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r5, 0x0, 0x0) 0s ago: executing program 3 (id=2496): mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x141180, 0x0) pread64$auto(r1, 0x0, 0x1000f42d, 0x100) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x80000010, r3, 0xe2) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80981, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), r5) sendmsg$auto_NBD_CMD_STATUS(r5, 0x0, 0x4008050) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2082, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000280)=""/175, 0xaf) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                 syzkaller syzkaller login: [ 892.538427][T15627] ERROR: Out of memory at tomoyo_memory_ok. [ 892.945723][T15638] misc userio: No port type given on /dev/userio [ 893.975997][ T30] audit: type=1800 audit(4294967425.398:26): pid=15655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2245" name="dbroot" dev="configfs" ino=258347 res=0 errno=0 [ 893.996257][ C0] vkms_vblank_simulate: vblank timer overrun [ 896.484674][T15686] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 896.542597][T15687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2253'. [ 900.293833][T15744] ERROR: Out of memory at tomoyo_memory_ok. [ 900.539814][T15747] ERROR: Out of memory at tomoyo_memory_ok. syzkaller syzkaller login: [ 902.133547][ T5834] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 902.229337][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 902.229360][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 902.229370][ T5834] Call Trace: [ 902.229375][ T5834] [ 902.229382][ T5834] dump_stack_lvl+0x16c/0x1f0 [ 902.229401][ T5834] dump_header+0x101/0x930 [ 902.229421][ T5834] oom_kill_process+0x272/0xa40 [ 902.229440][ T5834] out_of_memory+0x350/0x1700 [ 902.229461][ T5834] ? __pfx_out_of_memory+0x10/0x10 [ 902.229483][ T5834] mem_cgroup_out_of_memory+0x118/0x130 [ 902.229501][ T5834] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 902.229524][ T5834] ? do_raw_spin_unlock+0x172/0x230 [ 902.229546][ T5834] try_charge_memcg+0x689/0xd40 [ 902.229565][ T5834] ? __pfx_try_charge_memcg+0x10/0x10 [ 902.229587][ T5834] ? find_held_lock+0x2b/0x80 [ 902.229610][ T5834] charge_memcg+0x8a/0x230 [ 902.229625][ T5834] mem_cgroup_swapin_charge_folio+0xd7/0x450 [ 902.229644][ T5834] __read_swap_cache_async+0x397/0x500 [ 902.229667][ T5834] ? __pfx___read_swap_cache_async+0x10/0x10 [ 902.229684][ T5834] ? finish_task_switch.isra.0+0x202/0xbd0 [ 902.229707][ T5834] ? finish_task_switch.isra.0+0x207/0xbd0 [ 902.229730][ T5834] swap_cluster_readahead+0x432/0x770 [ 902.229748][ T5834] ? trace_sched_exit_tp+0xd1/0x110 [ 902.229765][ T5834] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 902.229793][ T5834] ? __lock_acquire+0x433/0x22f0 [ 902.229809][ T5834] ? get_vma_policy+0x242/0x3c0 [ 902.229826][ T5834] swapin_readahead+0x160/0x1180 [ 902.229844][ T5834] ? __lock_acquire+0x433/0x22f0 [ 902.229863][ T5834] ? __pfx_swapin_readahead+0x10/0x10 [ 902.229881][ T5834] ? find_held_lock+0x2b/0x80 [ 902.229899][ T5834] ? swap_cache_get_folio+0x267/0x8e0 [ 902.229915][ T5834] ? swap_cache_get_folio+0x267/0x8e0 [ 902.229930][ T5834] ? swap_cache_get_folio+0x267/0x8e0 [ 902.229949][ T5834] ? swap_cache_get_folio+0x267/0x8e0 [ 902.229965][ T5834] ? swap_cache_get_folio+0x293/0x8e0 [ 902.230009][ T5834] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 902.230025][ T5834] ? __pfx_get_swap_device+0x10/0x10 [ 902.230047][ T5834] ? do_swap_page+0x12c/0x64c0 [ 902.230062][ T5834] ? do_swap_page+0x78b/0x64c0 [ 902.230073][ T5834] do_swap_page+0x78b/0x64c0 [ 902.230095][ T5834] ? __pfx_do_swap_page+0x10/0x10 [ 902.230108][ T5834] ? __lock_acquire+0x433/0x22f0 [ 902.230124][ T5834] ? __pfx_default_wake_function+0x10/0x10 [ 902.230143][ T5834] ? rcu_is_watching+0x12/0xc0 [ 902.230164][ T5834] ? ___pte_offset_map+0x2ad/0x4f0 [ 902.230189][ T5834] __handle_mm_fault+0x17c6/0x2ad0 [ 902.230208][ T5834] ? reacquire_held_locks+0xcd/0x1f0 [ 902.230223][ T5834] ? __pfx___handle_mm_fault+0x10/0x10 [ 902.230241][ T5834] ? lock_vma_under_rcu+0x176/0x580 [ 902.230263][ T5834] ? __pfx_get_timespec64+0x10/0x10 [ 902.230284][ T5834] handle_mm_fault+0x3fe/0xad0 [ 902.230302][ T5834] do_user_addr_fault+0x423/0xda0 [ 902.230321][ T5834] ? rcu_is_watching+0x12/0xc0 [ 902.230344][ T5834] exc_page_fault+0x64/0xc0 [ 902.230358][ T5834] asm_exc_page_fault+0x26/0x30 [ 902.230372][ T5834] RIP: 0033:0x7fc5c01c2088 [ 902.230386][ T5834] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 902.230399][ T5834] RSP: 002b:00007fffeb2a3a80 EFLAGS: 00010293 [ 902.230411][ T5834] RAX: 0000000000000000 RBX: 0000000000000743 RCX: 00007fc5c01c2085 [ 902.230421][ T5834] RDX: 00007fffeb2a3ac0 RSI: 0000000000000000 RDI: 0000000000000000 [ 902.230429][ T5834] RBP: 00007fffeb2a3b2c R08: 0000000000000000 R09: 0000000000000000 [ 902.230438][ T5834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 902.230447][ T5834] R13: 00000000000927c0 R14: 00000000000dca3e R15: 00007fffeb2a3b80 [ 902.230466][ T5834] [ 902.230471][ T5834] memory: usage 3072kB, limit 3072kB, failcnt 71624 [ 903.050376][T15750] kexec: Could not allocate control_code_buffer [ 903.077669][T15750] Process accounting paused [ 903.581573][ T5834] memory+swap: usage 3380kB, limit 9007199254740988kB, failcnt 0 [ 903.605228][ T5834] kmem: usage 2908kB, limit 9007199254740988kB, failcnt 0 [ 903.639876][ T5834] Memory cgroup stats for /syz1: [ 903.639982][ T5834] cache 0 [ 903.660785][ T5834] rss 0 [ 903.670495][ T5834] rss_huge 0 [ 903.680543][ T5834] shmem 0 [ 903.683494][ T5834] mapped_file 0 [ 903.718731][ T5834] dirty 0 [ 903.724989][ T5834] writeback 0 [ 903.728281][ T5834] workingset_refault_anon 40885 [ 903.755635][ T5834] workingset_refault_file 5843 [ 903.772866][ T5834] swap 315392 [ 903.792774][ T5834] swapcached 167936 [ 903.803202][ T5834] pgpgin 464515 [ 903.815748][ T5834] pgpgout 470606 [ 903.831821][ T5834] pgfault 768541 [ 903.845381][ T5834] pgmajfault 21698 [ 903.878156][ T5834] inactive_anon 167936 [ 903.900064][ T5834] active_anon 0 [ 903.903546][ T5834] inactive_file 0 [ 903.930975][ T5834] active_file 0 [ 903.934480][ T5834] unevictable 0 [ 903.961272][ T5834] hierarchical_memory_limit 3145728 [ 903.984879][T15797] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 903.997847][ T5834] hierarchical_memsw_limit 9223372036854771712 [ 904.013659][ T5834] total_cache 0 [ 904.033152][ T5834] total_rss 0 [ 904.039670][ T5834] total_rss_huge 0 [ 904.053417][ T5834] total_shmem 0 [ 904.069423][ T5834] total_mapped_file 0 [ 904.084412][ T5834] total_dirty 0 [ 904.102885][ T5834] total_writeback 0 [ 904.124952][ T5834] total_workingset_refault_anon 40885 [ 904.151638][ T5834] total_workingset_refault_file 5843 [ 904.181512][ T5834] total_swap 315392 [ 904.205565][ T5834] total_swapcached 167936 [ 904.224172][ T5834] total_pgpgin 464515 [ 904.241490][ T5834] total_pgpgout 470606 [ 904.254544][ T5834] total_pgfault 768541 [ 904.271369][ T5834] total_pgmajfault 21698 [ 904.289775][ T5834] total_inactive_anon 167936 [ 904.308283][ T5834] total_active_anon 0 [ 904.328333][ T5834] total_inactive_file 0 [ 904.338720][ T5834] total_active_file 0 [ 904.359540][ T5834] total_unevictable 0 [ 904.370993][ T5834] anon_cost 0 [ 904.384496][ T5834] file_cost 0 [ 904.407254][ T5834] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2260,pid=15717,uid=0 [ 904.456232][ T5834] Memory cgroup out of memory: Killed process 15717 (syz.1.2260) total-vm:104212kB, anon-rss:1140kB, file-rss:22468kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 904.517368][T15801] FAULT_INJECTION: forcing a failure. [ 904.517368][T15801] name failslab, interval 1, probability 0, space 0, times 0 [ 904.560772][T15801] CPU: 0 UID: 0 PID: 15801 Comm: syz.2.2272 Not tainted syzkaller #0 PREEMPT(full) [ 904.560794][T15801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 904.560804][T15801] Call Trace: [ 904.560809][T15801] [ 904.560815][T15801] dump_stack_lvl+0x16c/0x1f0 [ 904.560841][T15801] should_fail_ex+0x512/0x640 [ 904.560856][T15801] ? kmem_cache_alloc_noprof+0x62/0x760 [ 904.560878][T15801] should_failslab+0xc2/0x120 [ 904.560893][T15801] kmem_cache_alloc_noprof+0x75/0x760 [ 904.560912][T15801] ? __kernfs_new_node+0xd2/0x8d0 [ 904.560934][T15801] ? __kernfs_new_node+0xd2/0x8d0 [ 904.560950][T15801] __kernfs_new_node+0xd2/0x8d0 [ 904.560971][T15801] ? __pfx___kernfs_new_node+0x10/0x10 [ 904.560994][T15801] ? find_held_lock+0x2b/0x80 [ 904.561014][T15801] ? kernfs_root+0xee/0x2a0 [ 904.561036][T15801] kernfs_new_node+0x13c/0x1e0 [ 904.561059][T15801] __kernfs_create_file+0x53/0x350 [ 904.561077][T15801] sysfs_add_file_mode_ns+0x207/0x3c0 [ 904.561099][T15801] sysfs_merge_group+0x1aa/0x340 [ 904.561119][T15801] ? __pfx_sysfs_merge_group+0x10/0x10 [ 904.561140][T15801] ? __pfx_dev_add_physical_location+0x10/0x10 [ 904.561162][T15801] ? bus_to_subsys+0x131/0x160 [ 904.561179][T15801] dpm_sysfs_add+0x237/0x280 [ 904.561193][T15801] device_add+0x9a6/0x1950 [ 904.561208][T15801] ? __pfx_device_add+0x10/0x10 [ 904.561221][T15801] ? lockdep_init_map_type+0x5c/0x270 [ 904.561237][T15801] ? __init_waitqueue_head+0xca/0x150 [ 904.561259][T15801] rfkill_register+0x1ad/0xb40 [ 904.561280][T15801] nfc_register_device+0x11f/0x3c0 [ 904.561303][T15801] nci_register_device+0x7f1/0xb80 [ 904.561322][T15801] ? __pfx_nci_register_device+0x10/0x10 [ 904.561342][T15801] ? lockdep_init_map_type+0x5c/0x270 [ 904.561361][T15801] virtual_ncidev_open+0x141/0x220 [ 904.561382][T15801] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 904.561397][T15801] misc_open+0x26d/0x450 [ 904.561412][T15801] ? __pfx_misc_open+0x10/0x10 [ 904.561426][T15801] chrdev_open+0x234/0x6a0 [ 904.561441][T15801] ? __pfx_apparmor_file_open+0x10/0x10 [ 904.561462][T15801] ? __pfx_chrdev_open+0x10/0x10 [ 904.561477][T15801] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 904.561496][T15801] do_dentry_open+0x748/0x1590 [ 904.561509][T15801] ? __pfx_chrdev_open+0x10/0x10 [ 904.561528][T15801] vfs_open+0x82/0x3f0 [ 904.561547][T15801] path_openat+0x2078/0x3140 [ 904.561568][T15801] ? __pfx_path_openat+0x10/0x10 [ 904.561589][T15801] do_filp_open+0x20b/0x470 [ 904.561603][T15801] ? __pfx_do_filp_open+0x10/0x10 [ 904.561632][T15801] ? alloc_fd+0x471/0x7d0 [ 904.561650][T15801] do_sys_openat2+0x11f/0x280 [ 904.561667][T15801] ? __pfx_do_sys_openat2+0x10/0x10 [ 904.561691][T15801] __x64_sys_openat+0x174/0x210 [ 904.561709][T15801] ? __pfx___x64_sys_openat+0x10/0x10 [ 904.561734][T15801] do_syscall_64+0xcd/0xf80 [ 904.561750][T15801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.561764][T15801] RIP: 0033:0x7f88d438f7c9 [ 904.561777][T15801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.561791][T15801] RSP: 002b:00007f88d523d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 904.561805][T15801] RAX: ffffffffffffffda RBX: 00007f88d45e5fa0 RCX: 00007f88d438f7c9 [ 904.561814][T15801] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 904.561829][T15801] RBP: 00007f88d4413f91 R08: 0000000000000000 R09: 0000000000000000 [ 904.561837][T15801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 904.561846][T15801] R13: 00007f88d45e6038 R14: 00007f88d45e5fa0 R15: 00007ffd5ebd71e8 [ 904.561866][T15801] [ 905.014480][T15807] Unable to find swap-space signature [ 905.064940][ T5834] syz-executor invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 905.084888][ T5834] CPU: 0 UID: 0 PID: 5834 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 905.084910][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 905.084919][ T5834] Call Trace: [ 905.084924][ T5834] [ 905.084930][ T5834] dump_stack_lvl+0x16c/0x1f0 [ 905.084949][ T5834] dump_header+0x101/0x930 [ 905.084968][ T5834] oom_kill_process+0x272/0xa40 [ 905.084987][ T5834] out_of_memory+0x350/0x1700 [ 905.085008][ T5834] ? __pfx_out_of_memory+0x10/0x10 [ 905.085029][ T5834] mem_cgroup_out_of_memory+0x118/0x130 [ 905.085048][ T5834] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 905.085071][ T5834] ? do_raw_spin_unlock+0x172/0x230 [ 905.085093][ T5834] try_charge_memcg+0x689/0xd40 [ 905.085111][ T5834] ? __pfx_try_charge_memcg+0x10/0x10 [ 905.085125][ T5834] ? __print_lock_name+0xc1/0xe0 [ 905.085145][ T5834] ? rcu_read_unlock+0x17/0x60 [ 905.085166][ T5834] charge_memcg+0x8a/0x230 [ 905.085180][ T5834] __mem_cgroup_charge+0x2b/0x1e0 [ 905.085197][ T5834] do_wp_page+0x13da/0x5690 [ 905.085220][ T5834] ? page_table_check_set+0x3a1/0x650 [ 905.085243][ T5834] ? __pfx_do_wp_page+0x10/0x10 [ 905.085263][ T5834] ? __page_table_check_ptes_set+0x1ae/0x3f0 [ 905.085286][ T5834] ? pte_shstk+0xa2/0xe0 [ 905.085301][ T5834] ? __pfx_pte_shstk+0x10/0x10 [ 905.085315][ T5834] ? folio_add_new_anon_rmap+0x3b0/0x1dc0 [ 905.085335][ T5834] do_swap_page+0x359b/0x64c0 [ 905.085357][ T5834] ? __pfx_do_swap_page+0x10/0x10 [ 905.085370][ T5834] ? __lock_acquire+0x433/0x22f0 [ 905.085386][ T5834] ? __pfx_default_wake_function+0x10/0x10 [ 905.085406][ T5834] ? rcu_is_watching+0x12/0xc0 [ 905.085427][ T5834] ? ___pte_offset_map+0x2ad/0x4f0 [ 905.085452][ T5834] __handle_mm_fault+0x17c6/0x2ad0 [ 905.085471][ T5834] ? reacquire_held_locks+0xcd/0x1f0 [ 905.085486][ T5834] ? __pfx___handle_mm_fault+0x10/0x10 [ 905.085504][ T5834] ? lock_vma_under_rcu+0x176/0x580 [ 905.085526][ T5834] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 905.085551][ T5834] handle_mm_fault+0x3fe/0xad0 [ 905.085570][ T5834] do_user_addr_fault+0x423/0xda0 [ 905.085588][ T5834] ? rcu_is_watching+0x12/0xc0 [ 905.085610][ T5834] exc_page_fault+0x64/0xc0 [ 905.085625][ T5834] asm_exc_page_fault+0x26/0x30 [ 905.085638][ T5834] RIP: 0033:0x7fc5c0185d96 [ 905.085651][ T5834] Code: fd ff ff 90 e8 7b 01 00 00 41 89 c4 85 c0 0f 84 82 fd ff ff 49 c7 c5 a8 ff ff ff 48 83 3d 39 df 22 00 00 64 45 8b 75 00 74 05 a5 84 fc ff e8 b0 f5 fb ff e9 d9 fc ff ff 0f 1f 00 48 8d 7e 58 [ 905.085664][ T5834] RSP: 002b:00007fffeb2a39f0 EFLAGS: 00010202 [ 905.085675][ T5834] RAX: 0000000000000745 RBX: 0000000000000000 RCX: 00007fc5c0185f13 [ 905.085685][ T5834] RDX: 0000000000000745 RSI: 0000000000000000 RDI: 0000000001200011 [ 905.085693][ T5834] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 905.085701][ T5834] R10: 00005555894487d0 R11: 0000000000000246 R12: 0000000000000745 [ 905.085710][ T5834] R13: ffffffffffffffa8 R14: 0000000000000006 R15: 00007fffeb2a3b80 [ 905.085729][ T5834] [ 905.085735][ T5834] memory: usage 3072kB, limit 3072kB, failcnt 71712 [ 905.650408][ T5834] memory+swap: usage 3256kB, limit 9007199254740988kB, failcnt 0 [ 905.666929][ T5834] kmem: usage 2924kB, limit 9007199254740988kB, failcnt 0 [ 905.674147][ T5834] Memory cgroup stats for /syz1: [ 905.674242][ T5834] cache 0 [ 905.689449][ T5834] rss 0 [ 905.692287][ T5834] rss_huge 0 [ 905.699876][ T5834] shmem 0 [ 905.706694][ T5834] mapped_file 0 [ 905.718990][ T5834] dirty 0 [ 905.729750][ T5834] writeback 0 [ 905.738709][ T5834] workingset_refault_anon 40899 [ 905.748651][ T5834] workingset_refault_file 5843 [ 905.753429][ T5834] swap 188416 [ 905.758599][ T5834] swapcached 151552 [ 905.762404][ T5834] pgpgin 464530 [ 905.765845][ T5834] pgpgout 470625 [ 905.780959][ T5834] pgfault 768568 [ 905.784551][ T5834] pgmajfault 21712 [ 905.788322][ T5834] inactive_anon 151552 [ 905.793366][ T5834] active_anon 0 [ 905.796816][ T5834] inactive_file 0 [ 905.800792][ T5834] active_file 0 [ 905.804287][ T5834] unevictable 0 [ 905.819890][ T5834] hierarchical_memory_limit 3145728 [ 905.826064][ T5834] hierarchical_memsw_limit 9223372036854771712 [ 905.834367][ T5834] total_cache 0 [ 905.862055][ T5834] total_rss 0 [ 905.865362][ T5834] total_rss_huge 0 [ 905.891702][ T5834] total_shmem 0 [ 905.895180][ T5834] total_mapped_file 0 [ 905.916639][ T5834] total_dirty 0 [ 905.932842][ T5834] total_writeback 0 [ 905.936678][ T5834] total_workingset_refault_anon 40899 [ 905.967782][ T5834] total_workingset_refault_file 5843 [ 905.984022][ T5834] total_swap 188416 [ 905.994235][ T5834] total_swapcached 151552 [ 906.005049][ T5834] total_pgpgin 464530 [ 906.060531][ T5834] total_pgpgout 470625 [ 906.064625][ T5834] total_pgfault 768568 [ 906.085941][ T5834] total_pgmajfault 21712 [ 906.120140][ T5834] total_inactive_anon 151552 [ 906.124754][ T5834] total_active_anon 0 [ 906.136743][ T5834] total_inactive_file 0 [ 906.140916][ T5834] total_active_file 0 [ 906.155341][ T5834] total_unevictable 0 [ 906.166144][ T5834] anon_cost 0 [ 906.190178][T15816] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 906.213569][ T5834] file_cost 0 [ 906.232989][ T5834] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1747,pid=12923,uid=0 [ 906.290171][ T5834] Memory cgroup out of memory: Killed process 12923 (syz.1.1747) total-vm:136980kB, anon-rss:1164kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 906.373427][T15819] netlink: 'syz.2.2284': attribute type 1 has an invalid length. [ 907.189697][T15824] ima: policy update failed [ 907.210425][ T30] audit: type=1802 audit(4294967438.697:27): pid=15824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2273" res=0 errno=0 [ 907.231902][T15824] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2273'. [ 907.526488][T15838] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 907.668049][T15843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2277'. [ 907.690952][T15838] netlink: 'syz.3.2287': attribute type 1 has an invalid length. [ 909.233874][T15867] Unable to find swap-space signature [ 910.382428][T15877] mkiss: ax0: crc mode is auto. syzkaller syzkaller login: [ 910.560134][T15881] ptp ptp0: guarantee physical clock free running [ 911.088275][T15897] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 913.094128][T15902] syz.1.2286 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 913.206437][T15902] CPU: 0 UID: 0 PID: 15902 Comm: syz.1.2286 Not tainted syzkaller #0 PREEMPT(full) [ 913.206459][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 913.206469][T15902] Call Trace: [ 913.206475][T15902] [ 913.206481][T15902] dump_stack_lvl+0x16c/0x1f0 [ 913.206501][T15902] dump_header+0x101/0x930 [ 913.206522][T15902] oom_kill_process+0x272/0xa40 [ 913.206541][T15902] out_of_memory+0x350/0x1700 [ 913.206563][T15902] ? __pfx_out_of_memory+0x10/0x10 [ 913.206585][T15902] mem_cgroup_out_of_memory+0x118/0x130 [ 913.206605][T15902] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 913.206628][T15902] ? do_raw_spin_unlock+0x172/0x230 [ 913.206651][T15902] try_charge_memcg+0x689/0xd40 [ 913.206670][T15902] ? __pfx_try_charge_memcg+0x10/0x10 [ 913.206684][T15902] ? find_held_lock+0x2b/0x80 [ 913.206705][T15902] ? rcu_read_unlock+0x17/0x60 [ 913.206726][T15902] obj_cgroup_charge_account+0x292/0x500 [ 913.206744][T15902] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 913.206767][T15902] __kmalloc_node_track_caller_noprof+0x6c5/0x910 [ 913.206790][T15902] ? neigh_sysctl_register+0xb2/0x670 [ 913.206812][T15902] ? kmemdup_noprof+0x29/0x60 [ 913.206829][T15902] ? lockdep_hardirqs_on+0x7c/0x110 [ 913.206842][T15902] kmemdup_noprof+0x29/0x60 [ 913.206860][T15902] neigh_sysctl_register+0xb2/0x670 [ 913.206879][T15902] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 913.206896][T15902] ? inetdev_init+0x245/0x580 [ 913.206909][T15902] ? inetdev_event+0xc32/0x1840 [ 913.206922][T15902] ? notifier_call_chain+0xbc/0x3e0 [ 