last executing test programs: 12m1.006080434s ago: executing program 2 (id=506): r0 = socket(0x1d, 0x3, 0xfffffffb) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000000)=@can={0x1d, r2}, 0x6a) write$auto(r0, &(0x7f00000002c0)='@*\x00', 0xf) prctl$auto_PR_SET_VMA(0x53564d41, 0x7, 0xb, 0x0, 0x4) socket(0x29, 0x5, 0x84) 12m0.610470886s ago: executing program 2 (id=508): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000000380)={@sival_ptr=&(0x7f0000000240)="db231def7af0757eb9505f50b7f50b4d9697b15663e584a577a0c0b2bd076b0de930233bbaad202e02fa1091b6eb388038ed5dfc29cc33f152be4d02f5d7b6be9df01c2beaf8ed67e8580f9ca20294ec4ff491e1bc2a3871ded984eca76ecc0cb01fa79a7e567d8fbe9dda26aad65ad508e9f35769cc1431b004a70a271017dd064f0243278b4c83b7fcc32cc80ea085cbb1c14574ba27d22c4e", @raw=0x1, 0x7f, @_sigev_thread={&(0x7f00000000c0)=&(0x7f0000000080), &(0x7f0000000300)="87de78730f6b78d50b1b8a2d75dfc247ea945b82331ab6b4ae4217305313e65433e1ff40769895c098f80ee63e1ed1f1e22d2550904b916cabf2f9eb66edb3da4aba500edd6dba20604b9003d076f2f2514e1877e02b333c5f1164826a62f4f8694128"}}, &(0x7f00000003c0)=0x82f) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0xffff}, 0x5, 0x20000042) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x228000, 0x0) mmap$auto(0xd69, 0x68a, 0x0, 0x17, r1, 0xffffffff80000000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000180)="39198cef1767bca1be9490a4f06fcce87acaeb8f3914f768048b3b3ac82bbf289a87b0a673974522d41fca7ec508dca7911eb76ce8b6dda2064daf5bc834aff359f6e84b4e8790088d3d085dcd9bd632ca1c5d2879aaed8511d7ba520f73dd18363ecb6ce5b80abfd2728c8179a0409bca8cd22056793124498eddfafcff41ff1bafbfed6ee5d0f70a6da2a91977c2c51a13b240b1b53592edb74b787631279f63eec284c9a7486053f36f8c150f094231953e812a2185de60", 0x200084c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x4}, 0xffffffff, 0xc5c) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x1, 0x0, 0xffffffffffffff39, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x8587) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000180), 0x7112}, 0x8) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4111, 0x100f) getgroups$auto(0xffffffff, 0x0) shutdown$auto(0x200000003, 0x2) 11m58.678336941s ago: executing program 2 (id=514): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) syz_clone3(&(0x7f0000000500)={0x0, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), {0x1c}, &(0x7f0000000300)=""/231, 0xe7, &(0x7f0000000400)=""/195, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6}, 0x58) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x140242, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x5, 0x8000000008014, r1, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x10}, 0x3) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000580)="d77eecd77ae4728a51824a7849e82e20cc12ddd7f527cab15f7a51cbf554a6ef9c6d41b0ff609d9d42bda833be23dfdc35dcb8df3f260808aeddebc1b458d0b7feec27cebe623eea430b449a91a9737dfe6a00b0ce621a28942304b4c9db0466798744923d4a0516cd2dab8a168574a399eb896c49473a41fc57f10053328956ed5b5eebb080ed8d2467931d629611fb4f5a2b151057e12ac13c4d17d9271e0bcd478a3ac544981a9c6bb9533a6d853e0885c220c2b4370aa2a723bf1332f98d71fefa6e80217675a3d7804c3178d29d080b19a000"/232, 0xe8) mlockall$auto(0x3) mlockall$auto(0x7) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(0x0, 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0xfa9d, 0x8001, &(0x7f0000000280)=0xc9e, 0x400, 0x1) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/numa_maps\x00', 0x20000, 0x0) 11m55.30337324s ago: executing program 2 (id=519): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getgroups$auto(0x7fd, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) (async) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) msgctl$auto_MSG_STAT(0xffffffff, 0xb, &(0x7f0000000340)={{0x400, 0xffffffffffffffff, 0x0, 0x4, 0x447b, 0x4dc, 0x6c}, 0x0, &(0x7f00000001c0)=0xd6, 0x7, 0xdf, 0x80000001, 0x6, 0x5, 0xfff, 0x4, 0x101, @raw=0xf17}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x10000000084, 0xd, 0x0, 0x8) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x0, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) 11m52.680818696s ago: executing program 2 (id=526): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b100", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) 11m52.420409966s ago: executing program 2 (id=530): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, 0x0, 0x2000, 0x0) getsockopt$auto_SO_PASSSEC(r0, 0x0, 0x22, &(0x7f0000000140)='\x00', &(0x7f0000000100)=0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x1313) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xfffffffffffffe00, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) write$auto(0x1, 0x0, 0x80000000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x92602, 0x0) socket(0xa, 0x2, 0x0) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x6000, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x404c534a, 0x38) ioctl$auto_SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) io_uring_setup$auto(0x58, 0x0) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/33u\x00', 0x20202, 0x0) pread64$auto(r1, 0x0, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x80000001, 0x698, 0x2, 0xd494, 0xfffffffffffffffa, 0x408002) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_clone(0x20a0f400, 0x0, 0x0, 0x0, 0x0, 0x0) 11m37.350964631s ago: executing program 32 (id=530): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, 0x0, 0x2000, 0x0) getsockopt$auto_SO_PASSSEC(r0, 0x0, 0x22, &(0x7f0000000140)='\x00', &(0x7f0000000100)=0x40) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x1313) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xfffffffffffffe00, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) write$auto(0x1, 0x0, 0x80000000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x92602, 0x0) socket(0xa, 0x2, 0x0) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x6000, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x404c534a, 0x38) ioctl$auto_SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) io_uring_setup$auto(0x58, 0x0) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/33u\x00', 0x20202, 0x0) pread64$auto(r1, 0x0, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x80000001, 0x698, 0x2, 0xd494, 0xfffffffffffffffa, 0x408002) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_clone(0x20a0f400, 0x0, 0x0, 0x0, 0x0, 0x0) 5m52.004646952s ago: executing program 0 (id=1754): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/topology/core_cpus_list\x00', 0x169000, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x0) pread64$auto(r0, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0xe9) 5m51.813083305s ago: executing program 0 (id=1756): openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/setgroups\x00', 0x149002, 0x0) (async) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) (async) listen$auto(0x3, 0x81) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socket(0x10, 0x2, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async, rerun: 32) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) 5m50.468866268s ago: executing program 0 (id=1760): mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0x5, 0x408001}) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) pwritev$auto(r3, &(0x7f0000000480)={&(0x7f0000001640), 0x6}, 0x3, 0x1, 0x6e3) fcntl$auto_F_DUPFD_QUERY(r3, 0x403, r2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r4, 0x810c5715, 0x0) read$auto_fops_u64_ro_(0xffffffffffffffff, &(0x7f0000000100)=""/55, 0x37) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) r5 = open(0x0, 0x22240, 0x55) statx$auto(r5, 0x0, 0x1003, 0x4005, 0x0) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000740)="c79ad53322a093d01cf42feaa3cd13f155f08189295b3f1b0a632202b2faad35f145080e9e775fdb44acf87be27dc7829fe385367152b0e77a2ca00baf9c6255d2e960caa8151ce9a6e6432bd43371828e142ceaa267e251b7a0d0fa2665ca4e0bc1d48d401e2591a7d3c80814f66ace38b36b8308265636ec73f43baa714b8427d3f97d7b6a875f6dab3809ab19709aed0d02030464a231382c1a3f4d2ccc8c83d63c553db92768f436555336efa9265094eab1d3f0b1e9529c08e32c76db1d") syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r6 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r7, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r7, 0x4010744d, &(0x7f00000002c0)={0x0, 0xff, 0x80}) poll$auto(&(0x7f0000000240)={r6, 0x20, 0x2}, 0x5, 0x104) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2008000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x82002, 0x0) write$auto_ocfs2_control_fops_stack_user(r8, &(0x7f0000000100)="fb", 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 5m50.061254313s ago: executing program 0 (id=1762): sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x2a, 0x5, 0xffffffff) setsockopt$auto(r0, 0x0, 0xd4, 0x0, 0x8) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x400000040000, 0x200006, 0x80000000000040, 0x40eb1, r0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c6", 0x11e) utimensat$auto(r1, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)={0x23, 0x7fff}, 0x1000) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket(0xa, 0x800, 0x75) mmap$auto(0x0, 0x40009, 0x684, 0x9b72, r1, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) shutdown$auto(0x200000003, 0x2) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) unshare$auto(0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYBLOB="10002cbd7000df250a0a08000a", @ANYRES8=r2, @ANYRES16=r1], 0x10e}}, 0x10004010) 5m48.701450134s ago: executing program 0 (id=1769): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$auto_SO_SNDBUFFORCE(r1, 0x4, 0x20, &(0x7f0000000000)='$\x00', 0xc) 5m48.511858474s ago: executing program 0 (id=1770): socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter$auto(0xffffffffffffffff, 0xc000000, 0x0, 0x10001, &(0x7f00000000c0)="5ec5ee287469552f030798602e07232a51476f9abdc9f6b06a3c70bb4319b88b2ea26da1d36dc7cd639b8f8789ba070dfd98db88ab8f6855fd0b2e05f3475bc06baeac861f1734c77b4fa5cf9efe865c07b1984683a05a690937cdc7de6a4b63bcb8db30d3b8d136b70f2faecbd6734686a518f3dcdb62a6abb65a1376ae3ed8191bb089fcbd4d5bd3c75e9883dfc7c537f581a1f474356bb7", 0xb08) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) epoll_create$auto(0x8800001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1, 0x25, 0x8}, 0x18) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0) read$auto(r0, &(0x7f0000001100)='/dev/ttyr8\x00', 0xf92) read$auto(0x3, 0x0, 0x8080) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) io_uring_setup$auto(0x23, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x10e, 0x1, 0x0, 0xe) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r6, 0x0, 0x1ff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r7, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x8382, 0x0) 5m42.032929763s ago: executing program 1 (id=1786): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x1ff) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x710d}, 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000002640), 0x241, 0x0) pwritev$auto(r2, &(0x7f0000002980)={&(0x7f0000002900)="dcf510a2ee", 0x4}, 0x9, 0x6, 0xfffffffffffffffd) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sda1\x00', 0x8800, 0x0) cachestat$auto(r3, 0x0, 0x0, 0x0) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x2000000) ioctl$auto_VHOST_SET_VRING_CALL2(r4, 0x4008af21, &(0x7f0000000040)={0x6}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r6, 0xb, 0xa79e) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r6, 0xcb88, &(0x7f0000000180)='\xe1\x00', &(0x7f00000001c0)="d83a2a03929d56a06b79b0a07e9ba3bc8ccc2ae02e836c3fba72c9d18092280d620a7d1b530fc3e95c00cee8b12269864645948ac9655b78aa585cc1bc5f2281c97679cedbda4e738d01c74084b9d86adf4f66896efafc7946736c8c94f284b9eff15e1d", 0x4) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000240)="8bd97005b301e49c2a073fc86026b460f370e3ca0f4f48c9a9258a7023cfc94ee14a98e65cd9b10e81adafef4ef23c", 0x1000}, 0x5) 5m34.826469103s ago: executing program 1 (id=1797): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x3a) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x110c230000, 0x0, 0x2000101, 0x3, 0xf000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0x7, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) ioctl$auto(r1, 0x921064aa, 0x20000a) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(r0, 0x439, 0x4e, &(0x7f0000000080)='\x15!x4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91_\vBfdQ\xce\x16\'C\x8c\x01\x80\x92\x83Q\x87\xb3\xa6Mu\xd5\xb8\\\x82\"\xe2=y\x9b\x00\x00\x00\x00\xe4\xa5\xfe\xb5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\xeeXT\x8c~\x88<\xc6\x94w\x80\x87)O5\x041\xba\x14\xe1\"K\xc2,/\xf5\x17\t\aV\xcb\xde9N\xa0\xc5\r\xb0\xfff\xf2\xd3b\xecD\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\r\xd2\x8b\xfc\x1f\x9bd\x96LeD\xa6\xc1F\xb8V\xb3\xe7\x8e\xf1\xd8\xd9\xc1eR\xf8\'$\x03\x9d\xa2\xe6\xdf\x81JbG\x18/\x19\xda\xac/\xff3\xa8\x17\xa4\x18d\xa3\xddb\xc1\xf4\x90\xf7\xd4M7\x11\n\xc7\x1dK\xaeX\x03\xec\xf2\x8a\xd7\x1a\xe5N8\x05a*6\xd8', 0x10000110) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) 5m33.692628103s ago: executing program 1 (id=1799): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x7, 0x8000000000000001, 0x107, 0xfffffffffffff0f9, 0xffffffffffffffff, 0x17fff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000440)='/dev/audio1~J\xb8\xe3\x00w\x8e\xb9do\xc8#G\xbdr6\x84(\x8fYF=j\xfb\x197\x97\xb7p*\x18!\xd0P\x06y\\+\xc0\xed\xcb\xb5\xc0\xd3\x14P\xad\x1d4k\xef\xbb \xfeiO|\x14\xb7\xd3b1\xf5\x1aXf\xd1\xcbu\xc1\x8f\xda\xd4i:\xc3_S\xcfl{\xc0\x17qu\xcd\x13\x99\x105D\xbd\xfa\xdc\xaex\xaf\xc9\x9c\xdb\xbf\x9dK>\xa8\"\xc2\x18\xad@\xa3\xb1\xe8\xbf\xb7\x01\xcd\x01\xf1\xad\xe8\"\xeeZtk\x95\xc1\xdcO^\xe2\x1c\xbdH\xb5\xbbT\xe4\xe8\x92u\x8d\x81C^\n&\xf7\xb8\xacC\x7fi\xef\xbe\xc3M\x82-\x10rHZ\x16\x05-\xcbB\xb0\xdfF\xf5Tc\x80\f2%\xff\xb4\x13\t\x80\x00'/210, 0x100000a3d9) r1 = socket(0x10, 0x3, 0x1) read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) getcpu$auto(0x0, 0x0, 0x0) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) msgsnd$auto(0xfffffffc, 0x0, 0x1, 0x963) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS1\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = epoll_create$auto(0x4) r5 = epoll_create$auto(0x3e) epoll_ctl$auto(r5, 0x1, r4, 0x0) r6 = epoll_create$auto(0x8800001) epoll_ctl$auto(r6, 0x1, r3, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x6, 0x7, 0x1, 0x8016, r1, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r7 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r7, 0x40046207, 0x0) 5m33.181136335s ago: executing program 33 (id=1770): socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter$auto(0xffffffffffffffff, 0xc000000, 0x0, 0x10001, &(0x7f00000000c0)="5ec5ee287469552f030798602e07232a51476f9abdc9f6b06a3c70bb4319b88b2ea26da1d36dc7cd639b8f8789ba070dfd98db88ab8f6855fd0b2e05f3475bc06baeac861f1734c77b4fa5cf9efe865c07b1984683a05a690937cdc7de6a4b63bcb8db30d3b8d136b70f2faecbd6734686a518f3dcdb62a6abb65a1376ae3ed8191bb089fcbd4d5bd3c75e9883dfc7c537f581a1f474356bb7", 0xb08) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) epoll_create$auto(0x8800001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x1, 0x25, 0x8}, 0x18) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0) read$auto(r0, &(0x7f0000001100)='/dev/ttyr8\x00', 0xf92) read$auto(0x3, 0x0, 0x8080) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) io_uring_setup$auto(0x23, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x10e, 0x1, 0x0, 0xe) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r6, 0x0, 0x1ff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r7, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r8, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) writev$auto(r5, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000640), 0x8382, 0x0) 5m30.252369002s ago: executing program 1 (id=1807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)={0x2c, r1, 0x6c5679fc7dece1a9, 0x70bd2b, 0x25dfdbff, {0x1, 0x0, 0x4000}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004090}, 0x20008010) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x18, 0x2, 0x0) waitid$auto(0x10000, 0xffffffffffffffff, &(0x7f0000000040)={@_si_pad}, 0x0, &(0x7f00000000c0)={{0x6, 0x7ff}, {0x4e16d2c7, 0xd}, 0x2, 0x400000, 0x8, 0x2, 0x2, 0x2, 0x6, 0xed5, 0x7, 0x6, 0x7, 0x6, 0xcd90, 0x2}) r3 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000180)=0x9) move_pages$auto(r3, 0xf56, 0x0, 0x0, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_swap\x00', 0x100042, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x101085) setsockopt$auto(r2, 0x6, 0x8, 0x0, 0x10000) r4 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000000)=0x9) ioctl$auto_EXT4_IOC_SWAP_BOOT(r4, 0x6611, 0x0) 5m29.240084366s ago: executing program 1 (id=1809): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004010) rt_sigqueueinfo$auto(0x0, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x14, 0x1, @_sigpoll={0xd, 0xffffffffffffffff}}}) r1 = socket(0x11, 0x3, 0x9) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x11\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\x00^\x0fo\x97\xfc\x89\v\xea\xc2\x95\xafQ;C>\x15L\x90\xad\xa4\x1648W\t\x00\x00\x001\x00\x00\x00@X\xb9_\xdd\xa6\xa2E\xd8?\'\x8dg\x81h*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&%`_[\xde\x7f\xde8\xf7\xc1\x94\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\xee\xa9\x0eX\x01\xa3g\xba\x9cc\x90\xe3\xae\xa9\xde\x00\x00\x00B\xb4\xf2&\x00\xe2\xead\xd0\"\x16\x84v\n\xcdN\xb6\xa4\xe0\xb7e\x97 ?\xb5\xa1E=t\x96\xbd\xfd\xc5\xebn\xb7\n\xc2\xbc\xa2\xa8\x04#\x84\xa7R|\xed\x8f\x03\x01\x10wLT\vay\x12\xb63\x9e\a\x8e\xbd\x18y<\xb3\v\x14\x82\x97&\xfcm\x86\x10o\xdc\xf3x\xfd\x06\x87t\xb9$\x94,f\x9b0\xcd\xd3\r\xb1e\'\x19\xc1\xe7>*\xad\xa5+\xa8\x1c\x88\xa1\x0e[\x99\xb6LKZ\x9e\r\xd0r\xe2Ct\xc1\x99\x1b/\xc5P.aUdq\x97\x94\xb9\xa8qU\xae*g\x86\xc9\xa4\xe7\n\vh-v\"o.\xbf6\x13\tFK\x8e\xc6&&\x13\x81\x00\x8c7PS\x9c\xa3\xfb\x1d\xa9\x98\xd47\n\xa7\xd1\x10\xb3i\xd2\xa8\x18f\xb3K\x9b\x9b\x8c\xe8\x84\xa3,5-\xd6\xae\xbd\x1d\xf2o\x99\x02\x1azw9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\bl\x042\x935\x9e\xeeH\x87\xda\x10\x8f^1\x89L`\xf4[\x06\xf6\xc7\xd0#\xdb\xb1\\\xc3\xb1\xb8\xe8\xde2\xbb\xf8I\x9c\x17KI\x8c\f\x1d\xaa\xa0\xdb\xc7\x9e\x81\x90CTe\xfa\x8dq&\x17\x908\xc9T\xffm\x930\x1d\x91\xf8|t\xfd\x18\xd5\xb0\xcbH\xa7\xb6T\n\x11%\xba\x16o\r\xf6\x90k\xfb\a\xa1\x15\x0e\xe1\xce0Q\xd0\x00\xc1\x1a\x1f\xaa8\xfbo)rtYK\"c\xe2c\xbeM\x9bT\x05\xf3\xccC\x8c\x00\xdf\x8c\x1b+\xca\x80', 0x84, 0xe83) sendmmsg$auto(r1, &(0x7f00000004c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x35}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x8) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r0) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0xc00, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x761c}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '{'}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x89}, @NFC_ATTR_DEVICE_NAME={0x5, 0x2, '.'}]}, 0x38}}, 0x8081) 5m28.624118259s ago: executing program 1 (id=1810): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r2 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x61, &(0x7f0000000040)="ef098dc44317985e7f79149e0a5e0e964ae7f7a56d1d84a89a8e4cea87816afcc4c73ab8494bf8dca25b837bdb4e647bde201d47c2a13b755c8637c5a8b4a55433d42cd3542ab6c50b98e2a6d5b8c8a103e7e8258b5ef5fa392c7afd67ba502de8e90213a4d5e7d4ef55b195dd36c838ba") r3 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), r0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) (async) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) (async) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) rmdir$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x20000004, &(0x7f0000000100)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) (async) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) sendmsg$auto_NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x4}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x975}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x749a2d9a}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x7}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x55) (async) sendmsg$auto_NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x4}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x975}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x749a2d9a}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x7}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x55) 5m13.043613526s ago: executing program 34 (id=1810): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x38, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x24, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x19, 0x2, '/dev/cpu_dma_latency\x00'}, @NFSD_A_SOCK_ADDR={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r2 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x61, &(0x7f0000000040)="ef098dc44317985e7f79149e0a5e0e964ae7f7a56d1d84a89a8e4cea87816afcc4c73ab8494bf8dca25b837bdb4e647bde201d47c2a13b755c8637c5a8b4a55433d42cd3542ab6c50b98e2a6d5b8c8a103e7e8258b5ef5fa392c7afd67ba502de8e90213a4d5e7d4ef55b195dd36c838ba") r3 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000100), r0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) (async) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) (async) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) rmdir$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x20000004, &(0x7f0000000100)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) (async) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) sendmsg$auto_NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x4}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x975}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x749a2d9a}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x7}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x55) (async) sendmsg$auto_NLBL_CALIPSO_C_LIST(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x4}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x7}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x975}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x749a2d9a}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x7}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x55) 4m39.171531998s ago: executing program 6 (id=1957): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/topology/core_cpus_list\x00', 0x169000, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x0) pread64$auto(r0, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0xe9) 4m38.851082342s ago: executing program 6 (id=1959): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x2000, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) (async) read$auto(r0, 0x0, 0x1f40) socket(0xa, 0x3, 0x3a) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0xffffffffffffffff, 0x3}, 0x18, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2002020010, 0xffffffffffffffff, 0xeb1, r1, 0x8000) (async) mmap$auto(0x0, 0x2002020010, 0xffffffffffffffff, 0xeb1, r1, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/packet\x00', 0x400, 0x0) mmap$auto(0x4, 0x203000a, 0x800, 0xeb1, r2, 0x2) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), 0xffffffffffffffff) getpid() r3 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop13\x00', 0x379402, 0x0) ioctl$auto(r4, 0x401070cf, 0x5) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r3) (async) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r3) setfsuid$auto(0xee00) setfsuid$auto(0xee01) r5 = setfsuid$auto(0xee00) setreuid$auto(r5, 0x0) syz_clone(0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x2, 0x107) (async) ptrace$auto(0x10, r6, 0x2, 0x107) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x6, 0x2) (async) socket(0x3, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) (async) eventfd$auto(0x3) 4m38.266768617s ago: executing program 6 (id=1960): mmap$auto(0x0, 0x20009, 0xfffffffffffffffd, 0x100000eb1, 0x40000000000a1, 0x8000) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r1, 0x400454a4, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xf8, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) setsockopt$auto(r2, 