913.206939][T15902] ? copy_net_ns+0x351/0x5d0 [ 913.206957][T15902] ? create_new_namespaces+0x3ea/0xab0 [ 913.206976][T15902] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 913.206994][T15902] ? ksys_unshare+0x45b/0xa40 [ 913.207007][T15902] ? __x64_sys_unshare+0x31/0x40 [ 913.207019][T15902] ? do_syscall_64+0xcd/0xf80 [ 913.207032][T15902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.207049][T15902] devinet_sysctl_register+0xb6/0x200 [ 913.207066][T15902] inetdev_init+0x2b8/0x580 [ 913.207082][T15902] inetdev_event+0xc32/0x1840 [ 913.207103][T15902] ? ib_netdevice_event+0xfc/0x330 [ 913.207123][T15902] ? __pfx_inetdev_event+0x10/0x10 [ 913.207138][T15902] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 913.207164][T15902] notifier_call_chain+0xbc/0x3e0 [ 913.207177][T15902] ? __pfx_inetdev_event+0x10/0x10 [ 913.207196][T15902] call_netdevice_notifiers_info+0xbe/0x110 [ 913.207219][T15902] register_netdevice+0x1792/0x21d0 [ 913.207243][T15902] ? __pfx_register_netdevice+0x10/0x10 [ 913.207268][T15902] __ip_tunnel_create+0x540/0x6b0 [ 913.207283][T15902] ? __pfx___ip_tunnel_create+0x10/0x10 [ 913.207303][T15902] ip_tunnel_init_net+0x22f/0x7d0 [ 913.207320][T15902] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 913.207340][T15902] ? ops_init+0x77/0x5f0 [ 913.207359][T15902] ? __pfx_ipip_init_net+0x10/0x10 [ 913.207373][T15902] ops_init+0x1e2/0x5f0 [ 913.207393][T15902] setup_net+0x11d/0x3a0 [ 913.207412][T15902] ? __pfx_setup_net+0x10/0x10 [ 913.207428][T15902] ? lockdep_init_map_type+0x5c/0x270 [ 913.207445][T15902] ? mutex_init_lockep+0x110/0x150 [ 913.207464][T15902] copy_net_ns+0x351/0x5d0 [ 913.207485][T15902] create_new_namespaces+0x3ea/0xab0 [ 913.207510][T15902] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 913.207532][T15902] ksys_unshare+0x45b/0xa40 [ 913.207546][T15902] ? __pfx_ksys_unshare+0x10/0x10 [ 913.207561][T15902] ? xfd_validate_state+0x61/0x180 [ 913.207588][T15902] __x64_sys_unshare+0x31/0x40 [ 913.207601][T15902] do_syscall_64+0xcd/0xf80 [ 913.207616][T15902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.207630][T15902] RIP: 0033:0x7fc5c018f7c9 [ 913.207643][T15902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.207657][T15902] RSP: 002b:00007fc5c107d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 913.207671][T15902] RAX: ffffffffffffffda RBX: 00007fc5c03e6090 RCX: 00007fc5c018f7c9 [ 913.207681][T15902] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 913.207689][T15902] RBP: 00007fc5c0213f91 R08: 0000000000000000 R09: 0000000000000000 [ 913.207698][T15902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.207707][T15902] R13: 00007fc5c03e6128 R14: 00007fc5c03e6090 R15: 00007fffeb2a3768 [ 913.207727][T15902] [ 913.207732][T15902] memory: usage 3072kB, limit 3072kB, failcnt 74591 [ 914.174160][T15902] memory+swap: usage 3300kB, limit 9007199254740988kB, failcnt 0 [ 914.251755][T15902] kmem: usage 2976kB, limit 9007199254740988kB, failcnt 0 [ 914.277477][T15902] Memory cgroup stats for /syz1: [ 914.277578][T15902] cache 0 [ 914.324052][T15902] rss 0 [ 914.336734][T15902] rss_huge 0 [ 914.352715][T15902] shmem 0 [ 914.357187][T14574] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 914.385971][T15902] mapped_file 0 [ 914.401393][T15902] dirty 0 [ 914.417570][T15902] writeback 0 [ 914.442240][T15902] workingset_refault_anon 41328 [ 914.458521][T15902] workingset_refault_file 7287 [ 914.488209][T15902] swap 233472 [ 914.505720][T15902] swapcached 98304 [ 914.533390][T15902] pgpgin 467488 [ 914.536872][T15902] pgpgout 473596 [ 914.574145][T15902] pgfault 771284 [ 914.591832][T15902] pgmajfault 22072 [ 914.609032][T15902] inactive_anon 98304 [ 914.609046][T15902] active_anon 0 [ 914.609052][T15902] inactive_file 0 [ 914.609058][T15902] active_file 0 [ 914.609064][T15902] unevictable 0 [ 914.609071][T15902] hierarchical_memory_limit 3145728 [ 914.609078][T15902] hierarchical_memsw_limit 9223372036854771712 [ 914.609085][T15902] total_cache 0 [ 914.609091][T15902] total_rss 0 [ 914.609097][T15902] total_rss_huge 0 [ 914.609103][T15902] total_shmem 0 [ 914.609109][T15902] total_mapped_file 0 [ 914.609115][T15902] total_dirty 0 [ 914.609121][T15902] total_writeback 0 [ 914.609127][T15902] total_workingset_refault_anon 41328 [ 914.609135][T15902] total_workingset_refault_file 7287 [ 914.609142][T15902] total_swap 233472 [ 914.609148][T15902] total_swapcached 98304 [ 914.609154][T15902] total_pgpgin 467488 [ 914.609160][T15902] total_pgpgout 473596 [ 914.609167][T15902] total_pgfault 771284 [ 914.609173][T15902] total_pgmajfault 22072 [ 914.609180][T15902] total_inactive_anon 98304 [ 914.609186][T15902] total_active_anon 0 [ 914.609192][T15902] total_inactive_file 0 [ 914.609198][T15902] total_active_file 0 [ 914.609205][T15902] total_unevictable 0 [ 914.609211][T15902] anon_cost 0 [ 914.609217][T15902] file_cost 0 [ 914.609223][T15902] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2286,pid=15890,uid=0 [ 914.609343][T15902] Memory cgroup out of memory: Killed process 15890 (syz.1.2286) total-vm:108440kB, anon-rss:1268kB, file-rss:22392kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 915.723932][T15952] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 915.842395][T15954] Unable to find swap-space signature [ 916.894430][ T30] audit: type=1326 audit(4294967448.437:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15962 comm="syz.4.2297" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2b418f7c9 code=0x0 [ 917.178371][T15957] syz.1.2296 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 917.236870][T15957] CPU: 0 UID: 0 PID: 15957 Comm: syz.1.2296 Not tainted syzkaller #0 PREEMPT(full) [ 917.236890][T15957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 917.236900][T15957] Call Trace: [ 917.236905][T15957] [ 917.236911][T15957] dump_stack_lvl+0x16c/0x1f0 [ 917.236930][T15957] dump_header+0x101/0x930 [ 917.236949][T15957] oom_kill_process+0x272/0xa40 [ 917.236968][T15957] out_of_memory+0x350/0x1700 [ 917.236989][T15957] ? __pfx_out_of_memory+0x10/0x10 [ 917.237010][T15957] mem_cgroup_out_of_memory+0x118/0x130 [ 917.237030][T15957] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 917.237052][T15957] ? do_raw_spin_unlock+0x172/0x230 [ 917.237074][T15957] try_charge_memcg+0x689/0xd40 [ 917.237093][T15957] ? __pfx_try_charge_memcg+0x10/0x10 [ 917.237111][T15957] ? find_held_lock+0x2b/0x80 [ 917.237134][T15957] charge_memcg+0x8a/0x230 [ 