0x4, 0x1, &(0x7f00000001c0)=' \xe1{#-\x00', 0x75) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r3], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x400, 0x2f) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r0, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(&(0x7f00000000c0), 0x0) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r4 = socket(0x2a, 0x2, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="11000000", @ANYRES16=r5, @ANYBLOB="020c2abd7000fedbdf252c00000008006a00080000000800a10000000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44015) r6 = fcntl$getown(r0, 0x9) sendmsg$auto_NL80211_CMD_CONNECT(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x95c, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_NAN_FUNC={0x134, 0xf0, 0x0, 0x1, [@nested={0x12d, 0x93, 0x0, 0x1, [@generic="ebdd0c5d4da68f499b1ba67cc4e8dbddd9b4fb5e5aa977f75ee93fbf279665507ac7aeb4", @typed={0xc, 0x85, 0x0, 0x0, @u64=0x1}, @nested={0x4, 0x1e}, @nested={0x4, 0x46}, @generic="5c2e19d5c9a97574596de426f7d5e6ca2d0284820e2a83b7a47fc134e8da166f8cf674480a2b6e62346deff849c52b942924c6e4ede285a68e6a4a171bd32dfa5d8802741e359382211bba54376d3e467a24930336443b83f643b49d64c7275e3ddd0a61662f8ec6a06917cf0721733ded1552b720b713fea34b2df55f119b0dbf44785deb5effd3087b3f891cec40dbaefb073ef15e11c21392083ff14091f4cb20753610a4b11e2d426b2492ef624e45444fded225e66cfefe5401eb3ba5d4b5ee42cb8748df8122a836379e2ceb05920f6aa289ccb49bf24c1863b13e4bb854c730434a86f603f219defbbb", @nested={0x4, 0x5e}]}]}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0xac, 0x25, 0x0, 0x1, [@typed={0x8, 0x35, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x98, 0xb5, 0x0, 0x1, [@nested={0x4, 0x139}, @nested={0x4, 0x14d}, @typed={0x14, 0xf6, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x6e, 0x125, 0x0, 0x0, @binary="d0c539ea1890f84258543ad38cf6b9cc1725a20bbd4948a6999a9347ca41fd63d60c6f1c2255ed8144151956dc3251ffb4e2f7458caa0144251aaf4ea4168e492d761a2d52e7ae152daedda1928dcac536871b33cdada6318afebac519f81715c8cb28d3bd70305a965a"}, @nested={0x4, 0x145}, @nested={0x4, 0x9b}]}, @typed={0x8, 0xd5, 0x0, 0x0, @pid=r6}]}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_BSS_SELECT={0x348, 0xe3, 0x0, 0x1, [@nested={0x18, 0x62, 0x0, 0x1, [@typed={0x8, 0xc7, 0x0, 0x0, @u32=0x9}, @nested={0x4, 0xad}, @nested={0x4, 0x35}, @nested={0x4, 0x12}]}, @generic="7d2dc69518693c08ab4d32941b7745577e36210ea69ad4555e383f4cbad775be121821fdaf48e6649df20ffa88d5eb4bcd29a8c516ff6ec0be97bee6858baf4b61c94f4187b911a041f7fe", @generic="b6cec72812fc34f53281d960484a4727af6fb18a4ce47124b3a9841a6ef4597947d13a34c143f548103bcbb22c924f32fa4d3bbcfd8aa80efb2ef7b88550fa3f1921f153ede3600fb75d0272a8e9ae1893211c64dce45771dbe440a08c2f889ec24cf1db109d460c94ce12e1bcfa9419abf6bd00c19b6ddd3f323d48a07ebe338399866e31e01027a6b411bb724a55633af5c3e840c09563a758e79844d23a67bfc012f80c3b65ff65dfb9f3f47ec7e0481ff5eb4f00945e47480623684d20a3836c3160b354678440422c6e6992b0bf88a0818d895e223c53fd", @typed={0x4, 0x14b}, @nested={0x145, 0xb1, 0x0, 0x1, [@nested={0x4, 0xf3}, @generic="979df01cc92831a80b675cdb912a5a07c887e409", @nested={0x4, 0x1c}, @generic="c805c4207168dd7fc1a9bc79b2a3c2ee6bd4c8080d37457312d82249b5a41f7c9251d55467da60fae3dab0cbdca4405e460c023b87779e008a788dd53b96c7a84fcb417d76e53ba11bc8bcc0fc3545f4d6ef95d5b63e23a997dd098fb8044a058d181a08f631bd28b16ccfa1aacad22065b2bc42f423fc23fde8ce7e1e320741e64940de93ff64bec82ae108e78a515cdf512e56bca10807aa74f7195e9e2912cfeca60e1285306b5695804d8b74db13cbec8a6ffc1c42faca3b1ef717b73fa55af9436ce4d2edb4a4dd1321bbd555891e41cb6910c50828adbd00dca72f4c75407103f92e8144d5ae062d4a615c1992c564", @generic="6439545899f0f7096fb185ffa9f2affcb5df7ed590ec540ad896320bea03736858cc7b72d0a4454e9dee8f181399de087cf804"]}, @generic="f08146e1935d0d787aa1f2e182d2a59272078759083730b9f87861d3c3d4fdeb0679339bb0b3a12a8ec0bb89bd16394407802898328b1ec77aef5cc46f58c1b35286c18aa2c217f160b5e036bccae0c3ebc47452951c52ac80fe96a6d17d97b15424a6c2", @generic="6ee3a55f555a6aa7aad64337efee746250701be9666e8b330a95e612908814eb51b76db3f6133f810f0e6282fccd9b96a3d154b63d85745b51ac028d9ab9d9d08c2ad44de8b04d897a9567812a7c30", @typed={0x8, 0xe4, 0x0, 0x0, @pid}]}, @NL80211_ATTR_MAC_HINT={0xf6, 0xc8, "78b9edb974a765c3c22ba0b691103312890715eb50b31643941f10023d73694c108735da00c248ff26837dcc1cd9e6f4b6edecfbb57db41b431b2b75e8fc8d7162abbb8eb583e2fecd73ac2cac5bfaec90bbe9c250564a18fb0626ac1ddece7ff8bb211b7faa506a78026fb9fb327254f0a040c2643a8cc77f0d25fde12fe5d897df099c77eb438f9002996e202231d0768e1d94f0ac0b76237c0d145e5aa3efe840a57d8b0fff6d1b1556a0ed9ead33cdc4a5b386fa07f8f3f626907e0f22fe2c997e46a97968da8397bd09533073153e3fc2be92c6cf3d84bba3a76293934cce794dd8344af2ff2ef097d7dad674b9af80"}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xfff6}, @NL80211_ATTR_IE_PROBE_RESP={0x2fd, 0x7f, "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"}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@typed={0x9, 0xfd, 0x0, 0x0, @str=']\xf0%)\x00'}]}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x81}]}, 0x95c}, 0x1, 0x0, 0x0, 0x20001884}, 0x4000054) 4m37.164743707s ago: executing program 6 (id=1963): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/watchdog\x00', 0x2002, 0x0) sendfile$auto(r0, r0, 0x0, 0x80000000003) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x4, 0x2, 0x80000000df, 0x14, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x37fe, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [0xfffffffd], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0xabd, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$auto(0x2, 0x20, 0x0, 0x1) capget$auto(0x0, 0xfffffffffffffffe) r1 = epoll_create$auto(0x4) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video31\x00', 0x5aa0c1, 0x0) epoll_ctl$auto(r1, 0x1, r2, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xe8) ppoll$auto(&(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x3}, 0x3, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(r3, &(0x7f0000000180)={{0x0, 0x40000000, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fallocate$auto(0xffffffffffffffff, 0x40, 0x9, 0xffffffffffffffff) socket(0xf, 0x5, 0x4) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x509a40, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) 4m36.04753505s ago: executing program 6 (id=1966): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) read$auto(0x3, 0x0, 0x8080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) gettid() socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) swapoff$auto(0x0) r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x1a9602, 0x0) read$auto(r0, 0x0, 0x7fffffff) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_SET(0x878, 0x1, 0x0) shmctl$auto_SHM_INFO(0xd6d, 0xe, 0x0) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f00000000c0)={0x1, 0xa7, 0x534c, 0xfffffffffffffffe, 0x9}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC2(r2, 0x80044dff, &(0x7f0000000080)) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0x5, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x0, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x7, 0x8000000000000006]}, 0x0) 4m30.200660403s ago: executing program 6 (id=1985): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) (async) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x4006b) (async) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r1 = semctl$auto(0xa, 0x2, 0x13, 0xde) (async) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000680), 0x0) (async) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) ioctl$auto_I2C_SMBUS(r2, 0x720, &(0x7f0000000080)) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) r4 = socket(0x11, 0xa, 0x9) bind$auto(r4, 0x0, 0x9) (async) sendmsg$auto_OVS_FLOW_CMD_SET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto(0x3e, 0x8, r1, 0x401, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) socket(0xa, 0x2, 0x88) 4m15.104168693s ago: executing program 35 (id=1985): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x26dc2, 0x84) (async) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8000, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x4006b) (async) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r1 = semctl$auto(0xa, 0x2, 0x13, 0xde) (async) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000680), 0x0) (async) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) ioctl$auto_I2C_SMBUS(r2, 0x720, &(0x7f0000000080)) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) r4 = socket(0x11, 0xa, 0x9) bind$auto(r4, 0x0, 0x9) (async) sendmsg$auto_OVS_FLOW_CMD_SET(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto(0x3e, 0x8, r1, 0x401, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) socket(0xa, 0x2, 0x88) 3m30.969244184s ago: executing program 3 (id=2141): openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(r0, 0xcc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x4402, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)) madvise$auto(0x0, 0xffffffffffff0003, 0x15) close_range$auto(r3, r2, 0x200) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x2, 0x1, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 3m27.492902693s ago: executing program 3 (id=2152): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={"60a9eba51151b9e6a364167fa1f5d1448763c051ec8a81a23b00", 0x0, 0x81403, 0x223, 0x4, 0x7, 0xffffffffffffffff}) ioctl$auto_LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x4, 0x1, r0, 0x100000000, 0x3) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/003/001\x00', 0x1, 0x0) socket(0xa, 0x5, 0x0) socket(0x11, 0x80003, 0x1d12) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x6, 0x20000000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/net/teql0/statistics/rx_compressed\x00', 0xc2700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) close_range$auto(0x2, 0x8, 0x0) 3m26.900309019s ago: executing program 3 (id=2153): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x6, 0x1, '.\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x300, 0x0, 0x801}, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2ab42, 0x0) (rerun: 32) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/timer_source\x00', 0x20080, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x22240, 0x154) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x82440, 0x0) (async) sysfs$auto(0x2, 0x3e, 0x0) fsopen$auto(0x0, 0x1) (async, rerun: 32) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/rxrpc/peers\x00', 0x1014a0, 0x0) (rerun: 32) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x800, 0x0) (async) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) io_uring_setup$auto(0x2, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) socketpair$auto(0x8, 0x3ae, 0x420000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) (async) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) (async) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) open(&(0x7f0000000000)='}[,&*}/../file0\x00', 0x22040, 0x150) 3m25.876944335s ago: executing program 3 (id=2155): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/topology/core_cpus_list\x00', 0x169000, 0x0) pread64$auto(r0, 0x0, 0x2, 0xe9) ioctl$auto(r0, 0x1, r0) 3m25.643805413s ago: executing program 3 (id=2157): socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f00000000c0)={@siginfo_0_0={0x7, 0x7f, 0xffffffff, @_sigpoll={0x1, r0}}}, 0xfff, &(0x7f0000000180)={{0x69c, 0x8}, {0x3, 0x1}, 0x6, 0xf898, 0xe37, 0x9, 0x8, 0xfffffffffffffff7, 0x8, 0x80, 0x9, 0xf8a, 0x8, 0x7, 0x9, 0x1}) process_vm_readv$auto(r2, &(0x7f0000000300)={&(0x7f0000000240)="ca46228e7d2568a12ac5ddc399fe24b0745dc37c74dc8e9c36ed96c8492014e886859a2474f406c614db68fdd4e1e564d89480a913d51c40d53338242ed21660bba102d4b556e9f0603ee3599fd7a43990ddfe4c4e331bf680e81f3fa9976a15842fa9b842de94770ec1d923f7415130763f721eb4e10d4a507ab9acc04500fb7889e1479994502b10c67cef7b", 0x9}, 0x9, &(0x7f0000000440)={&(0x7f0000000340)="f81554461e8cd9ba3630daac946e6a252b3ff11e2e47365d84ae19d0acf9c056c8be4861eec6767442baecf00c1526b0d50cce5d4df7f331d373b98e4df61ffec1108f8acc1d977f55edda0bec4dc710790653221885cfe97721e303396319e6b8b9b800338e71f7fde1edd987d2d4c6ff8388f2c0eef724141032e88355948d8b1032db6da70c529eebdddc55cb7e6e08c8f943c2171e022e64c7369d4ec7545a0dbee55d02bd5fd057ea78fdf2a3284107f5489ac22452233e73472533f9c6c00b0363a60c09520a2029f01589e14bba77c6fa3486bb80ebcac39d144ffb5f6b1204012674607bd96d094ade3e8d", 0x10000}, 0x9c, 0x3a) pwrite64$auto(r0, &(0x7f0000000040)='((-\x00', 0x400, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r1, 0xc048aeca, 0x0) 3m25.388254418s ago: executing program 3 (id=2160): close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x80, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) (async) r0 = socket(0x29, 0x2, 0x0) landlock_restrict_self$auto(r0, 0x6) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89ff, 0x24) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x0, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0) (async) r2 = epoll_create$auto(0x8) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r2) (async) r5 = waitid$auto_P_ALL(0x0, 0x7fffffff, &(0x7f0000000140)={@_si_pad}, 0x2, &(0x7f00000001c0)={{0xc230, 0x2}, {0x2f6, 0x1}, 0x4, 0x0, 0x9, 0x8, 0xffffffffffff96f7, 0xd, 0x3, 0x4, 0x6, 0xfffffffffffffffe, 0x3, 0x0, 0xd1d, 0x2}) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @pid=r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) (async) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r6) (async) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x9, 0x179, [{0x0, 0x20007, 0x9}]}) 3m9.775299787s ago: executing program 36 (id=2160): close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x80, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) (async) r0 = socket(0x29, 0x2, 0x0) landlock_restrict_self$auto(r0, 0x6) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89ff, 0x24) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) mmap$auto(0x0, 0x20009, 0x7, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x0, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfsd.export/channel\x00', 0x8f3b7a51b8162d21, 0x0) (async) r2 = epoll_create$auto(0x8) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r2) (async) r5 = waitid$auto_P_ALL(0x0, 0x7fffffff, &(0x7f0000000140)={@_si_pad}, 0x2, &(0x7f00000001c0)={{0xc230, 0x2}, {0x2f6, 0x1}, 0x4, 0x0, 0x9, 0x8, 0xffffffffffff96f7, 0xd, 0x3, 0x4, 0x6, 0xfffffffffffffffe, 0x3, 0x0, 0xd1d, 0x2}) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @pid=r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) (async) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r6) (async) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x9, 0x179, [{0x0, 0x20007, 0x9}]}) 5.46574618s ago: executing program 8 (id=2968): socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000c80)="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", 0x159) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r1, &(0x7f00000002c0)='/de\xef\xe7audio1\x00\xa5\xb0$\xb6\xbf\x8e\x9e\xa5&\xb3)\x1a\xe4\x1dI2\xf6\xab\xc6a`\xcf\xa9J\x1f\x12\xbe\xfa\xff\xf3\x9dy\xd1\x80\x8c\x81N\xc8w\x05\xc0/\x91\xf7\x97(101KfC;\xcetv3\xf0\x9c\x1b;\x85\xa9B\f\x19~]6b\x05\xd7\xc0\xafn\xba\x86\xb5\x19\x92M\x14j\xddK\xd6', 0xa3d9) socket(0x10, 0x2, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_tracing_buffers_fops_trace(0xffffffffffffffff, 0x80, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r2, 0x3314, 0x0) 5.164453382s ago: executing program 4 (id=2969): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbb9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44415}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000000000000000) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r2, r2, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video52\x00', 0x6aa01, 0x0) ioctl$auto(r3, 0xc0585611, r3) process_madvise$auto_MADV_SEQUENTIAL(r1, 0x0, 0x400, 0x2, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x8803, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x88146, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0) ioctl$auto_SNAPSHOT_FREE(r1, 0x3305, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0x2, &(0x7f00000000c0)={@siginfo_0_0={0x6, 0x4, 0xf3a2, @_rt={0x0, 0x0, @sival_int=0x1}}}, 0x4d) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x800, 0x7fffffff) fanotify_init$auto(0x5, 0x2000000000002) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) r6 = socket(0x2, 0x0, 0x8) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r6, @ANYRES8=r5], 0x18}, 0x1, 0x2000, 0x0, 0x40010}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 4.780260623s ago: executing program 4 (id=2970): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x2c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', &(0x7f0000000280)="16b2cb46aaf7f56501cdb8d7a59f85c693cc46aa567ff7ebcee59c62e8ee9efe70ab70c421b7da3e039ce4d2fef4d58b6a37bf1638934fafd7e8356a7bab7e918cf8ffd64f6d829fc7ac1edc1de4de6261428e49cb183526a4d6909483eba489e241b16930cf470e52cdce7e25f8ecd746a86c1c894abe92fb9b7b60527fd3", 0x4) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r1, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa6442, 0x0) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) msgctl$auto_MSG_INFO(0x4b, 0xc, &(0x7f00000000c0)={{0x1, 0xee01, 0xee00, 0x80, 0xc, 0x7, 0x38}, 0x0, 0x0, 0x40, 0x56, 0x5, 0xf8, 0x8, 0x1, 0x0, 0x5, @inferred=0x0}) prctl$auto(0x1, 0x8, r5, 0x3a, 0x1) 4.66945839s ago: executing program 8 (id=2971): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) madvise$auto(0x3, 0xf, 0x200) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101a82, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0xfffffdef) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x4) pipe2$auto(0x0, 0x0) open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x28000) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) close_range$auto(0x2, 0xa, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) r2 = seccomp$auto(0x7ffffdff, 0x4, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) mmap$auto(0x0, 0x6, 0x0, 0x9b73, 0xffffffffffffffff, 0x10) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/oom_adj\x00', 0x1117c1, 0x0) read$auto(r3, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/fail-nth\x00', 0x40a02, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, &(0x7f0000000100)="82e3fc7bdb01af96148064fc891374238c2b7f6ea117248b5b462c7d03b4b016de440fd3873e78218fdc45897a70c851e85b3fd4f93691e55fa1d0081ca4e2b7a93e225c363a6f5a27fe7074ae0f410d554fcb5ed749c02bdb8b39588540dc28b4abd71c56f1f5026edcda993b40a923b3ec993edf208f95b9830006e6ecbb29722cd4fb3bfb566a4aba2ef1a543085621ceea4c92f7cfdeff", 0xfffffff4) sendmsg$auto_NBD_CMD_CONNECT(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000d072a3b6bb1e170b91d62998c2a3e99fe66449a699fcc295687009a54b39b466b3b5e808cf997e4c11bac4d1397a487f4d73a42ad4f2607eb3cae647fe25fa9a1ef9b755b5607ac6d8f548777c27a3c287838b335c0252bc2cee150a20ac9abe43ab96cd2fc0c9ebf41224a7e0e838", @ANYRES16=r5, @ANYBLOB="0100253d7000fddbdf250100000008000780040001800c00020006007b883142c9f15a393155ee541c59744b620b4a4dc540f2bec61b6614050000000000002090acd967c436001afbd426e11fd9b3555f810e025c799285577754f63e09da2691be5328a34ee62e144c"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x200080c0) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x100000003}, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00') 3.751233289s ago: executing program 5 (id=2973): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400200007, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008005}, 0x2) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af03, 0x0) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x2000084, 0x0, 0x0, &(0x7f00000000c0)=0x10000) ioctl$auto_VHOST_NET_SET_BACKEND(r2, 0x4008af30, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r1, 0x0, 0x80) socket(0x29, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRESHEX=r5], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) mmap$auto(0xffffffffffdffffe, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x84480000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x29, 0x1, 0x4106) getsockopt$auto_SO_NOFCS(r6, 0x6, 0x2b, 0x0, 0x0) setfsuid$auto(0xee00) setfsuid$auto(0xee01) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/projid_map\x00', 0x4501, 0x0) 3.258047968s ago: executing program 8 (id=2976): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x3, 0x3a) close$auto(r1) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r1, 0x8, 0x0, 0x0) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r2, &(0x7f00000018c0)={0x0, 0x1}, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x800, 0x0) ioctl$auto(r3, 0x90006441, 0xc35) r4 = open(0x0, 0x0, 0x408) getdents$auto(r4, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 3.203767957s ago: executing program 4 (id=2977): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/acpi/parameters/ec_event_clearing\x00', 0x129882, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) recvfrom$auto(r2, &(0x7f00000042c0), 0x1, 0x7be, &(0x7f00000043c0)=@nl=@unspec, &(0x7f0000004400)=0x4) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004740), r2) sendfile$auto(r1, r1, 0x0, 0x8) openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000200), 0x98200, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000001c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000d80)={0x30, r4, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}, 0x1, 0x300}, 0x40000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/mb_group_prealloc\x00', 0x8001, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r6 = syz_genetlink_get_family_id$auto_thermal(&(0x7f00000000c0), r2) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x1}, @THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0xeec}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0xe00}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x804) pread64$auto(r3, 0x0, 0x2, 0x401) 2.202884806s ago: executing program 7 (id=2979): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) memfd_create$auto(&(0x7f0000000240)='-$\xb9,!+!-%\x00', 0x45b933c1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) (async) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0xa, 0x2, 0x73) sendto$auto(r1, 0x0, 0xfdef, 0xfe80, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) capget$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x4007, 0xb}) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0x100, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x161342, 0x100) (async) pipe2$auto(0x0, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xe0180, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) socket(0x15, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2$auto(0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 1.937190938s ago: executing program 7 (id=2980): acct$auto(&(0x7f0000000000)='/dev/dsp\x00') r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001240)='/proc/self/net/mcfilter6\x00', 0x121080, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)=""/4096, 0x1000) acct$auto(&(0x7f0000000040)='/dev/dsp\x00') 1.92409322s ago: executing program 5 (id=2981): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto_VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080)={0x5, 0x0, [{0x0, 0x5, 0xfffffffffffffffc}]}) ioctl$auto_VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 1.83612361s ago: executing program 4 (id=2982): mmap$auto(0x7, 0x400008, 0xdf, 0x91, 0x7, 0x800008000) r0 = socket(0xa, 0x3, 0x3a) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x8}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0xb59}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) r4 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000040)=0x10001) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/uptime\x00', 0x101002, 0x0) sendfile$auto(r3, r5, 0x0, 0x2) 1.647117239s ago: executing program 5 (id=2983): fanotify_init$auto(0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.reset_stats\x00', 0xa001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x59, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/video9\x00', 0x20281, 0x0) mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp1\x00', 0x48080, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000380)="4e62267e0f5560cce5d51dc1b715aa47c0df3d00f783acd5401b8a69b77d64da2a8bd11fdab234fa6c9dc18c76d85cc13a197c81310368e309966510e6a74f95eb2cd7583ac6c09086f885ac4ef83fa3446991ba8cdfb831ac9c95bbed6feae5886513b6a32e8ed9e32b9a9bdcc62bbfb76b269408595677fa6c43066e2d8d58440c91db39e5dd2064c26f7deef6d22760a6cb265d898c2c15ef1eb34f1e0e5c2abe69bdac91c3ec5b56bedb79796ddf5fc06c1c63e4c8dd98") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/kvm_amd/parameters/vnmi\x00', 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x9}]}, 0x1c}}, 0x13a538a4bae1feda) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0) lseek$auto(0x3, 0x8, 0x1) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r4, 0x400064c8, r4) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(0xffffffffffffffff, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyxb\x00', 0x4c0040, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x22, &(0x7f0000000000), 0x1) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x5512c0, 0x0) 1.39493638s ago: executing program 4 (id=2984): setresuid$auto(0x2, 0x5, 0x200) rseq$auto(0x0, 0x584, 0x1, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000040)={[0xc, 0x5, 0xd, 0x8fd6, 0x948b, 0xde7, 0x15f4da0a, 0x3, 0x3, 0x5, 0x80000001, 0xe, 0x1, 0x9, 0x1, 0x1]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x4, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) write$auto(0x3, 0x0, 0xffd8) readv$auto(r0, &(0x7f0000000040)={0x0}, 0x8) shmget$auto(0x8, 0x10563, 0x568d1af2) 1.277452285s ago: executing program 7 (id=2985): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x17) fanotify_init$auto(0x1, 0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0x20499d, 0x9) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, 0x0, 0x6a) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3) setsockopt$auto(0x400000000000003, 0x8029, 0xca, 0x0, 0x567) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x29d, 0x7, @old_map_fd=0x6}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x4, 0x0, 0x3}, 0xa8) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x15c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4, 0x1e}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x1b, 0x2, "d5ee63aea75a9d66346ce6fe2d5358bacb69eb3339afc4"}, @HWSIM_ATTR_PMSR_RESULT={0x124, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x120, 0x5, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xac, 0x1, "28e38e4c630e07759c5ce434a620566c1bc45cbc1143219f2a5666d7a88181015d76521283bdf4b956c64ade1d6524cdbadf571d3e18f821548f2d97c4916c91acac1f21e130391e465ed29b079802838a4f2276f1ab33acbe7ca5cfdadba6ba07cf47f5dca3fae4a035da2ba3e575d03095a9f5484f3eeffc275464868acfe4dca1984f3cd7d5f1ecbed6ca9861aadfb812993ef7c9014690aaa06a99f07b1d83c1795353c604c6"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x67, 0x1, "5ac908e428d1dbf742f7d5a658c554e6b7095c98c41087f57de389de219d6ad92b8bfbb06d42b633d6780464550a1f04124f42a12f94d4eda4da737666ad3586609b23ea2f4a3d3f6147185bf51d410a98f124d3f056216ec43f338c1867a46e44f868"}]}, {0x4}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) 985.656211ms ago: executing program 7 (id=2986): openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x212100, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) r2 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(r2, 0x2, &(0x7f0000000040), 0x86) close_range$auto(r2, 0x8, 0x0) socket(0x2, 0x2, 0x0) r3 = socket(0xa, 0x3, 0x3a) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto(r4, &(0x7f0000000000)='\x00', 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x21003b46, 0x2, 0x0, 0x0, 0x6) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_fd=r5, r3, 0x99, 0x2, 0x1, @relative_fd, 0x9}, 0xaf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) close_range$auto(0x0, 0x5, 0x0) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop6\x00', 0x80, 0x0) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r7, 0x110, 0x2, 0x0, 0x40000) ioctl$auto_SG_GET_RESERVED_SIZE(r6, 0x4c00, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(r0, 0x90009427, &(0x7f0000001080)={@inferred, "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"}) 959.02699ms ago: executing program 8 (id=2987): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mprotect$auto(0x0, 0x8, 0x2000006) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) timer_create$auto(0x9, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) semctl$auto_SETALL(0x0, 0x9, 0x11, 0x9) mmap$auto(0x0, 0x400007, 0x0, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = fanotify_init$auto(0x5, 0x2000000000002) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x12ba7e, 0x1c9) fanotify_mark$auto(0x0, 0x451, 0x9, r1, 0x0) fanotify_mark$auto(r0, 0x452, 0x800000a, r1, 0x0) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) pipe2$auto(0x0, 0x0) unshare$auto(0x80010000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x42000, 0x0) io_uring_setup$auto(0x58, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x7, 0x4) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) 951.445538ms ago: executing program 5 (id=2988): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000200)=ANY=[@ANYBLOB="dbe84896974acbe10000000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf255c7c000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) r7 = socket(0xa, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r10, r9, 0x8, 0xff, r7, @relative_fd, 0xe600}, 0xf) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xe8, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_HEADER={0x4}, @ETHTOOL_A_CABLE_TEST_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x92}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x10000}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @ETHTOOL_A_CABLE_TEST_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x480c4}, 0x4000080) 767.670995ms ago: executing program 7 (id=2989): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0xe40, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x22040, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x0, 0x6}, 0x1, 0x10d) read$auto(0x3, 0x0, 0x7fffffff) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r1) r3 = semctl$auto_GETPID(0x4, 0x1, 0xb, 0x87) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0x401, r5, @relative_id=0x13, 0xe600}, 0xf) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x294, r2, 0x100, 0x70bd25, 0x0, {}, [@WGDEVICE_A_PUBLIC_KEY={0x57, 0x4, "1aab840dec0f2be6cd8bc20294cc4382c09191299b33bfdcee5d216eab44969c80975d551bd77797cc28358479e2eee033569b8c5fc47903964b85fe67527bc458146def963a1d1955f4a7df5291ab32e29ea9"}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x6}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_PEERS={0x210, 0x8, 0x0, 0x1, [@typed={0xc, 0x81, 0x0, 0x0, @u64=0x7f}, @nested={0xef, 0x15a, 0x0, 0x1, [@typed={0xe, 0x18, 0x0, 0x0, @str='+(**,&})]\x00'}, @typed={0x8, 0x17, 0x0, 0x0, @pid=r3}, @generic="cf03eac031b99d340b884c5ca0a5f9431eae96a1fefe059e248b7128393d944cde820352cb74274ef49099c37c9b7742795399a5e6ce0cc81a0baf49d1ec99f8c9cbf29f97fda41a82c52febb5f59f892f", @typed={0x8, 0xa7, 0x0, 0x0, @u32=0x6}, @generic="2799e9d9ce325711502142f7b36762aff62b3a828a9ae24541aaf8f577e8964c6684240181267146b40929d692e4e07b4a7c707c184de615ee6d95c575cdec26ae55d2d0c5dffd3f77e1c04deedeb002f732d0a00330800ce11c70f8963cb04199236d5b783b2692ad3984983893b52e8b16ceb83a285a8accf4"]}, @nested={0x110, 0x33, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0x4, 0x7}, @generic="7f5c63208023363863e675802878c77486e04a0a7d2ca9bbbd3b417566272c7874d2ef011d", @typed={0x8, 0x8f, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0x156}, @typed={0xc, 0x8e, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0x33}, @generic="7686d96dad4fde53b785c6bff03b22b0bf89c76f76486ca6b1965dfd3d388a8306694946e5079786f170287783b77a7d638fe945b593abc1a50690f786f8008f2411e6fd07da6d68bd8d8639befafa46ce148f", @generic="523ec1b87b770bd2ed46037ebb8be50df2c6ba2afa71649f768e42edcb060c0515e59a3e4cbe23f0ca21119e0199aa00be6383cc281b54ffb24bafc3b1380d32b48f53de2c6ed37ae974820132c35e5bd333551003577e9494efc3281c37bcfcf942b26b43749dc03710a751", @nested={0x4, 0x9d}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x294}}, 0x24040080) 682.666685ms ago: executing program 5 (id=2990): r0 = epoll_create$auto(0x3) r1 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004014}, 0x4) ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x2) r2 = socket(0x5, 0xc, 0x40) lsm_list_modules$auto(&(0x7f0000000140)=0x1, &(0x7f0000000180)=0x7fff, 0xffff7e72) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000200), r0) sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000400)={&(0x7f00000001c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x15c, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CHANNEL_PAGE_LIST={0x84, 0x1e, "8b86cd6ff57486a25bd51117405c5d45eff1b69a6bdc13692046549450220fe8ee42a0b9c10a7c1bcfa48c0a9627374809f7dc15a3608c1c3c052bd11d840df214a4a1509e94bfd59dbf1c0f2bf277af8caee790a0bcded7c0771a88c3fae069d003c72e329137b148787dd543ccd2a3503eede79de0c1972552f7988bb4065b"}, @IEEE802154_ATTR_CHANNEL_PAGE_LIST={0x84, 0x1e, "82da3cb8497d9d399029e844ad518dba498227c902a6db4e9dcb6c4f501210e97a6bcbd29b19dd73db636169feeca47039a8acaa4450dd4c0e9e53081713c33b5d552bb9af650dd8b736d55505f7bbf6d7b838cd0cb9fd799bff793b3ecfa27cfbe4d7f42b9b7be2314c63a748a66f5714f787fdd2caaaee67921e85328ad709"}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x5}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x24}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xa1}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "e7f4b217cdaae1decc43e1f8eca9f0a7"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, 0xffffffffffffff01}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x1}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4}, 0x20008005) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) r5 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f00000004c0), r2) sendmsg$auto_SMC_PNETID_GET(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r5, 0x401, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0xc, 0x2, 'thermal\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0xb6}, @SMC_PNETID_IBNAME={0x7, 0x3, '/{\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x7}, @SMC_PNETID_NAME={0x11, 0x1, '802.15.4 MAC\x00'}]}, 0x4c}}, 0x4000) lsm_list_modules$auto(&(0x7f0000000600)=0xd0a3, &(0x7f0000000640)=0x7f, 0x3) sendmmsg$auto(r2, &(0x7f0000001800)={{&(0x7f0000000680)="90b2e058821ae4114e7339d68db2087e0cc2a414715f412959e2795453e8d3b440e83959d71b1e44511aa249253251e0b186", 0x0, &(0x7f00000016c0)={&(0x7f00000006c0)="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"}, 0x2, &(0x7f0000001700)="90f8498e054795639abe8d7fba6c49488a56269a4df9e7cd3019c99cc2a2431ff445822ae7a4f5d8fd8aa79a12e81b6f51cff82062ec9a632884a30d6cb596035c46051a14b55c918d10d1f76d0e0d9fdc517ea075f4ee2955e5300802b5db5ce1c5ad005336eaef71c5cbf82938f54e11fea9e5c08fe8a35e5e4000c0ddfb565d6eb7b4b74db298cffd36455759ab917115ec7485430156a4727140d1990a2ddd44960aec2a27e7e6f863debca517bc9cfbfdf907a2f00217c0d06f14d2f40215a6dc3f6587a98588f7b82319be29626559173cc5cd705a604a756f5e995bd49d17d2dab669775096645b1b5f4afe8e72126a16a229fad2", 0x0, 0x5}, 0x3}, 0x8, 0x8) ioctl$auto_XFS_IOC_ALLOCSP64(r0, 0x40305824, &(0x7f0000001840)={0xff, 0x51, 0x6, 0x8, 0x7cade844, 0xffffffffffffffff}) getpgid$auto(r6) readv$auto(r4, &(0x7f0000002880)={&(0x7f0000001880)="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", 0x6}, 0x1ff) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002900), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002940)={'veth1_vlan\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002980)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f0000002a40)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x38, r7, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r8}, @NETDEV_A_DMABUF_QUEUES={0x14, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xf}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x74}]}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r9}]}, 0x38}}, 0x80a0) read$auto_proc_page_owner_threshold_(r0, &(0x7f0000002a80)=""/29, 0x1d) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000002ac0), 0x800, 0x0) r10 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002b40), r0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x14, r10, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_GET_CONFIG(r11, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x8000c40}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x1c, r10, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40048c4}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002d80)={'sit0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r12, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x38, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe6a}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(0xffffffffffffffff, 0xc2604110, &(0x7f0000002ec0)={0x4741, [{[0x9, 0x5, 0x6c77, 0x9, 0x81, 0x10, 0xe39, 0xfffffffe]}, {[0x1, 0x4, 0x0, 0x1000, 0xa1c, 0x0, 0xfffffffc, 0x2]}, {[0xb2a, 0x80000000, 0x6, 0x5, 0x89, 0x800]}], [{[0x1ff, 0xd, 0x6, 0xf, 0x6155, 0x4, 0xffffffff, 0xfffe0000]}, {[0x6, 0x1, 0x8, 0x5, 0xffff95db, 0x9, 0x9, 0x5]}, {[0x0, 0x800, 0x0, 0xdb9a, 0x3, 0x8, 0xe543]}, {[0x7fff, 0x1a2, 0x9, 0x8, 0x2, 0x7, 0x800, 0x9]}, {[0x8, 0x1997, 0x0, 0x10000, 0x4, 0x5, 0x94, 0x1]}], [{0x10, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x6, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x0, 0x1, 0x1}, {0x8, 0x6, 0x0, 0x1, 0x1, 0x1}, {0x3ff, 0x4}, {0x2, 0xffff, 0x0, 0x1, 0x1, 0x1}, {0x327, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x4f0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x800, 0x1, 0x0, 0x0, 0x1}, {0x4, 0x8c6, 0x1, 0x0, 0x1, 0x1}, {0x80000001, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xe, 0x5, 0x1}], [{0x6, 0x2, 0x0, 0x1, 0x1, 0x1}, {0xfff00000, 0xf, 0x1, 0x1, 0x1, 0x1}, {0x9ca, 0x7}, {0x10, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x4, 0xb, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x9d, 0x0, 0x0, 0x1, 0x1}, {0xe245, 0x4, 0x1, 0x0, 0x1, 0x1}, {0x4b0d, 0x40, 0x1, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x0, 0x1, 0x1}], 0x995f, 0x3, 0xfff, 0x7fffffff, 0x9, 0x1ff, 0xa58, "5896c767542e0d867aaa40316e4f8d80", "11001c92c7df12852462c4f0cd53a51e5b2ad87da44411fdcb1138b398f8ce6e3139de4bf2bc66904cb6bdf3dae5c5e9"}) 478.423227ms ago: executing program 8 (id=2991): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) close_range$auto(r0, r0, 0x4) memfd_create$auto(0x0, 0xe) r1 = socket(0x2a, 0x1, 0xb30) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/freezer.state\x00', 0x10b342, 0x0) socket(0x10, 0x2, 0xc) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) writev$auto(r1, &(0x7f00000000c0)={&(0x7f0000000240)="303b1167defd491087dcc40a2714e17e7bf7ad7c15dd04c223bb019dfe33955007e7fa362589fb2fb1ddc02be15929fb0a1cfbe667ab553cdae34dda27c1e09df45c8862ac8ea6c217bb583ae4cec9b52792ea00564fe6b2fe4afff754044ea71b66ca85378392c861a917f29dd60c70ce217b3f67976745b71e7dce8d76ec", 0x6}, 0x8001) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x7, 0x0) socketpair$auto(0x1ffe, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_tgsigqueueinfo$auto(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x8, 0x2, @_sigchld={0x0, 0x0, 0x401, 0x5, 0x3}}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES64=r3, @ANYRES64], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x884) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00"], 0x1ac}}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc1}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x100, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000080)='\xac\x00', &(0x7f0000000000)=&(0x7f0000000200)=' ') openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) r4 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x80044943, 0x0) 399.212316ms ago: executing program 4 (id=2992): lstat$auto(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000540)={0xb, 0x200, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x5, 0xd3, 0x200, 0x100, 0x4, 0x7077, 0x4, 0xff, 0x1}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 294.945479ms ago: executing program 5 (id=2993): mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) unshare$auto(0x40000080) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000680)="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", 0x658) close_range$auto(0x2, r0, 0x4) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x7fffffe, 0x0, 0x2000000000000003, 0x0, 0x1000, 0x1}, 0x401}, 0x800, 0xa0000000) r2 = socket(0x22, 0x80000, 0x7ff) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)={0x5, 0xfffffffb, [0xffffffff, 0x3ff, 0xc7, 0x80000001, 0x7]}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x1003e, 0xffff, 0x0, 0x1, 0x795) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r4, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5}) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x4, 0x6, 0x12a0) madvise$auto(0x0, 0x200007, 0x19) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video7\x00', 0x8200, 0x0) read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f0000000000)=""/133, 0x85) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) msgctl$auto(0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000040), r3) 261.581095ms ago: executing program 7 (id=2994): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd3/queue/nr_requests\x00', 0x143262, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (rerun: 64) pwritev2$auto(0xffffffffffffffff, 0x0, 0x100, 0x2, 0x9, 0x43) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket(0x2, 0x80802, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) socket(0x2, 0x2, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) unshare$auto(0x40000080) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) madvise$auto(0x0, 0x20499d, 0x9) (async, rerun: 32) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) (rerun: 32) socket(0x29, 0x2, 0x0) (async) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x101041, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x59, &(0x7f0000000000)={0x3, 0x3ff, 0x2, 0x1, 0x2, 0xa, 0xffffffffffffffff, [], {0x8, 0x1, 0x1, 0x22b, 0x8000100, 0x581, 0x104, 0x1000006, 0xffffffffffffffff}, {0xbfc7, 0x1, 0x52, 0x8, 0x3, 0x3d, 0x8, 0x7, 0x100000000}}) r0 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0) fcntl$auto(r0, 0x0, 0xa8) (async) madvise$auto(0x52d, 0x4, 0x8001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) 0s ago: executing program 8 (id=2995): open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) open_tree$auto(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x101) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x86a7, 0x11, 0xfffffffe, 0x6, 0x30000000, 0x9, 0xffffffffffffffff, [0x0, 0x0, 0xffff], {0x6, 0x10001, 0x20000b, 0x2e1, 0x504, 0x1, 0x101, 0x6, 0x5}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x440, 0x76c5, 0x8, 0x8000000000040000}}) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000002, &(0x7f0000000280)={&(0x7f0000000040), 0x1ffffffff}, 0x6, 0x0) r1 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0x2, 0x8000) r2 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(r2, 0x1e, 0x0, 0x9) ioctl$auto(r1, 0x890c, 0x1) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.499391][T16856] RSP: 002b:00007ff2665f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 729.499406][T16856] RAX: ffffffffffffffda RBX: 00007ff268615fa0 RCX: 00007ff26839c799 [ 729.499420][T16856] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 729.499429][T16856] RBP: 00007ff268432c99 R08: 0000000000000000 R09: 0000000000000000 [ 729.499437][T16856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.499445][T16856] R13: 00007ff268616038 R14: 00007ff268615fa0 R15: 00007ffdd51340a8 [ 729.499464][T16856] [ 729.499472][T16856] syz.5.2187: vmalloc error: size 4096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 730.529452][T16861] zswap: compressor not available [ 730.583840][T16856] CPU: 0 UID: 0 PID: 16856 Comm: syz.5.2187 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.583863][T16856] Tainted: [L]=SOFTLOCKUP [ 730.583868][T16856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 730.583877][T16856] Call Trace: [ 730.583882][T16856] [ 730.583888][T16856] dump_stack_lvl+0x100/0x190 [ 730.583913][T16856] warn_alloc.cold+0x95/0x1c1 [ 730.583936][T16856] ? __pfx_warn_alloc+0x10/0x10 [ 730.583956][T16856] ? trace_kmalloc+0x101/0x130 [ 730.583972][T16856] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 730.583995][T16856] ? __kasan_kmalloc+0x8a/0xb0 [ 730.584017][T16856] ? __get_vm_area_node+0x208/0x330 [ 730.584036][T16856] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 730.584053][T16856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.584072][T16856] ? vb2_vmalloc_alloc+0x135/0x410 [ 730.584094][T16856] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 730.584119][T16856] ? vb2_vmalloc_alloc+0x135/0x410 [ 730.584135][T16856] vmalloc_user_noprof+0x9e/0xe0 [ 730.584152][T16856] ? vb2_vmalloc_alloc+0x135/0x410 [ 730.584168][T16856] vb2_vmalloc_alloc+0x135/0x410 [ 730.584183][T16856] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 730.584200][T16856] __vb2_queue_alloc+0x8d5/0x1160 [ 730.584225][T16856] vb2_core_reqbufs+0x899/0xf30 [ 730.584243][T16856] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 730.584269][T16856] __vb2_init_fileio+0x32d/0x1000 [ 730.584284][T16856] ? vb2_fop_read+0xe5/0x520 [ 730.584296][T16856] ? aa_file_perm+0x7f3/0x14d0 [ 730.584330][T16856] __vb2_perform_fileio+0x91e/0x1380 [ 730.584352][T16856] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 730.584372][T16856] ? __pfx___might_resched+0x10/0x10 [ 730.584397][T16856] vb2_fop_read+0x211/0x520 [ 730.584414][T16856] v4l2_read+0x229/0x2c0 [ 730.584435][T16856] ? __pfx_v4l2_read+0x10/0x10 [ 730.584456][T16856] vfs_read+0x1e4/0xb30 [ 730.584480][T16856] ? __pfx_vfs_read+0x10/0x10 [ 730.584499][T16856] ? find_held_lock+0x2b/0x80 [ 730.584512][T16856] ? __fget_files+0x215/0x3d0 [ 730.584525][T16856] ? __fget_files+0x215/0x3d0 [ 730.584541][T16856] ? __fget_files+0x21f/0x3d0 [ 730.584559][T16856] ksys_read+0x12a/0x250 [ 730.584571][T16856] ? __pfx_ksys_read+0x10/0x10 [ 730.584589][T16856] do_syscall_64+0x106/0xf80 [ 730.584609][T16856] ? clear_bhb_loop+0x40/0x90 [ 730.584626][T16856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.584641][T16856] RIP: 0033:0x7ff26839c799 [ 730.584653][T16856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.584667][T16856] RSP: 002b:00007ff2665f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 730.584680][T16856] RAX: ffffffffffffffda RBX: 00007ff268615fa0 RCX: 00007ff26839c799 [ 730.584689][T16856] RDX: 0000000000000028 RSI: 0000200000000280 RDI: 0000000000000004 [ 730.584697][T16856] RBP: 00007ff268432c99 R08: 0000000000000000 R09: 0000000000000000 [ 730.584706][T16856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.584713][T16856] R13: 00007ff268616038 R14: 00007ff268615fa0 R15: 00007ffdd51340a8 [ 730.584732][T16856] [ 730.584738][T16856] Mem-Info: [ 731.408307][T16884] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 731.422710][ T29] audit: type=1800 audit(566913832.883:17): pid=16882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2192" name="dbroot" dev="configfs" ino=372253 res=0 errno=0 [ 731.454872][T16720] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 731.463565][T16882] tipc: Started in network mode [ 731.469277][T16882] tipc: Node identity ffffffff, cluster identity 4711 [ 731.486140][T16882] tipc: Node number set to 4294967295 [ 731.491615][T16883] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 731.515075][T16883] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 731.577284][T16883] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 731.597722][T16883] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 