917.237148][T15957] mem_cgroup_swapin_charge_folio+0xd7/0x450 [ 917.237167][T15957] __read_swap_cache_async+0x397/0x500 [ 917.237188][T15957] ? __pfx___read_swap_cache_async+0x10/0x10 [ 917.237208][T15957] ? __lock_acquire+0x433/0x22f0 [ 917.237223][T15957] ? shrink_slab+0x54d/0x12b0 [ 917.237243][T15957] swap_cluster_readahead+0x528/0x770 [ 917.237266][T15957] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 917.237288][T15957] ? __lock_acquire+0x433/0x22f0 [ 917.237309][T15957] ? get_vma_policy+0x242/0x3c0 [ 917.237326][T15957] swapin_readahead+0x160/0x1180 [ 917.237343][T15957] ? is_bpf_text_address+0x8a/0x1a0 [ 917.237363][T15957] ? bpf_ksym_find+0x124/0x1c0 [ 917.237382][T15957] ? __pfx_swapin_readahead+0x10/0x10 [ 917.237401][T15957] ? find_held_lock+0x2b/0x80 [ 917.237418][T15957] ? swap_cache_get_folio+0x267/0x8e0 [ 917.237435][T15957] ? swap_cache_get_folio+0x267/0x8e0 [ 917.237450][T15957] ? swap_cache_get_folio+0x267/0x8e0 [ 917.237468][T15957] ? swap_cache_get_folio+0x267/0x8e0 [ 917.237485][T15957] ? swap_cache_get_folio+0x293/0x8e0 [ 917.237503][T15957] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 917.237519][T15957] ? __pfx_get_swap_device+0x10/0x10 [ 917.237540][T15957] ? do_swap_page+0x12c/0x64c0 [ 917.237555][T15957] ? do_swap_page+0x78b/0x64c0 [ 917.237569][T15957] do_swap_page+0x78b/0x64c0 [ 917.237585][T15957] ? lock_acquire+0x179/0x330 [ 917.237603][T15957] ? __pfx_do_swap_page+0x10/0x10 [ 917.237619][T15957] ? __pfx_default_wake_function+0x10/0x10 [ 917.237639][T15957] ? rcu_is_watching+0x12/0xc0 [ 917.237659][T15957] ? ___pte_offset_map+0x2ad/0x4f0 [ 917.237683][T15957] __handle_mm_fault+0x17c6/0x2ad0 [ 917.237703][T15957] ? __pfx___handle_mm_fault+0x10/0x10 [ 917.237734][T15957] ? find_vma+0xbf/0x140 [ 917.237753][T15957] ? __pfx_find_vma+0x10/0x10 [ 917.237774][T15957] handle_mm_fault+0x3fe/0xad0 [ 917.237793][T15957] do_user_addr_fault+0x2e4/0xda0 [ 917.237810][T15957] ? rcu_is_watching+0x12/0xc0 [ 917.237832][T15957] exc_page_fault+0x64/0xc0 [ 917.237847][T15957] asm_exc_page_fault+0x26/0x30 [ 917.237860][T15957] RIP: 0010:__put_user_4+0xd/0x20 [ 917.237874][T15957] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 917.237888][T15957] RSP: 0000:ffffc90003677c00 EFLAGS: 00050206 [ 917.237900][T15957] RAX: 0000000000000755 RBX: 0000000000000000 RCX: 00007fc5c101a990 [ 917.237910][T15957] RDX: 1ffff920006cefad RSI: ffffffff817adec2 RDI: ffffc90003677d68 [ 917.237919][T15957] RBP: ffff888025b75b80 R08: 00000000392f97ba R09: 00000000ffffffff [ 917.237928][T15957] R10: ffff88802d1829b0 R11: 00000000ffffffff R12: 00000000003d0f00 [ 917.237937][T15957] R13: 1ffff920006cef85 R14: 0000000000000000 R15: 0000000000100000 [ 917.237951][T15957] ? kernel_clone+0x652/0x910 [ 917.237975][T15957] kernel_clone+0x67d/0x910 [ 917.237996][T15957] ? __pfx_kernel_clone+0x10/0x10 [ 917.238015][T15957] ? ___pte_offset_map+0x2ad/0x4f0 [ 917.238040][T15957] ? __lock_acquire+0x433/0x22f0 [ 917.238058][T15957] __do_sys_clone3+0x212/0x290 [ 917.238078][T15957] ? __pfx___do_sys_clone3+0x10/0x10 [ 917.238124][T15957] do_syscall_64+0xcd/0xf80 [ 917.238139][T15957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.238153][T15957] RIP: 0033:0x7fc5c01c3f09 [ 917.238164][T15957] Code: ee 08 00 48 8d 3d dc ee 08 00 e8 f2 28 f6 ff 66 90 b8 ea ff ff ff 48 85 ff 74 2c 48 85 d2 74 27 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 18 74 01 c3 31 ed 48 83 e4 f0 4c 89 c7 ff d2 48 89 c7 [ 917.238177][T15957] RSP: 002b:00007fffeb2a3638 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 917.238189][T15957] RAX: ffffffffffffffda RBX: 00007fc5c0146300 RCX: 00007fc5c01c3f09 [ 917.238199][T15957] RDX: 00007fc5c0146300 RSI: 0000000000000058 RDI: 00007fffeb2a3680 [ 917.238207][T15957] RBP: 00007fc5c101a6c0 R08: 00007fc5c101a6c0 R09: 00007fffeb2a3767 [ 917.238216][T15957] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffa8 [ 917.238225][T15957] R13: 000000000000006e R14: 00007fffeb2a3680 R15: 00007fffeb2a3768 [ 917.238244][T15957] [ 917.238293][T15957] memory: usage 3072kB, limit 3072kB, failcnt 75133 [ 918.263376][T15957] memory+swap: usage 3556kB, limit 9007199254740988kB, failcnt 0 [ 918.319552][T15957] kmem: usage 2884kB, limit 9007199254740988kB, failcnt 0 [ 918.352482][T15957] Memory cgroup stats for /syz1: [ 918.352579][T15957] cache 0 [ 918.415761][T15957] rss 0 [ 918.418549][T15957] rss_huge 0 [ 918.421734][T15957] shmem 0 [ 918.461997][T15957] mapped_file 0 [ 918.473147][T15957] dirty 0 [ 918.485068][T15957] writeback 0 [ 918.494907][T15957] workingset_refault_anon 41460 [ 918.513612][T15957] workingset_refault_file 7287 [ 918.530771][T15957] swap 495616 [ 918.541662][T15957] swapcached 106496 [ 918.559960][T15957] pgpgin 467727 [ 918.575702][T15957] pgpgout 473833 [ 918.589471][T15957] pgfault 771627 [ 918.601673][T15957] pgmajfault 22180 [ 918.617637][T15957] inactive_anon 106496 [ 918.637733][T15957] active_anon 0 [ 918.648890][T15957] inactive_file 0 [ 918.669864][T15957] active_file 0 [ 918.683218][T15957] unevictable 0 [ 918.704150][T15957] hierarchical_memory_limit 3145728 [ 918.731917][T15957] hierarchical_memsw_limit 9223372036854771712 [ 918.771835][T15957] total_cache 0 [ 918.775313][T15957] total_rss 0 [ 918.796619][T15957] total_rss_huge 0 [ 918.800359][T15957] total_shmem 0 [ 918.850784][T15957] total_mapped_file 0 [ 918.860832][T15957] total_dirty 0 [ 918.890605][T15957] total_writeback 0 [ 918.903048][T15957] total_workingset_refault_anon 41460 [ 918.930227][T15957] total_workingset_refault_file 7287 [ 918.943162][T15957] total_swap 495616 [ 918.961971][T15957] total_swapcached 106496 [ 918.978894][T15957] total_pgpgin 467727 [ 919.001268][T15957] total_pgpgout 473833 [ 919.005359][T15957] total_pgfault 771627 [ 919.038900][T15957] total_pgmajfault 22180 [ 919.059880][T15957] total_inactive_anon 106496 [ 919.088781][T15957] total_active_anon 0 [ 919.110178][T15957] total_inactive_file 0 [ 919.114355][T15957] total_active_file 0 [ 919.147684][T15957] total_unevictable 0 [ 919.176320][T15957] anon_cost 0 [ 919.190843][T15957] file_cost 0 [ 919.212160][T15957] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2296,pid=15957,uid=0 [ 919.297342][T15957] Memory cgroup out of memory: Killed process 15957 (syz.1.2296) total-vm:113076kB, anon-rss:1268kB, file-rss:30564kB, shmem-rss:0kB, UID:0 pgtables:164kB oom_score_adj:1000 [ 919.461735][T15997] ERROR: Out of memory at tomoyo_memory_ok. [ 919.875714][T16006] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 921.231537][T16022] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 921.447953][T16001] syz.1.2305 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 921.558104][T16001] CPU: 0 UID: 0 PID: 16001 Comm: syz.1.2305 Not tainted syzkaller #0 PREEMPT(full) [ 921.558125][T16001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 921.558134][T16001] Call Trace: [ 921.558139][T16001] [ 921.558145][T16001] dump_stack_lvl+0x16c/0x1f0 [ 921.558164][T16001] dump_header+0x101/0x930 [ 921.558184][T16001] oom_kill_process+0x272/0xa40 [ 921.558203][T16001] out_of_memory+0x350/0x1700 [ 921.558223][T16001] ? __pfx_out_of_memory+0x10/0x10 [ 921.558245][T16001] mem_cgroup_out_of_memory+0x118/0x130 [ 921.558265][T16001] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 921.558287][T16001] ? do_raw_spin_unlock+0x172/0x230 [ 921.558309][T16001] try_charge_memcg+0x689/0xd40 [ 921.558328][T16001] ? __pfx_try_charge_memcg+0x10/0x10 [ 921.558346][T16001] ? find_held_lock+0x2b/0x80 [ 921.558369][T16001] charge_memcg+0x8a/0x230 [ 921.558383][T16001] mem_cgroup_swapin_charge_folio+0xd7/0x450 [ 921.558402][T16001] __read_swap_cache_async+0x397/0x500 [ 921.558423][T16001] ? __pfx___read_swap_cache_async+0x10/0x10 [ 921.558442][T16001] ? mlock_drain_local+0x1a0/0x4e0 [ 921.558465][T16001] swap_cluster_readahead+0x432/0x770 [ 921.558488][T16001] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 921.558509][T16001] ? __lock_acquire+0x433/0x22f0 [ 921.558532][T16001] ? get_vma_policy+0x242/0x3c0 [ 921.558554][T16001] swapin_readahead+0x160/0x1180 [ 921.558579][T16001] ? __pfx_swapin_readahead+0x10/0x10 [ 921.558597][T16001] ? find_held_lock+0x2b/0x80 [ 921.558615][T16001] ? swap_cache_get_folio+0x267/0x8e0 [ 921.558632][T16001] ? swap_cache_get_folio+0x267/0x8e0 [ 921.558647][T16001] ? swap_cache_get_folio+0x267/0x8e0 [ 921.558666][T16001] ? swap_cache_get_folio+0x267/0x8e0 [ 921.558682][T16001] ? swap_cache_get_folio+0x293/0x8e0 [ 921.558700][T16001] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 921.558716][T16001] ? __pfx_get_swap_device+0x10/0x10 [ 921.558738][T16001] ? do_swap_page+0x12c/0x64c0 [ 921.558753][T16001] ? do_swap_page+0x78b/0x64c0 [ 921.558764][T16001] do_swap_page+0x78b/0x64c0 [ 921.558785][T16001] ? __pfx_do_swap_page+0x10/0x10 [ 921.558799][T16001] ? __lock_acquire+0x433/0x22f0 [ 921.558814][T16001] ? __pfx_default_wake_function+0x10/0x10 [ 921.558834][T16001] ? rcu_is_watching+0x12/0xc0 [ 921.558855][T16001] ? ___pte_offset_map+0x2ad/0x4f0 [ 921.558879][T16001] __handle_mm_fault+0x17c6/0x2ad0 [ 921.558898][T16001] ? reacquire_held_locks+0xcd/0x1f0 [ 921.558914][T16001] ? __pfx___handle_mm_fault+0x10/0x10 [ 921.558932][T16001] ? lock_vma_under_rcu+0x176/0x580 [ 921.558954][T16001] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 921.558978][T16001] handle_mm_fault+0x3fe/0xad0 [ 921.558997][T16001] do_user_addr_fault+0x423/0xda0 [ 921.559015][T16001] ? rcu_is_watching+0x12/0xc0 [ 921.559037][T16001] exc_page_fault+0x64/0xc0 [ 921.559052][T16001] asm_exc_page_fault+0x26/0x30 [ 921.559066][T16001] RIP: 0033:0x7fc5c004d75c [ 921.559078][T16001] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 921.559091][T16001] RSP: 002b:00007fffeb2a3798 EFLAGS: 00010246 [ 921.559103][T16001] RAX: 0000000000000000 RBX: 00007fc5c0f15720 RCX: ffffffff81fc3926 [ 921.559112][T16001] RDX: 0000000000001927 RSI: ffffffff8b571927 RDI: 0000000000000014 [ 921.559121][T16001] RBP: ffffffff8b571927 R08: 00007fc5c03d0000 R09: 00007fc5c03d2000 [ 921.559130][T16001] R10: 000000008b57192b R11: 0000000000000014 R12: 0000000000000014 [ 921.559139][T16001] R13: 0000000000000026 R14: ffffffff8b5711fc R15: 0000000000000026 [ 921.559148][T16001] ? mas_walk+0x3bc/0x980 [ 921.559168][T16001] ? mas_find_rev_setup.constprop.0+0x157/0x690 [ 921.559191][T16001] ? lru_gen_update_size+0x956/0xe10 [ 921.559204][T16001] ? mas_find_rev_setup.constprop.0+0x157/0x690 [ 921.559229][T16001] [ 921.559235][T16001] memory: usage 3072kB, limit 3072kB, failcnt 76350 [ 922.721818][T16001] memory+swap: usage 7392kB, limit 9007199254740988kB, failcnt 0 [ 922.757486][T16001] kmem: usage 2976kB, limit 9007199254740988kB, failcnt 0 [ 922.778678][T16001] Memory cgroup stats for /syz1: [ 922.779911][T16001] cache 0 [ 922.805125][T16001] rss 0 [ 922.813525][T16038] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 922.822152][T16001] rss_huge 0 [ 922.839093][T16001] shmem 0 [ 922.845366][T16001] mapped_file 0 [ 922.856054][T16001] dirty 0 [ 922.863219][T16001] writeback 0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       syzkaller syzkaller login: [ 990.241402][T16780] total_inactive_file 135168 [ 990.241409][T16780] total_active_file 0 [ 990.241415][T16780] total_unevictable 0 [ 990.241421][T16780] anon_cost 0 [ 990.241426][T16780] file_cost 0 [ 990.241434][T16780] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2458,pid=16767,uid=0 [ 990.243591][T16780] Memory cgroup out of memory: Killed process 16767 (syz.1.2458) total-vm:108312kB, anon-rss:1268kB, file-rss:22596kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 990.260565][T16796] Console: switching to colour VGA+ 80x25 [ 992.432246][T16816] input: jJǸ-9%vJ86 as /devices/virtual/input/input51 [ 993.787181][T16818] Process accounting resumed [ 994.240677][T16837] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 995.667611][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.676745][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 997.743129][T16890] vivid-007: ================= START STATUS ================= [ 997.792823][T16890] vivid-007: Generate PTS: true [ 997.823512][T16890] vivid-007: Generate SCR: true [ 997.855900][T16890] tpg source WxH: 320x240 (Y'CbCr) [ 997.888574][T16890] tpg field: 1 [ 997.924463][T16890] tpg crop: (0,0)/320x240 [ 997.947982][T16890] tpg compose: (0,0)/320x240 [ 997.968411][T16890] tpg colorspace: 8 [ 998.020742][T16890] tpg transfer function: 0/0 [ 998.025355][T16890] tpg Y'CbCr encoding: 0/0 [ 998.120044][T16896] Unable to find swap-space signature [ 998.127099][T16890] tpg quantization: 0/0 [ 998.165955][T16890] tpg RGB range: 0/2 [ 998.231763][T16894] ERROR: Out of memory at tomoyo_memory_ok. [ 998.264306][T16890] vivid-007: ================== END STATUS ================== [ 1000.210416][T16924] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1001.139247][T16924] syz.1.2487 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 