731.764939][T16856] active_anon:12371 inactive_anon:552 isolated_anon:0 [ 731.764939][T16856] active_file:731 inactive_file:58905 isolated_file:0 [ 731.764939][T16856] unevictable:768 dirty:389 writeback:0 [ 731.764939][T16856] slab_reclaimable:14022 slab_unreclaimable:99166 [ 731.764939][T16856] mapped:25110 shmem:1931 pagetables:1549 [ 731.764939][T16856] sec_pagetables:0 bounce:0 [ 731.764939][T16856] kernel_misc_reclaimable:0 [ 731.764939][T16856] free:1294940 free_pcp:13695 free_cma:0 [ 731.919064][T16856] Node 0 active_anon:49016kB inactive_anon:80kB active_file:2924kB inactive_file:235444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101948kB dirty:1552kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12384kB pagetables:6008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 732.011513][T16879] chnl_net:caif_netlink_parms(): no params data found [ 732.035613][T16856] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:176kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:1520kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 732.154422][T16856] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 732.237595][T16879] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.259657][T16879] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.271274][T16856] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 732.285179][T16879] bridge_slave_0: entered allmulticast mode [ 732.294083][T16856] Node 0 DMA32 free:1215508kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:49068kB inactive_anon:40kB active_file:2924kB inactive_file:235396kB unevictable:1536kB writepending:1540kB zspages:0kB present:3129332kB managed:2537368kB mlocked:0kB bounce:0kB free_pcp:52504kB local_pcp:52504kB free_cma:0kB [ 732.329338][T16879] bridge_slave_0: entered promiscuous mode [ 732.355198][T16879] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.378512][T16879] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.396530][T16879] bridge_slave_1: entered allmulticast mode [ 732.414289][T16856] lowmem_reserve[]: 0 0 1 1 1 [ 732.421260][T16879] bridge_slave_1: entered promiscuous mode [ 732.427449][T16856] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:60kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 732.507509][T16879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.560557][T16856] lowmem_reserve[]: 0 0 0 0 0 [ 732.568973][T16879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.581012][T16856] Node 1 Normal free:3949324kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:176kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 732.664413][T16879] team0: Port device team_slave_0 added [ 732.689007][T16879] team0: Port device team_slave_1 added [ 732.696508][T16856] lowmem_reserve[]: 0 0 0 0 0 [ 732.701211][T16856] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 732.765335][T16856] Node 0 DMA32: 4503*4kB (UME) 5051*8kB (UME) 3186*16kB (UME) 1107*32kB (ME) 785*64kB (UME) 421*128kB (UME) 331*256kB (UME) 197*512kB (UME) 100*1024kB (UME) 19*2048kB (UME) 156*4096kB (UM) = 1214836kB [ 732.797997][T16879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.816585][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.853921][T16856] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 732.891964][T16856] Node 1 Normal: 9*4kB (UM) 11*8kB (UM) 11*16kB (UM) 7*32kB (UM) 2*64kB (UM) 5*128kB (UM) 2*256kB (UM) 2*512kB (M) 2*1024kB (UM) 2*2048kB (U) 962*4096kB (UM) = 3949324kB [ 732.916229][T16879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.927416][T16906] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2197'. [ 732.937334][T16856] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 732.949764][T16879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.968000][T16906] FAULT_INJECTION: forcing a failure. [ 732.968000][T16906] name failslab, interval 1, probability 0, space 0, times 0 [ 732.981644][T16856] Node 0 hugepages_total=5 hugepages_free=5 hugepages_surp=0 hugepages_size=2048kB [ 732.991095][T16879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.017956][T16856] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 733.027659][T16906] CPU: 0 UID: 0 PID: 16906 Comm: syz.7.2197 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.027683][T16906] Tainted: [L]=SOFTLOCKUP [ 733.027689][T16906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 733.027699][T16906] Call Trace: [ 733.027705][T16906] [ 733.027711][T16906] dump_stack_lvl+0x100/0x190 [ 733.027738][T16906] should_fail_ex.cold+0x5/0xa [ 733.027757][T16906] ? tomoyo_encode2+0xfb/0x3c0 [ 733.027775][T16906] should_failslab+0xc2/0x120 [ 733.027792][T16906] __kmalloc_noprof+0xe0/0x850 [ 733.027812][T16906] ? d_absolute_path+0x136/0x1b0 [ 733.027836][T16906] tomoyo_encode2+0xfb/0x3c0 [ 733.027857][T16906] tomoyo_encode+0x29/0x50 [ 733.027875][T16906] tomoyo_realpath_from_path+0x18c/0x690 [ 733.027899][T16906] tomoyo_path_perm+0x276/0x460 [ 733.027913][T16906] ? tomoyo_path_perm+0x262/0x460 [ 733.027930][T16906] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 733.027965][T16906] ? __pfx_ima_file_check+0x10/0x10 [ 733.028062][T16906] ? hook_file_truncate+0xc4/0x250 [ 733.028083][T16906] security_file_truncate+0xb5/0x1e0 [ 733.028103][T16906] path_openat+0x1c6e/0x31a0 [ 733.028123][T16906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.028140][T16906] ? __pfx_path_openat+0x10/0x10 [ 733.028171][T16906] do_file_open+0x20e/0x430 [ 733.028188][T16906] ? __pfx_do_file_open+0x10/0x10 [ 733.028217][T16906] ? _raw_spin_unlock+0x28/0x50 [ 733.028237][T16906] ? alloc_fd+0x476/0x790 [ 733.028257][T16906] do_sys_openat2+0x10d/0x1e0 [ 733.028277][T16906] ? __pfx_do_sys_openat2+0x10/0x10 [ 733.028294][T16906] ? __sock_release+0x184/0x260 [ 733.028323][T16906] __x64_sys_open+0xfe/0x1d0 [ 733.028342][T16906] ? __pfx___x64_sys_open+0x10/0x10 [ 733.028368][T16906] do_syscall_64+0x106/0xf80 [ 733.028388][T16906] ? clear_bhb_loop+0x40/0x90 [ 733.028405][T16906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.028421][T16906] RIP: 0033:0x7fe17f99c799 [ 733.028434][T16906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.028449][T16906] RSP: 002b:00007fe18084b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 733.028464][T16906] RAX: ffffffffffffffda RBX: 00007fe17fc15fa0 RCX: 00007fe17f99c799 [ 733.028474][T16906] RDX: 0000000000000154 RSI: 0000000000022240 RDI: 0000200000000040 [ 733.028484][T16906] RBP: 00007fe17fa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 733.028493][T16906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.028502][T16906] R13: 00007fe17fc16038 R14: 00007fe17fc15fa0 R15: 00007ffc1f633478 [ 733.028523][T16906] [ 733.028541][T16906] ERROR: Out of memory at tomoyo_realpath_from_path. [ 733.312134][T16856] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 733.323028][T16879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.333609][T16856] 61053 total pagecache pages [ 733.338374][T16856] 37 pages in swap cache [ 733.343773][T16856] Free swap = 124848kB [ 733.355491][T16856] Total swap = 124996kB [ 733.365195][T16856] 2097051 pages RAM [ 733.375177][T16856] 0 pages HighMem/MovableOnly [ 733.383432][T16856] 430829 pages reserved [ 733.390743][T16856] 0 pages cma reserved [ 733.530281][T16879] hsr_slave_0: entered promiscuous mode [ 733.536865][T16879] hsr_slave_1: entered promiscuous mode [ 733.542965][T16879] debugfs: 'hsr0' already exists in 'hsr' [ 733.549415][T16879] Cannot create hsr debugfs directory [ 733.696430][T16883] Bluetooth: hci3: command tx timeout [ 734.500920][T16879] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 734.540544][T16879] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 734.646088][T16879] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 734.737695][T16879] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 735.508824][T16879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.588693][T16879] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.750141][T16802] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.757317][T16802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.777789][T16883] Bluetooth: hci3: command tx timeout [ 735.821083][T16802] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.828216][T16802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.090397][T16879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 736.583819][T16879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.943210][T16984] netlink: 'syz.7.2211': attribute type 1 has an invalid length. [ 736.986959][T16984] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2211'. [ 737.374895][T16879] veth0_vlan: entered promiscuous mode [ 737.429310][T16879] veth1_vlan: entered promiscuous mode [ 737.529509][T16879] veth0_macvtap: entered promiscuous mode [ 737.578794][T16879] veth1_macvtap: entered promiscuous mode [ 737.667772][T16879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.706943][T16879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.765498][T16722] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.835958][T16722] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.857782][T16735] Bluetooth: hci3: command tx timeout [ 737.874965][T16722] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.931994][T16722] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.702790][T16804] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.762352][T16804] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.889391][T16719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.941307][T16719] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.642127][T17019] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2217'. [ 739.939242][T16735] Bluetooth: hci3: command tx timeout [ 740.429575][T17037] netlink: 25 bytes leftover after parsing attributes in process `syz.7.2220'. [ 741.194994][T17038] hub 1-0:1.0: USB hub found [ 741.298469][T17038] hub 1-0:1.0: 1 port detected [ 741.448600][T17046] binder: BINDER_SET_CONTEXT_MGR already set [ 741.462952][T17046] binder: 17045:17046 ioctl 4018620d 2000000027c0 returned -16 [ 741.981510][T17064] random: crng reseeded on system resumption [ 745.049163][T17120] FAULT_INJECTION: forcing a failure. [ 745.049163][T17120] name failslab, interval 1, probability 0, space 0, times 0 [ 745.088464][T17120] CPU: 0 UID: 0 PID: 17120 Comm: syz.7.2235 Tainted: G L syzkaller #0 PREEMPT(full) [ 745.088489][T17120] Tainted: [L]=SOFTLOCKUP [ 745.088501][T17120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 745.088510][T17120] Call Trace: [ 745.088515][T17120] [ 745.088521][T17120] dump_stack_lvl+0x100/0x190 [ 745.088548][T17120] should_fail_ex.cold+0x5/0xa [ 745.088566][T17120] should_failslab+0xc2/0x120 [ 745.088583][T17120] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 745.088604][T17120] ? ptlock_alloc+0x1f/0x70 [ 745.088627][T17120] ptlock_alloc+0x1f/0x70 [ 745.088645][T17120] pte_alloc_one+0x82/0x3d0 [ 745.088663][T17120] do_fault+0x88e/0x1990 [ 745.088682][T17120] __handle_mm_fault+0x180f/0x2b60 [ 745.088707][T17120] ? __pfx___handle_mm_fault+0x10/0x10 [ 745.088726][T17120] ? folio_mark_accessed+0xf3/0x1040 [ 745.088742][T17120] ? __pfx_folio_mark_accessed+0x10/0x10 [ 745.088756][T17120] ? find_held_lock+0x2b/0x80 [ 745.088783][T17120] handle_mm_fault+0x36d/0xa20 [ 745.088806][T17120] __get_user_pages+0xf9c/0x34d0 [ 745.088829][T17120] ? __pfx___get_user_pages+0x10/0x10 [ 745.088852][T17120] populate_vma_page_range+0x267/0x3f0 [ 745.088871][T17120] ? __pfx_populate_vma_page_range+0x10/0x10 [ 745.088888][T17120] ? __pfx_find_vma_intersection+0x10/0x10 [ 745.088905][T17120] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 745.088931][T17120] __mm_populate+0x107/0x3a0 [ 745.088949][T17120] ? __pfx___mm_populate+0x10/0x10 [ 745.088968][T17120] ? up_write+0x290/0x4f0 [ 745.088991][T17120] __do_sys_mlockall+0x4f4/0x5d0 [ 745.089014][T17120] do_syscall_64+0x106/0xf80 [ 745.089035][T17120] ? clear_bhb_loop+0x40/0x90 [ 745.089054][T17120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.089069][T17120] RIP: 0033:0x7fe17f99c799 [ 745.089082][T17120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 745.089097][T17120] RSP: 002b:00007fe18084b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 745.089112][T17120] RAX: ffffffffffffffda RBX: 00007fe17fc15fa0 RCX: 00007fe17f99c799 [ 745.089122][T17120] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 745.089131][T17120] RBP: 00007fe17fa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 745.089140][T17120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 745.089149][T17120] R13: 00007fe17fc16038 R14: 00007fe17fc15fa0 R15: 00007ffc1f633478 [ 745.089168][T17120] [ 745.573520][T17128] blktrace: Concurrent blktraces are not allowed on nbd4 [ 747.306941][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.320441][T17135] syz.5.2240 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 747.333039][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.376308][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2248'. [ 747.401550][T17135] CPU: 0 UID: 0 PID: 17135 Comm: syz.5.2240 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.401575][T17135] Tainted: [L]=SOFTLOCKUP [ 747.401580][T17135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 747.401590][T17135] Call Trace: [ 747.401595][T17135] [ 747.401601][T17135] dump_stack_lvl+0x100/0x190 [ 747.401629][T17135] dump_header+0xfb/0x606 [ 747.401646][T17135] oom_kill_process.cold+0xd/0x330 [ 747.401664][T17135] out_of_memory+0x340/0x14f0 [ 747.401690][T17135] ? __pfx_out_of_memory+0x10/0x10 [ 747.401716][T17135] mem_cgroup_out_of_memory+0xc6/0x130 [ 747.401737][T17135] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 747.401757][T17135] ? find_held_lock+0x2b/0x80 [ 747.401775][T17135] ? do_raw_spin_unlock+0x145/0x1e0 [ 747.401797][T17135] ? _raw_spin_unlock+0x28/0x50 [ 747.401818][T17135] try_charge_memcg+0x652/0xc90 [ 747.401838][T17135] ? __pfx_try_charge_memcg+0x10/0x10 [ 747.401858][T17135] ? find_held_lock+0x2b/0x80 [ 747.401871][T17135] ? rcu_read_unlock+0x17/0x60 [ 747.401887][T17135] ? rcu_read_unlock+0x17/0x60 [ 747.401905][T17135] charge_memcg+0xa6/0x280 [ 747.401921][T17135] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 747.401943][T17135] __swap_cache_prepare_and_add+0x528/0x9e0 [ 747.401975][T17135] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 747.401995][T17135] ? __pfx_swap_entry_swapped+0x10/0x10 [ 747.402016][T17135] swap_cache_alloc_folio+0x1cb/0x300 [ 747.402038][T17135] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 747.402065][T17135] swap_cluster_readahead+0x411/0x770 [ 747.402091][T17135] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 747.402127][T17135] shmem_swapin_folio+0x22a4/0x2c10 [ 747.402151][T17135] ? find_held_lock+0x2b/0x80 [ 747.402165][T17135] ? filemap_get_entry+0x1a7/0x3b0 [ 747.402193][T17135] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 747.402213][T17135] ? __pfx_filemap_get_entry+0x10/0x10 [ 747.402234][T17135] ? mod_memcg_lruvec_state+0x1a6/0x630 [ 747.402268][T17135] shmem_get_folio_gfp+0x56c/0x1900 [ 747.402294][T17135] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 747.402318][T17135] ? find_held_lock+0x2b/0x80 [ 747.402334][T17135] shmem_get_folio+0x84/0xb0 [ 747.402357][T17135] collapse_file+0x1263/0x3cc0 [ 747.402380][T17135] ? __lock_acquire+0x4a5/0x2630 [ 747.402399][T17135] ? __pfx_collapse_file+0x10/0x10 [ 747.402423][T17135] ? find_held_lock+0x2b/0x80 [ 747.402437][T17135] ? hpage_collapse_scan_file+0x583/0x1fc0 [ 747.402454][T17135] ? hpage_collapse_scan_file+0x583/0x1fc0 [ 747.402474][T17135] hpage_collapse_scan_file+0x603/0x1fc0 [ 747.402497][T17135] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 747.402518][T17135] ? madvise_collapse+0x3cb/0xbe0 [ 747.402534][T17135] ? madvise_collapse+0x3cb/0xbe0 [ 747.402556][T17135] madvise_collapse+0x412/0xbe0 [ 747.402579][T17135] ? finish_task_switch.isra.0+0x200/0xb80 [ 747.402595][T17135] ? __pfx_madvise_collapse+0x10/0x10 [ 747.402614][T17135] ? rcu_is_cpu_rrupt_from_idle+0x270/0x270 [ 747.402643][T17135] madvise_vma_behavior+0x1987/0x3050 [ 747.402663][T17135] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 747.402681][T17135] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 747.402705][T17135] ? mas_prev+0x9b/0xf0 [ 747.402727][T17135] ? __pfx_mas_prev+0x10/0x10 [ 747.402753][T17135] ? find_vma_prev+0xd8/0x150 [ 747.402768][T17135] ? futex_unqueue+0x133/0x2c0 [ 747.402786][T17135] ? __pfx_find_vma_prev+0x10/0x10 [ 747.402808][T17135] ? __futex_wait+0x256/0x300 [ 747.402833][T17135] madvise_walk_vmas+0x2fe/0xa90 [ 747.402854][T17135] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 747.402877][T17135] madvise_do_behavior+0x1ea/0x510 [ 747.402896][T17135] ? __pfx_madvise_do_behavior+0x10/0x10 [ 747.402914][T17135] ? down_read+0x13b/0x460 [ 747.402937][T17135] do_madvise+0x195/0x240 [ 747.402954][T17135] ? __pfx_do_madvise+0x10/0x10 [ 747.402970][T17135] ? do_futex+0x192/0x350 [ 747.403006][T17135] __x64_sys_madvise+0xa9/0x110 [ 747.403023][T17135] ? lockdep_hardirqs_on+0x78/0x100 [ 747.403044][T17135] do_syscall_64+0x106/0xf80 [ 747.403064][T17135] ? clear_bhb_loop+0x40/0x90 [ 747.403082][T17135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.403097][T17135] RIP: 0033:0x7ff26839c799 [ 747.403111][T17135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.403124][T17135] RSP: 002b:00007ff2665d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 747.403140][T17135] RAX: ffffffffffffffda RBX: 00007ff268616090 RCX: 00007ff26839c799 [ 747.403150][T17135] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 747.403159][T17135] RBP: 00007ff268432c99 R08: 0000000000000000 R09: 0000000000000000 [ 747.403168][T17135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.403176][T17135] R13: 00007ff268616128 R14: 00007ff268616090 R15: 00007ffdd51340a8 [ 747.403208][T17135] [ 748.604046][T17218] futex_wake_op: syz.7.2250 tries to shift op by -2048; fix this program [ 748.612808][T17218] futex_wake_op: syz.7.2250 tries to shift op by -2048; fix this program [ 748.700460][T17221] sg_write: process 1774 (syz.4.2252) changed security contexts after opening file descriptor, this is not allowed. [ 748.713093][T17222] FAULT_INJECTION: forcing a failure. [ 748.713093][T17222] name fail_futex, interval 1, probability 0, space 0, times 0 [ 748.728263][T17222] CPU: 0 UID: 0 PID: 17222 Comm: syz.7.2251 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.728287][T17222] Tainted: [L]=SOFTLOCKUP [ 748.728293][T17222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 748.728302][T17222] Call Trace: [ 748.728307][T17222] [ 748.728313][T17222] dump_stack_lvl+0x100/0x190 [ 748.728341][T17222] should_fail_ex.cold+0x5/0xa [ 748.728359][T17222] get_futex_key+0x1d2/0x1620 [ 748.728379][T17222] ? __pfx_get_futex_key+0x10/0x10 [ 748.728396][T17222] ? futex_hash+0x2c5/0x380 [ 748.728418][T17222] futex_wake+0xea/0x530 [ 748.728438][T17222] ? __might_fault+0xc5/0x140 [ 748.728460][T17222] ? __pfx_futex_wake+0x10/0x10 [ 748.728483][T17222] ? _copy_from_user+0x59/0xd0 [ 748.728501][T17222] ? post_copy_siginfo_from_user.isra.0+0x227/0x300 [ 748.728526][T17222] do_futex+0x32b/0x350 [ 748.728545][T17222] ? __pfx_do_futex+0x10/0x10 [ 748.728569][T17222] __x64_sys_futex+0x34f/0x4d0 [ 748.728589][T17222] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 748.728611][T17222] ? __pfx___x64_sys_futex+0x10/0x10 [ 748.728637][T17222] do_syscall_64+0x106/0xf80 [ 748.728658][T17222] ? clear_bhb_loop+0x40/0x90 [ 748.728676][T17222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.728692][T17222] RIP: 0033:0x7fe17f99c799 [ 748.728705][T17222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.728721][T17222] RSP: 002b:00007fe18084b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 748.728735][T17222] RAX: ffffffffffffffda RBX: 00007fe17fc15fa8 RCX: 00007fe17f99c799 [ 748.728745][T17222] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe17fc15fac [ 748.728755][T17222] RBP: 00007fe17fc15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 748.728764][T17222] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 748.728773][T17222] R13: 00007fe17fc16038 R14: 00007ffc1f633390 R15: 00007ffc1f633478 [ 748.728793][T17222] [ 749.829308][T17135] memory: usage 3072kB, limit 3072kB, failcnt 1941 [ 749.861496][T17135] memory+swap: usage 10452kB, limit 9007199254740988kB, failcnt 0 [ 749.933356][T17135] kmem: usage 680kB, limit 9007199254740988kB, failcnt 0 [ 749.961640][T17135] Memory cgroup stats for /syz5: [ 749.961931][T17135] cache 188416 [ 749.998037][T17135] rss 4096 [ 750.016384][T17135] rss_huge 0 [ 750.036674][T17135] shmem 188416 [ 750.059720][T17135] mapped_file 0 [ 750.073132][T17135] dirty 0 [ 750.085588][T17135] writeback 155648 [ 750.099383][T17135] workingset_refault_anon 1787 [ 750.106955][T17235] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2254'. [ 750.120461][T17135] workingset_refault_file 277 [ 750.139496][T17135] swap 7557120 [ 750.146932][T17135] swapcached 24653824 [ 750.160748][T17135] pgpgin 127956 [ 750.167791][T17135] pgpgout 130723 [ 750.190205][T17135] pgfault 91181 [ 750.208720][T17135] pgmajfault 152 [ 750.227069][T17135] inactive_anon 155648 [ 750.243252][T17135] active_anon 0 [ 750.266162][T17135] inactive_file 0 [ 750.275010][T17135] active_file 0 [ 750.300089][T17135] unevictable 0 [ 750.313153][T17135] hierarchical_memory_limit 3145728 [ 750.324206][T17241] netlink: 25 bytes leftover after parsing attributes in process `syz.8.2257'. [ 750.343400][T17135] hierarchical_memsw_limit 9223372036854771712 [ 750.364313][T17135] total_cache 188416 [ 750.384196][T17135] total_rss 4096 [ 750.399505][T17135] total_rss_huge 0 [ 750.433450][T17135] total_shmem 188416 [ 750.452974][T17135] total_mapped_file 0 [ 750.479310][T17135] total_dirty 0 [ 750.495970][T17135] total_writeback 155648 [ 750.507417][T17135] total_workingset_refault_anon 1787 [ 750.520451][T17247] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 750.532430][T17135] total_workingset_refault_file 277 [ 750.544788][T17135] total_swap 7557120 [ 750.557405][T17135] total_swapcached 24653824 [ 750.582178][T17135] total_pgpgin 127956 [ 750.603660][T17135] total_pgpgout 130723 [ 750.622158][T17135] total_pgfault 91181 [ 750.641477][T17135] total_pgmajfault 152 [ 750.657721][T17135] total_inactive_anon 155648 [ 750.673751][T17135] total_active_anon 0 [ 750.682083][T17135] total_inactive_file 0 [ 750.700509][T17135] total_active_file 0 [ 750.713384][T17135] total_unevictable 0 [ 750.736169][T17135] anon_cost 0 [ 750.746097][T17135] file_cost 0 [ 750.752601][T17135] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2240,pid=17131,uid=0 [ 750.781228][T17135] Memory cgroup out of memory: Killed process 17131 (syz.5.2240) total-vm:244212kB, anon-rss:1228kB, file-rss:30584kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 753.243558][T17324] futex_wake_op: syz.7.2273 tries to shift op by -2048; fix this program [ 753.462571][T17338] futex_wake_op: syz.5.2275 tries to shift op by -2048; fix this program [ 753.536588][T17338] futex_wake_op: syz.5.2275 tries to shift op by -2048; fix this program [ 753.699909][T17347] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input24 [ 753.780551][T17347] FAULT_INJECTION: forcing a failure. [ 753.780551][T17347] name failslab, interval 1, probability 0, space 0, times 0 [ 753.939972][T17347] CPU: 0 UID: 0 PID: 17347 Comm: syz.7.2276 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.939998][T17347] Tainted: [L]=SOFTLOCKUP [ 753.940004][T17347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 753.940013][T17347] Call Trace: [ 753.940019][T17347] [ 753.940025][T17347] dump_stack_lvl+0x100/0x190 [ 753.940052][T17347] should_fail_ex.cold+0x5/0xa [ 753.940070][T17347] should_failslab+0xc2/0x120 [ 753.940087][T17347] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 753.940108][T17347] ? __kernfs_new_node+0xd2/0x960 [ 753.940135][T17347] __kernfs_new_node+0xd2/0x960 [ 753.940158][T17347] ? __pfx___kernfs_new_node+0x10/0x10 [ 753.940184][T17347] ? find_held_lock+0x2b/0x80 [ 753.940198][T17347] ? kernfs_root+0xee/0x2a0 [ 753.940217][T17347] ? kernfs_root+0xee/0x2a0 [ 753.940242][T17347] kernfs_new_node+0x11b/0x1a0 [ 753.940267][T17347] __kernfs_create_file+0x53/0x350 [ 753.940288][T17347] sysfs_add_file_mode_ns+0x207/0x3c0 [ 753.940313][T17347] internal_create_group+0x593/0xf40 [ 753.940344][T17347] ? __pfx_internal_create_group+0x10/0x10 [ 753.940369][T17347] ? kernfs_create_link+0x1bd/0x240 [ 753.940389][T17347] internal_create_groups+0x9d/0x150 [ 753.940412][T17347] device_add+0x71a/0x1950 [ 753.940512][T17347] ? kfree_const+0x5a/0x70 [ 753.940535][T17347] ? __pfx_device_add+0x10/0x10 [ 753.940551][T17347] ? kfree_const+0x5a/0x70 [ 753.940572][T17347] ? kfree+0x2ec/0x6b0 [ 753.940597][T17347] device_create_groups_vargs+0x1f8/0x270 [ 753.940619][T17347] device_create_with_groups+0xf4/0x130 [ 753.940639][T17347] ? __pfx_device_create_with_groups+0x10/0x10 [ 753.940658][T17347] ? class_find_device+0x19f/0x290 [ 753.940709][T17347] ? lockdep_init_map_type+0x5c/0x250 [ 753.940732][T17347] led_classdev_register_ext+0x4d2/0x990 [ 753.940796][T17347] ? __pfx_led_classdev_register_ext+0x10/0x10 [ 753.940839][T17347] ? __pfx_kasprintf+0x10/0x10 [ 753.940897][T17347] input_leds_connect+0x5af/0x8b0 [ 753.940983][T17347] input_attach_handler.isra.0+0x177/0x1e0 [ 753.941032][T17347] input_register_device.cold+0x139/0x375 [ 753.941067][T17347] atkbd_set_scroll+0x238/0x370 [ 753.941086][T17347] ? __pfx_atkbd_set_scroll+0x10/0x10 [ 753.941104][T17347] ? mark_held_locks+0x40/0x70 [ 753.941124][T17347] ? __pfx_atkbd_set_scroll+0x10/0x10 [ 753.941141][T17347] atkbd_attr_set_helper.isra.0+0x11f/0x220 [ 753.941161][T17347] ? __pfx_atkbd_do_set_scroll+0x10/0x10 [ 753.941178][T17347] dev_attr_store+0x58/0x80 [ 753.941195][T17347] ? __pfx_dev_attr_store+0x10/0x10 [ 753.941212][T17347] sysfs_kf_write+0xf2/0x150 [ 753.941233][T17347] kernfs_fop_write_iter+0x3e0/0x5f0 [ 753.941248][T17347] ? __pfx_sysfs_kf_write+0x10/0x10 [ 753.941269][T17347] vfs_write+0x6ac/0x1070 [ 753.941284][T17347] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 753.941303][T17347] ? __pfx_vfs_write+0x10/0x10 [ 753.941334][T17347] ksys_write+0x12a/0x250 [ 753.941348][T17347] ? __pfx_ksys_write+0x10/0x10 [ 753.941369][T17347] do_syscall_64+0x106/0xf80 [ 753.941390][T17347] ? clear_bhb_loop+0x40/0x90 [ 753.941410][T17347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.941426][T17347] RIP: 0033:0x7fe17f99c799 [ 753.941440][T17347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.941455][T17347] RSP: 002b:00007fe18082a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 753.941470][T17347] RAX: ffffffffffffffda RBX: 00007fe17fc16090 RCX: 00007fe17f99c799 [ 753.941481][T17347] RDX: 0000000000000081 RSI: 00002000000001c0 RDI: 0000000000000009 [ 753.941490][T17347] RBP: 00007fe17fa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 753.941500][T17347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 753.941510][T17347] R13: 00007fe17fc16128 R14: 00007fe17fc16090 R15: 00007ffc1f633478 [ 753.941532][T17347] [ 754.717201][T17347] input input24: failed to register LED input24::numlock: -12 [ 755.652850][T17347] input: failed to attach handler leds to device input24, error: -12 [ 755.910241][T17371] netlink: 'syz.4.2281': attribute type 1 has an invalid length. [ 755.975480][T17371] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2281'. [ 756.070390][T17375] misc userio: No port type given on /dev/userio [ 758.353339][T17431] netlink: 'syz.7.2291': attribute type 1 has an invalid length. [ 758.405600][T17431] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2291'. [ 761.174340][T17487] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2301'. [ 761.834726][T17496] FAULT_INJECTION: forcing a failure. [ 761.834726][T17496] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 761.989354][T17499] FAULT_INJECTION: forcing a failure. [ 761.989354][T17499] name failslab, interval 1, probability 0, space 0, times 0 [ 762.050622][T17496] CPU: 0 UID: 0 PID: 17496 Comm: syz.4.2303 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.050650][T17496] Tainted: [L]=SOFTLOCKUP [ 762.050656][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 762.050666][T17496] Call Trace: [ 762.050671][T17496] [ 762.050678][T17496] dump_stack_lvl+0x100/0x190 [ 762.050707][T17496] should_fail_ex.cold+0x5/0xa [ 762.050724][T17496] ? prepare_alloc_pages+0x16d/0x5f0 [ 762.050745][T17496] should_fail_alloc_page+0xeb/0x140 [ 762.050763][T17496] prepare_alloc_pages+0x1f0/0x5f0 [ 762.050781][T17496] ? mas_find+0x2dd/0x740 [ 762.050807][T17496] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 762.050832][T17496] ? __pfx_validate_mm+0x10/0x10 [ 762.050850][T17496] ? __call_rcu_common.constprop.0+0x3f0/0x9b0 [ 762.050876][T17496] ? vms_complete_munmap_vmas+0x7ac/0xdd0 [ 762.050897][T17496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 762.050922][T17496] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 762.050943][T17496] ? __mt_destroy+0xa6/0x390 [ 762.050965][T17496] ? vms_complete_munmap_vmas+0x1e1/0xdd0 [ 762.050991][T17496] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 762.051011][T17496] ? vma_wants_writenotify+0x10b/0x390 [ 762.051032][T17496] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 762.051056][T17496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 762.051081][T17496] ? policy_nodemask+0xed/0x4f0 [ 762.051098][T17496] alloc_pages_mpol+0x1fb/0x550 [ 762.051115][T17496] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 762.051132][T17496] ? mas_ascend+0x53d/0xb30 [ 762.051153][T17496] alloc_pages_noprof+0x131/0x390 [ 762.051170][T17496] pte_alloc_one+0x1c/0x3d0 [ 762.051187][T17496] __pte_alloc+0x6d/0x3e0 [ 762.051203][T17496] ? __pfx___pte_alloc+0x10/0x10 [ 762.051217][T17496] ? __lock_acquire+0x4a5/0x2630 [ 762.051240][T17496] do_anonymous_page+0x13cc/0x1fb0 [ 762.051266][T17496] __handle_mm_fault+0x1d42/0x2b60 [ 762.051288][T17496] ? mt_find+0x45e/0x8e0 [ 762.051319][T17496] ? __pfx___handle_mm_fault+0x10/0x10 [ 762.051339][T17496] ? __pfx_mt_find+0x10/0x10 [ 762.051376][T17496] handle_mm_fault+0x36d/0xa20 [ 762.051400][T17496] __get_user_pages+0xf9c/0x34d0 [ 762.051424][T17496] ? __pfx___get_user_pages+0x10/0x10 [ 762.051447][T17496] populate_vma_page_range+0x267/0x3f0 [ 762.051466][T17496] ? __pfx_populate_vma_page_range+0x10/0x10 [ 762.051484][T17496] ? __pfx_find_vma_intersection+0x10/0x10 [ 762.051501][T17496] ? do_mmap+0x93f/0x12f0 [ 762.051519][T17496] __mm_populate+0x107/0x3a0 [ 762.051537][T17496] ? __pfx___mm_populate+0x10/0x10 [ 762.051556][T17496] ? up_write+0x290/0x4f0 [ 762.051579][T17496] vm_mmap_pgoff+0x37f/0x470 [ 762.051598][T17496] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 762.051616][T17496] ? do_futex+0x192/0x350 [ 762.051635][T17496] ? __pfx_do_futex+0x10/0x10 [ 762.051658][T17496] ksys_mmap_pgoff+0xe1/0x650 [ 762.051674][T17496] ? __x64_sys_futex+0x34f/0x4d0 [ 762.051692][T17496] ? __x64_sys_futex+0x358/0x4d0 [ 762.051711][T17496] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 762.051727][T17496] ? xfd_validate_state+0x129/0x190 [ 762.051752][T17496] __x64_sys_mmap+0x125/0x190 [ 762.051775][T17496] do_syscall_64+0x106/0xf80 [ 762.051797][T17496] ? clear_bhb_loop+0x40/0x90 [ 762.051816][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.051831][T17496] RIP: 0033:0x7f8d7179c799 [ 762.051846][T17496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.051864][T17496] RSP: 002b:00007f8d7258d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 762.051880][T17496] RAX: ffffffffffffffda RBX: 00007f8d71a15fa0 RCX: 00007f8d7179c799 [ 762.051891][T17496] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 762.051900][T17496] RBP: 00007f8d71832c99 R08: 0000000000000002 R09: 0000000000008000 [ 762.051909][T17496] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 762.051918][T17496] R13: 00007f8d71a16038 R14: 00007f8d71a15fa0 R15: 00007fff726f1fd8 [ 762.051939][T17496] [ 762.438843][T17499] CPU: 0 UID: 0 PID: 17499 Comm: syz.7.2304 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.438869][T17499] Tainted: [L]=SOFTLOCKUP [ 762.438875][T17499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 762.438884][T17499] Call Trace: [ 762.438891][T17499] [ 762.438897][T17499] dump_stack_lvl+0x100/0x190 [ 762.438926][T17499] should_fail_ex.cold+0x5/0xa [ 762.438945][T17499] should_failslab+0xc2/0x120 [ 762.438961][T17499] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 762.438984][T17499] ? pidfs_register_pid+0x97/0x200 [ 762.439007][T17499] ? __pfx___might_resched+0x10/0x10 [ 762.439032][T17499] pidfs_register_pid+0x97/0x200 [ 762.439056][T17499] unix_socketpair+0xda/0x8c0 [ 762.439077][T17499] __sys_socketpair+0x2f7/0x5b0 [ 762.439098][T17499] ? __pfx___sys_socketpair+0x10/0x10 [ 762.439117][T17499] ? xfd_validate_state+0x129/0x190 [ 762.439144][T17499] __x64_sys_socketpair+0x96/0x100 [ 762.439162][T17499] ? lockdep_hardirqs_on+0x78/0x100 [ 762.439183][T17499] do_syscall_64+0x106/0xf80 [ 762.439203][T17499] ? clear_bhb_loop+0x40/0x90 [ 762.439221][T17499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.439236][T17499] RIP: 0033:0x7fe17f99c799 [ 762.439249][T17499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.439264][T17499] RSP: 002b:00007fe18084b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 762.439287][T17499] RAX: ffffffffffffffda RBX: 00007fe17fc15fa0 RCX: 00007fe17f99c799 [ 762.439297][T17499] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 762.439307][T17499] RBP: 00007fe17fa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 762.439317][T17499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.439326][T17499] R13: 00007fe17fc16038 R14: 00007fe17fc15fa0 R15: 00007ffc1f633478 [ 762.439346][T17499] [ 763.139999][T17501] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2305'. [ 763.215882][T17501] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2305'. [ 763.256788][T17501] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2305'. [ 763.283666][T17501] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2305'. [ 763.969927][T16735] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 765.953224][T17560] program syz.7.2314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 766.004808][T16735] Bluetooth: hci1: command 0x2016 tx timeout [ 768.074777][T16883] Bluetooth: hci1: command 0x2016 tx timeout [ 768.134535][T17647] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 768.873149][T17593] workqueue: Failed to create a rescuer kthread for wq "nfc23_nci_rx_wq": -EINTR [ 769.416334][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2328'. [ 769.468550][T17754] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 769.507790][T17754] futex_wake_op: syz.7.2329 tries to shift op by -2048; fix this program [ 769.889977][T17798] FAULT_INJECTION: forcing a failure. [ 769.889977][T17798] name failslab, interval 1, probability 0, space 0, times 0 [ 769.943207][T17798] CPU: 0 UID: 0 PID: 17798 Comm: syz.8.2330 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.943235][T17798] Tainted: [L]=SOFTLOCKUP [ 769.943240][T17798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 769.943250][T17798] Call Trace: [ 769.943256][T17798] [ 769.943263][T17798] dump_stack_lvl+0x100/0x190 [ 769.943290][T17798] should_fail_ex.cold+0x5/0xa [ 769.943309][T17798] should_failslab+0xc2/0x120 [ 769.943326][T17798] __kmalloc_cache_noprof+0x7a/0x6f0 [ 769.943346][T17798] ? ima_d_path+0xc9/0x260 [ 769.943362][T17798] ? xattr_resolve_name+0x27d/0x3f0 [ 769.943388][T17798] ima_d_path+0xc9/0x260 [ 769.943403][T17798] ? __pfx_ima_d_path+0x10/0x10 [ 769.943422][T17798] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 769.943524][T17798] process_measurement+0x1b25/0x2350 [ 769.943555][T17798] ? __pfx_process_measurement+0x10/0x10 [ 769.943580][T17798] ? trace_contention_end+0x140/0x180 [ 769.943606][T17798] ? tracing_check_open_get_tr.part.0+0x101/0x170 [ 769.943647][T17798] ? tracing_check_open_get_tr.part.0+0x106/0x170 [ 769.943669][T17798] ? inode_to_bdi+0x9e/0x160 [ 769.943687][T17798] ima_file_check+0xcc/0x120 [ 769.943719][T17798] ? __pfx_ima_file_check+0x10/0x10 [ 769.943747][T17798] security_file_post_open+0xc4/0x210 [ 769.943768][T17798] path_openat+0x1418/0x31a0 [ 769.943790][T17798] ? __pfx_path_openat+0x10/0x10 [ 769.943813][T17798] do_file_open+0x20e/0x430 [ 769.943830][T17798] ? __pfx_do_file_open+0x10/0x10 [ 769.943859][T17798] ? alloc_fd+0x476/0x790 [ 769.943876][T17798] ? do_getname+0x191/0x390 [ 769.943896][T17798] do_sys_openat2+0x10d/0x1e0 [ 769.943916][T17798] ? __pfx_do_sys_openat2+0x10/0x10 [ 769.943942][T17798] __x64_sys_openat+0x12d/0x210 [ 769.943962][T17798] ? __pfx___x64_sys_openat+0x10/0x10 [ 769.943988][T17798] do_syscall_64+0x106/0xf80 [ 769.944010][T17798] ? clear_bhb_loop+0x40/0x90 [ 769.944029][T17798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.944045][T17798] RIP: 0033:0x7f23d539c799 [ 769.944059][T17798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.944074][T17798] RSP: 002b:00007f23d620c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 769.944089][T17798] RAX: ffffffffffffffda RBX: 00007f23d5615fa0 RCX: 00007f23d539c799 [ 769.944100][T17798] RDX: 0000000000101040 RSI: 0000200000002e80 RDI: ffffffffffffff9c [ 769.944110][T17798] RBP: 00007f23d5432c99 R08: 0000000000000000 R09: 0000000000000000 [ 769.944119][T17798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.944129][T17798] R13: 00007f23d5616038 R14: 00007f23d5615fa0 R15: 00007ffc3032baf8 [ 769.944149][T17798] [ 772.012103][T17810] FAULT_INJECTION: forcing a failure. [ 772.012103][T17810] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 772.120569][T17810] CPU: 0 UID: 0 PID: 17810 Comm: syz.5.2333 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.120597][T17810] Tainted: [L]=SOFTLOCKUP [ 772.120603][T17810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 772.120613][T17810] Call Trace: [ 772.120619][T17810] [ 772.120626][T17810] dump_stack_lvl+0x100/0x190 [ 772.120654][T17810] should_fail_ex.cold+0x5/0xa [ 772.120669][T17810] ? prepare_alloc_pages+0x16d/0x5f0 [ 772.120688][T17810] should_fail_alloc_page+0xeb/0x140 [ 772.120706][T17810] prepare_alloc_pages+0x1f0/0x5f0 [ 772.120723][T17810] ? bpf_ksym_find+0x124/0x1c0 [ 772.120750][T17810] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 772.120775][T17810] ? __kernel_text_address+0xd/0x30 [ 772.120796][T17810] ? unwind_get_return_address+0x59/0xa0 [ 772.120813][T17810] ? arch_stack_walk+0xa6/0xf0 [ 772.120835][T17810] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 772.120856][T17810] ? stack_trace_save+0x8e/0xc0 [ 772.120871][T17810] ? __pfx_stack_trace_save+0x10/0x10 [ 772.120887][T17810] ? stack_depot_save_flags+0x27/0x9d0 [ 772.121054][T17810] ? mas_store_prealloc+0x893/0xfb0 [ 772.121073][T17810] ? kasan_save_stack+0x30/0x50 [ 772.121096][T17810] ? kasan_save_track+0x14/0x30 [ 772.121117][T17810] ? __kasan_slab_alloc+0x89/0x90 [ 772.121131][T17810] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 772.121152][T17810] ? __pmd_alloc+0xbf/0x950 [ 772.121168][T17810] ? __handle_mm_fault+0xa99/0x2b60 [ 772.121186][T17810] ? handle_mm_fault+0x36d/0xa20 [ 772.121204][T17810] ? __get_user_pages+0xf9c/0x34d0 [ 772.121219][T17810] ? populate_vma_page_range+0x267/0x3f0 [ 772.121236][T17810] ? __mm_populate+0x107/0x3a0 [ 772.121251][T17810] ? vm_mmap_pgoff+0x37f/0x470 [ 772.121266][T17810] ? ksys_mmap_pgoff+0xe1/0x650 [ 772.121281][T17810] ? __x64_sys_mmap+0x125/0x190 [ 772.121301][T17810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 772.121325][T17810] ? policy_nodemask+0xed/0x4f0 [ 772.121343][T17810] alloc_pages_mpol+0x1fb/0x550 [ 772.121360][T17810] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 772.121381][T17810] alloc_pages_noprof+0x131/0x390 [ 772.121398][T17810] pte_alloc_one+0x1c/0x3d0 [ 772.121415][T17810] __pte_alloc+0x6d/0x3e0 [ 772.121430][T17810] ? __pfx___pte_alloc+0x10/0x10 [ 772.121446][T17810] ? do_raw_spin_lock+0x128/0x260 [ 772.121467][T17810] ? find_held_lock+0x2b/0x80 [ 772.121482][T17810] do_anonymous_page+0x13cc/0x1fb0 [ 772.121502][T17810] ? do_raw_spin_unlock+0x145/0x1e0 [ 772.121524][T17810] ? _raw_spin_unlock+0x28/0x50 [ 772.121542][T17810] ? __pmd_alloc+0x3fb/0x950 [ 772.121580][T17810] __handle_mm_fault+0x1d42/0x2b60 [ 772.121603][T17810] ? mt_find+0x45e/0x8e0 [ 772.121626][T17810] ? __pfx___handle_mm_fault+0x10/0x10 [ 772.121645][T17810] ? __pfx_mt_find+0x10/0x10 [ 772.121682][T17810] handle_mm_fault+0x36d/0xa20 [ 772.121706][T17810] __get_user_pages+0xf9c/0x34d0 [ 772.121736][T17810] ? __pfx___get_user_pages+0x10/0x10 [ 772.121760][T17810] populate_vma_page_range+0x267/0x3f0 [ 772.121779][T17810] ? __pfx_populate_vma_page_range+0x10/0x10 [ 772.121797][T17810] ? __pfx_find_vma_intersection+0x10/0x10 [ 772.121815][T17810] ? do_mmap+0x93f/0x12f0 [ 772.121833][T17810] __mm_populate+0x107/0x3a0 [ 772.121852][T17810] ? __pfx___mm_populate+0x10/0x10 [ 772.121871][T17810] ? up_write+0x290/0x4f0 [ 772.121893][T17810] vm_mmap_pgoff+0x37f/0x470 [ 772.121912][T17810] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 772.121930][T17810] ? do_futex+0x192/0x350 [ 772.121949][T17810] ? __pfx_do_futex+0x10/0x10 [ 772.121971][T17810] ksys_mmap_pgoff+0xe1/0x650 [ 772.121987][T17810] ? __x64_sys_futex+0x34f/0x4d0 [ 772.122004][T17810] ? __x64_sys_futex+0x358/0x4d0 [ 772.122023][T17810] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 772.122039][T17810] ? xfd_validate_state+0x129/0x190 [ 772.122064][T17810] __x64_sys_mmap+0x125/0x190 [ 772.122087][T17810] do_syscall_64+0x106/0xf80 [ 772.122107][T17810] ? clear_bhb_loop+0x40/0x90 [ 772.122125][T17810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.122141][T17810] RIP: 0033:0x7ff26839c799 [ 772.122155][T17810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.122171][T17810] RSP: 002b:00007ff2665f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 772.122187][T17810] RAX: ffffffffffffffda RBX: 00007ff268615fa0 RCX: 00007ff26839c799 [ 772.122197][T17810] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 772.122207][T17810] RBP: 00007ff268432c99 R08: 0000000000000002 R09: 0000000000008000 [ 772.122217][T17810] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 772.122226][T17810] R13: 00007ff268616038 R14: 00007ff268615fa0 R15: 00007ffdd51340a8 [ 772.122246][T17810] [ 775.568148][T17419] syz.5.2289 (17419) used greatest stack depth: 18232 bytes left [ 776.411587][T17870] netlink: 'syz.5.2346': attribute type 1 has an invalid length. [ 776.411606][T17870] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2346'. [ 776.842976][T17877] FAULT_INJECTION: forcing a failure. [ 776.842976][T17877] name failslab, interval 1, probability 0, space 0, times 0 [ 776.843122][T17877] CPU: 0 UID: 0 PID: 17877 Comm: syz.7.2348 Tainted: G L syzkaller #0 PREEMPT(full) [ 776.843144][T17877] Tainted: [L]=SOFTLOCKUP [ 776.843151][T17877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 776.843160][T17877] Call Trace: [ 776.843166][T17877] [ 776.843172][T17877] dump_stack_lvl+0x100/0x190 [ 776.843199][T17877] should_fail_ex.cold+0x5/0xa [ 776.843217][T17877] should_failslab+0xc2/0x120 [ 776.843234][T17877] __kmalloc_cache_noprof+0x7a/0x6f0 [ 776.843260][T17877] ? report_access+0x101/0x4d0 [ 776.843280][T17877] ? cap_capable+0x107/0x460 [ 776.843306][T17877] report_access+0x101/0x4d0 [ 776.843328][T17877] yama_ptrace_access_check+0x645/0xd00 [ 776.843351][T17877] security_ptrace_access_check+0xe9/0x210 [ 776.843374][T17877] __ptrace_may_access+0x473/0x900 [ 776.843393][T17877] ptrace_may_access+0x2b/0x50 [ 776.843411][T17877] mm_access+0x180/0x2e0 [ 776.843429][T17877] process_vm_rw_core.constprop.0+0x214/0x950 [ 776.843455][T17877] ? trace_kmalloc+0x101/0x130 [ 776.843470][T17877] ? __kasan_kmalloc+0xaa/0xb0 [ 776.843492][T17877] ? __kmalloc_noprof+0x320/0x850 [ 776.843515][T17877] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 776.843539][T17877] ? iovec_from_user+0xda/0x140 [ 776.843565][T17877] ? iovec_from_user+0xda/0x140 [ 776.843584][T17877] process_vm_rw+0x226/0x2d0 [ 776.843608][T17877] ? __pfx_process_vm_rw+0x10/0x10 [ 776.843635][T17877] ? ksys_write+0x190/0x250 [ 776.843665][T17877] ? xfd_validate_state+0x129/0x190 [ 776.843689][T17877] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 776.843712][T17877] ? do_syscall_64+0x95/0xf80 [ 776.843733][T17877] ? lockdep_hardirqs_on+0x78/0x100 [ 776.843753][T17877] do_syscall_64+0x106/0xf80 [ 776.843772][T17877] ? clear_bhb_loop+0x40/0x90 [ 776.843791][T17877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.843806][T17877] RIP: 0033:0x7fe17f99c799 [ 776.843819][T17877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.843834][T17877] RSP: 002b:00007fe18084b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 776.843849][T17877] RAX: ffffffffffffffda RBX: 00007fe17fc15fa0 RCX: 00007fe17f99c799 [ 776.843861][T17877] RDX: 0000000000000012 RSI: 0000200000002980 RDI: 0000000000000001 [ 776.843871][T17877] RBP: 00007fe17fa32c99 R08: 0000000000000004 R09: 0000000000000000 [ 776.843881][T17877] R10: 0000200000002a40 R11: 0000000000000246 R12: 0000000000000000 [ 776.843890][T17877] R13: 00007fe17fc16038 R14: 00007fe17fc15fa0 R15: 00007ffc1f633478 [ 776.843911][T17877] [ 778.576281][T17904] FAULT_INJECTION: forcing a failure. [ 778.576281][T17904] name failslab, interval 1, probability 0, space 0, times 0 [ 778.576311][T17904] CPU: 0 UID: 0 PID: 17904 Comm: syz.7.2354 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.576333][T17904] Tainted: [L]=SOFTLOCKUP [ 778.576339][T17904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.576348][T17904] Call Trace: [ 778.576354][T17904] [ 778.576359][T17904] dump_stack_lvl+0x100/0x190 [ 778.576385][T17904] should_fail_ex.cold+0x5/0xa [ 778.576403][T17904] should_failslab+0xc2/0x120 [ 778.576420][T17904] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 778.576442][T17904] ? ptlock_alloc+0x1f/0x70 [ 778.576465][T17904] ptlock_alloc+0x1f/0x70 [ 778.576484][T17904] pte_alloc_one+0x82/0x3d0 [ 778.576501][T17904] do_fault+0x88e/0x1990 [ 778.576520][T17904] __handle_mm_fault+0x180f/0x2b60 [ 778.576546][T17904] ? __pfx___handle_mm_fault+0x10/0x10 [ 778.576564][T17904] ? folio_mark_accessed+0xf3/0x1040 [ 778.576580][T17904] ? __pfx_folio_mark_accessed+0x10/0x10 [ 778.576595][T17904] ? find_held_lock+0x2b/0x80 [ 778.576621][T17904] handle_mm_fault+0x36d/0xa20 [ 778.576645][T17904] __get_user_pages+0xf9c/0x34d0 [ 778.576674][T17904] ? __pfx___get_user_pages+0x10/0x10 [ 778.576696][T17904] populate_vma_page_range+0x267/0x3f0 [ 778.576715][T17904] ? __pfx_populate_vma_page_range+0x10/0x10 [ 778.576732][T17904] ? __pfx_find_vma_intersection+0x10/0x10 [ 778.576749][T17904] ? __pfx_apply_mlockall_flags.isra.0+0x10/0x10 [ 778.576774][T17904] __mm_populate+0x107/0x3a0 [ 778.576792][T17904] ? __pfx___mm_populate+0x10/0x10 [ 778.576811][T17904] ? up_write+0x290/0x4f0 [ 778.576834][T17904] __do_sys_mlockall+0x4f4/0x5d0 [ 778.576857][T17904] do_syscall_64+0x106/0xf80 [ 778.576878][T17904] ? clear_bhb_loop+0x40/0x90 [ 778.576896][T17904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.576912][T17904] RIP: 0033:0x7fe17f99c799 [ 778.576925][T17904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.576939][T17904] RSP: 002b:00007fe18084b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 778.576954][T17904] RAX: ffffffffffffffda RBX: 00007fe17fc15fa0 RCX: 00007fe17f99c799 [ 778.576964][T17904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 778.576973][T17904] RBP: 00007fe17fa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 778.576982][T17904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.576991][T17904] R13: 00007fe17fc16038 R14: 00007fe17fc15fa0 R15: 00007ffc1f633478 [ 778.577010][T17904] [ 779.149239][T17895] kexec: Could not allocate control_code_buffer [ 780.033847][T17910] zram0: detected capacity change from 0 to 16 [ 781.197473][T17936] netlink: 'syz.7.2362': attribute type 1 has an invalid length. [ 781.292491][T17936] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2362'. [ 781.941144][T17940] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2363'. [ 782.986017][T17988] FAULT_INJECTION: forcing a failure. [ 782.986017][T17988] name failslab, interval 1, probability 0, space 0, times 0 [ 783.085955][T17988] CPU: 0 UID: 0 PID: 17988 Comm: syz.8.2373 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.085983][T17988] Tainted: [L]=SOFTLOCKUP [ 783.085988][T17988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 783.085998][T17988] Call Trace: [ 783.086004][T17988] [ 783.086010][T17988] dump_stack_lvl+0x100/0x190 [ 783.086037][T17988] should_fail_ex.cold+0x5/0xa [ 783.086056][T17988] should_failslab+0xc2/0x120 [ 783.086073][T17988] __kmalloc_cache_noprof+0x7a/0x6f0 [ 783.086092][T17988] ? fsnotify_alloc_group+0x92/0x330 [ 783.086113][T17988] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 783.086132][T17988] fsnotify_alloc_group+0x92/0x330 [ 783.086151][T17988] do_inotify_init+0x4b/0x5e0 [ 783.086173][T17988] __x64_sys_inotify_init1+0x30/0x40 [ 783.086193][T17988] do_syscall_64+0x106/0xf80 [ 783.086214][T17988] ? clear_bhb_loop+0x40/0x90 [ 783.086233][T17988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.086249][T17988] RIP: 0033:0x7f23d539c799 [ 783.086262][T17988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.086277][T17988] RSP: 002b:00007f23d620c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 783.086292][T17988] RAX: ffffffffffffffda RBX: 00007f23d5615fa0 RCX: 00007f23d539c799 [ 783.086303][T17988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0003000000000000 [ 783.086312][T17988] RBP: 00007f23d5432c99 R08: 0000000000000000 R09: 0000000000000000 [ 783.086321][T17988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.086330][T17988] R13: 00007f23d5616038 R14: 00007f23d5615fa0 R15: 00007ffc3032baf8 [ 783.086349][T17988] [ 784.551547][T18016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2379'. [ 784.769415][T18019] random: crng reseeded on system resumption [ 786.268003][T18037] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2384'. [ 786.628787][T18046] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2386'. [ 786.715047][T18045] FAULT_INJECTION: forcing a failure. [ 786.715047][T18045] name failslab, interval 1, probability 0, space 0, times 0 [ 786.889192][T18048] netlink: 'syz.5.2388': attribute type 1 has an invalid length. [ 786.928800][T18045] CPU: 0 UID: 0 PID: 18045 Comm: syz.4.2387 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.928827][T18045] Tainted: [L]=SOFTLOCKUP [ 786.928832][T18045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 786.928842][T18045] Call Trace: [ 786.928849][T18045] [ 786.928855][T18045] dump_stack_lvl+0x100/0x190 [ 786.928883][T18045] should_fail_ex.cold+0x5/0xa [ 786.928902][T18045] should_failslab+0xc2/0x120 [ 786.928919][T18045] __kmalloc_cache_noprof+0x7a/0x6f0 [ 786.928938][T18045] ? ima_d_path+0xc9/0x260 [ 786.928954][T18045] ? xattr_resolve_name+0x27d/0x3f0 [ 786.928980][T18045] ima_d_path+0xc9/0x260 [ 786.928996][T18045] ? __pfx_ima_d_path+0x10/0x10 [ 786.929015][T18045] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 786.929042][T18045] process_measurement+0x1b25/0x2350 [ 786.929070][T18045] ? stack_trace_save+0x8e/0xc0 [ 786.929086][T18045] ? __pfx_process_measurement+0x10/0x10 [ 786.929109][T18045] ? __lock_acquire+0x4a5/0x2630 [ 786.929127][T18045] ? __kasan_slab_alloc+0x89/0x90 [ 786.929141][T18045] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 786.929162][T18045] ? init_file+0x95/0x480 [ 786.929177][T18045] ? alloc_empty_file+0x73/0x1c0 [ 786.929194][T18045] ? alloc_file_pseudo+0x13a/0x230 [ 786.929212][T18045] ? ksys_mmap_pgoff+0x232/0x650 [ 786.929226][T18045] ? __x64_sys_mmap+0x125/0x190 [ 786.929246][T18045] ? do_syscall_64+0x106/0xf80 [ 786.929285][T18045] ? __pfx_aa_file_perm+0x10/0x10 [ 786.929310][T18045] ima_file_mmap+0x1c4/0x1f0 [ 786.929333][T18045] ? __pfx_ima_file_mmap+0x10/0x10 [ 786.929361][T18045] security_mmap_file+0x278/0x9b0 [ 786.929381][T18045] vm_mmap_pgoff+0xec/0x470 [ 786.929400][T18045] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 786.929416][T18045] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 786.929436][T18045] ? hugetlbfs_get_inode+0x36e/0x750 [ 786.929459][T18045] ksys_mmap_pgoff+0x273/0x650 [ 786.929475][T18045] ? __x64_sys_futex+0x358/0x4d0 [ 786.929495][T18045] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 786.929511][T18045] ? xfd_validate_state+0x129/0x190 [ 786.929536][T18045] __x64_sys_mmap+0x125/0x190 [ 786.929566][T18045] do_syscall_64+0x106/0xf80 [ 786.929586][T18045] ? clear_bhb_loop+0x40/0x90 [ 786.929623][T18045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.929640][T18045] RIP: 0033:0x7f8d7179c799 [ 786.929653][T18045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.929668][T18045] RSP: 002b:00007f8d6f9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 786.929683][T18045] RAX: ffffffffffffffda RBX: 00007f8d71a16180 RCX: 00007f8d7179c799 [ 786.929693][T18045] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 786.929703][T18045] RBP: 00007f8d71832c99 R08: ffffffffffffffff R09: 0000300000020000 [ 786.929713][T18045] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 786.929723][T18045] R13: 00007f8d71a16218 R14: 00007f8d71a16180 R15: 00007fff726f1fd8 [ 786.929743][T18045] [ 786.931083][T18048] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2388'. [ 787.640553][T18057] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 789.893328][T16735] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 790.211707][T16735] Bluetooth: hci1: command 0x2016 tx timeout [ 793.862325][T18120] netlink: 'syz.7.2402': attribute type 1 has an invalid length. [ 793.969644][T18129] futex_wake_op: syz.4.2404 tries to shift op by -2048; fix this program [ 794.002218][T18120] netlink: 9 bytes leftover after parsing attributes in process `syz.7.2402'. [ 794.022041][T18129] futex_wake_op: syz.4.2404 tries to shift op by -2048; fix this program [ 799.509119][T18206] FAULT_INJECTION: forcing a failure. [ 799.509119][T18206] name failslab, interval 1, probability 0, space 0, times 0 [ 799.567792][T18206] CPU: 0 UID: 0 PID: 18206 Comm: syz.4.2418 Tainted: G L syzkaller #0 PREEMPT(full) [ 799.567820][T18206] Tainted: [L]=SOFTLOCKUP [ 799.567826][T18206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 799.567836][T18206] Call Trace: [ 799.567842][T18206] [ 799.567848][T18206] dump_stack_lvl+0x100/0x190 [ 799.567877][T18206] should_fail_ex.cold+0x5/0xa [ 799.567895][T18206] should_failslab+0xc2/0x120 [ 799.567912][T18206] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 799.567935][T18206] ? shmem_alloc_inode+0x25/0x50 [ 799.567953][T18206] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 799.567971][T18206] shmem_alloc_inode+0x25/0x50 [ 799.567987][T18206] alloc_inode+0x68/0x250 [ 799.568007][T18206] new_inode+0x22/0x1c0 [ 799.568027][T18206] shmem_get_inode+0x212/0x1040 [ 799.568049][T18206] ? __pfx_shmem_get_inode+0x10/0x10 [ 799.568068][T18206] ? d_add+0x443/0x850 [ 799.568087][T18206] ? do_raw_spin_unlock+0x145/0x1e0 [ 799.568112][T18206] shmem_mknod+0x20c/0x470 [ 799.568132][T18206] ? __pfx_shmem_mknod+0x10/0x10 [ 799.568150][T18206] ? bpf_lsm_inode_create+0x9/0x10 [ 799.568174][T18206] ? __pfx_shmem_create+0x10/0x10 [ 799.568193][T18206] lookup_open.isra.0+0xc47/0x11b0 [ 799.568219][T18206] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 799.568244][T18206] ? __pfx___might_resched+0x10/0x10 [ 799.568265][T18206] ? mnt_get_write_access+0x52/0x2f0 [ 799.568288][T18206] ? __pfx_down_write+0x10/0x10 [ 799.568302][T18206] ? mnt_get_write_access+0x1e9/0x2f0 [ 799.568324][T18206] path_openat+0x2291/0x31a0 [ 799.568346][T18206] ? __pfx_path_openat+0x10/0x10 [ 799.568369][T18206] do_file_open+0x20e/0x430 [ 799.568386][T18206] ? __pfx_do_file_open+0x10/0x10 [ 799.568416][T18206] ? alloc_fd+0x476/0x790 [ 799.568433][T18206] ? do_getname+0x191/0x390 [ 799.568454][T18206] do_sys_openat2+0x10d/0x1e0 [ 799.568473][T18206] ? __pfx_do_sys_openat2+0x10/0x10 [ 799.568494][T18206] ? __fget_files+0x21f/0x3d0 [ 799.568512][T18206] __x64_sys_openat+0x12d/0x210 [ 799.568532][T18206] ? __pfx___x64_sys_openat+0x10/0x10 [ 799.568559][T18206] do_syscall_64+0x106/0xf80 [ 799.568579][T18206] ? clear_bhb_loop+0x40/0x90 [ 799.568598][T18206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.568613][T18206] RIP: 0033:0x7f8d7179c799 [ 799.568627][T18206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.568641][T18206] RSP: 002b:00007f8d7258d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 799.568657][T18206] RAX: ffffffffffffffda RBX: 00007f8d71a15fa0 RCX: 00007f8d7179c799 [ 799.568667][T18206] RDX: 00000000000861c2 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 799.568676][T18206] RBP: 00007f8d71832c99 R08: 0000000000000000 R09: 0000000000000000 [ 799.568686][T18206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.568694][T18206] R13: 00007f8d71a16038 R14: 00007f8d71a15fa0 R15: 00007fff726f1fd8 [ 799.568715][T18206] [ 799.977753][T18195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2416'. [ 800.709694][T18214] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2419'. [ 800.797213][ T29] audit: type=1326 audit(566916973.456:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18210 comm="syz.4.2419" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d7179c799 code=0x0 [ 803.232665][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2435'. [ 803.623598][T18270] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2434'. [ 804.929641][ T29] audit: type=1800 audit(566916977.646:19): pid=18300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2442" name="dbroot" dev="configfs" ino=380353 res=0 errno=0 [ 804.978629][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033124c00: rx timeout, send abort [ 804.987324][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888033124c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 805.056846][T18304] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2443'. [ 806.126942][T18342] HfR: entered promiscuous mode [ 806.148208][T18342] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2453'. [ 806.211468][T18342] openvswitch: HfR: Dropping previously announced user features [ 806.371713][T18327] syz.5.2445 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 806.427501][T18327] CPU: 0 UID: 0 PID: 18327 Comm: syz.5.2445 Tainted: G L syzkaller #0 PREEMPT(full) [ 806.427528][T18327] Tainted: [L]=SOFTLOCKUP [ 806.427534][T18327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 806.427543][T18327] Call Trace: [ 806.427550][T18327] [ 806.427556][T18327] dump_stack_lvl+0x100/0x190 [ 806.427582][T18327] dump_header+0xfb/0x606 [ 806.427600][T18327] oom_kill_process.cold+0xd/0x330 [ 806.427618][T18327] out_of_memory+0x340/0x14f0 [ 806.427644][T18327] ? __pfx_out_of_memory+0x10/0x10 [ 806.427670][T18327] mem_cgroup_out_of_memory+0xc6/0x130 [ 806.427692][T18327] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 806.427710][T18327] ? find_held_lock+0x2b/0x80 [ 806.427729][T18327] ? do_raw_spin_unlock+0x145/0x1e0 [ 806.427750][T18327] ? _raw_spin_unlock+0x28/0x50 [ 806.427772][T18327] try_charge_memcg+0x652/0xc90 [ 806.427792][T18327] ? __pfx_try_charge_memcg+0x10/0x10 [ 806.427811][T18327] ? find_held_lock+0x2b/0x80 [ 806.427825][T18327] ? rcu_read_unlock+0x17/0x60 [ 806.427840][T18327] ? rcu_read_unlock+0x17/0x60 [ 806.427859][T18327] charge_memcg+0xa6/0x280 [ 806.427874][T18327] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 806.427896][T18327] __swap_cache_prepare_and_add+0x528/0x9e0 [ 806.427925][T18327] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 806.427946][T18327] ? __pfx_swap_entry_swapped+0x10/0x10 [ 806.427966][T18327] swap_cache_alloc_folio+0x1cb/0x300 [ 806.427988][T18327] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 806.428015][T18327] swap_cluster_readahead+0x411/0x770 [ 806.428040][T18327] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 806.428076][T18327] shmem_swapin_folio+0x22a4/0x2c10 [ 806.428101][T18327] ? find_held_lock+0x2b/0x80 [ 806.428115][T18327] ? filemap_get_entry+0x1a7/0x3b0 [ 806.428142][T18327] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 806.428162][T18327] ? __pfx_filemap_get_entry+0x10/0x10 [ 806.428183][T18327] ? mod_memcg_lruvec_state+0x1a6/0x630 [ 806.428212][T18327] shmem_get_folio_gfp+0x56c/0x1900 [ 806.428238][T18327] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 806.428262][T18327] ? find_held_lock+0x2b/0x80 [ 806.428278][T18327] shmem_get_folio+0x84/0xb0 [ 806.428302][T18327] collapse_file+0x1263/0x3cc0 [ 806.428324][T18327] ? __lock_acquire+0x4a5/0x2630 [ 806.428343][T18327] ? __pfx_collapse_file+0x10/0x10 [ 806.428368][T18327] ? find_held_lock+0x2b/0x80 [ 806.428388][T18327] ? hpage_collapse_scan_file+0x583/0x1fc0 [ 806.428405][T18327] ? hpage_collapse_scan_file+0x583/0x1fc0 [ 806.428427][T18327] hpage_collapse_scan_file+0x603/0x1fc0 [ 806.428451][T18327] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 806.428472][T18327] ? madvise_collapse+0x3cb/0xbe0 [ 806.428488][T18327] ? madvise_collapse+0x3cb/0xbe0 [ 806.428510][T18327] madvise_collapse+0x412/0xbe0 [ 806.428532][T18327] ? finish_task_switch.isra.0+0x200/0xb80 [ 806.428549][T18327] ? __pfx_madvise_collapse+0x10/0x10 [ 806.428567][T18327] ? rcu_is_cpu_rrupt_from_idle+0x270/0x270 [ 806.428596][T18327] madvise_vma_behavior+0x1987/0x3050 [ 806.428617][T18327] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 806.428634][T18327] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 806.428658][T18327] ? mas_prev+0x9b/0xf0 [ 806.428680][T18327] ? __pfx_mas_prev+0x10/0x10 [ 806.428706][T18327] ? find_vma_prev+0xd8/0x150 [ 806.428721][T18327] ? futex_unqueue+0x133/0x2c0 [ 806.428739][T18327] ? __pfx_find_vma_prev+0x10/0x10 [ 806.428760][T18327] ? __futex_wait+0x256/0x300 [ 806.428785][T18327] madvise_walk_vmas+0x2fe/0xa90 [ 806.428806][T18327] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 806.428829][T18327] madvise_do_behavior+0x1ea/0x510 [ 806.428848][T18327] ? __pfx_madvise_do_behavior+0x10/0x10 [ 806.428866][T18327] ? down_read+0x13b/0x460 [ 806.428889][T18327] do_madvise+0x195/0x240 [ 806.428906][T18327] ? __pfx_do_madvise+0x10/0x10 [ 806.428922][T18327] ? do_futex+0x192/0x350 [ 806.428944][T18327] ? __sys_sendmsg+0x18f/0x220 [ 806.428978][T18327] __x64_sys_madvise+0xa9/0x110 [ 806.428995][T18327] ? lockdep_hardirqs_on+0x78/0x100 [ 806.429015][T18327] do_syscall_64+0x106/0xf80 [ 806.429035][T18327] ? clear_bhb_loop+0x40/0x90 [ 806.429054][T18327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.429069][T18327] RIP: 0033:0x7ff26839c799 [ 806.429082][T18327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.429096][T18327] RSP: 002b:00007ff2665d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 806.429111][T18327] RAX: ffffffffffffffda RBX: 00007ff268616090 RCX: 00007ff26839c799 [ 806.429121][T18327] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 806.429131][T18327] RBP: 00007ff268432c99 R08: 0000000000000000 R09: 0000000000000000 [ 806.429140][T18327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 806.429148][T18327] R13: 00007ff268616128 R14: 00007ff268616090 R15: 00007ffdd51340a8 [ 806.429168][T18327] [ 806.919074][T18353] binder: 18352:18353 ioctl c018620c 200000000140 returned -22 [ 807.418094][T18327] memory: usage 3072kB, limit 3072kB, failcnt 47807 [ 807.439118][T18327] memory+swap: usage 5060kB, limit 9007199254740988kB, failcnt 0 [ 807.458765][T18327] kmem: usage 724kB, limit 9007199254740988kB, failcnt 0 [ 807.468677][T18327] Memory cgroup stats for /syz5: [ 807.468830][T18327] cache 143360 [ 807.487380][T18327] rss 118784 [ 807.497434][T18327] rss_huge 0 [ 807.500659][T18327] shmem 143360 [ 807.507488][T18327] mapped_file 0 [ 807.514380][T18327] dirty 0 [ 807.517301][T18327] writeback 163840 [ 807.531857][T18327] workingset_refault_anon 4981 [ 807.536607][T18327] workingset_refault_file 495 [ 807.568267][T18327] swap 2035712 [ 807.571639][T18327] swapcached 245727232 [ 807.575682][T18327] pgpgin 192670 [ 807.606762][T18327] pgpgout 196858 [ 807.610658][T18327] pgfault 127203 [ 807.614197][T18327] pgmajfault 1254 [ 807.627935][T18327] inactive_anon 163840 [ 807.631992][T18327] active_anon 0 [ 807.635425][T18327] inactive_file 0 [ 807.648444][T18327] active_file 0 [ 807.651943][T18327] unevictable 0 [ 807.655383][T18327] hierarchical_memory_limit 3145728 [ 807.671819][T18327] hierarchical_memsw_limit 9223372036854771712 [ 807.718960][T18327] total_cache 143360 [ 807.723369][T18327] total_rss 118784 [ 807.747504][T18327] total_rss_huge 0 [ 807.751224][T18327] total_shmem 143360 [ 807.765230][T18327] total_mapped_file 0 [ 807.775309][T18327] total_dirty 0 [ 807.781391][T18327] total_writeback 163840 [ 807.799595][T18327] total_workingset_refault_anon 4981 [ 807.820141][T18327] total_workingset_refault_file 495 [ 807.826042][T18327] total_swap 2035712 [ 807.860181][T18327] total_swapcached 245727232 [ 807.875621][T18327] total_pgpgin 192670 [ 807.875672][T18327] total_pgpgout 196858 [ 807.875680][T18327] total_pgfault 127203 [ 807.875686][T18327] total_pgmajfault 1254 [ 807.875693][T18327] total_inactive_anon 163840 [ 807.875699][T18327] total_active_anon 0 [ 807.875706][T18327] total_inactive_file 0 [ 807.875713][T18327] total_active_file 0 [ 807.875719][T18327] total_unevictable 0 [ 807.875725][T18327] anon_cost 0 [ 807.875731][T18327] file_cost 0 [ 807.875738][T18327] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2445,pid=18307,uid=0 [ 807.876764][T18327] Memory cgroup out of memory: Killed process 18307 (syz.5.2445) total-vm:143864kB, anon-rss:1344kB, file-rss:30740kB, shmem-rss:0kB, UID:0 pgtables:168kB oom_score_adj:1000 [ 807.958468][T18365] i2c i2c-0: new_device: Can't parse I2C address [ 808.541452][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.547880][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.941782][T18377] binder: 18373:18377 unknown command 6713442 [ 808.961231][T18377] binder: 18373:18377 ioctl c0306201 0 returned -22 [ 810.061996][T18403] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 810.147215][T18403] openvswitch: netlink: IP tunnel attribute has 24 unknown bytes. [ 811.319348][T18429] FAULT_INJECTION: forcing a failure. [ 811.319348][T18429] name failslab, interval 1, probability 0, space 0, times 0 [ 811.406236][T18429] CPU: 0 UID: 0 PID: 18429 Comm: syz.5.2472 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.406265][T18429] Tainted: [L]=SOFTLOCKUP [ 811.406271][T18429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.406280][T18429] Call Trace: [ 811.406287][T18429] [ 811.406294][T18429] dump_stack_lvl+0x100/0x190 [ 811.406322][T18429] should_fail_ex.cold+0x5/0xa [ 811.406341][T18429] should_failslab+0xc2/0x120 [ 811.406358][T18429] __kmalloc_cache_noprof+0x7a/0x6f0 [ 811.406378][T18429] ? landlock_init_hierarchy_log+0xa9/0x820 [ 811.406403][T18429] landlock_init_hierarchy_log+0xa9/0x820 [ 811.406423][T18429] ? inherit_tree+0x197/0x2d0 [ 811.406441][T18429] landlock_merge_ruleset+0x67b/0x830 [ 811.406461][T18429] __do_sys_landlock_restrict_self+0x2a6/0x9e0 [ 811.406488][T18429] do_syscall_64+0x106/0xf80 [ 811.406509][T18429] ? clear_bhb_loop+0x40/0x90 [ 811.406528][T18429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.406544][T18429] RIP: 0033:0x7ff26839c799 [ 811.406558][T18429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.406573][T18429] RSP: 002b:00007ff2665f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 811.406588][T18429] RAX: ffffffffffffffda RBX: 00007ff268615fa0 RCX: 00007ff26839c799 [ 811.406599][T18429] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000007 [ 811.406608][T18429] RBP: 00007ff268432c99 R08: 0000000000000000 R09: 0000000000000000 [ 811.406617][T18429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 811.406626][T18429] R13: 00007ff268616038 R14: 00007ff268615fa0 R15: 00007ffdd51340a8 [ 811.406646][T18429] [ 813.204287][ T29] audit: type=1326 audit(566916985.965:20): auid=4294967295 uid=8 gid=0 ses=4294967295 subj=unconfined pid=18458 comm="syz.8.2481" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23d539c799 code=0x0 [ 813.241774][T16883] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 813.278527][T18457] netlink: 'syz.5.2479': attribute type 1 has an invalid length. [ 813.361982][T18457] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2479'. [ 813.675084][T18473] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 814.284187][T16883] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 814.291732][T16883] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 814.303213][ T29] audit: type=1804 audit(566916987.070:21): pid=18489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2486" name=2F6E6577726F6F742F36352F50524F46494C455F56455253494F4E3D32303135303530350A302D434F4D4D454E543D0A302D505245464552454E43453D7B206D61785F61756469745F6C6F673D3332206D61785F6C6561726E696E675F656E7472793D3634207D0A302D434F4E4649473D7B206D6F64653D6C6561726E696E67206772616E745F6C6F673D6E6F2072656A6563745F6C6F673D796573207D0A dev="tmpfs" ino=366 res=1 errno=0 [ 814.819562][T18496] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2488'. [ 819.748499][T18592] ecryptfs_miscdev_response: (sizeof(*msg) + msg->data_len) = [1067213646]; data_size = [146]. Invalid packet. [ 819.872555][T18592] ecryptfs_miscdev_write: Failed to deliver miscdev response to requesting operation; rc = [-22] [ 820.521608][T18621] FAULT_INJECTION: forcing a failure. [ 820.521608][T18621] name failslab, interval 1, probability 0, space 0, times 0 [ 820.723773][T18621] CPU: 0 UID: 0 PID: 18621 Comm: syz.4.2509 Tainted: G L syzkaller #0 PREEMPT(full) [ 820.723799][T18621] Tainted: [L]=SOFTLOCKUP [ 820.723805][T18621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 820.723815][T18621] Call Trace: [ 820.723821][T18621] [ 820.723831][T18621] dump_stack_lvl+0x100/0x190 [ 820.723858][T18621] should_fail_ex.cold+0x5/0xa [ 820.723877][T18621] should_failslab+0xc2/0x120 [ 820.723893][T18621] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 820.723915][T18621] ? security_inode_alloc+0x3b/0x2c0 [ 820.723930][T18621] ? lockdep_init_map_type+0x5c/0x250 [ 820.723953][T18621] security_inode_alloc+0x3b/0x2c0 [ 820.723969][T18621] inode_init_always_gfp+0xced/0x1040 [ 820.723988][T18621] alloc_inode+0x8e/0x250 [ 820.724007][T18621] path_from_stashed+0x25b/0x750 [ 820.724023][T18621] ? do_raw_spin_unlock+0x145/0x1e0 [ 820.724048][T18621] ns_get_path+0x60/0x80 [ 820.724063][T18621] proc_ns_get_link+0x121/0x230 [ 820.724084][T18621] ? __pfx_proc_ns_get_link+0x10/0x10 [ 820.724106][T18621] ? atime_needs_update+0x8b/0x6b0 [ 820.724128][T18621] pick_link+0xd17/0x13c0 [ 820.724148][T18621] ? __pfx_proc_ns_get_link+0x10/0x10 [ 820.724170][T18621] step_into_slowpath+0x9ba/0xf90 [ 820.724196][T18621] ? __pfx_step_into_slowpath+0x10/0x10 [ 820.724216][T18621] ? find_held_lock+0x2b/0x80 [ 820.724237][T18621] path_openat+0xf95/0x31a0 [ 820.724258][T18621] ? __pfx_path_openat+0x10/0x10 [ 820.724280][T18621] do_file_open+0x20e/0x430 [ 820.724297][T18621] ? __pfx_do_file_open+0x10/0x10 [ 820.724332][T18621] ? alloc_fd+0x476/0x790 [ 820.724349][T18621] ? do_getname+0x191/0x390 [ 820.724370][T18621] do_sys_openat2+0x10d/0x1e0 [ 820.724390][T18621] ? __pfx_do_sys_openat2+0x10/0x10 [ 820.724411][T18621] ? __fget_files+0x21f/0x3d0 [ 820.724429][T18621] __x64_sys_openat+0x12d/0x210 [ 820.724449][T18621] ? __pfx___x64_sys_openat+0x10/0x10 [ 820.724475][T18621] do_syscall_64+0x106/0xf80 [ 820.724496][T18621] ? clear_bhb_loop+0x40/0x90 [ 820.724515][T18621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.724531][T18621] RIP: 0033:0x7f8d7175cfce [ 820.724545][T18621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 820.724559][T18621] RSP: 002b:00007f8d6f9f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 820.724574][T18621] RAX: ffffffffffffffda RBX: 00007f8d6f9f66c0 RCX: 00007f8d7175cfce [ 820.724585][T18621] RDX: 0000000000000002 RSI: 00007f8d6f9f5f90 RDI: ffffffffffffff9c [ 820.724595][T18621] RBP: 00007f8d71832c99 R08: 0000000000000000 R09: 0000000000000000 [ 820.724605][T18621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 820.724614][T18621] R13: 00007f8d71a16128 R14: 00007f8d71a16090 R15: 00007fff726f1fd8 [ 820.724634][T18621] [ 822.873404][T18666] netlink: 'syz.8.2517': attribute type 1 has an invalid length. [ 822.887171][T18666] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2517'. [ 823.094838][T18674] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2518'. [ 823.180104][T18674] hsr_slave_0 (unregistering): left promiscuous mode [ 824.300574][T18696] Invalid ELF header magic: != ELF [ 824.899188][T18706] can: request_module (can-proto-0) failed. [ 827.180700][T16735] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 827.188293][T16735] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 828.047330][T18773] netlink: 25 bytes leftover after parsing attributes in process `syz.8.2541'. [ 829.965496][T18833] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 830.828487][T18862] FAULT_INJECTION: forcing a failure. [ 830.828487][T18862] name failslab, interval 1, probability 0, space 0, times 0 [ 830.882234][T18862] CPU: 0 UID: 0 PID: 18862 Comm: syz.8.2563 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.882261][T18862] Tainted: [L]=SOFTLOCKUP [ 830.882266][T18862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.882275][T18862] Call Trace: [ 830.882281][T18862] [ 830.882287][T18862] dump_stack_lvl+0x100/0x190 [ 830.882312][T18862] should_fail_ex.cold+0x5/0xa [ 830.882330][T18862] should_failslab+0xc2/0x120 [ 830.882346][T18862] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 830.882367][T18862] ? taskstats_exit+0x650/0xbd0 [ 830.882393][T18862] taskstats_exit+0x650/0xbd0 [ 830.882414][T18862] ? __pfx_acct_update_integrals+0x10/0x10 [ 830.882429][T18862] ? __pfx_taskstats_exit+0x10/0x10 [ 830.882451][T18862] ? rcu_read_lock_any_held+0x6a/0xa0 [ 830.882465][T18862] ? exit_signals+0x395/0xaf0 [ 830.882482][T18862] do_exit+0x659/0x2b60 [ 830.882504][T18862] ? __pfx_do_exit+0x10/0x10 [ 830.882521][T18862] ? do_raw_spin_lock+0x128/0x260 [ 830.882541][T18862] ? find_held_lock+0x2b/0x80 [ 830.882554][T18862] ? get_signal+0x7e0/0x21e0 [ 830.882570][T18862] do_group_exit+0xd5/0x2a0 [ 830.882590][T18862] get_signal+0x1ec7/0x21e0 [ 830.882609][T18862] ? ksys_write+0x190/0x250 [ 830.882623][T18862] ? __pfx_get_signal+0x10/0x10 [ 830.882645][T18862] ? do_futex+0x192/0x350 [ 830.882666][T18862] arch_do_signal_or_restart+0x91/0x770 [ 830.882684][T18862] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 830.882707][T18862] ? __pfx___x64_sys_futex+0x10/0x10 [ 830.882729][T18862] exit_to_user_mode_loop+0x86/0x4a0 [ 830.882749][T18862] do_syscall_64+0x668/0xf80 [ 830.882769][T18862] ? clear_bhb_loop+0x40/0x90 [ 830.882787][T18862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.882802][T18862] RIP: 0033:0x7f23d539c799 [ 830.882814][T18862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.882828][T18862] RSP: 002b:00007f23d620c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 830.882842][T18862] RAX: fffffffffffffe00 RBX: 00007f23d5615fa8 RCX: 00007f23d539c799 [ 830.882852][T18862] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f23d5615fa8 [ 830.882861][T18862] RBP: 00007f23d5615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 830.882869][T18862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.882878][T18862] R13: 00007f23d5616038 R14: 00007ffc3032ba10 R15: 00007ffc3032baf8 [ 830.882896][T18862] [ 832.061966][T18884] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2568'. [ 833.313902][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2579'. [ 833.538885][T18918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2576'. [ 834.437143][T18957] NFSD: Failed to start, no listeners configured. [ 836.081260][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2595'. [ 836.174186][T19003] Invalid ELF header magic: != ELF [ 836.214491][T19005] Invalid ELF header magic: != ELF [ 837.431330][T19037] program syz.4.2605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 837.676156][T19017] netlink: 314 bytes leftover after parsing attributes in process `syz.5.2600'. [ 839.302396][T19102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2619'. [ 839.505303][T19112] netlink: 1008 bytes leftover after parsing attributes in process `syz.7.2623'. [ 840.811637][T19157] netlink: 'syz.5.2630': attribute type 1 has an invalid length. [ 840.892817][T19157] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2630'. [ 842.238202][T19188] FAULT_INJECTION: forcing a failure. [ 842.238202][T19188] name failslab, interval 1, probability 0, space 0, times 0 [ 842.291068][T19188] CPU: 0 UID: 0 PID: 19188 Comm: syz.8.2640 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.291092][T19188] Tainted: [L]=SOFTLOCKUP [ 842.291098][T19188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 842.291106][T19188] Call Trace: [ 842.291112][T19188] [ 842.291117][T19188] dump_stack_lvl+0x100/0x190 [ 842.291144][T19188] should_fail_ex.cold+0x5/0xa [ 842.291160][T19188] ? lsm_blob_alloc+0x68/0x90 [ 842.291180][T19188] should_failslab+0xc2/0x120 [ 842.291196][T19188] __kmalloc_noprof+0xe0/0x850 [ 842.291216][T19188] ? trace_kmem_cache_alloc+0xf3/0x120 [ 842.291234][T19188] lsm_blob_alloc+0x68/0x90 [ 842.291253][T19188] security_prepare_creds+0x2d/0x290 [ 842.291273][T19188] prepare_creds+0x5d6/0x950 [ 842.291297][T19188] __sys_setresgid+0x4a7/0x12f0 [ 842.291315][T19188] do_syscall_64+0x106/0xf80 [ 842.291336][T19188] ? clear_bhb_loop+0x40/0x90 [ 842.291354][T19188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.291368][T19188] RIP: 0033:0x7f23d539c799 [ 842.291381][T19188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.291395][T19188] RSP: 002b:00007f23d620c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 842.291410][T19188] RAX: ffffffffffffffda RBX: 00007f23d5615fa0 RCX: 00007f23d539c799 [ 842.291419][T19188] RDX: 0000000000000008 RSI: 00000000800000a0 RDI: 0000000000000081 [ 842.291428][T19188] RBP: 00007f23d5432c99 R08: 0000000000000000 R09: 0000000000000000 [ 842.291437][T19188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.291445][T19188] R13: 00007f23d5616038 R14: 00007f23d5615fa0 R15: 00007ffc3032baf8 [ 842.291464][T19188] [ 842.827106][T19197] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2643'. [ 843.373055][T19202] netlink: 'syz.5.2644': attribute type 1 has an invalid length. [ 843.462724][T19202] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2644'. [ 843.526719][T19211] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2647'. [ 843.962526][T16735] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 844.021973][T19227] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 846.413043][T19295] futex_wake_op: syz.8.2664 tries to shift op by -2048; fix this program [ 846.682880][T19299] bridge0: port 2(hsr0) entered blocking state [ 846.721325][T19299] bridge0: port 2(hsr0) entered disabled state [ 846.766494][T19299] hsr0: entered allmulticast mode [ 846.809207][T19299] hsr_slave_0: entered allmulticast mode [ 846.849499][T19299] hsr_slave_1: entered allmulticast mode [ 846.898896][T19299] hsr0: entered promiscuous mode [ 846.939002][T19299] bridge0: port 2(hsr0) entered blocking state [ 846.945266][T19299] bridge0: port 2(hsr0) entered forwarding state [ 848.181196][T19324] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 848.362185][T19328] netlink: 'syz.4.2674': attribute type 1 has an invalid length. [ 848.401723][T19328] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2674'. [ 849.350714][T19336] can: request_module (can-proto-5) failed. [ 849.668883][T19353] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2682'. [ 850.444220][T19376] netlink: 'syz.8.2686': attribute type 1 has an invalid length. [ 850.485571][T19376] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2686'. [ 851.576690][T18757] syz.5.2532 (18757) used greatest stack depth: 17688 bytes left [ 851.673043][T19392] hugetlbfs: syz.5.2687 (19392): Using mlock ulimits for SHM_HUGETLB is obsolete [ 853.625972][T19427] zswap: compressor 000 not available [ 854.879321][T19482] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2708'. [ 854.913426][T19484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2708'. [ 856.463726][T16883] Bluetooth: hci3: command 0x0406 tx timeout [ 857.560700][T19531] netlink: 'syz.8.2719': attribute type 1 has an invalid length. [ 857.579667][T19531] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2719'. [ 857.766127][T19533] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2720'. [ 859.222408][T19567] binder: 19566:19567 ioctl c0306201 200000000000 returned -14 [ 859.465705][T19575] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2732'. [ 859.776117][T19577] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 859.792568][T19577] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 859.824313][T19577] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 859.906228][T19577] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 859.947003][T19577] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 859.972139][T19577] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 861.175391][T19617] netlink: 'syz.5.2741': attribute type 11 has an invalid length. [ 861.217064][T19617] netlink: 'syz.5.2741': attribute type 1 has an invalid length. [ 861.249221][T19617] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2741'. [ 861.796619][T16735] Bluetooth: hci2: command 0x0c1a tx timeout [ 861.802739][T16883] Bluetooth: hci4: command 0x0c1a tx timeout [ 861.873073][T16735] Bluetooth: hci1: command 0x2016 tx timeout [ 861.952899][T16735] Bluetooth: hci3: command 0x0406 tx timeout [ 862.030840][ T29] audit: type=1800 audit(566918058.023:22): pid=19637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2744" name="file1" dev="tmpfs" ino=2892 res=0 errno=0 [ 863.588844][T19683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2759'. [ 863.811139][T19692] usb usb13: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 863.943660][T16735] Bluetooth: hci1: command 0x2016 tx timeout [ 864.023215][T16735] Bluetooth: hci3: command 0x0406 tx timeout [ 864.135105][T19702] netlink: 4394 bytes leftover after parsing attributes in process `syz.7.2764'. [ 866.420297][T19745] FAULT_INJECTION: forcing a failure. [ 866.420297][T19745] name failslab, interval 1, probability 0, space 0, times 0 [ 866.481954][T19745] CPU: 0 UID: 0 PID: 19745 Comm: syz.5.2775 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.481982][T19745] Tainted: [L]=SOFTLOCKUP [ 866.481988][T19745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.481999][T19745] Call Trace: [ 866.482005][T19745] [ 866.482012][T19745] dump_stack_lvl+0x100/0x190 [ 866.482040][T19745] should_fail_ex.cold+0x5/0xa [ 866.482058][T19745] should_failslab+0xc2/0x120 [ 866.482074][T19745] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 866.482097][T19745] ? sock_alloc_inode+0x25/0x1c0 [ 866.482115][T19745] ? __pfx_sock_alloc_inode+0x10/0x10 [ 866.482130][T19745] sock_alloc_inode+0x25/0x1c0 [ 866.482144][T19745] alloc_inode+0x68/0x250 [ 866.482164][T19745] sock_alloc+0x44/0x280 [ 866.482185][T19745] ? security_socket_create+0x7f/0x250 [ 866.482210][T19745] __sock_create+0xc2/0x860 [ 866.482229][T19745] __sys_socket+0x14d/0x260 [ 866.482245][T19745] ? __pfx___sys_socket+0x10/0x10 [ 866.482267][T19745] __x64_sys_socket+0x72/0xb0 [ 866.482283][T19745] ? lockdep_hardirqs_on+0x78/0x100 [ 866.482305][T19745] do_syscall_64+0x106/0xf80 [ 866.482332][T19745] ? clear_bhb_loop+0x40/0x90 [ 866.482354][T19745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.482371][T19745] RIP: 0033:0x7ff26839c799 [ 866.482385][T19745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.482400][T19745] RSP: 002b:00007ff2665f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 866.482416][T19745] RAX: ffffffffffffffda RBX: 00007ff268615fa0 RCX: 00007ff26839c799 [ 866.482426][T19745] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 866.482435][T19745] RBP: 00007ff268432c99 R08: 0000000000000000 R09: 0000000000000000 [ 866.482444][T19745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.482452][T19745] R13: 00007ff268616038 R14: 00007ff268615fa0 R15: 00007ffdd51340a8 [ 866.482473][T19745] [ 866.482481][T19745] socket: no more sockets [ 869.679456][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.685969][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.112680][T19788] random: crng reseeded on system resumption [ 870.234169][T19790] hub 1-0:1.0: USB hub found [ 870.274774][T19790] hub 1-0:1.0: 1 port detected [ 870.685345][T19799] netlink: 146 bytes leftover after parsing attributes in process `syz.7.2788'. [ 871.283119][T19814] random: crng reseeded on system resumption [ 871.900609][T19830] netlink: 'syz.5.2795': attribute type 1 has an invalid length. [ 871.946072][T19830] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2795'. [ 871.968750][T19835] netlink: 146 bytes leftover after parsing attributes in process `syz.7.2797'. [ 873.422432][T19877] Invalid ELF header magic: != ELF [ 878.584720][T19989] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2822'. [ 878.700866][T19993] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2822'. [ 878.811092][T19989] FAULT_INJECTION: forcing a failure. [ 878.811092][T19989] name failslab, interval 1, probability 0, space 0, times 0 [ 878.879997][T19993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 879.015630][T19993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.047434][T19989] CPU: 0 UID: 0 PID: 19989 Comm: syz.8.2822 Tainted: G L syzkaller #0 PREEMPT(full) [ 879.047460][T19989] Tainted: [L]=SOFTLOCKUP [ 879.047467][T19989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 879.047476][T19989] Call Trace: [ 879.047482][T19989] [ 879.047488][T19989] dump_stack_lvl+0x100/0x190 [ 879.047518][T19989] should_fail_ex.cold+0x5/0xa [ 879.047544][T19989] should_failslab+0xc2/0x120 [ 879.047563][T19989] __kmalloc_cache_noprof+0x7a/0x6f0 [ 879.047583][T19989] ? bpf_prog_store_orig_filter+0x7b/0x1d0 [ 879.047689][T19989] bpf_prog_store_orig_filter+0x7b/0x1d0 [ 879.047711][T19989] bpf_prog_create_from_user+0x1c3/0x2f0 [ 879.047778][T19989] ? __pfx_seccomp_check_filter+0x10/0x10 [ 879.047801][T19989] do_seccomp+0x7f7/0x2740 [ 879.047825][T19989] ? __pfx_do_seccomp+0x10/0x10 [ 879.047844][T19989] ? __x64_sys_openat+0x12d/0x210 [ 879.047864][T19989] ? xfd_validate_state+0x129/0x190 [ 879.047892][T19989] do_syscall_64+0x106/0xf80 [ 879.047915][T19989] ? clear_bhb_loop+0x40/0x90 [ 879.047934][T19989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.047950][T19989] RIP: 0033:0x7f23d539c799 [ 879.047964][T19989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.047979][T19989] RSP: 002b:00007f23d620c028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 879.047994][T19989] RAX: ffffffffffffffda RBX: 00007f23d5615fa0 RCX: 00007f23d539c799 [ 879.048004][T19989] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000000000000001 [ 879.048014][T19989] RBP: 00007f23d5432c99 R08: 0000000000000000 R09: 0000000000000000 [ 879.048023][T19989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.048032][T19989] R13: 00007f23d5616038 R14: 00007f23d5615fa0 R15: 00007ffc3032baf8 [ 879.048052][T19989] [ 881.691277][T19993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.740505][T19993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.746609][ T31] oom_reaper: reaped process 19884 (syz.5.2806), now anon-rss:0kB, file-rss:25500kB, shmem-rss:0kB [ 884.429263][T20055] blktrace: Concurrent blktraces are not allowed on loop2 [ 885.617007][T20074] tipc: Started in network mode [ 885.642083][T20086] FAULT_INJECTION: forcing a failure. [ 885.642083][T20086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.663174][T20074] tipc: Node identity ee00, cluster identity 4711 [ 885.723345][T20074] tipc: Node number set to 60928 [ 885.728632][T20086] CPU: 0 UID: 0 PID: 20086 Comm: syz.8.2844 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.728655][T20086] Tainted: [L]=SOFTLOCKUP [ 885.728660][T20086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 885.728669][T20086] Call Trace: [ 885.728674][T20086] [ 885.728680][T20086] dump_stack_lvl+0x100/0x190 [ 885.728705][T20086] should_fail_ex.cold+0x5/0xa [ 885.728723][T20086] _copy_from_user+0x2e/0xd0 [ 885.728742][T20086] memdup_user_nul+0x6c/0x120 [ 885.728757][T20086] handle_policy_update+0x1a4/0xf00 [ 885.728779][T20086] ? __pfx___might_resched+0x10/0x10 [ 885.728801][T20086] ? lock_acquire+0x1cf/0x380 [ 885.728820][T20086] ? __pfx_handle_policy_update+0x10/0x10 [ 885.728839][T20086] ? apparmor_capable+0x1d7/0x4d0 [ 885.728855][T20086] ? bpf_lsm_capable+0x9/0x10 [ 885.728870][T20086] ? security_capable+0x80/0x260 [ 885.728894][T20086] safesetid_gid_file_write+0x87/0xc0 [ 885.728915][T20086] vfs_write+0x2aa/0x1070 [ 885.728929][T20086] ? __pfx_safesetid_gid_file_write+0x10/0x10 [ 885.728952][T20086] ? __pfx_vfs_write+0x10/0x10 [ 885.728965][T20086] ? __fget_files+0x215/0x3d0 [ 885.728983][T20086] ? __fget_files+0x21f/0x3d0 [ 885.729002][T20086] ksys_write+0x12a/0x250 [ 885.729016][T20086] ? __pfx_ksys_write+0x10/0x10 [ 885.729035][T20086] do_syscall_64+0x106/0xf80 [ 885.729072][T20086] ? clear_bhb_loop+0x40/0x90 [ 885.729090][T20086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.729105][T20086] RIP: 0033:0x7f23d539c799 [ 885.729118][T20086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.729133][T20086] RSP: 002b:00007f23d61eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 885.729147][T20086] RAX: ffffffffffffffda RBX: 00007f23d5616090 RCX: 00007f23d539c799 [ 885.729157][T20086] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 885.729166][T20086] RBP: 00007f23d5432c99 R08: 0000000000000000 R09: 0000000000000000 [ 885.729175][T20086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.729184][T20086] R13: 00007f23d5616128 R14: 00007f23d5616090 R15: 00007ffc3032baf8 [ 885.729203][T20086] [ 887.038172][T20126] __vm_enough_memory: pid: 20126, comm: syz.7.2853, bytes: 4398046511104 not enough memory for the allocation [ 887.067398][T20128] __vm_enough_memory: pid: 20128, comm: syz.7.2853, bytes: 4398046511104 not enough memory for the allocation [ 887.461524][T20134] can: request_module (can-proto-0) failed. [ 887.641913][T20134] can: request_module (can-proto-0) failed. [ 887.896252][T20134] can: request_module (can-proto-0) failed. [ 888.095471][T20134] can: request_module (can-proto-0) failed. [ 888.673018][T20185] Invalid ELF header magic: != ELF [ 888.862191][T20185] Invalid ELF header magic: != ELF [ 888.986884][T20185] Invalid ELF header magic: != ELF [ 889.082748][T20185] Invalid ELF header magic: != ELF [ 890.036178][T20229] netlink: 'syz.5.2867': attribute type 11 has an invalid length. [ 890.239485][T16735] Bluetooth: hci4: unexpected event 0x23 length: 127 > 13 [ 890.394790][T20250] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2870'. [ 890.735660][ T29] audit: type=1800 audit(566918086.879:23): pid=20257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2872" name="lu_gp_id" dev="configfs" ino=391282 res=0 errno=0 [ 890.915647][T20260] netlink: 'syz.5.2873': attribute type 1 has an invalid length. [ 890.943699][T20260] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2873'. [ 894.259354][T20294] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2878'. [ 896.080630][T20329] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 896.145911][ T29] audit: type=1806 audit(566918092.307:24): xattr="." res=0 [ 896.272520][T20329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 896.358001][T20329] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 896.424679][T20329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 896.701541][T20365] netlink: 'syz.4.2893': attribute type 1 has an invalid length. [ 896.763447][T20365] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2893'. [ 897.396287][T20379] Invalid ELF header magic: != ELF [ 898.087524][T16735] Bluetooth: hci2: command 0x0c1a tx timeout [ 898.093571][T16883] Bluetooth: hci4: command 0x0c1a tx timeout [ 898.404849][T16735] Bluetooth: hci1: command 0x2016 tx timeout [ 898.485574][T16735] Bluetooth: hci3: command 0x0406 tx timeout [ 900.593658][T20442] sctp: [Deprecated]: syz.7.2910 (pid 20442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 900.593658][T20442] Use struct sctp_sack_info instead [ 902.261583][T20446] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 902.973531][T20480] netlink: 'syz.8.2917': attribute type 8 has an invalid length. [ 903.819279][T14555] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 903.958546][T14555] CPU: 1 UID: 0 PID: 14555 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 903.958587][T14555] Tainted: [L]=SOFTLOCKUP [ 903.958597][T14555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 903.958612][T14555] Call Trace: [ 903.958621][T14555] [ 903.958631][T14555] dump_stack_lvl+0x100/0x190 [ 903.958673][T14555] dump_header+0xfb/0x606 [ 903.958703][T14555] oom_kill_process.cold+0xd/0x330 [ 903.958734][T14555] out_of_memory+0x340/0x14f0 [ 903.958778][T14555] ? __pfx_out_of_memory+0x10/0x10 [ 903.958825][T14555] mem_cgroup_out_of_memory+0xc6/0x130 [ 903.958861][T14555] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 903.958894][T14555] ? find_held_lock+0x2b/0x80 [ 903.958927][T14555] ? do_raw_spin_unlock+0x145/0x1e0 [ 903.958964][T14555] ? _raw_spin_unlock+0x28/0x50 [ 903.959001][T14555] try_charge_memcg+0x652/0xc90 [ 903.959038][T14555] ? __pfx_try_charge_memcg+0x10/0x10 [ 903.959073][T14555] ? find_held_lock+0x2b/0x80 [ 903.959095][T14555] ? rcu_read_unlock+0x17/0x60 [ 903.959122][T14555] ? rcu_read_unlock+0x17/0x60 [ 903.959153][T14555] charge_memcg+0xa6/0x280 [ 903.959181][T14555] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 903.959218][T14555] __swap_cache_prepare_and_add+0x528/0x9e0 [ 903.959270][T14555] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 903.959313][T14555] ? __pfx_swap_entry_swapped+0x10/0x10 [ 903.959351][T14555] swap_cache_alloc_folio+0x1cb/0x300 [ 903.959389][T14555] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 903.959429][T14555] ? rcu_is_watching+0x12/0xc0 [ 903.959471][T14555] swap_cluster_readahead+0x53b/0x770 [ 903.959517][T14555] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 903.959560][T14555] ? update_cfs_rq_load_avg+0x51/0x550 [ 903.959605][T14555] ? get_vma_policy+0x23f/0x3b0 [ 903.959638][T14555] swapin_readahead+0x160/0x12c0 [ 903.959687][T14555] ? __pfx_swapin_readahead+0x10/0x10 [ 903.959721][T14555] ? find_held_lock+0x2b/0x80 [ 903.959745][T14555] ? swap_table_get+0x103/0x2c0 [ 903.959777][T14555] ? swap_table_get+0x103/0x2c0 [ 903.959814][T14555] ? swap_table_get+0x10d/0x2c0 [ 903.959849][T14555] ? swap_cache_get_folio+0x1ae/0x600 [ 903.959887][T14555] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 903.959919][T14555] ? __pfx_get_swap_device+0x10/0x10 [ 903.959952][T14555] ? do_swap_page+0xb2e/0x6900 [ 903.959984][T14555] do_swap_page+0xb2e/0x6900 [ 903.960039][T14555] ? __pfx_do_swap_page+0x10/0x10 [ 903.960073][T14555] ? __free_object+0x2a8/0x400 [ 903.960217][T14555] ? lockdep_hardirqs_on+0x78/0x100 [ 903.960258][T14555] ? rcu_is_watching+0x12/0xc0 [ 903.960302][T14555] ? __pte_offset_map+0x179/0x310 [ 903.960332][T14555] __handle_mm_fault+0x18c1/0x2b60 [ 903.960375][T14555] ? reacquire_held_locks+0xce/0x1e0 [ 903.960410][T14555] ? __pfx___handle_mm_fault+0x10/0x10 [ 903.960450][T14555] ? lock_vma_under_rcu+0x17c/0x590 [ 903.960505][T14555] handle_mm_fault+0x36d/0xa20 [ 903.960546][T14555] do_user_addr_fault+0x5a3/0x12f0 [ 903.960596][T14555] exc_page_fault+0x6f/0xd0 [ 903.960630][T14555] asm_exc_page_fault+0x26/0x30 [ 903.960656][T14555] RIP: 0033:0x7ff26835cfce [ 903.960678][T14555] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 903.960702][T14555] RSP: 002b:00007ffdd5134388 EFLAGS: 00010246 [ 903.960723][T14555] RAX: 0000000000000000 RBX: 000055556fb7f500 RCX: 00007ff26835cfce [ 903.960741][T14555] RDX: 00007ffdd51343e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 903.960757][T14555] RBP: 00007ffdd513444c R08: 0000000000000000 R09: 0000000000000000 [ 903.960773][T14555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 903.960789][T14555] R13: 00000000000927c0 R14: 00000000000dcb3b R15: 00007ffdd51344a0 [ 903.960827][T14555] [ 903.960838][T14555] memory: usage 3072kB, limit 3072kB, failcnt 127315 [ 904.450136][T14555] memory+swap: usage 35664kB, limit 9007199254740988kB, failcnt 0 [ 904.529636][T14555] kmem: usage 1372kB, limit 9007199254740988kB, failcnt 0 [ 904.562305][T14555] Memory cgroup stats for /syz5: [ 904.562570][T14555] cache 0 [ 904.597955][T14555] rss 8192 [ 904.601003][T14555] rss_huge 0 [ 904.657228][T14555] shmem 0 [ 904.660168][T14555] mapped_file 0 [ 904.693272][T14555] dirty 0 [ 904.712241][T14555] writeback 0 [ 904.715543][T14555] workingset_refault_anon 11612 [ 904.761819][T14555] workingset_refault_file 4916 [ 904.766618][T14555] swap 33361920 [ 904.781824][T14555] swapcached 609406976 [ 904.785916][T14555] pgpgin 320365 [ 904.789377][T14555] pgpgout 331328 [ 904.831402][T14555] pgfault 196123 [ 904.839565][T14555] pgmajfault 3749 [ 904.861221][T14555] inactive_anon 0 [ 904.871511][T14555] active_anon 4096 [ 904.881139][T14555] inactive_file 0 [ 904.895564][T14555] active_file 0 [ 904.899037][T14555] unevictable 0 [ 904.936157][T14555] hierarchical_memory_limit 3145728 [ 904.970737][T14555] hierarchical_memsw_limit 9223372036854771712 [ 905.029540][T14555] total_cache 0 [ 905.060271][T14555] total_rss 8192 [ 905.064680][T14555] total_rss_huge 0 [ 905.068421][T14555] total_shmem 0 [ 905.100608][T14555] total_mapped_file 0 [ 905.104706][T14555] total_dirty 0 [ 905.108170][T14555] total_writeback 0 [ 905.139793][T14555] total_workingset_refault_anon 11612 [ 905.145192][T14555] total_workingset_refault_file 4916 [ 905.181335][T14555] total_swap 33361920 [ 905.185329][T14555] total_swapcached 609406976 [ 905.209421][T14555] total_pgpgin 320365 [ 905.213419][T14555] total_pgpgout 331328 [ 905.217487][T14555] total_pgfault 196123 [ 905.256279][T14555] total_pgmajfault 3749 [ 905.279094][T14555] total_inactive_anon 0 [ 905.283262][T14555] total_active_anon 4096 [ 905.287482][T14555] total_inactive_file 0 [ 905.338798][T14555] total_active_file 0 [ 905.342807][T14555] total_unevictable 0 [ 905.346789][T14555] anon_cost 0 [ 905.388524][T14555] file_cost 0 [ 905.398701][T14555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2691,pid=19409,uid=0 [ 905.482027][T14555] Memory cgroup out of memory: Killed process 19409 (syz.5.2691) total-vm:106592kB, anon-rss:1232kB, file-rss:20800kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 906.348920][T20535] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff888078008000 pfn:0x78008 [ 906.373425][T20535] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 906.400580][T20535] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 906.451148][T20535] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 906.518387][T20535] raw: ffff888078008000 0000000000000000 00000008ffffffff 0000000000000000 [ 906.600767][T20535] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 906.648251][T20535] head: ffff888078008000 0000000000000000 00000008ffffffff 0000000000000000 [ 906.687629][T20535] head: 00fff00000000003 ffffea0001e00201 00000000ffffffff 00000000ffffffff [ 906.732973][T20535] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 906.775036][T20535] page dumped because: unmovable page [ 906.796615][T20535] page_owner tracks the page as allocated [ 906.848651][T20535] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5769, tgid 5769 (rm), ts 65114132201, free_ts 65113143313 [ 906.946219][T20535] post_alloc_hook+0x153/0x170 [ 906.970333][T20535] get_page_from_freelist+0x111d/0x3140 [ 906.975940][T20535] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 907.011958][T20535] alloc_pages_mpol+0x1fb/0x550 [ 907.016888][T20535] alloc_pages_noprof+0x131/0x390 [ 907.051197][T20535] skb_page_frag_refill+0x365/0x5b0 [ 907.081487][T20535] try_fill_recv+0x7f1/0x2930 [ 907.086375][T20535] virtnet_poll+0x154a/0x3a20 [ 907.104265][T20535] __napi_poll.constprop.0+0xaf/0x450 [ 907.124941][T20535] net_rx_action+0xa40/0xf20 [ 907.141647][T20535] handle_softirqs+0x1eb/0x9e0 [ 907.146455][T20535] __irq_exit_rcu+0xef/0x150 [ 907.163227][T20535] irq_exit_rcu+0x9/0x30 [ 907.167541][T20535] common_interrupt+0xbe/0xe0 [ 907.189652][T20535] asm_common_interrupt+0x26/0x40 [ 907.194723][T20535] page last free pid 5769 tgid 5769 stack trace: [ 907.214830][T20535] __free_frozen_pages+0x7e1/0x10d0 [ 907.224907][T20535] __folio_put+0x3b4/0x540 [ 907.234745][T20535] skb_release_data+0x667/0x9d0 [ 907.240914][T20535] napi_consume_skb+0x1f6/0x320 [ 907.245959][T20535] skb_defer_free_flush+0x1f1/0x290 [ 907.269783][T20535] net_rx_action+0x3ca/0xf20 [ 907.276698][T20535] handle_softirqs+0x1eb/0x9e0 [ 907.294709][T20535] __irq_exit_rcu+0xef/0x150 [ 907.304797][T20535] irq_exit_rcu+0x9/0x30 [ 907.316811][T20535] common_interrupt+0xbe/0xe0 [ 907.333475][T20535] asm_common_interrupt+0x26/0x40 [ 907.638022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #12!!! [ 907.666782][T20522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.675718][T20522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.274499][T20589] netlink: 334 bytes leftover after parsing attributes in process `syz.8.2944'. [ 909.458168][T20591] FAULT_INJECTION: forcing a failure. [ 909.458168][T20591] name failslab, interval 1, probability 0, space 0, times 0 [ 909.507911][T20591] CPU: 1 UID: 0 PID: 20591 Comm: syz.4.2945 Tainted: G L syzkaller #0 PREEMPT(full) [ 909.507961][T20591] Tainted: [L]=SOFTLOCKUP [ 909.507972][T20591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 909.507989][T20591] Call Trace: [ 909.507998][T20591] [ 909.508010][T20591] dump_stack_lvl+0x100/0x190 [ 909.508058][T20591] should_fail_ex.cold+0x5/0xa [ 909.508091][T20591] should_failslab+0xc2/0x120 [ 909.508123][T20591] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 909.508164][T20591] ? alloc_empty_file+0x55/0x1c0 [ 909.508206][T20591] alloc_empty_file+0x55/0x1c0 [ 909.508244][T20591] alloc_file_pseudo+0x13a/0x230 [ 909.508281][T20591] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 909.508317][T20591] ? alloc_fd+0x476/0x790 [ 909.508350][T20591] sock_alloc_file+0x50/0x210 [ 909.508396][T20591] __sys_socket+0x1c0/0x260 [ 909.508429][T20591] ? __pfx___sys_socket+0x10/0x10 [ 909.508473][T20591] __x64_sys_socket+0x72/0xb0 [ 909.508504][T20591] ? lockdep_hardirqs_on+0x78/0x100 [ 909.508544][T20591] do_syscall_64+0x106/0xf80 [ 909.508583][T20591] ? clear_bhb_loop+0x40/0x90 [ 909.508619][T20591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 909.508649][T20591] RIP: 0033:0x7f8d7179c799 [ 909.508674][T20591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.508705][T20591] RSP: 002b:00007f8d7258d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 909.508734][T20591] RAX: ffffffffffffffda RBX: 00007f8d71a15fa0 RCX: 00007f8d7179c799 [ 909.508754][T20591] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 909.508772][T20591] RBP: 00007f8d71832c99 R08: 0000000000000000 R09: 0000000000000000 [ 909.508790][T20591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.508808][T20591] R13: 00007f8d71a16038 R14: 00007f8d71a15fa0 R15: 00007fff726f1fd8 [ 909.508848][T20591] [ 910.832522][T20613] netlink: 'syz.5.2951': attribute type 1 has an invalid length. [ 910.860155][T20613] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2951'. [ 911.321779][T20628] FAULT_INJECTION: forcing a failure. [ 911.321779][T20628] name failslab, interval 1, probability 0, space 0, times 0 [ 911.334731][T20628] CPU: 1 UID: 0 PID: 20628 Comm: syz.8.2955 Tainted: G L syzkaller #0 PREEMPT(full) [ 911.334778][T20628] Tainted: [L]=SOFTLOCKUP [ 911.334788][T20628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 911.334804][T20628] Call Trace: [ 911.334814][T20628] [ 911.334825][T20628] dump_stack_lvl+0x100/0x190 [ 911.334872][T20628] should_fail_ex.cold+0x5/0xa [ 911.334907][T20628] should_failslab+0xc2/0x120 [ 911.334938][T20628] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 911.334980][T20628] ? __d_alloc+0x34/0xa80 [ 911.335011][T20628] ? do_raw_spin_lock+0x128/0x260 [ 911.335057][T20628] __d_alloc+0x34/0xa80 [ 911.335090][T20628] d_alloc_parallel+0x111/0x14e0 [ 911.335138][T20628] ? find_held_lock+0x2b/0x80 [ 911.335162][T20628] ? __d_lookup+0x25c/0x4a0 [ 911.335199][T20628] ? __pfx_d_alloc_parallel+0x10/0x10 [ 911.335244][T20628] ? __d_lookup+0x266/0x4a0 [ 911.335300][T20628] lookup_open.isra.0+0x57c/0x11b0 [ 911.335351][T20628] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 911.335414][T20628] ? mnt_get_write_access+0x1e9/0x2f0 [ 911.335459][T20628] path_openat+0xa98/0x31a0 [ 911.335498][T20628] ? __pfx_path_openat+0x10/0x10 [ 911.335543][T20628] do_file_open+0x20e/0x430 [ 911.335576][T20628] ? __pfx_do_file_open+0x10/0x10 [ 911.335631][T20628] ? alloc_fd+0x476/0x790 [ 911.335664][T20628] ? do_getname+0x191/0x390 [ 911.335702][T20628] do_sys_openat2+0x10d/0x1e0 [ 911.335740][T20628] ? __pfx_do_sys_openat2+0x10/0x10 [ 911.335780][T20628] ? __fget_files+0x21f/0x3d0 [ 911.335814][T20628] __x64_sys_openat+0x12d/0x210 [ 911.335852][T20628] ? __pfx___x64_sys_openat+0x10/0x10 [ 911.335904][T20628] do_syscall_64+0x106/0xf80 [ 911.335943][T20628] ? clear_bhb_loop+0x40/0x90 [ 911.335980][T20628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 911.336010][T20628] RIP: 0033:0x7f23d539c799 [ 911.336034][T20628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.336062][T20628] RSP: 002b:00007f23d620c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 911.336090][T20628] RAX: ffffffffffffffda RBX: 00007f23d5615fa0 RCX: 00007f23d539c799 [ 911.336110][T20628] RDX: 0000000000143881 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 911.336129][T20628] RBP: 00007f23d5432c99 R08: 0000000000000000 R09: 0000000000000000 [ 911.336148][T20628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 911.336165][T20628] R13: 00007f23d5616038 R14: 00007f23d5615fa0 R15: 00007ffc3032baf8 [ 911.336205][T20628] [ 912.115229][T20607] FAULT_INJECTION: forcing a failure. [ 912.115229][T20607] name failslab, interval 1, probability 0, space 0, times 0 [ 912.138432][T20607] CPU: 1 UID: 0 PID: 20607 Comm: syz.4.2949 Tainted: G L syzkaller #0 PREEMPT(full) [ 912.138477][T20607] Tainted: [L]=SOFTLOCKUP [ 912.138488][T20607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 912.138505][T20607] Call Trace: [ 912.138515][T20607] [ 912.138526][T20607] dump_stack_lvl+0x100/0x190 [ 912.138573][T20607] should_fail_ex.cold+0x5/0xa [ 912.138608][T20607] should_failslab+0xc2/0x120 [ 912.138640][T20607] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 912.138681][T20607] ? __d_alloc+0x34/0xa80 [ 912.138718][T20607] __d_alloc+0x34/0xa80 [ 912.138752][T20607] d_alloc+0x4a/0x1e0 [ 912.138785][T20607] lookup_one_qstr_excl+0x175/0x250 [ 912.138825][T20607] start_dirop+0x59/0xb0 [ 912.138866][T20607] simple_start_creating+0xf9/0x110 [ 912.138910][T20607] ? __pfx_simple_start_creating+0x10/0x10 [ 912.138955][T20607] ? mntput+0x70/0xa0 [ 912.138996][T20607] ? simple_pin_fs+0xa3/0x190 [ 912.139038][T20607] debugfs_start_creating.part.0+0x82/0x170 [ 912.139190][T20607] __debugfs_create_file+0xb3/0x4f0 [ 912.139234][T20607] debugfs_create_file_full+0x41/0x60 [ 912.139270][T20607] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 912.139309][T20607] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 912.139345][T20607] ? find_held_lock+0x2b/0x80 [ 912.139405][T20607] ? lockdep_init_map_type+0x5c/0x250 [ 912.139448][T20607] preinit_net.part.0+0x437/0x8f0 [ 912.139492][T20607] copy_net_ns+0x339/0x7c0 [ 912.139525][T20607] create_new_namespaces+0x3ea/0xac0 [ 912.139564][T20607] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 912.139598][T20607] ksys_unshare+0x473/0xad0 [ 912.139636][T20607] ? __pfx_ksys_unshare+0x10/0x10 [ 912.139686][T20607] __x64_sys_unshare+0x31/0x40 [ 912.139719][T20607] do_syscall_64+0x106/0xf80 [ 912.139758][T20607] ? clear_bhb_loop+0x40/0x90 [ 912.139794][T20607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.139822][T20607] RIP: 0033:0x7f8d7179c799 [ 912.139844][T20607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.139871][T20607] RSP: 002b:00007f8d6f9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 912.139899][T20607] RAX: ffffffffffffffda RBX: 00007f8d71a16090 RCX: 00007f8d7179c799 [ 912.139919][T20607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 912.139936][T20607] RBP: 00007f8d71832c99 R08: 0000000000000000 R09: 0000000000000000 [ 912.139954][T20607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.139971][T20607] R13: 00007f8d71a16128 R14: 00007f8d71a16090 R15: 00007fff726f1fd8 [ 912.140010][T20607] [ 914.966128][T20659] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 914.972580][T20659] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 915.007701][T20659] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 915.025829][T20659] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 915.754122][T20681] random: crng reseeded on system resumption [ 915.884798][T20681] hub 1-0:1.0: USB hub found [ 915.904711][T20681] hub 1-0:1.0: 1 port detected [ 916.232207][T16883] Bluetooth: hci4: command 0x0c1a tx timeout [ 916.305419][T20699] FAULT_INJECTION: forcing a failure. [ 916.305419][T20699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.395610][T20699] CPU: 0 UID: 0 PID: 20699 Comm: syz.8.2971 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.395638][T20699] Tainted: [L]=SOFTLOCKUP [ 916.395644][T20699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 916.395653][T20699] Call Trace: [ 916.395659][T20699] [ 916.395665][T20699] dump_stack_lvl+0x100/0x190 [ 916.395698][T20699] should_fail_ex.cold+0x5/0xa [ 916.395715][T20699] ? page_copy_sane+0x17c/0x2d0 [ 916.395733][T20699] copy_folio_from_iter_atomic+0x577/0x1e70 [ 916.395761][T20699] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 916.395780][T20699] ? fault_in_readable+0x14c/0x190 [ 916.395795][T20699] ? __pfx_fault_in_readable+0x10/0x10 [ 916.395810][T20699] ? I_BDEV+0xd/0x20 [ 916.395825][T20699] ? inode_to_bdi+0x9e/0x160 [ 916.395845][T20699] iomap_file_buffered_write+0x532/0xac0 [ 916.395868][T20699] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 916.395884][T20699] ? find_held_lock+0x2b/0x80 [ 916.395899][T20699] ? current_time+0x8a/0x3b0 [ 916.395931][T20699] ? __pfx_down_read+0x10/0x10 [ 916.395948][T20699] ? file_update_time_flags+0x373/0x500 [ 916.395989][T20699] blkdev_write_iter+0x575/0xd70 [ 916.396038][T20699] do_iter_readv_writev+0x6ee/0x920 [ 916.396068][T20699] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 916.396099][T20699] ? bpf_lsm_file_permission+0x9/0x10 [ 916.396122][T20699] ? security_file_permission+0x76/0x210 [ 916.396141][T20699] ? rw_verify_area+0xce/0x6d0 [ 916.396164][T20699] vfs_writev+0x360/0xe10 [ 916.396192][T20699] ? __pfx_vfs_writev+0x10/0x10 [ 916.396227][T20699] ? __fget_files+0x21f/0x3d0 [ 916.396246][T20699] ? do_writev+0x13e/0x340 [ 916.396266][T20699] do_writev+0x13e/0x340 [ 916.396288][T20699] ? __pfx_do_writev+0x10/0x10 [ 916.396314][T20699] do_syscall_64+0x106/0xf80 [ 916.396335][T20699] ? clear_bhb_loop+0x40/0x90 [ 916.396354][T20699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.396369][T20699] RIP: 0033:0x7f23d539c799 [ 916.396383][T20699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.396399][T20699] RSP: 002b:00007f23d620c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 916.396414][T20699] RAX: ffffffffffffffda RBX: 00007f23d5615fa0 RCX: 00007f23d539c799 [ 916.396425][T20699] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003 [ 916.396435][T20699] RBP: 00007f23d5432c99 R08: 0000000000000000 R09: 0000000000000000 [ 916.396444][T20699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 916.396453][T20699] R13: 00007f23d5616038 R14: 00007f23d5615fa0 R15: 00007ffc3032baf8 [ 916.396476][T20699] [ 917.028108][T16883] Bluetooth: hci3: command 0x0406 tx timeout [ 917.034331][T16883] Bluetooth: hci1: command 0x2016 tx timeout [ 917.040501][T16735] Bluetooth: hci2: command 0x0c1a tx timeout [ 918.161045][T20726] zswap: compressor not available [ 918.169579][T20731] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 918.496377][T20737] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 918.553944][T20737] File: /dev/nullb0 PID: 20737 Comm: syz.8.2976 [ 919.158889][T12970] Process accounting resumed [ 919.431855][T20755] Process accounting resumed [ 920.538664][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2991'. [ 920.666235][T20782] smpboot: CPU 1 is now offline [ 920.768106][T20782] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 920.811288][T20782] ------------[ cut here ]------------ [ 920.817229][T20782] DEAD callback error for CPU1 [ 920.817241][T20782] WARNING: kernel/cpu.c:1463 at _cpu_down+0x759/0x1020, CPU#0: syz.4.2992/20782 [ 920.831416][T20782] Modules linked in: [ 920.835488][T20782] CPU: 0 UID: 0 PID: 20782 Comm: syz.4.2992 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.846479][T20782] Tainted: [L]=SOFTLOCKUP [ 920.850833][T20782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 920.860969][T20782] RIP: 0010:_cpu_down+0x75c/0x1020 [ 920.866358][T20782] Code: 41 7a f6 89 ee bf 91 00 00 00 e8 5f 3c 7a f6 81 fd 91 00 00 00 0f 84 6b 02 00 00 e8 9e 41 7a f6 48 8d 3d f7 e3 4e 05 44 89 ee <67> 48 0f b9 3a e9 3a fa ff ff 45 31 ff e9 32 fa ff ff e8 7d 41 7a [ 920.886338][T20782] RSP: 0018:ffffc90003647aa8 EFLAGS: 00010283 [ 920.892528][T20782] RAX: 0000000000014d0d RBX: ffff8880b85242e0 RCX: ffffc90018f93000 [ 920.900530][T20782] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff90dcbe40 [ 920.908528][T20782] RBP: 0000000000000092 R08: 0000000000000005 R09: 0000000000000091 [ 920.917042][T20782] R10: 0000000000000092 R11: 0000000000000001 R12: 00000000000000ed [ 920.925367][T20782] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffffff5 [ 920.933509][T20782] FS: 00007f8d7258d6c0(0000) GS:ffff888124349000(0000) knlGS:0000000000000000 [ 920.942521][T20782] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 920.949128][T20782] CR2: 00007f23d61456b8 CR3: 000000007e560000 CR4: 00000000003526f0 [ 920.957097][T20782] Call Trace: [ 920.960398][T20782] [ 920.963329][T20782] ? __pfx_cpu_subsys_offline+0x10/0x10 [ 920.969262][T20782] cpu_device_down+0x82/0xc0 [ 920.973856][T20782] device_offline+0x2a7/0x3c0 [ 920.978740][T20782] ? __pfx_device_offline+0x10/0x10 [ 920.983956][T20782] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 920.989874][T20782] ? __pfx_online_store+0x10/0x10 [ 920.994991][T20782] online_store+0xd1/0x180 [ 920.999490][T20782] ? __pfx_online_store+0x10/0x10 [ 921.004502][T20782] ? __print_lock_name+0x60/0x80 [ 921.009507][T20782] ? sysfs_file_kobj+0xe4/0x290 [ 921.014348][T20782] ? sysfs_file_kobj+0xe4/0x290 [ 921.019752][T20782] dev_attr_store+0x58/0x80 [ 921.024249][T20782] ? __pfx_dev_attr_store+0x10/0x10 [ 921.029780][T20782] sysfs_kf_write+0xf2/0x150 [ 921.034378][T20782] kernfs_fop_write_iter+0x3e0/0x5f0 [ 921.039700][T20782] ? __pfx_sysfs_kf_write+0x10/0x10 [ 921.044888][T20782] vfs_write+0x6ac/0x1070 [ 921.049237][T20782] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 921.055031][T20782] ? __pfx_vfs_write+0x10/0x10 [ 921.059828][T20782] ksys_write+0x12a/0x250 [ 921.064144][T20782] ? __pfx_ksys_write+0x10/0x10 [ 921.069249][T20782] do_syscall_64+0x106/0xf80 [ 921.073832][T20782] ? clear_bhb_loop+0x40/0x90 [ 921.078700][T20782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.084598][T20782] RIP: 0033:0x7f8d7179c799 [ 921.090549][T20782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.110376][T20782] RSP: 002b:00007f8d7258d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 921.119297][T20782] RAX: ffffffffffffffda RBX: 00007f8d71a15fa0 RCX: 00007f8d7179c799 [ 921.127580][T20782] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000003 [ 921.135548][T20782] RBP: 00007f8d71832c99 R08: 0000000000000000 R09: 0000000000000000 [ 921.143548][T20782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.151532][T20782] R13: 00007f8d71a16038 R14: 00007f8d71a15fa0 R15: 00007fff726f1fd8 [ 921.159514][T20782] [ 921.162529][T20782] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 921.169790][T20782] CPU: 0 UID: 0 PID: 20782 Comm: syz.4.2992 Tainted: G L syzkaller #0 PREEMPT(full) [ 921.180707][T20782] Tainted: [L]=SOFTLOCKUP [ 921.185007][T20782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 921.195043][T20782] Call Trace: [ 921.198304][T20782] [ 921.201217][T20782] dump_stack_lvl+0x100/0x190 [ 921.205889][T20782] vpanic+0x552/0x970 [ 921.209852][T20782] ? __pfx_vpanic+0x10/0x10 [ 921.214341][T20782] panic+0xd1/0xe0 [ 921.218043][T20782] ? __pfx_panic+0x10/0x10 [ 921.222454][T20782] check_panic_on_warn.cold+0x19/0x34 [ 921.227827][T20782] ? _cpu_down+0x759/0x1020 [ 921.232315][T20782] __warn.cold+0x191/0x348 [ 921.236716][T20782] __report_bug+0x296/0x3d0 [ 921.241294][T20782] ? _cpu_down+0x759/0x1020 [ 921.245781][T20782] ? __pfx___report_bug+0x10/0x10 [ 921.250791][T20782] ? __pfx_try_to_wake_up+0x10/0x10 [ 921.255983][T20782] report_bug_entry+0xe1/0x290 [ 921.260735][T20782] ? _cpu_down+0x75c/0x1020 [ 921.265223][T20782] handle_bug+0x1cd/0x2a0 [ 921.269549][T20782] exc_invalid_op+0x17/0x50 [ 921.274035][T20782] asm_exc_invalid_op+0x1a/0x20 [ 921.278871][T20782] RIP: 0010:_cpu_down+0x75c/0x1020 [ 921.283980][T20782] Code: 41 7a f6 89 ee bf 91 00 00 00 e8 5f 3c 7a f6 81 fd 91 00 00 00 0f 84 6b 02 00 00 e8 9e 41 7a f6 48 8d 3d f7 e3 4e 05 44 89 ee <67> 48 0f b9 3a e9 3a fa ff ff 45 31 ff e9 32 fa ff ff e8 7d 41 7a [ 921.303567][T20782] RSP: 0018:ffffc90003647aa8 EFLAGS: 00010283 [ 921.309617][T20782] RAX: 0000000000014d0d RBX: ffff8880b85242e0 RCX: ffffc90018f93000 [ 921.317587][T20782] RDX: 0000000000080000 RSI: 0000000000000001 RDI: ffffffff90dcbe40 [ 921.325537][T20782] RBP: 0000000000000092 R08: 0000000000000005 R09: 0000000000000091 [ 921.333486][T20782] R10: 0000000000000092 R11: 0000000000000001 R12: 00000000000000ed [ 921.341437][T20782] R13: 0000000000000001 R14: 0000000000000001 R15: 00000000fffffff5 [ 921.349400][T20782] ? _cpu_down+0x752/0x1020 [ 921.353892][T20782] ? __pfx_cpu_subsys_offline+0x10/0x10 [ 921.359425][T20782] cpu_device_down+0x82/0xc0 [ 921.363998][T20782] device_offline+0x2a7/0x3c0 [ 921.368663][T20782] ? __pfx_device_offline+0x10/0x10 [ 921.373846][T20782] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 921.379731][T20782] ? __pfx_online_store+0x10/0x10 [ 921.384740][T20782] online_store+0xd1/0x180 [ 921.389139][T20782] ? __pfx_online_store+0x10/0x10 [ 921.394148][T20782] ? __print_lock_name+0x60/0x80 [ 921.399065][T20782] ? sysfs_file_kobj+0xe4/0x290 [ 921.403901][T20782] ? sysfs_file_kobj+0xe4/0x290 [ 921.408741][T20782] dev_attr_store+0x58/0x80 [ 921.413229][T20782] ? __pfx_dev_attr_store+0x10/0x10 [ 921.418407][T20782] sysfs_kf_write+0xf2/0x150 [ 921.422981][T20782] kernfs_fop_write_iter+0x3e0/0x5f0 [ 921.428247][T20782] ? __pfx_sysfs_kf_write+0x10/0x10 [ 921.433428][T20782] vfs_write+0x6ac/0x1070 [ 921.437744][T20782] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 921.443532][T20782] ? __pfx_vfs_write+0x10/0x10 [ 921.448288][T20782] ksys_write+0x12a/0x250 [ 921.452598][T20782] ? __pfx_ksys_write+0x10/0x10 [ 921.457435][T20782] do_syscall_64+0x106/0xf80 [ 921.462011][T20782] ? clear_bhb_loop+0x40/0x90 [ 921.466674][T20782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.472547][T20782] RIP: 0033:0x7f8d7179c799 [ 921.476942][T20782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.496531][T20782] RSP: 002b:00007f8d7258d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 921.504925][T20782] RAX: ffffffffffffffda RBX: 00007f8d71a15fa0 RCX: 00007f8d7179c799 [ 921.512874][T20782] RDX: 000000000000000b RSI: 00002000000002c0 RDI: 0000000000000003 [ 921.520825][T20782] RBP: 00007f8d71832c99 R08: 0000000000000000 R09: 0000000000000000 [ 921.528774][T20782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.536722][T20782] R13: 00007f8d71a16038 R14: 00007f8d71a15fa0 R15: 00007fff726f1fd8 [ 921.544684][T20782] [ 921.547861][T20782] Kernel Offset: disabled [ 921.552176][T20782] Rebooting in 86400 seconds..