1001.283409][T16924] CPU: 0 UID: 0 PID: 16924 Comm: syz.1.2487 Not tainted syzkaller #0 PREEMPT(full) [ 1001.283431][T16924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1001.283440][T16924] Call Trace: [ 1001.283446][T16924] [ 1001.283452][T16924] dump_stack_lvl+0x16c/0x1f0 [ 1001.283472][T16924] dump_header+0x101/0x930 [ 1001.283493][T16924] oom_kill_process+0x272/0xa40 [ 1001.283512][T16924] out_of_memory+0x350/0x1700 [ 1001.283533][T16924] ? __pfx_out_of_memory+0x10/0x10 [ 1001.283555][T16924] mem_cgroup_out_of_memory+0x118/0x130 [ 1001.283575][T16924] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1001.283598][T16924] ? do_raw_spin_unlock+0x172/0x230 [ 1001.283621][T16924] try_charge_memcg+0x689/0xd40 [ 1001.283639][T16924] ? __pfx_try_charge_memcg+0x10/0x10 [ 1001.283653][T16924] ? find_held_lock+0x2b/0x80 [ 1001.283674][T16924] ? rcu_read_unlock+0x17/0x60 [ 1001.283695][T16924] obj_cgroup_charge_account+0x292/0x500 [ 1001.283713][T16924] __memcg_slab_post_alloc_hook+0x2e3/0x880 [ 1001.283736][T16924] __kmalloc_node_track_caller_noprof+0x6c5/0x910 [ 1001.283758][T16924] ? nlmsg_notify+0xac/0x220 [ 1001.283777][T16924] ? __addrconf_sysctl_register+0xbb/0x360 [ 1001.283803][T16924] ? kmemdup_noprof+0x29/0x60 [ 1001.283820][T16924] kmemdup_noprof+0x29/0x60 [ 1001.283838][T16924] __addrconf_sysctl_register+0xbb/0x360 [ 1001.283861][T16924] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 1001.283891][T16924] ? __asan_memcpy+0x3c/0x60 [ 1001.283913][T16924] addrconf_init_net+0x53a/0x8e0 [ 1001.283936][T16924] ? __pfx_addrconf_init_net+0x10/0x10 [ 1001.283957][T16924] ops_init+0x1e2/0x5f0 [ 1001.283977][T16924] setup_net+0x11d/0x3a0 [ 1001.283995][T16924] ? __pfx_setup_net+0x10/0x10 [ 1001.284012][T16924] ? lockdep_init_map_type+0x5c/0x270 [ 1001.284028][T16924] ? mutex_init_lockep+0x110/0x150 [ 1001.284048][T16924] copy_net_ns+0x351/0x5d0 [ 1001.284070][T16924] create_new_namespaces+0x3ea/0xab0 [ 1001.284096][T16924] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1001.284118][T16924] ksys_unshare+0x45b/0xa40 [ 1001.284138][T16924] ? __pfx_ksys_unshare+0x10/0x10 [ 1001.284152][T16924] ? xfd_validate_state+0x61/0x180 [ 1001.284180][T16924] __x64_sys_unshare+0x31/0x40 [ 1001.284193][T16924] do_syscall_64+0xcd/0xf80 [ 1001.284209][T16924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.284224][T16924] RIP: 0033:0x7fc5c018f7c9 [ 1001.284236][T16924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1001.284249][T16924] RSP: 002b:00007fc5c109e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1001.284265][T16924] RAX: ffffffffffffffda RBX: 00007fc5c03e5fa0 RCX: 00007fc5c018f7c9 [ 1001.284274][T16924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1001.284283][T16924] RBP: 00007fc5c0213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1001.284292][T16924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.284300][T16924] R13: 00007fc5c03e6038 R14: 00007fc5c03e5fa0 R15: 00007fffeb2a3768 [ 1001.284320][T16924] [ 1001.287577][T16924] memory: usage 3072kB, limit 3072kB, failcnt 99523 [ 1002.408985][T16924] memory+swap: usage 3288kB, limit 9007199254740988kB, failcnt 0 [ 1002.528776][T16924] kmem: usage 2960kB, limit 9007199254740988kB, failcnt 0 [ 1002.629885][T16924] Memory cgroup stats for /syz1: [ 1002.630075][T16924] cache 0 [ 1002.741441][T16924] rss 12288 [ 1002.745159][T16949] serio: Serial port ttyS2 [ 1002.768726][T16924] rss_huge 0 [ 1002.792593][T16924] shmem 0 [ 1002.818939][T16924] mapped_file 0 [ 1002.855198][T16924] dirty 0 [ 1002.879712][T16924] writeback 0 [ 1002.915470][T16924] workingset_refault_anon 49353 [ 1002.960945][T16924] workingset_refault_file 7287 [ 1003.021209][T16924] swap 221184 [ 1003.066179][T16924] swapcached 110592 [ 1003.073084][T16956] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1003.126253][T16924] pgpgin 488596 [ 1003.129739][T16924] pgpgout 494700 [ 1003.235530][T16924] pgfault 800317 [ 1003.278639][T16959] EXT4-fs (sda1): Delayed block allocation failed for inode 2035 at logical offset 949 with max blocks 2 with error 117 [ 1003.300361][T16924] pgmajfault 28895 [ 1003.352906][T16924] inactive_anon 114688 [ 1003.357005][T16924] active_anon 0 [ 1003.360442][T16924] inactive_file 0 [ 1003.402264][T16924] active_file 0 [ 1003.417488][T16924] unevictable 0 [ 1003.421282][T16959] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1003.421282][T16959] [ 1003.436095][T16924] hierarchical_memory_limit 3145728 [ 1003.452129][T16924] hierarchical_memsw_limit 9223372036854771712 [ 1003.452208][T16924] total_cache 0 [ 1003.452215][T16924] total_rss 12288 [ 1003.452221][T16924] total_rss_huge 0 [ 1003.452228][T16924] total_shmem 0 [ 1003.452234][T16924] total_mapped_file 0 [ 1003.452240][T16924] total_dirty 0 [ 1003.452246][T16924] total_writeback 0 [ 1003.452252][T16924] total_workingset_refault_anon 49353 [ 1003.452258][T16924] total_workingset_refault_file 7287 [ 1003.452265][T16924] total_swap 221184 [ 1003.452271][T16924] total_swapcached 110592 [ 1003.452277][T16924] total_pgpgin 488596 [ 1003.452283][T16924] total_pgpgout 494700 [ 1003.452289][T16924] total_pgfault 800317 [ 1003.452295][T16924] total_pgmajfault 28895 [ 1003.452302][T16924] total_inactive_anon 114688 [ 1003.452308][T16924] total_active_anon 0 [ 1003.452314][T16924] total_inactive_file 0 [ 1003.452320][T16924] total_active_file 0 [ 1003.452326][T16924] total_unevictable 0 [ 1003.452332][T16924] anon_cost 0 [ 1003.452338][T16924] file_cost 0 [ 1003.452344][T16924] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2487,pid=16923,uid=0 [ 1003.454420][T16924] Memory cgroup out of memory: Killed process 16923 (syz.1.2487) total-vm:135196kB, anon-rss:1268kB, file-rss:22740kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 1003.488858][T16963] Console: switching to colour frame buffer device 31x6 [ 1003.938738][ T31] INFO: task kworker/u8:5:62 blocked for more than 187 seconds. [ 1003.938762][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1003.938771][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1003.938778][ T31] task:kworker/u8:5 state:D stack:23560 pid:62 tgid:62 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1003.938824][ T31] Workqueue: netns cleanup_net [ 1003.938848][ T31] Call Trace: [ 1003.938854][ T31] [ 1003.938862][ T31] ? __schedule+0x10b9/0x6150 [ 1003.938891][ T31] __schedule+0x1139/0x6150 [ 1003.938929][ T31] ? __pfx___schedule+0x10/0x10 [ 1003.938950][ T31] ? find_held_lock+0x2b/0x80 [ 1003.938972][ T31] ? schedule+0x2d7/0x3a0 [ 1003.938995][ T31] schedule+0xe7/0x3a0 [ 1003.939016][ T31] schedule_timeout+0x257/0x290 [ 1003.939037][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1003.939063][ T31] ? mark_held_locks+0x49/0x80 [ 1003.939078][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1003.939102][ T31] do_wait_for_common+0x2d7/0x4c0 [ 1003.939118][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1003.939139][ T31] ? __pfx_do_wait_for_common+0x10/0x10 [ 1003.939154][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 1003.939172][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1003.939191][ T31] ? __pfx___might_resched+0x10/0x10 [ 1003.939217][ T31] wait_for_completion+0x49/0x60 [ 1003.939233][ T31] __flush_workqueue+0x3e2/0x1230 [ 1003.939250][ T31] ? __lock_acquire+0x433/0x22f0 [ 1003.939269][ T31] ? __lock_acquire+0x433/0x22f0 [ 1003.939286][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 1003.939302][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 1003.939325][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1003.939346][ T31] ? __pfx_sock_def_readable+0x10/0x10 [ 1003.939362][ T31] rds_tcp_listen_stop+0x104/0x150 [ 1003.939384][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1003.939404][ T31] rds_tcp_exit_net+0xcb/0x810 [ 1003.939425][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1003.939444][ T31] ? __pfx___might_resched+0x10/0x10 [ 1003.939467][ T31] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1003.939487][ T31] ops_undo_list+0x2ee/0xab0 [ 1003.939510][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1003.939529][ T31] ? cleanup_net+0x347/0x830 [ 1003.939547][ T31] ? idr_destroy+0x62/0x2e0 [ 1003.939569][ T31] cleanup_net+0x41b/0x830 [ 1003.939594][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1003.939615][ T31] ? rcu_is_watching+0x12/0xc0 [ 1003.939640][ T31] process_one_work+0x9ba/0x1b20 [ 1003.939665][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1003.939688][ T31] ? assign_work+0x1a0/0x250 [ 1003.939706][ T31] worker_thread+0x6c8/0xf10 [ 1003.939731][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1003.939748][ T31] kthread+0x3c5/0x780 [ 1003.939765][ T31] ? __pfx_kthread+0x10/0x10 [ 1003.939782][ T31] ? rcu_is_watching+0x12/0xc0 [ 1003.939803][ T31] ? __pfx_kthread+0x10/0x10 [ 1003.939820][ T31] ret_from_fork+0x983/0xb10 [ 1003.939835][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1003.939851][ T31] ? __switch_to+0x7af/0x10d0 [ 1003.939869][ T31] ? __pfx_kthread+0x10/0x10 [ 1003.939890][ T31] ret_from_fork_asm+0x1a/0x30 [ 1003.939920][ T31] [ 1003.940082][ T31] [ 1003.940082][ T31] Showing all locks held in the system: [ 1003.940091][ T31] 1 lock held by khungtaskd/31: [ 1003.940100][ T31] #0: ffffffff8e3c9140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1003.940142][ T31] 3 locks held by kworker/u8:5/62: [ 1003.940151][ T31] #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1003.940189][ T31] #1: ffffc9000214fc90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1003.940227][ T31] #2: ffffffff90108830 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 1003.940283][ T31] 1 lock held by syz-executor/5834: [ 1003.940302][ T31] 1 lock held by syz.0.2208/15438: [ 1003.940311][ T31] #0: ffffffff90108830 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x5d0 [ 1003.940359][ T31] 2 locks held by getty/16800: [ 1003.940368][ T31] #0: ffff88814dc250a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1003.940405][ T31] #1: ffffc9000414d2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1003.940448][ T31] 2 locks held by syz.1.2487/16924: [ 1003.940457][ T31] #0: ffffffff90108830 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x5d0 [ 1003.940496][ T31] #1: ffffffff8e3d48b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1003.940534][ T31] 2 locks held by syz.4.2490/16943: [ 1003.940543][ T31] 1 lock held by syz.3.2493/16959: [ 1003.940552][ T31] 2 locks held by syz.2.2495/16962: [ 1003.940561][ T31] 5 locks held by syz.2.2495/16963: [ 1003.940570][ T31] [ 1003.940574][ T31] ============================================= [ 1003.940574][ T31] [ 1003.940581][ T31] NMI backtrace for cpu 0 [ 1003.940590][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1003.940605][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1003.940614][ T31] Call Trace: [ 1003.940618][ T31] [ 1003.940624][ T31] dump_stack_lvl+0x116/0x1f0 [ 1003.940638][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1003.940656][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1003.940670][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1003.940689][ T31] watchdog+0xf14/0x1140 [ 1003.940705][ T31] ? rcu_is_watching+0x12/0xc0 [ 1003.940725][ T31] ? __pfx_watchdog+0x10/0x10 [ 1003.940736][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1003.940751][ T31] ? __kthread_parkme+0x19e/0x250 [ 1003.940772][ T31] ? __pfx_watchdog+0x10/0x10 [ 1003.940784][ T31] kthread+0x3c5/0x780 [ 1003.940815][ T31] ? __pfx_kthread+0x10/0x10 [ 1003.940831][ T31] ? rcu_is_watching+0x12/0xc0 [ 1003.940851][ T31] ? __pfx_kthread+0x10/0x10 [ 1003.940866][ T31] ret_from_fork+0x983/0xb10 [ 1003.940884][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1003.940898][ T31] ? __switch_to+0x7af/0x10d0 [ 1003.940914][ T31] ? __pfx_kthread+0x10/0x10 [ 1003.940929][ T31] ret_from_fork_asm+0x1a/0x30 [ 1003.940955][ T31] [ 1005.133250][ T5842] process 8761 (syz.2.735) no longer affine to cpu1 [ 1006.087453][ T7749] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1006.088535][ T7749] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.1.397: Error -117 reading block bitmap for 2 [ 1006.091900][ T7749] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1006.109848][T16968] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.3.2496: Error -117 reading block bitmap for 2 [ 1006.234220][T16968] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1006.234370][T16968] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.3.2496: Error -117 reading block bitmap for 2 [ 1006.329250][T16968] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1007.259426][T16963] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 1007.269176][T16963] EXT4-fs error (device sda1): ext4_discard_preallocations:5703: comm syz.2.2495: Error -117 reading block bitmap for 2 [ 1007.301925][T16963] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem